## Installation process: ### 1. Prepare my system **server configuration:** * 4096MB DDR4 ECC RAM * 4 CPU vCores (2.6 GHz E5-2690v4) * 60GB Raid NVMe SSD storage * 1 IPv4, /48 routing IPv6 * Cenots 7 system installed **Check that mailcow's standard port is open and not in use by another application:** ``` Last failed login: Mon Feb 19 03:17:35 GMT 2024 from my-vps-ip on ssh:notty There were 3 failed login attempts since the last successful login. [root@mail ~]# ss -tlpn | grep -E -w '25|80|110|143|443|465|587|993|995|4190' [root@mail ~]# netstat -tulpn | grep -E -w '25|80|110|143|443|465|587|993|995|4190' [root@mail ~]# ``` ### 2. DNS settings [upl-image-preview url=https://community.mailcow.email/assets/files/2024-02-19/1708313773-187816-7bb17cc849-e71a-40f6-a9eb-87393e84da8b7d.png] ### 3. Install Docker and Docker comper ``` [root@mail ~]# curl -sSL https://get.docker.com/ | CHANNEL=stable sh # Executing docker install script, commit: e5543d473431b782227f8908005543bb4389b8de + sh -c 'yum install -y -q yum-utils' 软件包 yum-utils-1.1.31-54.el7_8.noarch 已安装并且是最新版本 + sh -c 'yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo' 已加载插件：fastestmirror adding repo from: https://download.docker.com/linux/centos/docker-ce.repo grabbing file https://download.docker.com/linux/centos/docker-ce.repo to /etc/yum.repos.d/docker-ce.repo repo saved to /etc/yum.repos.d/docker-ce.repo + '[' stable '!=' stable ']' + sh -c 'yum makecache' 已加载插件：fastestmirror Loading mirror speeds from cached hostfile * base: mirror.web-ster.com * extras: mirrors.oit.uci.edu * updates: repo1.sea.innoscale.net base | 3.6 kB 00:00:00 docker-ce-stable | 3.5 kB 00:00:00 extras | 2.9 kB 00:00:00 updates | 2.9 kB 00:00:00 元数据缓存已建立 + sh -c 'yum install -y -q docker-ce docker-ce-cli containerd.io docker-compose-plugin docker-ce-rootless-extras docker-buildx-plugin' 软件包 containerd.io-1.6.28-3.1.el7.x86_64 已安装并且是最新版本 + sh -c 'docker version' Client: Docker Engine - Community Version: 25.0.3 API version: 1.44 Go version: go1.21.6 Git commit: 4debf41 Built: Tue Feb 6 21:17:10 2024 OS/Arch: linux/amd64 Context: default Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? ================================================================================ To run Docker as a non-privileged user, consider setting up the Docker daemon in rootless mode for your user: dockerd-rootless-setuptool.sh install Visit https://docs.docker.com/go/rootless/ to learn about rootless mode. To run the Docker daemon as a fully privileged service, but granting non-root users access, refer to https://docs.docker.com/go/daemon-access/ WARNING: Access to the remote API on a privileged Docker daemon is equivalent to root access on the host. Refer to the 'Docker daemon attack surface' documentation for details: https://docs.docker.com/go/attack-surface/ ================================================================================ [root@mail ~]# systemctl enable --now docker Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /usr/lib/systemd/system/docker.service. [root@mail ~]# yum update 已加载插件：fastestmirror Loading mirror speeds from cached hostfile * base: mirror.web-ster.com * extras: mirrors.oit.uci.edu * updates: repo1.sea.innoscale.net No packages marked for update [root@mail ~]# yum install docker-compose-plugin 已加载插件：fastestmirror Loading mirror speeds from cached hostfile * base: mirror.web-ster.com * extras: mirrors.oit.uci.edu * updates: repo1.sea.innoscale.net 软件包 docker-compose-plugin-2.24.5-1.el7.x86_64 已安装并且是最新版本无须任何处理 [root@mail ~]# rpm -qa | grep container-selinux container-selinux-2.119.2-1.911c772.el7_8.noarch [root@mail ~]# docker info | grep selinux WARNING: bridge-nf-call-iptables is disabled WARNING: bridge-nf-call-ip6tables is disabled ``` ### 4. Install Mailcow ``` [root@mail ~]# git clone https://github.com/mailcow/mailcow-dockerized 正克隆到 'mailcow-dockerized'... remote: Enumerating objects: 52262, done. remote: Counting objects: 100% (2774/2774), done. remote: Compressing objects: 100% (1116/1116), done. remote: Total 52262 (delta 1869), reused 2412 (delta 1655), pack-reused 49488 接收对象中: 100% (52262/52262), 45.84 MiB | 5.53 MiB/s, done. 处理 delta 中: 100% (34456/34456), done. [root@mail ~]# cd mailcow-dockerized [root@mail mailcow-dockerized]# ./generate_config.sh Found Docker Compose Plugin (native). Setting the DOCKER_COMPOSE_VERSION Variable to native Notice: You´ll have to update this Compose Version via your Package Manager manually! Press enter to confirm the detected value '[value]' where applicable or enter a custom value. Mail server hostname (FQDN) - this is not your mail domain, but your mail servers hostname: mail.huijuxxxx.com Timezone [Asia/Hong_Kong]: Which branch of mailcow do you want to use? Available Branches: - master branch (stable updates) | default, recommended [1] - nightly branch (unstable updates, testing) | not-production ready [2] Choose the Branch with it´s number [1/2] 1 正在获取 origin 已经位于 'master' Generating snake-oil certificate... Generating a 4096 bit RSA private key ......................................................................................++ ...................................................++ writing new private key to 'data/assets/ssl-example/key.pem' ----- Copying snake-oil certificate... Detecting if your IP is listed on Spamhaus Bad ASN List... Check completed! Your IP is clean [root@mail mailcow-dockerized]# ``` Modified the contents of the mailcow.conf file to: HTTP_PORT=680 HTTP_BIND= HTTPS_PORT=6443 HTTPS_BIND= ``` [root@mail mailcow-dockerized]# docker compose pull [+] Pulling 160/19 ✔ clamd-mailcow 5 layers [⣿⣿⣿⣿⣿] 0B/0B Pulled 32.5s ✔ ipv6nat-mailcow 4 layers [⣿⣿⣿⣿] 0B/0B Pulled 15.1s ✔ redis-mailcow 6 layers [⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 20.2s ✔ postfix-mailcow 12 layers [⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 41.2s ✔ dockerapi-mailcow 5 layers [⣿⣿⣿⣿⣿] 0B/0B Pulled 40.3s ✔ memcached-mailcow 5 layers [⣿⣿⣿⣿⣿] 0B/0B Pulled 38.6s ✔ php-fpm-mailcow 11 layers [⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 44.2s ✔ mysql-mailcow 8 layers [⣿⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 18.2s ✔ ofelia-mailcow 2 layers [⣿⣿] 0B/0B Pulled 37.5s ✔ netfilter-mailcow 6 layers [⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 29.2s ✔ solr-mailcow 15 layers [⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 37.9s ✔ rspamd-mailcow 5 layers [⣿⣿⣿⣿⣿] 0B/0B Pulled 40.0s ✔ unbound-mailcow 4 layers [⣿⣿⣿⣿] 0B/0B Pulled 32.9s ✔ dovecot-mailcow 19 layers [⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 38.6s ✔ nginx-mailcow 8 layers [⣿⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 3.4s ✔ olefy-mailcow 5 layers [⣿⣿⣿⣿⣿] 0B/0B Pulled 37.4s ✔ watchdog-mailcow 4 layers [⣿⣿⣿⣿] 0B/0B Pulled 10.8s ✔ acme-mailcow 7 layers [⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 18.5s ✔ sogo-mailcow 10 layers [⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 24.7s [root@mail mailcow-dockerized]# ``` ``` ✔ Container mailcowdockerized-olefy-mailcow-1 Started 2.1s ✘ Container mailcowdockerized-unbound-mailcow-1 Error 128.8s ✔ Container mailcowdockerized-dockerapi-mailcow-1 Start... 2.0s ✔ Container mailcowdockerized-netfilter-mailcow-1 Start... 1.3s ✔ Container mailcowdockerized-sogo-mailcow-1 Started 2.2s ✔ Container mailcowdockerized-memcached-mailcow-1 Start... 1.9s ⠦ Container mailcowdockerized-clamd-mailcow-1 Created 128.6s ✔ Container mailcowdockerized-mysql-mailcow-1 Started 2.1s ✔ Container mailcowdockerized-redis-mailcow-1 Started 1.9s ✔ Container mailcowdockerized-solr-mailcow-1 Started 1.9s ✔ Container mailcowdockerized-php-fpm-mailcow-1 Started 2.2s ⠸ Container mailcowdockerized-postfix-mailcow-1 Created 128.3s ✔ Container mailcowdockerized-dovecot-mailcow-1 Started 2.9s ✔ Container mailcowdockerized-nginx-mailcow-1 Started 2.7s ✔ Container mailcowdockerized-ofelia-mailcow-1 Started 3.5s ✔ Container mailcowdockerized-rspamd-mailcow-1 Started 3.5s ⠙ Container mailcowdockerized-acme-mailcow-1 Created 128.1s ⠋ Container mailcowdockerized-watchdog-mailcow-1 Create... 128.0s ⠏ Container mailcowdockerized-ipv6nat-mailcow-1 Created 127.9s dependency failed to start: container mailcowdockerized-unbound-mailcow-1 is unhealthy [root@mail mailcow-dockerized]# ``` Which step is problematic?

up log `[root@mail mailcow-dockerized]# docker compose exec unbound-mailcow /bin/bash 0b8c63e47e61:/# 0b8c63e47e61:/# ./healthcheck.sh PING 1.1.1.1 (1.1.1.1): 56 data bytes --- 1.1.1.1 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max = 0.889/0.959/1.008 ms PING 8.8.8.8 (8.8.8.8): 56 data bytes --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max = 27.937/27.953/27.970 ms PING 9.9.9.9 (9.9.9.9): 56 data bytes --- 9.9.9.9 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max = 25.602/25.698/25.772 ms 0b8c63e47e61:/# tail /var/log/healthcheck.log 2024-02-19 13:35:48: Maybe check your outbound firewall, as it needs to resolve DNS over TCP AND UDP! 0b8c63e47e61:/# `

I had an issue with unbound on my setup on the internal server, since I m blocking port 53 from external sources, I had to setup unbound forward to work. see: https://docs.mailcow.email/manual-guides/Unbound/u_e-unbound-fwd/ Regards. JG

@"Ekko1048"#p13616 Does your service provider offer DNS resolvers?

@"esackbauer"#p13618 this？[upl-image-preview url=https://community.mailcow.email/assets/files/2024-02-19/1708332021-583872-image.png] @"esackbauer"#p13618 Do I need to modify it?

@"[unknown]"#p13617 Progress update: I have added the following ` forward-zone: name: "." forward-addr: 1.1.1.1 ` and then docker compose down after docker compose up -d the prompt looks like this `[root@mail mailcow-dockerized]# docker compose up -d [+] Running 16/20 ⠹ Network mailcowdockerized_mailcow-network Created 40.3s ✔ Container mailcowdockerized-memcached-mailcow-1 Started 1.8s ✔ Container mailcowdockerized-netfilter-mailcow-1 Started 1.0s ✔ Container mailcowdockerized-dockerapi-mailcow-1 Started 1.7s ✔ Container mailcowdockerized-sogo-mailcow-1 Started 1.7s ✔ Container mailcowdockerized-olefy-mailcow-1 Started 1.6s ✔ Container mailcowdockerized-unbound-mailcow-1 Healthy 38.3s ✔ Container mailcowdockerized-clamd-mailcow-1 Started 38.6s ✔ Container mailcowdockerized-mysql-mailcow-1 Started 2.1s ✔ Container mailcowdockerized-solr-mailcow-1 Started 1.9s ✔ Container mailcowdockerized-redis-mailcow-1 Started 1.7s ✔ Container mailcowdockerized-php-fpm-mailcow-1 Started 2.3s ⠦ Container mailcowdockerized-postfix-mailcow-1 Starting 39.6s ✔ Container mailcowdockerized-dovecot-mailcow-1 Started 3.8s ✔ Container mailcowdockerized-nginx-mailcow-1 Started 3.4s ✔ Container mailcowdockerized-rspamd-mailcow-1 Started 4.5s ✔ Container mailcowdockerized-ofelia-mailcow-1 Started 4.5s ✔ Container mailcowdockerized-acme-mailcow-1 Started 38.2s ⠸ Container mailcowdockerized-watchdog-mailcow-1 Created 39.3s ⠹ Container mailcowdockerized-ipv6nat-mailcow-1 Created 39.3s Error response from daemon: driver failed programming external connectivity on endpoint mailcowdockerized-postfix-mailcow-1 (41dd09fc6dc45892ee381bcc64b404d7b899c512b58e2830d1282b0ca015e259): Error starting userland proxy: listen tcp4 0.0.0.0:25: bind: address already in use `

@"esackbauer"#p13622 Progress update: I have added the following ` forward-zone: name: "." forward-addr: 1.1.1.1 ` and then docker compose down after docker compose up -d the prompt looks like this `[root@mail mailcow-dockerized]# docker compose up -d [+] Running 16/20 ⠹ Network mailcowdockerized_mailcow-network Created 40.3s ✔ Container mailcowdockerized-memcached-mailcow-1 Started 1.8s ✔ Container mailcowdockerized-netfilter-mailcow-1 Started 1.0s ✔ Container mailcowdockerized-dockerapi-mailcow-1 Started 1.7s ✔ Container mailcowdockerized-sogo-mailcow-1 Started 1.7s ✔ Container mailcowdockerized-olefy-mailcow-1 Started 1.6s ✔ Container mailcowdockerized-unbound-mailcow-1 Healthy 38.3s ✔ Container mailcowdockerized-clamd-mailcow-1 Started 38.6s ✔ Container mailcowdockerized-mysql-mailcow-1 Started 2.1s ✔ Container mailcowdockerized-solr-mailcow-1 Started 1.9s ✔ Container mailcowdockerized-redis-mailcow-1 Started 1.7s ✔ Container mailcowdockerized-php-fpm-mailcow-1 Started 2.3s ⠦ Container mailcowdockerized-postfix-mailcow-1 Starting 39.6s ✔ Container mailcowdockerized-dovecot-mailcow-1 Started 3.8s ✔ Container mailcowdockerized-nginx-mailcow-1 Started 3.4s ✔ Container mailcowdockerized-rspamd-mailcow-1 Started 4.5s ✔ Container mailcowdockerized-ofelia-mailcow-1 Started 4.5s ✔ Container mailcowdockerized-acme-mailcow-1 Started 38.2s ⠸ Container mailcowdockerized-watchdog-mailcow-1 Created 39.3s ⠹ Container mailcowdockerized-ipv6nat-mailcow-1 Created 39.3s Error response from daemon: driver failed programming external connectivity on endpoint mailcowdockerized-postfix-mailcow-1 (41dd09fc6dc45892ee381bcc64b404d7b899c512b58e2830d1282b0ca015e259): Error starting userland proxy: listen tcp4 0.0.0.0:25: bind: address already in use `

Ask for advice on troubleshooting failure issues

Ekko1048

jasgggit It says don’t use public server DNS, so which one should I use? Where to get it? I’m a newbie, I’m causing you trouble

jasgggit

Ekko1048 The idea of using a DNS forwarder is in fact to not use a Public DNS, you mut use your own DNS server, or use the one that your provider gives you.

just replace the 8.8.x.x in the configuration with the ones you use internally.

esackbauer

Ekko1048 Does your service provider offer DNS resolvers?

Ekko1048

esackbauer this？

esackbauer Do I need to modify it?

esackbauer

Yes, what you have there is Cloudflare (1.1.1.1) and Google (8.8.8.8) public DNS servers. Have it changed to the service provider ones.

Ekko1048

esackbauer

You obviously are already running something on port 25…
https://docs.mailcow.email/getstarted/prerequisite-system/#firewall-ports
“Please check if any of mailcow’s standard ports are open and not in use by other applications:”

Ekko1048

esackbauer [root@mail mailcow-dockerized]# ss -tlpn | grep -E -w '25|80|110|143|443|465|587|993|995|4190' LISTEN 0 128 *:110 *:* users:(("docker-proxy",pid=98951,fd=4)) LISTEN 0 128 *:143 *:* users:(("docker-proxy",pid=98927,fd=4)) LISTEN 0 128 *:80 *:* users:(("nginx",pid=87787,fd=9),("nginx",pid=28296,fd=9),("nginx",pid=28295,fd=9),("nginx",pid=28294,fd=9),("nginx",pid=28293,fd=9)) LISTEN 0 100 127.0.0.1:25 *:* users:(("master",pid=53413,fd=13)) LISTEN 0 128 *:443 *:* users:(("nginx",pid=87787,fd=26),("nginx",pid=28296,fd=26),("nginx",pid=28295,fd=26),("nginx",pid=28294,fd=26),("nginx",pid=28293,fd=26)) LISTEN 0 128 *:4190 *:* users:(("docker-proxy",pid=98819,fd=4)) LISTEN 0 128 *:993 *:* users:(("docker-proxy",pid=98895,fd=4)) LISTEN 0 128 *:995 *:* users:(("docker-proxy",pid=98860,fd=4)) LISTEN 0 128 [::]:110 [::]:* users:(("docker-proxy",pid=98958,fd=4)) LISTEN 0 128 [::]:143 [::]:* users:(("docker-proxy",pid=98933,fd=4)) LISTEN 0 100 [::1]:25 [::]:* users:(("master",pid=53413,fd=14)) LISTEN 0 128 [::]:4190 [::]:* users:(("docker-proxy",pid=98829,fd=4)) LISTEN 0 128 [::]:993 [::]:* users:(("docker-proxy",pid=98901,fd=4)) LISTEN 0 128 [::]:995 [::]:* users:(("docker-proxy",pid=98866,fd=4))

esackbauer

Ekko1048 LISTEN 0 100 [::1]:25 [::]:* users🙁(“master”,pid=53413,fd=14))

This is the process you need to get rid of.

DocFraggle

Ekko1048 LISTEN 0 100 [::1]:25 [::]:* users🙁(“master”,pid=53413,fd=14))

That’s your local postfix, disable it

esackbauer

Is that nginx running on your machine a reverse proxy?

Ekko1048

esackbauer yes