# AI Session Summary

```yaml
session: 2026-07-06-mailcow-gisportal-hybrid
project: Mailcow/
version: 1.2.5
status: ready
next: DKIM gisportal.id (Master Web) + geonet.co.id SPF/DKIM
agent: Cursor
```

## TL;DR

- **geonet.co.id** hybrid: Jalur B `rbsetiawan@` transport cPanel — `support@` → `rbsetiawan@` **verified**
- **gisportal.id** Mailcow murni (tanpa cPanel); `admin@gisportal.id` + SOGo OK; outbound Gmail OK
- **SPF** `gisportal.id` diganti `v=spf1 a mx ~all` → `v=spf1 ip4:117.102.73.102 -all` — **propagasi OK** (dns1.masterweb.com)
- Cross-domain `@gisportal.id` → user cPanel-only `@geonet.co.id` terbatas (ISS-008)
- Scripts: `setup-transport-cpanel-user.sh`, `fix-sogo-domain.sh`, `setup-gisportal-inbound-whitelist.sh`

## Lanjut dari sini

1. **DKIM** `gisportal.id` — Mailcow Admin → ARC/DKIM keys → publish TXT Master Web
2. Verifikasi terima/kirim `admin@gisportal.id` dari Gmail setelah DKIM
3. Publish DKIM/SPF **geonet.co.id**
4. Zammad IMAP/SMTP → Mailcow `10.100.1.28`

## Jangan

- Anggap `gisportal.id` punya cPanel — MX langsung ke Mailcow
- Masukkan user ke `Mail-Users` jika masih baca cPanel
- Edit SPF di Mailcow — DNS di **Master Web**
- Pakai password AD untuk `admin@gisportal.id` (`authsource=mailcow`)

## Konfigurasi kunci

| Item | Nilai |
|------|-------|
| VM / IP publik | `10.100.1.28` / `117.102.73.102` |
| geonet.co.id | Hybrid cPanel; relayhost id=1 |
| gisportal.id | Mailcow murni; SPF `ip4:117.102.73.102 -all` ✅ |
| Transport map | `rbsetiawan@` → cPanel `:587` |
| DNS gisportal | Master Web — `docs/notes/gisportal-id-mail.md` |

## Script sesi

| Script | Fungsi |
|--------|--------|
| `setup-transport-cpanel-user.sh` | Transport Jalur B (cPanel-only) |
| `fix-sogo-domain.sh` | SOGo `_sogo_static_view` sync |
| `setup-gisportal-inbound-whitelist.sh` | Forwarding hosts inbound |