# Project Status — Mailcow

> **Terakhir Diperbarui:** 2026-07-03

---

## Keputusan arsitektur

| Keputusan | Pilihan | Tanggal |
|-----------|---------|---------|
| **VM IP** | `10.100.1.28` | 2026-07-03 |
| **vCPU / RAM** | 16 core / 32 GiB | 2026-07-03 |
| **Disk 1** | 512 GiB SSD — OS + DB | 2026-07-03 |
| **Disk 2** | 512 GiB SSD — vmail live | 2026-07-03 |
| **Prioritas storage** | Uptime layanan mail — local SSD | 2026-07-03 |
| **Backup** | QNAP `10.100.1.10` harian | 2026-07-03 |

Mail tetap jalan meski NAS maintenance atau gangguan LAN ke QNAP.

---

## Ringkasan

| Item | Status |
|------|--------|
| Dokumentasi repo | ✅ |
| Konsep POP3 drain → Mailcow | ✅ `docs/notes/email-sync-migration-concept.md` |
| Konsep LDAP AD | ✅ `docs/notes/ldap-ad-mailcow.md` |
| Grup AD `Mail-Users` | ✅ 2026-07-03 |
| Member `support` + `mail` | ✅ `support@geonet.co.id` |
| **Storage live** | Local SSD VM + backup QNAP | ✅ Keputusan 2026-07-03 |
| **VM Mailcow** | `10.100.1.28` — 16 vCPU, 32 GB, 2×512 GB SSD | ✅ |
| SSH key login | `ssh mailcow` | ✅ 2026-07-03 |
| OS prep (hostname, disk, docker) | ✅ 2026-07-03 |
| Desktop GNOME (Proxmox console) | ✅ ubuntu-desktop-minimal |
| Install Mailcow stack | ✅ 2026-07-03 — `/opt/stacks/mailcow` |
| Domain `geonet.co.id` | ✅ aktif, DKIM generated |
| Mailbox `support@geonet.co.id` | ✅ auth mailcow (service account) |
| SOGo login + kirim/terima | ✅ verified user 2026-07-03 |
| Outbound relay cPanel | ✅ `sc138.idcloudhosting.cloud:587` |
| Nginx proxy `sync.geonet.co.id` | ✅ `.24` + Let's Encrypt |
| LDAP Identity Provider | ✅ 2026-07-03 (user AD lain) |
| fetchmail POP3 drain | ✅ timer 2 menit — `scripts/install-fetchmail-support.sh` |
| Zammad IMAP → Mailcow | ❌ |
| DKIM/SPF DNS publish | ❌ |

---

## Active Directory — Mail-Users

| Item | Nilai |
|------|-------|
| Grup | `Mail-Users` |
| DN (asumsi default) | `CN=Mail-Users,CN=Users,DC=gisportal,DC=id` |
| Member pertama | `support` |
| Email (`mail`) | `support@geonet.co.id` |
| Login AD | `support` (sAMAccountName) |

> Verifikasi DN grup jika LDAP filter gagal: PowerShell di AD → `(Get-ADGroup 'Mail-Users').DistinguishedName`

---

## Berikutnya

1. Provision VM + Mailcow + LDAP | ✅
2. Domain `geonet.co.id` + mailbox `support@` | ✅
3. DNS email (DKIM/SPF) untuk `geonet.co.id` | ⏳
4. fetchmail POP3 drain dari cPanel | ✅
5. Outbound relay cPanel (transisi) | ✅
6. SOGo `support@` operational | ✅
7. DNS DKIM/SPF + PTR | ⏳
8. Zammad IMAP/SMTP → Mailcow | ⏳

Lihat `docs/todo.md`, `docs/ai-session-summary.md`.