LDAPWeb/Mailcow/docs/guide/migration.md

Migration Guide — Mailcow (MX & Domain)

Owner: cutover email geonet.co.id dari cPanel ke Mailcow. Inventori: ../server.md. Env: ../../.env.example.

Prinsip: URL/domain dynamic via .env — bukan hardcode di script.

---

Status migrasi saat ini (2026-07-06)

Fase	Status	Keterangan
Mailcow live	✅	VM 10.100.1.28, sync.geonet.co.id
POP3 drain	✅	fetchmail timer 2 menit, nokeep
Outbound relay	✅ Transisi	cPanel SMTP :587
MX DNS	❌	Masih cPanel
DKIM/SPF publish	❌	Key generated, belum DNS
fetchmail mati	❌	Setelah MX cutover

---

Inventori sebelum cutover MX

Item	Saat ini	Target	File update
MX record	cPanel	sync.geonet.co.id	DNS panel
Inbox canonical	Mailcow (via POP3)	Mailcow (langsung)	—
SPF	cPanel IP	Mailcow 117.102.73.102	DNS
DKIM	—	Mailcow selector	DNS
PTR	TBD	sync.geonet.co.id	Provider IP
fetchmail	aktif	stop	systemd disable
relay cPanel	aktif	opsional mati	Mailcow relayhosts

---

Fase 1 — Transisi (saat ini)

1. MX tetap cPanel
2. fetchmail POP3 drain → Mailcow inbox
3. User Outlook → IMAP sync.geonet.co.id:993 saja
4. Outbound relay cPanel sampai reputasi IP Mailcow OK

Verifikasi fetchmail:

ssh mailcow
systemctl status fetchmail-support.timer
tail -20 /var/log/fetchmail-support.log

---

Fase 2 — DNS email publish

1. Ambil DKIM public key: Mailcow Admin → Configuration → DKIM
2. Publish TXT DKIM di DNS geonet.co.id
3. Update SPF: v=spf1 ip4:117.102.73.102 include:... -all
4. Tambah DMARC (opsional): _dmarc.geonet.co.id
5. PTR 117.102.73.102 → sync.geonet.co.id
6. Smoke test: kirim ke Gmail, cek header SPF/DKIM pass

Append ../version.md setelah publish.

---

Fase 3 — MX cutover

1. Stabil minimal 2–4 minggu (fetchmail + relay tanpa error)
2. Turunkan TTL MX 24 jam sebelumnya
3. Ubah MX → sync.geonet.co.id (priority 10)
4. Monitor Postfix log Mailcow 24–48 jam
5. systemctl disable --now fetchmail-support.timer
6. Evaluasi matikan relay cPanel (kirim langsung dari Mailcow)
7. Update docs: server.md, project-status.md, version.md

---

Rollback MX

1. Kembalikan MX ke cPanel
2. Enable fetchmail timer jika masih diperlukan
3. Catat di ../issues.md

---

Riwayat migrasi

Tanggal	Dari	Ke	Versi	Catatan
2026-07-03	—	POP3 drain live	1.0.0	fetchmail + relay
2026-07-06	—	Docs bootstrap	1.1.0	SSOT AI-Agent-Standards