{"id":35658,"date":"2026-01-08T01:23:25","date_gmt":"2026-01-07T18:23:25","guid":{"rendered":"https:\/\/dps.media\/huong-dan-cai-dat-mailcow-phien-ban-cuoi\/"},"modified":"2026-01-08T01:23:25","modified_gmt":"2026-01-07T18:23:25","slug":"mailcow-installation-guide-latest-version","status":"publish","type":"post","link":"https:\/\/dps.media\/en\/mailcow-installation-guide-latest-version\/","title":{"rendered":"Mailcow Installation Guide (Final Version)"},"content":{"rendered":"

This guide is optimized for installing Mailcow: Dockerized on a VPS running Nginx Proxy Manager (NPM) and Portainer. It includes fixes for common issues like Redirect Loops and 504 Gateway Timeout Errors.<\/p>\n

\"Mailcow
<\/figcaption><\/figure>\n<\/p>\n

1. Prerequisites<\/h2>\n
    \n
  • VPS with Docker & Docker Compose pre-installed.<\/li>\n
  • Domain name: mail.khaisanfood.vn<\/code> (pointing to VPS IP).<\/li>\n
  • Nginx Proxy Manager is running in a Docker container.<\/li>\n<\/ul>\n

    DNS record<\/h3>\n\n\n\n\n\n\n\n\n\n
    Type<\/th>\nName<\/th>\nValue<\/th>\nProxy Status<\/th>\n<\/tr>\n<\/thead>\n
    A<\/td>\nmail<\/td>\nYour VPS IP<\/td>\nDNS Only<\/td>\n<\/tr>\n
    CNAME<\/td>\nautodiscover<\/td>\nmail.khaisanfood.vn<\/td>\nDNS Only<\/td>\n<\/tr>\n
    CNAME<\/td>\nautoconfig<\/td>\nmail.khaisanfood.vn<\/td>\nDNS Only<\/td>\n<\/tr>\n
    MX<\/td>\n@<\/td>\nmail.khaisanfood.vn<\/td>\nPriority 10<\/td>\n<\/tr>\n
    TXT<\/td>\n@<\/td>\nv=spf1 mx ~all<\/td>\n\u2013<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    2. Installation Steps<\/h2>\n

    Step 1: Clone Mailcow<\/h3>\n
    cd \/opt\ngit clone https:\/\/github.com\/mailcow\/mailcow-dockerized\ncd mailcow-dockerized<\/code><\/pre>\n
    Step 2: Generate Configuration<\/h3>\n
    .\/generate_config.sh\nHostname: mail.khaisanfood.vn\nTimezone: Asia\/HoChi<\/em>Minh\nClamAV: Y (n\u1ebfu RAM > 4GB) ho\u1eb7c N.<\/code><\/pre>\n
    Step 3: Configure mailcow.conf (Important)<\/h3>\n
    Edit the configuration to avoid conflicts and loops.<\/p>\n
    nano mailcow.conf<\/code><\/pre>\n
    Change the following variables:<\/p>\n
      \n
    • Prevent Redirect Loops:<\/strong>
      \nHTTP_REDIRECT=n<\/code>
      \n(We let Nginx Proxy Manager handle HTTPS, so turn off Mailcow's internal redirection).<\/li>\n
    • Bind to All Interfaces (so NPM can see it):<\/strong>\n
      HTTP_BIND=0.0.0.0<\/code><\/p>\n
      HTTPS_BIND=0.0.0.0<\/code><\/li>\n{
        \"slug\": \"blog\",
        \"translations\": [
          \"<\/p>\"
        ]
      }\n
    • Change Ports (to avoid 80\/443 conflicts):<\/strong>\n
      HTTP_PORT=8080<\/code><\/p>\n
      HTTPS_PORT=8443<\/code><\/li>\n{
        \"slug\": \"blog\",
        \"translations\": [
          \"<\/p>\"
        ]
      }\n
    • Avoid IP Conflicts (Fix \u201cPool overlaps\u201d):<\/strong>\n
      IPV4_NETWORK=192.168.201<\/code><\/li>\n
      \n<\/ul>\n{
        \"slug\": \"blog\",
        \"translations\": [
          \"<\/p>\"
        ]
      }\n
      \"Mailcow
      <\/figcaption><\/figure>\n<\/p>\n
      Step 4: Firewall Setup (Fix 504 Error)<\/h3>\n
      Ensure Docker containers can communicate with each other.<\/p>\n
      ufw allow from 172.16.0.0\/12 to any<\/code><\/pre>\n
      Step 5: Start Mailcow<\/h3>\n
      docker compose pull\ndocker compose up -d<\/code><\/pre>\n
      3. Nginx Proxy Manager Configuration<\/h2>\n
      Access Nginx Proxy Manager and add a new Proxy Host.<\/p>\n
      Details Tab<\/h3>\n
        \n
      • Domain Names: mail.khaisanfood.vn<\/code><\/li>\n
      • Scheme: http<\/code> (Important! Connect via HTTP)<\/li>\n
      • Forward Hostname \/ IP: 172.17.0.1<\/code>
        \n(This is the standard Docker Gateway IP. Check ip addr show docker0<\/code> to confirm).<\/li>\n
      • Forward Port: 8080<\/code><\/li>\n
      • Cache Assets: Disabled<\/li>\n
      • Block Common Exploits: Enabled<\/li>\n<\/ul>\n
        SSL Tab<\/h3>\n
          \n
        • SSL Certificate: Request a new Let's Encrypt certificate.<\/li>\n
        • Force SSL: Enabled.<\/li>\n
        • HTTP\/2 Support: Enabled.<\/li>\n<\/ul>\n
          Click Save. Now you can access https:\/\/mail.khaisanfood.vn<\/code>.<\/p>\n
          \"SSL
          <\/figcaption><\/figure>\n<\/p>\n
          4. Post-Installation<\/h2>\n
          Sync SSL Certificates (For Email Clients)<\/h3>\n
          NPM handles web SSL, but Mailcow needs certificates for SMTP\/IMAP. You need to copy them from the NPM Docker volume on the host.<\/p>\n
          Find your NPM Certificate ID: Check the NPM dashboard or look in the directory. Example Host Path: \/var\/lib\/docker\/volumes\/nginx-proxy-managernpm<\/em>letsencrypt\/_data\/live\/npm-21<\/code> (id 21 will be different for each domain).<\/p>\n
          Sync Command:<\/p>\n
          # C\u1eadp nh\u1eadt \u0111\u01b0\u1eddng d\u1eabn n\u00e0y kh\u1edbp v\u1edbi Host Path c\u1ee7a b\u1ea1n t\u00ecm th\u1ea5y \u1edf tr\u00ean\nNPMCERT<\/em>PATH=\"\/var\/lib\/docker\/volumes\/nginx-proxy-managernpm<\/em>letsencrypt\/_data\/live\/npm-21\"\ncp \"$NPMCERT<\/em>PATH\/fullchain.pem\" \/opt\/mailcow-dockerized\/data\/assets\/ssl\/cert.pem\ncp \"$NPMCERT<\/em>PATH\/privkey.pem\" \/opt\/mailcow-dockerized\/data\/assets\/ssl\/key.pem\ncd \/opt\/mailcow-dockerized\ndocker compose restart postfix-mailcow dovecot-mailcow nginx-mailcow<\/code><\/pre>\n
          Reset Admin Password<\/h3>\n
          If admin \/ moohoo<\/code> not working:<\/p>\n
          cd \/opt\/mailcow-dockerized\/helper-scripts\nbash mailcow-reset-admin.sh<\/code><\/pre>\n
          DNS \/ DKIM<\/h3>\n
          Log in to Mailcow UI -> Configuration -> Mail Setup -> DNS to get the DKIM record and add it to your DNS provider.<\/p>\n
          5. Adding Additional Domains (Multi-Domain Setup)<\/h2>\n
          You can host multiple email domains (e.g., @dpsmedia.vn<\/code>) on this same server.<\/p>\n
          A. Add Domain in Mailcow<\/h3>\n
            \n
          • Log in to Mailcow UI as Admin.<\/li>\n
          • Go to Configuration -> Mail Setup -> Domains.<\/li>\n
          • Click Add Domain.<\/li>\n
          • Domain: dpsmedia.vn<\/code> (or your new domain).<\/li>\n
          • Click Add Domain and restart SOGo.<\/li>\n<\/ul>\n
            B. DNS for New Domain (dpsmedia.vn)<\/h3>\n
            Go to the DNS provider for dpsmedia.vn<\/code> and add these records. Important: Point them to your current mail server URL (mail.khaisanfood.vn<\/code>).<\/p>\n\n\n\n\n\n\n\n\n\n\n
            Type<\/th>\nName<\/th>\nValue<\/th>\nStatus<\/th>\n<\/tr>\n<\/thead>\n
            MX<\/td>\n@<\/td>\nmail.khaisanfood.vn<\/td>\nPriority 10<\/td>\n<\/tr>\n
            TXT<\/td>\n@<\/td>\nv=spf1 mx include:mail.khaisanfood.vn ~all<\/td>\n\u2013<\/td>\n<\/tr>\n
            CNAME<\/td>\nautodiscover<\/td>\nmail.khaisanfood.vn<\/td>\nDNS Only<\/td>\n<\/tr>\n
            CNAME<\/td>\nautoconfig<\/td>\nmail.khaisanfood.vn<\/td>\nDNS Only<\/td>\n<\/tr>\n
            TXT<\/td>\ndkim._domainkey<\/td>\n(Copy value from Mailcow UI -> DNS)<\/td>\n\u2013<\/td>\n<\/tr>\n
            TXT<\/td>\n_dmarc<\/td>\nv=DMARC1; p=none;<\/td>\n\u2013<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
            (You do NOT need a new IP address. Everything goes through the main IPs).<\/p>\n
            C. (Optional) Access Mailcow UI via mail.dpsmedia.vn<\/h3>\n
            If you want to access the Admin UI via https:\/\/mail.dpsmedia.vn<\/code>:<\/p>\n
            Edit Config:<\/p>\n
            nano mailcow.conf\nADDITIONALSERVER<\/em>NAMES=mail.dpsmedia.vn\ndocker compose up -d<\/code><\/pre>\n
            Nginx Proxy Manager: Copy the exact settings of mail.khaisanfood.vn<\/code>.<\/p>\n
            D. SSL Certificates for Additional Domains<\/h3>\n
            Option 1:<\/strong> (Recommended) Use mail.khaisanfood.vn<\/code> for Incoming\/Outgoing Server.<\/p>\n
            Option 2:<\/strong> (Advanced) Enable ENABLESSL<\/em>SNI=y<\/code> in config, create a separate SSL directory and sync the new certificate there.<\/p>\n
            6. Fix Email Sending (Gmail Block)<\/h2>\n
            If you encounter an error 550-5.7.1<\/code>, it means your IP has low reputation.<\/p>\n
            A. Set Up Reverse DNS (PTR) \u2013 Mandatory<\/h3>\n
            Go to your VPS provider's Dashboard, set the PTR Record for your IP to mail.khaisanfood.vn<\/code>.<\/p>\n
            B. Use SMTP Relay<\/h3>\n
            If the IP is blacklisted, use Amazon SES, SendGrid, or Mailgun as a Relay.<\/p>\n
            7. Uninstallation Guide<\/h2>\n
            Warning: This will delete ALL email data.<\/p>\n
            cd \/opt\/mailcow-dockerized\ndocker compose down -v\ncd \/opt\nrm -rf mailcow-dockerized<\/code><\/pre>\n
            Delete Proxy Host in NPM.<\/p>","protected":false},"excerpt":{"rendered":"
            H\u01b0\u1edbng d\u1eabn n\u00e0y \u0111\u01b0\u1ee3c t\u1ed1i \u01b0u h\u00f3a \u0111\u1ec3 c\u00e0i \u0111\u1eb7t Mailcow: Dockerized tr\u00ean VPS ch\u1ea1y Nginx Proxy Manager (NPM) v\u00e0 Portainer. N\u00f3 bao g\u1ed3m c\u00e1c s\u1eeda l\u1ed7i cho c\u00e1c v\u1ea5n \u0111\u1ec1 ph\u1ed5 bi\u1ebfn nh\u01b0 V\u00f2ng l\u1eb7p Chuy\u1ec3n h\u01b0\u1edbng (Redirect Loops) v\u00e0 L\u1ed7i Gateway Timeout 504. 1. Y\u00eau c\u1ea7u Ti\u00ean quy\u1ebft VPS c\u00e0i s\u1eb5n Docker & […]<\/p>","protected":false},"author":1,"featured_media":35655,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1758,1793,1794],"tags":[],"class_list":["post-35658","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops","category-guides","category-mailcow"],"acf":[],"rankmath_keywords":{"primary":"","secondary":[""]},"yoast_keywords":{"primary":"","secondary":[]},"yoast_focuskw":"","rankmath_focuskw":"","seo_keywords":{"primary":"","secondary":[""]},"_links":{"self":[{"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/posts\/35658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/comments?post=35658"}],"version-history":[{"count":0,"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/posts\/35658\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/media\/35655"}],"wp:attachment":[{"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/media?parent=35658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/categories?post=35658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dps.media\/en\/wp-json\/wp\/v2\/tags?post=35658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}