{"id":35658,"date":"2026-01-08T01:23:25","date_gmt":"2026-01-07T18:23:25","guid":{"rendered":"https:\/\/dps.media\/huong-dan-cai-dat-mailcow-phien-ban-cuoi\/"},"modified":"2026-01-08T01:23:25","modified_gmt":"2026-01-07T18:23:25","slug":"huong-dan-cai-dat-mailcow-phien-ban-cuoi","status":"publish","type":"post","link":"https:\/\/dps.media\/en\/huong-dan-cai-dat-mailcow-phien-ban-cuoi\/","title":{"rendered":"Mailcow Installation Guide (Final Version)"},"content":{"rendered":"

This guide is optimized for installing Mailcow: Dockerized on a VPS running Nginx Proxy Manager (NPM) and Portainer. It includes fixes for common issues like Redirect Loops and 504 Gateway Timeout Errors.<\/p>\n

\"Mailcow
<\/figcaption><\/figure>\n<\/p>\n

1. Prerequisites<\/h2>\n
    \n
  • VPS with Docker & Docker Compose pre-installed.<\/li>\n
  • Domain name: mail.khaisanfood.vn<\/code> (pointing to VPS IP).<\/li>\n
  • Nginx Proxy Manager is running in a Docker container.<\/li>\n<\/ul>\n

    DNS record<\/h3>\n\n\n\n\n\n\n\n\n\n
    Type<\/th>\nName<\/th>\nValue<\/th>\nProxy Status<\/th>\n<\/tr>\n<\/thead>\n
    A<\/td>\nmail<\/td>\nYour VPS IP<\/td>\nDNS Only<\/td>\n<\/tr>\n
    CNAME<\/td>\nautodiscover<\/td>\nmail.khaisanfood.vn<\/td>\nDNS Only<\/td>\n<\/tr>\n
    CNAME<\/td>\nautoconfig<\/td>\nmail.khaisanfood.vn<\/td>\nDNS Only<\/td>\n<\/tr>\n
    MX<\/td>\n@<\/td>\nmail.khaisanfood.vn<\/td>\nPriority 10<\/td>\n<\/tr>\n
    TXT<\/td>\n@<\/td>\nv=spf1 mx ~all<\/td>\n\u2013<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    2. Installation Steps<\/h2>\n

    Step 1: Clone Mailcow<\/h3>\n
    cd \/opt\ngit clone https:\/\/github.com\/mailcow\/mailcow-dockerized\ncd mailcow-dockerized<\/code><\/pre>\n
    Step 2: Generate Configuration<\/h3>\n
    .\/generate_config.sh\nHostname: mail.khaisanfood.vn\nTimezone: Asia\/HoChiMinh\nClamAV: Y (if RAM > 4GB) or N.<\/code><\/pre>\n
    Step 3: Configure mailcow.conf (Important)<\/h3>\n
    Edit the configuration to avoid conflicts and loops.<\/p>\n
    nano mailcow.conf<\/code><\/pre>\n
    Change the following variables:<\/p>\n
      \n
    • Prevent Redirect Loops:<\/strong>
      \nHTTP_REDIRECT=n<\/code>
      \n(We let Nginx Proxy Manager handle HTTPS, so turn off Mailcow's internal redirection).<\/li>\n
    • Bind to All Interfaces (so NPM can see it):<\/strong>\n
      HTTP_BIND=0.0.0.0<\/code><\/p>\n
      HTTPS_BIND=0.0.0.0<\/code><\/li>\n<\/p>\n
    • Change Ports (to avoid 80\/443 conflicts):<\/strong>\n
      HTTP_PORT=8080<\/code><\/p>\n
      HTTPS_PORT=8443<\/code><\/li>\n<\/p>\n
    • Avoid IP Conflicts (Fix \u201cPool overlaps\u201d):<\/strong>\n
      IPV4_NETWORK=192.168.201<\/code><\/li>\n
      \n<\/ul>\n<\/p>\n
      \"Mailcow
      <\/figcaption><\/figure>\n<\/p>\n
      Step 4: Firewall Setup (Fix 504 Error)<\/h3>\n
      Ensure Docker containers can communicate with each other.<\/p>\n
      ufw allow from 172.16.0.0\/12 to any<\/code><\/pre>\n
      Step 5: Start Mailcow<\/h3>\n
      docker compose pull\ndocker compose up -d<\/code><\/pre>\n
      3. Nginx Proxy Manager Configuration<\/h2>\n
      Access Nginx Proxy Manager and add a new Proxy Host.<\/p>\n
      Details Tab<\/h3>\n
        \n
      • Domain Names: mail.khaisanfood.vn<\/code><\/li>\n
      • Scheme: http<\/code> (Important! Connect via HTTP)<\/li>\n
      • Forward Hostname \/ IP: 172.17.0.1<\/code>
        \n(This is the standard Docker Gateway IP. Check ip addr show docker0<\/code> to confirm).<\/li>\n
      • Forward Port: 8080<\/code><\/li>\n
      • Cache Assets: Disabled<\/li>\n
      • Block Common Exploits: Enabled<\/li>\n<\/ul>\n
        SSL Tab<\/h3>\n
          \n
        • SSL Certificate: Request a new Let's Encrypt certificate.<\/li>\n
        • Force SSL: Enabled.<\/li>\n
        • HTTP\/2 Support: Enabled.<\/li>\n<\/ul>\n
          Click Save. Now you can access https:\/\/mail.khaisanfood.vn<\/code>.<\/p>\n
          \"SSL
          <\/figcaption><\/figure>\n<\/p>\n
          4. Post-Installation<\/h2>\n
          Sync SSL Certificates (For Email Clients)<\/h3>\n
          NPM handles web SSL, but Mailcow needs certificates for SMTP\/IMAP. You need to copy them from the NPM Docker volume on the host.<\/p>\n
          Find your NPM Certificate ID: Check the NPM dashboard or look in the directory. Example Host Path: \/var\/lib\/docker\/volumes\/nginx-proxy-managernpmletsencrypt\/_data\/live\/npm-21<\/code> (id 21 will be different for each domain).<\/p>\n
          Sync Command:<\/p>\n
          # Update this path to match your Host Path found above\nNPMCERTPATH=\"\/var\/lib\/docker\/volumes\/nginx-proxy-managernpmletsencrypt\/_data\/live\/npm-21\"\ncp \"$NPMCERTPATH\/fullchain.pem\" \/opt\/mailcow-dockerized\/data\/assets\/ssl\/cert.pem\ncp \"$NPMCERTPATH\/privkey.pem\" \/opt\/mailcow-dockerized\/data\/assets\/ssl\/key.pem\ncd \/opt\/mailcow-dockerized\ndocker compose restart postfix-mailcow dovecot-mailcow nginx-mailcow<\/code><\/pre>\n
          Reset Admin Password<\/h3>\n
          If admin \/ moohoo<\/code> not working:<\/p>\n
          cd \/opt\/mailcow-dockerized\/helper-scripts\nbash mailcow-reset-admin.sh<\/code><\/pre>\n
          DNS \/ DKIM<\/h3>\n
          Log in to Mailcow UI -> Configuration -> Mail Setup -> DNS to get the DKIM record and add it to your DNS provider.<\/p>\n
          5. Adding Additional Domains (Multi-Domain Setup)<\/h2>\n
          You can host multiple email domains (e.g., @dpsmedia.vn<\/code>) on this same server.<\/p>\n
          A. Add Domain in Mailcow<\/h3>\n
            \n
          • Log in to Mailcow UI as Admin.<\/li>\n
          • Go to Configuration -> Mail Setup -> Domains.<\/li>\n
          • Click Add Domain.<\/li>\n
          • Domain: dpsmedia.vn<\/code> (or your new domain).<\/li>\n
          • Click Add Domain and restart SOGo.<\/li>\n<\/ul>\n
            B. DNS for New Domain (dpsmedia.vn)<\/h3>\n
            Go to the DNS provider for dpsmedia.vn<\/code> and add these records. Important: Point them to your current mail server URL (mail.khaisanfood.vn<\/code>).<\/p>\n\n\n\n\n\n\n\n\n\n\n
            Type<\/th>\nName<\/th>\nValue<\/th>\nStatus<\/th>\n<\/tr>\n<\/thead>\n
            MX<\/td>\n@<\/td>\nmail.khaisanfood.vn<\/td>\nPriority 10<\/td>\n<\/tr>\n
            TXT<\/td>\n@<\/td>\nv=spf1 mx include:mail.khaisanfood.vn ~all<\/td>\n\u2013<\/td>\n<\/tr>\n
            CNAME<\/td>\nautodiscover<\/td>\nmail.khaisanfood.vn<\/td>\nDNS Only<\/td>\n<\/tr>\n
            CNAME<\/td>\nautoconfig<\/td>\nmail.khaisanfood.vn<\/td>\nDNS Only<\/td>\n<\/tr>\n
            TXT<\/td>\ndkim._domainkey<\/td>\n(Copy value from Mailcow UI -> DNS)<\/td>\n\u2013<\/td>\n<\/tr>\n
            TXT<\/td>\n_dmarc<\/td>\nv=DMARC1; p=none;<\/td>\n\u2013<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
            (You do NOT need a new IP address. Everything goes through the main IPs).<\/p>\n
            C. (Optional) Access Mailcow UI via mail.dpsmedia.vn<\/h3>\n
            If you want to access the Admin UI via https:\/\/mail.dpsmedia.vn<\/code>:<\/p>\n
            Edit Config:<\/p>\n
            nano mailcow.conf\nADDITIONALSERVERNAMES=mail.dpsmedia.vn\ndocker compose up -d<\/code><\/pre>\n
            Nginx Proxy Manager: Copy the exact settings of mail.khaisanfood.vn<\/code>.<\/p>\n
            D. SSL Certificates for Additional Domains<\/h3>\n
            Option 1:<\/strong> (Recommended) Use mail.khaisanfood.vn<\/code> for Incoming\/Outgoing Server.<\/p>\n
            Option 2:<\/strong> (Advanced) Enable ENABLESSLSNI=y<\/code> in config, create a separate SSL directory and sync the new certificate there.<\/p>\n
            6. Fix Email Sending (Gmail Block)<\/h2>\n
            If you encounter an error 550-5.7.1<\/code>, it means your IP has low reputation.<\/p>\n
            A. Set Up Reverse DNS (PTR) \u2013 Mandatory<\/h3>\n
            Go to your VPS provider's Dashboard, set the PTR Record for your IP to mail.khaisanfood.vn<\/code>.<\/p>\n
            B. Use SMTP Relay<\/h3>\n
            If the IP is blacklisted, use Amazon SES, SendGrid, or Mailgun as a Relay.<\/p>\n
            7. Uninstallation Guide<\/h2>\n
            Warning: This will delete ALL email data.<\/p>\n
            cd \/opt\/mailcow-dockerized\ndocker compose down -v\ncd \/opt\nrm -rf mailcow-dockerized<\/code><\/pre>\n
            Delete Proxy Host in NPM.<\/p>\n