@scottalanmiller
I do not use a proxy for mailcow as it comes with the same nginx that I would use as a proxy. I have access to nginx.conf to make almost any adjustment I need

@gtech
Why do you need a proxy?

@scottalanmiller
He has a business to run. Mailcow is a community based project; the project lead used to work full time on it but no longer. He is using mailcow in his hosting business
Regarding the reliable process: I agree, at least in part
Regarding the update break: It happened once and there were at least 2 ways of solving it. It wasn't a big problem but was a problem

@travisdh1 said in MailCow in Production Datacenter:

things randomly break.

I agree. I have avoided docker because some things do not seem reliable. And I have applied mailcow updates that break things that should not be broke: I mean what happens makes no sense.
On the other hand, I have moved mailcow from Debian to CentOS within short maintenance windows and docker has eased the process.
Now that I think about it, mailcow is probably the only docker based deployment I have and probably will for some time

@Curtis said in MailCow in Production Datacenter:

@scottalanmiller I would use Ubuntu 18.04 and start there.

I have used Debian and CentOS; standarizing everything on CentOS

@scottalanmiller
It seems like I am very bad communicating. So I edited my reply @FATeknollogee to: It is to me and my use case

@scottalanmiller
Good point. Let me rephrase: I trust the ones deploying and servicing the software

@scottalanmiller
In this case, I am the service provider (as Curtis or NTG) and the end user is someone with a mailbox. I trust the service provider

@scottalanmiller
That one is interesting. To me:

• If the software maker says it is not production ready, most likely it is not. If it says it is production ready, it may be
• If the service provider says it is production ready, most likely it is
• If the end user says it is production ready, it could be

In this world of marketing gimmicks I usually believe more the service provider than the maker or end user. That is why I ask colleagues how their experience has been with a product and consider that experience in the decision making process.

Of course, that is only my (probably wrong) opinion.

@FATeknollogee
Yes, it is. It is to me and my use case. The solution is a docker setup of production open source components (postfix, dovecot, rspamd, SOGo, etc.) and a PHP based control panel. Updated via git.
I started using it just after they moved to Docker. At the time the other contender was Zimbra Community but I went for mailcow: dockerized and I do not regret it.
Full disclosure: I use it to host both internal and customer's mailboxes but that is not my primary line of business.

@Curtis
You know, I could just edit my offer and remove location. Then we could concentrate on hijacking the OP

@FATeknollogee
Well, there is a difference between 10-40 ms and 90 ms
The Atlantic ocean is somewhat big

@StuartJordan said in Email server options:

Well I'm not in the U.S lol...so not everyone...

Neither do I

@FATeknollogee
I am on full disclosure mode. If I wasn´t most non nerds would not notice. Wait, this is a nerd community: I apologize
In the end it does not matter for email delivery and the console works fast enough.
But If the project goes on and the crowd demands it I could host it elsewhere, like Chicago

Edit: Yes, the price is better is Europe. Check the prices on Hetzner as Curtis said.

@scottalanmiller said in Email server options:

@Curtis said in Email server options:

@scottalanmiller said in Email server options:

@Curtis said in Email server options:

I'll keep all your account active for a week or so, if you want one time, please let me know.

I think you need to run an ML mail service for everyone

Thinking about it. Just sure I could do it for free.

I bet you'd only be looking at 20-30 people seriously interested. Would be pretty cool, though.

I can do it for free. But I need to set some restrictions.

TLDR; Free service, not for abuse or high volume.

For example:

• Server would be a VPS in Europe (for those who care) with good performance but high latency to US.
• Only 35 GB of storage total (maybe 70 if needed). I do not care about the amount of email accounts as long they are within the storage limits.
• No Solr searching (Java and memory usage).
• Only disaster recovery backups: 1 week.
• I will need some time to get a clean IP. Meanwhile I could use Mailchannels until I get one, but only if email volume is low.
• I will shut it down the moment I see the service is abused by anyone or if an account is hacked and starts sending SPAM.
• I will not be fighting incomming SPAM. Every user will be responsible to train rspamd for their own account.
• I do not want to be vetting who gets an email or admin account and who doesn't. Someone else would need to do that.
• The service will go down from time to time for updates. Like once a month, for less than 30 minutes, at night in America
• For sure I forgot more that one thing, but you get the idea.

By the way, which domain name? who will own it?
Let me know if interested.

@Pete-S
I will read that carefully, but what I see indicates that the PDC VM has to synchronize with the host and the host needs to use the external clock.
Thank you for the info.

@Kelly
That makes sense.
Veeam recomends enabling it and using the registry to disable it once the system has booted.

@JasGot
As you have customers on Unitrends, have you tried Unitrends MSP? I am intrigued by it.
I have no current relation to Unitrends and I have a trust problem with them now that the company is part of Kaseya but I know someone who says it works well.
I am more into Veeam but I miss a real, full featured multi-tenant console.

@taurex
It didn't work. This is a new client we are taking over, and it might be a problem with a current GPO. I will do lab tests before trying again on the client's servers.

@all
Thanks, I will report back in case I find anything useful

@taurex
Thank you, I will try and report back.
I tried with Hyper-V time sync enabled (per Veeam instructions linked in OP) and disabled (as everyone else recommends); none worked. Actually, Veeam's recommendation kind of makes sense.

I never considered that the host should be synchronized with the same external source. That is because the host is AD joined and the general recommendation is to have all AD joined computers/server to sync with PDC emulator.