Add README.md

README.md

@@ -0,0 +1,59 @@
+Mailcow runs properly through dockeruser:
+
+This script combines all the requested components and adds several security enhancements. Here's what the script does:
+
+1. Installs Docker with official GPG keys
+2. Creates a separate user for Docker operations
+3. Sets up UFW firewall with all necessary ports for Mailcow
+4. Installs and configures fail2ban with SSH honeypot
+5. Clones and sets up Mailcow
+6. Implements proper logging and error handling
+
+To use this script:
+
+1. Download script for the hhf git repo:
+```bash
+wget https://git.hhf.technology/hhf/docker-mailcow/raw/branch/main/install-mailcow.sh
+```
+2. Make it executable:
+```bash
+chmod +x install-mailcow.sh
+```
+3. Run it as root:
+```bash
+sudo ./install-mailcow.sh
+```
+
+Important notes:
+- The script must be run as root
+- It's designed for Debian-based systems
+- Make sure to review the UFW rules and adjust if needed
+- After installation, you'll need to configure your DNS records and SSL certificates
+- The script creates a separate user 'dockeruser' for Docker operations
+
+1. Added proper sudo permissions for dockeruser specifically for Docker commands
+2. Set correct ownership of the Mailcow directory to dockeruser
+3. All Docker operations are now performed as dockeruser using `su - dockeruser`
+4. Added proper directory permissions and ownership
+5. Docker commands are now executed in the correct user context
+
+To use the installation:
+
+1. After installation, you can manage Mailcow as dockeruser:
+```bash
+su - dockeruser
+cd /opt/mailcow-dockerized
+docker compose ps  # Check status
+docker compose down  # Stop services
+docker compose up -d  # Start services
+```
+
+2. The dockeruser can manage all Docker-related tasks without needing sudo for docker commands.
+
+3. Configuration files will be properly owned by dockeruser, allowing for easier maintenance and updates.
+
+This setup ensures better security by:
+- Running Mailcow with minimal required permissions
+- Keeping Docker operations separate from root
+- Maintaining proper file ownership
+- Allowing for easier maintenance and updates