feat: Mailcow email server deployed on Billing VPS

Deployed March 15, 2026 — two weeks ahead of April 1 target.

- Mailcow dockerized stack on Billing VPS (38.68.14.188)
- Nginx proxy on 8080/8443 (coexists with Paymenter)
- Let's Encrypt SSL (auto-renews, expires 2026-06-14)
- ClamAV disabled for RAM conservation (1.9GB server)
- DKIM selector: dkim, 2048-bit key
- SPF updated (plesk.breezehost.io removed)
- Autodiscover/autoconfig CNAMEs added
- Daily backup cron 3am via helper-scripts
- Outbound verified: mail-tester.com + Gmail both delivered
- Inbound: DNS propagating, Gmail retry pending

Mailboxes: michael, megan, holly, hello, noreply, support
Aliases: frostystyle, gingerfury, unicorn20089, admin, billing, webmaster

Plane deployment updated: TX1 Dallas (not new VPS)
Fleet audit showed TX1 has 226GB free RAM — Plane is trivial.

Refs: Task #11, Task #47

docs/core/tasks.md

@@ -493,21 +493,28 @@ Self-hosted AI assistant providing 24/7 support to all community tiers. "Most Mi
 
 ---
 
-### 11. Mailcow Email Server on Billing VPS
-**Time:** 2-3 hours  
-**Status:** READY — Frostwall dependency removed (March 14, 2026)  
-**Depends:** Nothing — unblocked  
+### 11. Mailcow Email Server on Billing VPS — ✅ COMPLETE
+**Time:** 2-3 hours (actual: ~3 hours)
+**Status:** ✅ DEPLOYED — March 15, 2026 (ahead of April 1 target)
+**Deployed By:** Chronicler #31
 **Documentation:** `docs/tasks/mailcow-email-server-on-nc1/`
 
 Professional @firefrostgaming.com email on Billing VPS. Self-hosted, $120/year saved, eliminates Plesk.
 
-**Location:** Billing VPS (38.68.14.188) — clean IP, shares with Paymenter only
-**Previous Location:** NC1 Charlotte (incorrect — game server IP reputation risk)
+**Deployment Summary:**
+- ✅ Mailcow running on Billing VPS (38.68.14.188)
+- ✅ Nginx proxy on ports 8080/8443 (shares server with Paymenter)
+- ✅ SSL cert via Let's Encrypt (expires 2026-06-14, auto-renews)
+- ✅ ClamAV disabled (RAM conservation on 1.9GB server)
+- ✅ DKIM, SPF, DMARC, autodiscover/autoconfig all configured
+- ✅ Outbound delivery verified (mail-tester.com + Gmail)
+- ✅ Daily backup cron at 3am
+- ⏳ Inbound delivery — DNS propagating, Gmail retry pending
 
-**Decision (March 14, 2026):** Moved from NC1 to Billing VPS. Frostwall dependency was based on
-incorrect assumption that Mailcow needed dedicated hardware. Actual requirement is clean IP reputation.
-Billing VPS has clean IP, sufficient resources (18GB disk, 40% memory headroom), and logical
-co-location with Paymenter for transactional email.
+**Mailboxes:** michael, megan, holly, hello, noreply, support
+**Aliases:** frostystyle, gingerfury, unicorn20089, admin, billing, webmaster
+
+**Next steps:** Ghost SMTP, Paymenter SMTP, resend Holly's Ghost invite
 
 ---
 

docs/tasks/mailcow-email-server-on-nc1/deployment-plan.md

@@ -1,7 +1,7 @@
 # Mailcow Deployment Plan — Billing VPS
-## Target: April 1, 2026
 
-**Status:** READY — Unblocked March 14, 2026
+**Status:** ✅ DEPLOYED — March 15, 2026 (ahead of April 1 target)
+**Deployed By:** Chronicler #31
 **Location:** Billing VPS (38.68.14.188)
 **Time Estimate:** 2-3 hours
 **SSH Login:** root@38.68.14.188