Build

• Hosting panel backend on port 2999 behind nginx (served at 82.29.152.93), frontend built from /frontend/dist.
• Mail: Mailcow Docker stack at /opt/mailcow-dockerized proxied to 8080/8445 on mail.thirdlawtechnologies.com.
• File access: Filebrowser Docker at /opt/filebrowser on port 8088 mounting /. Change the generated admin password after first login. Expose via https://files.thirdlawtechnologies.com/.
• Theming: /theme.css generated from theme.json; editable via the Global Theme form above.
• Rate limits relaxed for UI assets (1000 req / 15m) while keeping API protection.

Features

• Auth-gated dashboard with app & sandbox CRUD, stats, logs, and password change.
• Mail helpers: DNS guidance, propagation check, and “Restart ACME” control.
• Single theme pipeline meant to style host, file browser, and mail surfaces.
• Filebrowser + Mailcow exposed as quick links for admin access.

Endpoints (panel)

• /api/v1/auth/* (login, change-password)
• /api/v1/apps, /api/v1/sandboxes (deploy/manage resources)
• /api/v1/system/health, /api/v1/system/stats
• /api/v1/system/dns, /api/v1/system/dns-info (lookup + suggested records)
• /api/v1/system/acme/restart (admin) — restarts Mailcow ACME
• /api/v1/system/theme (GET/POST admin) — read/write global theme
• /theme.css — served from theme.json for all UIs

Scripts & wiring

• Mailcow: /opt/mailcow-dockerized (docker compose), vhost mail.thirdlawtechnologies.com → 8080/8445.
• Filebrowser: /opt/filebrowser/docker-compose.yml on 8088.
• Hosting panel: PM2 runs backend dist/index.js; nginx proxies 80/443 → 2999.
• Theme: theme.json → /theme.css → global variables; hook new apps to this URL to match styling.

DNS to set

• A mail.thirdlawtechnologies.com → 82.29.152.93
• MX @ → mail.thirdlawtechnologies.com (prio 10)
• TXT @ → v=spf1 mx ~all
• TXT _dmarc → v=DMARC1; p=quarantine; rua=mailto:postmaster@kordexio.com
• DKIM: copy TXT from Mailcow per domain after you add it.

Mail setup

• Open Mail Admin → add domain → add mailbox (e.g., info@kordexio.com).
• Publish SPF/DMARC above and the DKIM record Mailcow shows for the domain.
• Use “Check DNS” + “Restart ACME” here once A/MX propagate to get a trusted cert.

File access

• Filebrowser: http://82.29.152.93:8088/ (requires trailing slash). Default admin user is “admin”; initial password logged on container start — change it immediately.

To finish

• Point DNS A/MX to the server so Mailcow ACME can issue a trusted cert.
• Apply the global theme to Mailcow/Filebrowser (custom CSS or template injection) for full visual parity.
• Optional: import domains from providers, add more admin users, and extend theme controls (logos/fonts).