Stalwart: Difference between revisions

(One intermediate revision by one other user not shown)

Line 29:

bind = "[::]:465";

protocol = "smtp";

tls.implicit = true

tls.implicit = true;

};

imaps = {

bind = "[::]:993";

protocol = "imap";

tls.implicit = true

tls.implicit = true;

};

jmap = {

Line 222:

_25._tcp.mx1.example.org. 10800 IN RRSIG TLSA 13 5 10800 20230601000000 20230511000000 39688 example.org. He9VYZ35xTC3fNo8GJa6swPrZodSnjjIWPG6Th2YbsOEKTV1E8eGtJ2A +eyBd9jgG+B3cA/jw8EJHmpvy/buCw==

=== Running behind reverse proxy ===

When running behind a load balancer or reverse proxy, Stalwart will not be able to see the "real" sender IP-addresses of incoming mails in case of simple port forwarding. [[HAProxy]] or Proxy Protocol solves this problem and should be used on the reverse proxy server to forward SMTP traffic. Stalwart will start parsing the Proxy Protocol packages if correctly configured on the listener.{{file|||3=services.stalwart-mail = {

settings = {

server = {

listener = {

smtp = {

protocol = "smtp";

bind = "[::]:25";

proxy.trusted-networks = [

"10.250.0.1/32"

"fdc9:281f:4d7:9ee9::1/128"

];

};

[...]

};

};|name=/etc/nixos/configuration.nix|lang=nix}}In this example we set <code>proxy.trusted-networks</code> with an array of the gateway IP-addresses in the <code>smtp</code> listener section.

== Configuration ==

@@ Line 29: / Line 29: @@
            bind = "[::]:465";
            protocol = "smtp";
-           tls.implicit = true
+           tls.implicit = true;
          };
          imaps = {
            bind = "[::]:993";
            protocol = "imap";
-           tls.implicit = true
+           tls.implicit = true;
          };
          jmap = {
@@ Line 222: / Line 222: @@
   _25._tcp.mx1.example.org. 10800 IN RRSIG	TLSA 13 5 10800 20230601000000 20230511000000 39688 example.org. He9VYZ35xTC3fNo8GJa6swPrZodSnjjIWPG6Th2YbsOEKTV1E8eGtJ2A +eyBd9jgG+B3cA/jw8EJHmpvy/buCw==
+=== Running behind reverse proxy ===
+When running behind a load balancer or reverse proxy, Stalwart will not be able to see the "real" sender IP-addresses of incoming mails in case of simple port forwarding. [[HAProxy]] or Proxy Protocol solves this problem and should be used on the reverse proxy server to forward SMTP traffic. Stalwart will start parsing the Proxy Protocol packages if correctly configured on the listener.{{file|||3=services.stalwart-mail = {
+  settings = {
+    server = {
+      listener = {
+        smtp = {
+          protocol = "smtp";
+          bind = "[::]:25";
+          proxy.trusted-networks = [
+            "10.250.0.1/32"
+            "fdc9:281f:4d7:9ee9::1/128"
+          ];
+        };
+        [...]
+      };
+    };
+  };
+};|name=/etc/nixos/configuration.nix|lang=nix}}In this example we set <code>proxy.trusted-networks</code> with an array of the gateway IP-addresses in the <code>smtp</code> listener section.
 == Configuration ==