Update Servers/Linux/iRedMail.md
This commit is contained in:
@ -71,7 +71,42 @@ reboot
|
||||
|
||||
## Nested Reverse Proxy Configuration
|
||||
In my homelab environment, I run Traefik reverse proxy in front of everything, which includes the NGINX reverse proxy that iRedMail creates. In my scenario, I have to make some custom adjustments to the reverse proxy dynamic configuration data to ensure it will allow self-signed certificates from iRedMail to communicate with the Traefik reverse proxy successfully. You will see an example Traefik configuration file below.
|
||||
```jsx title="/srv/containers/traefik/config/dynamic/dynamic-config.yml" sh
|
||||
# ROUTERS
|
||||
test
|
||||
``` sh
|
||||
# ROUTER
|
||||
http:
|
||||
routers:
|
||||
mail:
|
||||
entryPoints:
|
||||
- websecure
|
||||
rule: "Host(`mail.bunny-lab.io`)"
|
||||
service: mail
|
||||
middlewares:
|
||||
- add-real-ip-header
|
||||
- add-host-header
|
||||
tls:
|
||||
certResolver: myresolver
|
||||
|
||||
# MIDDLEWARE (May not actually be necessary)
|
||||
middlewares:
|
||||
add-real-ip-header:
|
||||
headers:
|
||||
customRequestHeaders:
|
||||
X-Real-IP: ""
|
||||
add-host-header:
|
||||
headers:
|
||||
customRequestHeaders:
|
||||
Host: "mail.bunny-lab.io"
|
||||
|
||||
# SERVICE
|
||||
mail:
|
||||
loadBalancer:
|
||||
serversTransport: insecureTransport
|
||||
servers:
|
||||
- url: "https://192.168.3.13:443"
|
||||
passHostHeader: true
|
||||
|
||||
# TRANSPORT
|
||||
serversTransports:
|
||||
insecureTransport:
|
||||
insecureSkipVerify: true
|
||||
```
|
Reference in New Issue
Block a user