From 1d33c0512825e2f50d0384a5c78597036da06dc8 Mon Sep 17 00:00:00 2001
From: twoneis <sanjay29@sapura.de>
Date: Sat, 1 Mar 2025 23:24:58 +0100
Subject: [PATCH] try this proxy config

---
 modules/mail/default.nix | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/modules/mail/default.nix b/modules/mail/default.nix
index e61af62..1625dde 100644
--- a/modules/mail/default.nix
+++ b/modules/mail/default.nix
@@ -23,6 +23,28 @@ in
           };
         };
       };
+      streamConfig = ''
+        # Proxy SMTP
+        server {
+            listen 25 proxy_protocol;
+            proxy_pass 127.0.0.1:10025;
+            proxy_protocol on;
+        }
+
+        # Proxy IMAPS
+        server {
+            listen 993 proxy_protocol;
+            proxy_pass 127.0.0.1:10993;
+            proxy_protocol on;
+        }
+
+        # Proxy SMTPS
+        server {
+            listen 465 proxy_protocol;
+            proxy_pass 127.0.0.1:10465;
+            proxy_protocol on;
+        }
+      '';
     };
 
     users.users."stalwart-mail".extraGroups = ["nginx"];
@@ -37,6 +59,7 @@ in
         ];
         server = {
           hostname = "chpu.eu";
+          proxy.trusted-networks = ["127.0.0.0/8" "::1" "10.0.0.0/8"];
           tls = {
             enable = true;
             implicit = true;