feat(hetzner): full migration of docker-mailserver to stalwart

2026-08-15 15:59:27 +02:00
parent cb8835bbfb
commit 31de8eccb0
8 changed files with 185 additions and 37 deletions
@@ -161,8 +161,23 @@ in {
        extraConfig = ''
          import security_headers
          ${antiScrape}
-          # Bulwark webmail (JMAP client for Stalwart), running on host port 3002.
-          reverse_proxy 127.0.0.1:3002
+          # Stalwart JMAP API (http-management listener on 8080): required so the
+          # browser can reach /.well-known/jmap, /jmap/session and the JMAP
+          # upload/download/eventsource/ws paths at the public origin.
+          handle /.well-known/jmap {
+            reverse_proxy 127.0.0.1:8080
+          }
+          # NOTE: use handle (not handle_path) so the /jmap prefix is preserved.
+          handle /jmap {
+            reverse_proxy 127.0.0.1:8080
+          }
+          handle /jmap/* {
+            reverse_proxy 127.0.0.1:8080
+          }
+          handle {
+            # Bulwark webmail (JMAP client for Stalwart), running on host port 3002.
+            reverse_proxy 127.0.0.1:3002
+          }
          encode zstd gzip
        '';
      };