Diagnose certificate issues, add missing ServerAliases

This commit is contained in:
Root User 2026-02-15 23:16:59 +01:00
parent ba7e32a2a7
commit 1bc85803a9
Signed by: root
GPG key ID: 087F0A95E5766D72
2 changed files with 14 additions and 14 deletions

View file

@ -371,7 +371,7 @@ in {
# Mail HTTP (JMAP / web) - terminate TLS at Traefik and forward to Stalwart JMAP HTTP listener
mail = {
rule = "Host(`mail.prg-radio.org`)";
rule = "Host(`mail.prg-radio.org`,`mta-sts.prg-radio.org`,`autoconfig.prg-radio.org`,`autodiscover.prg-radio.org`)";
service = "mail-jmap";
entryPoints = ["websecure"];
tls = {certresolver = "acme";};
@ -379,7 +379,7 @@ in {
# Mail web administration UI (Stalwart management) - exposed under /management
mail-webadmin = {
rule = "Host(`mail.prg-radio.org`) && PathPrefix(`/management`)";
rule = "Host(`mail.prg-radio.org`,`mta-sts.prg-radio.org`,`autoconfig.prg-radio.org`,`autodiscover.prg-radio.org`) && PathPrefix(`/management`)";
service = "mail-webadmin";
entryPoints = ["websecure"];
tls = {certresolver = "acme";};
@ -517,17 +517,17 @@ in {
# Mail TCP services
mail-smtp.loadBalancer = {
proxyProtocol = { version = 2; }; # Add this line
proxyProtocol = {version = 2;}; # Add this line
servers = [{address = "10.1.1.15:25";}];
};
mail-smtps.loadBalancer = {
proxyProtocol = { version = 2; }; # Add this line
proxyProtocol = {version = 2;}; # Add this line
servers = [{address = "10.1.1.15:465";}];
};
mail-imaps.loadBalancer = {
proxyProtocol = { version = 2; }; # Add this line
proxyProtocol = {version = 2;}; # Add this line
servers = [{address = "10.1.1.15:993";}];
};
};