diff --git a/mailsystem/rspamd.nix b/mailsystem/rspamd.nix
index 093be1e..7f2a147 100644
--- a/mailsystem/rspamd.nix
+++ b/mailsystem/rspamd.nix
@@ -120,6 +120,10 @@ in {
         locations."/rspamd" = {
           proxyPass = "http://unix:${rspamdControllerSocket}:/";
           basicAuthFile = cfg.rspamd.webUi.basicAuthFile;
+          extraConfig = ''
+            proxy_set_header Host $host;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+          '';
         };
         sslCertificate = lib.mkIf (cfg.certificateScheme == "selfsigned") sslCertPath;
         sslCertificateKey = lib.mkIf (cfg.certificateScheme == "selfsigned") sslKeyPath;