From 1b26a41aafab37013549865259256fcd743d1bf3 Mon Sep 17 00:00:00 2001
From: Thomas Preisner <mail@tpreisner.de>
Date: Sat, 28 Dec 2024 20:20:02 +0100
Subject: [PATCH] mailsystem: rspamd: Ensure proxy headers for webui are
 configured

---
 mailsystem/rspamd.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/mailsystem/rspamd.nix b/mailsystem/rspamd.nix
index 093be1e..7f2a147 100644
--- a/mailsystem/rspamd.nix
+++ b/mailsystem/rspamd.nix
@@ -120,6 +120,10 @@ in {
         locations."/rspamd" = {
           proxyPass = "http://unix:${rspamdControllerSocket}:/";
           basicAuthFile = cfg.rspamd.webUi.basicAuthFile;
+          extraConfig = ''
+            proxy_set_header Host $host;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+          '';
         };
         sslCertificate = lib.mkIf (cfg.certificateScheme == "selfsigned") sslCertPath;
         sslCertificateKey = lib.mkIf (cfg.certificateScheme == "selfsigned") sslKeyPath;