From db161e296f5d80e5aa0a59bbeb52ff89b32c13e8 Mon Sep 17 00:00:00 2001
From: Thomas Preisner <mail@tpreisner.de>
Date: Sat, 28 Dec 2024 20:20:02 +0100
Subject: [PATCH] mailsystem: rspamd: Ensure proxy headers for webui are
 configured

---
 mailsystem/rspamd.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/mailsystem/rspamd.nix b/mailsystem/rspamd.nix
index 1539c36..3605209 100644
--- a/mailsystem/rspamd.nix
+++ b/mailsystem/rspamd.nix
@@ -120,6 +120,10 @@ in {
         locations."/rspamd" = {
           proxyPass = "http://unix:${rspamdControllerSocket}:/";
           basicAuthFile = cfg.rspamd.webUi.basicAuthFile;
+          extraConfig = ''
+            proxy_set_header Host $host;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+          '';
         };
         sslCertificate = lib.mkIf (cfg.certificateScheme == "selfsigned") sslCertPath;
         sslCertificateKey = lib.mkIf (cfg.certificateScheme == "selfsigned") sslKeyPath;