mailcow behind haproxy frontend out of the box

enriluis

Cisco30 thanks i will translate to haproxy-gui on pfsense firewall really, but is a god starting point to me, thanks !
so in you config when request point to www.mail.seeboxs.com you use u backend rigth..?
i’m not very familiar with haaproxy acl but a requets to webmail.midomain.com shold be redirect to mybackend/sogo

enriluis

i need something like: webmail.mydomain->backend/SOGo and webmail.mydomain/admin->backend
i tried but lost page styles…

Cisco30

with the previous configuration, SOGo works very well at home and from outside. I did not do any specific redirection for sogo, in TCP mode all data is transferred (whether encrypted or not).
if you try from home mail.seeboxs.com/sogo, you will see that the web page is displayed correctly

on the other hand I don’t know pfsense, I use HAProxy 2.8 on a dedicated server with Debian 12

enriluis

Cisco30
Yes, I have been working on this as well. Your help was useful, thanks ,but I need the users to be able to access the SOGo webmail directly when enter webmail.mydomain, avoiding the need to see the web admin UI. Additionally, it would be great if I could add another frontend , such as adminmailcow.mydomain, to allow web admin access from specific IP addresses. this is more advanced acl rules , maybe this is a question to haproxy comunity.
thanks

enriluis

this is my solution, thanks
https://docs.mailcow.email/manual-guides/Nginx/u_e-nginx_webmail-site/

blacksteel1288

@enriluis I’m trying to do the same thing with haproxy redirecting an incoming frontend such as mail.mydomain.com to go directly to the /SOGo path, and admin.mydomain.com to go to the / path.

Could you post your haproxy.conf file and your webmail.conf files as examples of how you accomplished it?

Thank you!

enriluis

blacksteel1288
Sorry, I have not done yet this config, by now everyone can access webmail and admin, i would like to do that

blacksteel1288

Here’s what I did. It seems to work. I’m testing it now –

In your haproxy.conf, for the backend service that is webmail only, add these lines:

http-request redirect location /SOGo/ code 301 if { path / }
http-request set-path /SOGo%[path] unless { path_beg /SOGo }
http-request set-header X-Forwarded-URI /SOGo%[capture.req.uri]

enriluis

blacksteel1288
thanks. The main reason because i not tested before is because pfsense-haproxy it make me more easy and complex at same time:

i get sane result in the passed

redirect me but i lost styles.

blacksteel1288

yeah, understood. opnsense is what i use, and similar.

you should try to review the actual haproxy.conf file that is output from the pfsense UI and compare to my code. usually there is some way to do that. i think your ACL may not be correct.

enriluis

blacksteel1288

yes, it worked, i added you code on advanced

thanks!