Hello, How can i prevent that the mailcow UI is shown over http connection, so i want to disable it or having it redirected to https. i changed /data/conf/nginx/listen_plain.active as follows: server { listen 8080; listen [::]:8080; server_name _; return 301 https://$host$request_uri; } if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } but after restarting nginx (docker-compose restart nginx-mailcow) this file (listen_plain.active) was reset to its original contents: listen 8080; listen [::]:8080; if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } Many thanks in advance

http => https

jvl

Hello,
How can i prevent that the mailcow UI is shown over http connection, so i want to disable it or having it redirected to https.
i changed /data/conf/nginx/listen_plain.active as follows:

server {
	listen 8080;
	listen [::]:8080;
	server_name _;
	return 301 https://$host$request_uri;
}

but after restarting nginx (docker-compose restart nginx-mailcow) this file (listen_plain.active) was reset to its original contents:

	listen 8080;
	listen [::]:8080;

Many thanks in advance

pkernstock

That’s why there are docs, describing what to do: https://mailcow.github.io/mailcow-dockerized-docs/u_e-80_to_443/

jvl

hi, thanks!
I overlooked that although I try to avoid bothering people with maybe silly question.
Now I see that the search of mailcow community is not covering mailcow documentation. So my search was too narrow. My apologies & thanks for the “redirect” ;-)

pkernstock

All good. You’re welcome! 🙂

jvl

I can confirm it worked, even with different ports, FYI

server {
  root /web;
  listen 8080 default_server;
  listen [::]:8080 default_server;
  include /etc/nginx/conf.d/server_name.active;
  if ( $request_uri ~* "%0A|%0D" ) { return 403; }
  location ^~ /.well-known/acme-challenge/ {
    allow all;
    default_type "text/plain";
  }
  location / {
    return 301 https://$host:8443$uri$is_args$args;
  }
}