Password Recovery not working

CodeShell

Despite having…

setup password sender and subject
enabled the password reset acl for the mailbox
set an external email address for recovery (gmail)
working quota and quarantine emails working

I get a 302 Found response when clicking on Reset Password and get redirected to / with an error saying, that it was unable to send recovery email and that I should talk to the mailmaster (me).
Also seeing no immediate warnings in the logs / even seeing any outgoing email in postfix.

Does anyone know why this might be?
Thanks in advance!

smart

Do you meet all the requirements according to the documentation?
https://docs.mailcow.email/manual-guides/mailcow-UI/u_e-mailcow_ui-forgot_password/

e.g.:
Requirements¶

To activate and use this feature for a user, the following must be noted:

The mailcow administrator must have configured a sender email and a subject (see below). The sender email does not need to exist as a mailbox; however, the domain must be fully set up in mailcow to ensure that sending and especially delivery of emails is guaranteed.
The mailbox user must have a backup email address set in their options. This can be done by the user themselves (if the corresponding ACL is not disabled) or by the administrator.
The backup email should be different from the email address of the account for which the password is to be reset.
The backup email must also be able to receive external emails and should, if possible, be from a different provider and not directly on the mailcow server (this point is optional and serves only as a recommendation).
The user must have access to the backup email’s mailbox since the links are only valid for a limited time.

CodeShell

I think I have found the issue: I am using Haproxy infront of mailcow for smtp, so I added postscreen_upstream_proxy_protocol=haproxy to the smtp config. This means that any requests needs to have the PROXY Header, which PHPMailer does no add, so I need a way to separate it into two:

internal (no PROXY needed)
external (PROXY needed)

This is quite confusing since Quota and Quarantine emails are working, I think this may be caused because the password recovery flow uses the external port of postfix (:25) and not the internal one (:10025)