HTTP/HTTPS loop (Too many redirects)

notsapro

Hey all. I’ve been stuck in a HTTP/HTTPS loop for a while already. For reference, I am using nginx as the reverse proxy alongside mailcows built in nginx. The config of that file is fine.

Nginx-mailcow logs:
nginx-mailcow-1 | 172.22.1.10 - - [12/Dec/2025:19:16:50 +0100] "HEAD /forwardinghosts.php HTTP/1.1" 200 0 "-" "rspamd-3.13.2" nginx-mailcow-1 | fd4d:6169:6c63:6f77::e - - [12/Dec/2025:19:16:50 +0100] "GET /forwardinghosts.php HTTP/1.1" 200 27 "-" "rspamd-3.13.2" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:54 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:54 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:54 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:54 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:55 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" nginx-mailcow-1 | 172.22.1.1 - - [12/Dec/2025:19:16:56 +0100] "GET / HTTP/1.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"

Nginx logs:
` - - [12/Dec/2025:18:20:20 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”

- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:21 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”
- [12/Dec/2025:18:20:22 +0000] “GET / HTTP/2.0” 301 162 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36”`

Thanks!

esackbauer

notsapro The config of that file is fine.

How do you know?
How does it look like when you are directly accessing mailcow?

notsapro

esackbauer Well, it is the official one provided by mailcow documentation. If it was bad for me it’d be bad for everyone else.

esackbauer

notsapro the official one provided by mailcow documentation

The official one is just a template, it works as is only if nginx is running directly on the same host as mailcow, and not in a container.
As long as you do not provide more info about your setup, we cannot help.

notsapro

esackbauer

Here is the configuration file:

`server {
listen 80 default_server;
listen [::]:80 default_server;
server_name mail.bloxburgresorts.com autodiscover.* autoconfig.;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name mail.bloxburgresorts.com autodiscover. autoconfig.*;

ssl_certificate /opt/mailcow-dockerized/data/assets/ssl/cert.pem;
ssl_certificate_key /opt/mailcow-dockerized/data/assets/ssl/key.pem;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;

See https://ssl-config.mozilla.org/#server=nginx for the latest ssl settings recommendations

An example config is given below

ssl_protocols TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5:!SHA1:!kRSA;
ssl_prefer_server_ciphers off;

location /Microsoft-Server-ActiveSync {
proxy_pass http://127.0.0.1:8080/Microsoft-Server-ActiveSync;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 75;
proxy_send_timeout 3650;
proxy_read_timeout 3650;
proxy_buffers 64 512k; # Needed since the 2022-04 Update for SOGo
client_body_buffer_size 512k;
client_max_body_size 0;
}

location / {
proxy_pass http://127.0.0.1:8080/;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
client_max_body_size 0;

The following Proxy Buffers has to be set if you want to use SOGo after the 2022-04 (April 2022) Update

Otherwise a Login will fail like this: mailcow/mailcow-dockerized4537

proxy_buffer_size 128k;
proxy_buffers 64 512k;
proxy_busy_buffers_size 512k;
}
}
`

esackbauer

This config is hardly readable. Please use the code markdown </>

So your ngnix is running directly on the host where mailcow is running?
and your mailcow.conf has these?

HTTP_BIND=127.0.0.1
HTTP_PORT=8080
HTTPS_BIND=127.0.0.1
HTTPS_PORT=8443

If you have the chance, try running mailcow directly connected without reverse proxy (it was designed to do so) to make sure that it is working properly.
Change mailcow.conf back to the defaults:

HTTP_BIND=
HTTP_PORT=80
HTTPS_BIND=
HTTPS_PORT=443

stop your nginx reverse proxy (so that ports 80 and 443 are not bound anymore) and do

docker compose down
docker compose up -d