Serve multiples domains for autoconfig

guillaumearnx

Hello,
I would like to configure MailCow to host associations that want an email system.
My server is behind an Nginx reverse proxy.

Currently, my server is configured with the following FQDN:
mail.domain.tld

Everything works fine here,
but one association owns the domain asso.com.
Its DNS records are:

autodiscover.asso.com | cname | mail.domain.tld
asso.com | MX | mail.domain.tld
_autodiscover._tcp.asso.com | SRV | 10 10 443 mail.domain.tld

This does not work for the autoconfig part.
Looking at the logs, I get the impression that Thunderbird is not even trying to contact https://autoconfig.asso.com/mail/config-v1.1.xml

In any case, the certificate is invalid (which makes sense, since I don’t control the client’s domain, so I don’t know how to do it).
It works with HTTP, but I think Thunderbird isn’t trying HTTP for security reasons.

Does anyone have any ideas?
thx

ETNyx

Hello, first please use ``` for code, it’s usually nicer and you will be sure that no important sign will be striped out. Because if those are current DNS settings, that SRV record is wrong missing _, also those load balancing numbers are most-likely unnecessary.

EDIT: for correct record please check DNS button in MC

DocFraggle

ETNyx please use ``` for code

Advanced tip: use this for your code, as it won’t do the weird syntax coloring where you literally can’t read anything afterwards 🙂

```bla
your code
goes here
```

The “bla” just overrides this syntax coloring and everything is just written in one color.

guillaumearnx

hi
i’ve edited the post

ETNyx

Well, pretty hard to diagnose without real data, so far I do not understand your setup.

You wrote that there is invalid cert for autoconfig why? This should point to your MC (or proxy), so you are in control, that mean invalid cert is your problem to fix, not your customers,..

Also what is that A record on top? Not sure if it’s byproduct of using proxy, but seems wrong smell like mail.domain CNAME to mail.domain loop,…

guillaumearnx

first A is just cname instead of A, but no diff.
we can close the issue
its due to https -> https redirection not working because mailcow generates ssl certs dyanmically. i’ve deleted reverse proxy for mailcow

ETNyx

As docs says you can use your proxy as source of your certs. Or you can do this backwards, copy certs from MC to your proxy,…