feat(mail): add rspamd webui.

2 files changed, 46 insertions, 5 deletions

diff --git a/template/nginx/root.conf.template b/template/nginx/root.conf.template
index 8f65b40..17b558f 100644
--- a/template/nginx/root.conf.template
+++ b/template/nginx/root.conf.template
@@ -49,3 +49,49 @@ server {
         root /srv/acme;
     }
 }
+
+# For mail temporarily
+# TODO: Make subpath supported in aio.
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name mail.${CRUPEST_DOMAIN};
+
+    location /rcube {
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_pass http://roundcubemail:80;
+    }
+    
+    location /rspam {
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_pass http://mailserver:11334;
+    }
+
+    client_max_body_size 5G;
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name ${CRUPEST_NGINX_SUBDOMAIN}.${CRUPEST_DOMAIN};
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+
+    location /.well-known/acme-challenge {
+        root /srv/acme;
+    }
+}
diff --git a/template/nginx/server.json b/template/nginx/server.json
index 5edf168..342adae 100644
--- a/template/nginx/server.json
+++ b/template/nginx/server.json
@@ -18,11 +18,6 @@
         },
         {
             "type": "reverse-proxy",
-            "subdomain": "mail",
-            "upstream": "roundcubemail:80"
-        },
-        {
-            "type": "reverse-proxy",
             "subdomain": "2fa",
             "upstream": "2fauth:8000"
         },