diff --git a/infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml b/infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml
index e8026fa3..279e658f 100644
--- a/infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml
+++ b/infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml
@@ -13,6 +13,11 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    # Critical annotations to fix webmail redirect loop
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers "X-Forwarded-Proto $scheme";
+      more_set_headers "X-Forwarded-Port $server_port";
+    nginx.ingress.kubernetes.io/proxy-set-headers: "X-Forwarded-Proto https"
 spec:
   ingressClassName: nginx
   tls:
diff --git a/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml b/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml
index 3644f1bb..5560c542 100644
--- a/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml
+++ b/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml
@@ -14,6 +14,11 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    # Critical annotations to fix webmail redirect loop
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers "X-Forwarded-Proto $scheme";
+      more_set_headers "X-Forwarded-Port $server_port";
+    nginx.ingress.kubernetes.io/proxy-set-headers: "X-Forwarded-Proto https"
 spec:
   ingressClassName: nginx
   tls: