Add new infra architecture 2

infrastructure/platform/mail/mailu/base/mailu-nginx-config.yaml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mailu-nginx-config
+  namespace: bakery-ia
+  labels:
+    app: mailu
+    component: nginx-config
+data:
+  # Custom Nginx configuration to prevent redirect loops when behind ingress
+  # This file is mounted as /overrides/ingress-fix.conf in the Mailu frontend container
+  ingress-fix.conf: |
+    # Override the default HTTP to HTTPS redirect behavior
+    # When behind ingress controller, we should trust X-Forwarded-Proto header
+    # and avoid redirect loops
+    
+    # Disable the HTTP to HTTPS redirect by overriding the redirect condition
+    # This prevents the redirect loop by setting the proxy protocol to https
+    set $proxy_x_forwarded_proto "https";
+    
+    # Override the map directive to always return https when behind ingress
+    map "" $proxy_x_forwarded_proto {
+      default "https";
+    }
+    
+    # Trust the X-Forwarded-* headers from the ingress controller
+    set_real_ip_from 10.0.0.0/8;
+    set_real_ip_from 172.16.0.0/12;
+    set_real_ip_from 192.168.0.0/16;
+    real_ip_header X-Forwarded-For;
+    real_ip_recursive on;