From ea48f52173b203589a62c385acc6dd4d2e306ab1 Mon Sep 17 00:00:00 2001
From: Bakery Admin <admin@bakewise.ai>
Date: Thu, 22 Jan 2026 19:55:06 +0100
Subject: [PATCH] Fix resources isues 21

---
 .../mail/mailu-helm/prod/mailu-ingress.yaml        | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml b/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml
index 9e8aad0b..046b9a89 100644
--- a/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml
+++ b/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml
@@ -14,10 +14,24 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    # CRITICAL: Headers for Mailu compatibility to fix webmail redirect loop
     nginx.ingress.kubernetes.io/configuration-snippet: |
+      # Set proper headers for Mailu
       more_set_headers "X-Forwarded-Proto $scheme";
       more_set_headers "X-Forwarded-Port $server_port";
       more_set_headers "X-Original-Forwarded-For $http_x_forwarded_for";
+
+      # Handle redirects properly to prevent loops for webmail
+      proxy_redirect https://$host https://$host;
+      proxy_redirect http://$host https://$host;
+
+      # Ensure proper host header
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
+    # Additional proxy settings for Mailu
+    nginx.ingress.kubernetes.io/proxy-set-headers: "X-Forwarded-Proto https"
 spec:
   ingressClassName: nginx
   tls: