From aa5a80633aa95b0303485fd4c3d3c02b2e63daa7 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Sun, 25 Jan 2026 19:15:13 +0100
Subject: [PATCH] Add https forward headers

---
 stalwart/templates/ingress.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/stalwart/templates/ingress.yaml b/stalwart/templates/ingress.yaml
index bcfbfa2..ce380e7 100644
--- a/stalwart/templates/ingress.yaml
+++ b/stalwart/templates/ingress.yaml
@@ -13,6 +13,10 @@ metadata:
     nginx.ingress.kubernetes.io/cors-allow-methods: "GET, POST, PUT, DELETE, OPTIONS"
     nginx.ingress.kubernetes.io/cors-allow-headers: "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization"
     nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
+    nginx.ingress.kubernetes.io/proxy-set-headers: "X-Forwarded-Proto: https"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      proxy_set_header X-Forwarded-Proto https;
+      proxy_set_header X-Forwarded-Ssl on;
 spec:
   ingressClassName: nginx
   rules: