How to set up Nginx - all I get are errors

[Filip52542]

Hello,

I'm a rookie when it comes to mail servers. I have seen this project and attempted to set it up on my server as it seems to be an out-of-the box product.

I have followed the official guide.

The ports I have configured the following way:

• SMTP: 10025
• IMAPS: 10993
• SMTPS: 10465

Connecting using telnet works (i.e. telnet mail.example.org 10025).

The problem lies with Nginx.

This is the relevant nginx configuration:

# https://stalw.art/docs/server/reverse-proxy/nginx/

stream {
    log_format main '$remote_addr [$time_local] '
	    '$protocol $status $bytes_sent $bytes_received '
	    '$session_time "$upstream_addr" '
	    '"$upstream_bytes_sent" "$upstream_bytes_received" "$upstream_connect_time"';

    access_log /var/log/nginx/mail/stream_access.log main;
    error_log /var/log/nginx/mail/stream_error.log;

    # Proxy SMTP
    server {
        listen 25 proxy_protocol;
        proxy_pass 127.0.0.1:10025;
        proxy_protocol on;
    }

    # Proxy IMAPS
    server {
        listen 993 proxy_protocol;
        proxy_pass 127.0.0.1:10993;
        proxy_protocol on;
    }

    # Proxy SMTPS
    server {
        listen 465 proxy_protocol;
        proxy_pass 127.0.0.1:10465;
        proxy_protocol on;
    }
}

Trying telnet mail.com.example 25 passes, but writing ehlo closes the connection (Connection closed by foreign host.). In the Nginx error logs, I see the following line:

2024/07/21 HH:MM:SS [error] 994152#0: *6503 broken header: "ehlo" while reading PROXY protocol, client: 123.456.789.012, server: 0.0.0.0:25

The same goes with ports 465 and 10465 (that is less of a concern as it probably needs certificates).

I would greatly appreciate help regarding the Nginx configuration as there are few resources available online. Also, it would help if anyone could teach me how to secure port 465 with an SSL certificate (I already generated them with certbot).

Best regards,
Filip

[Filip52542]

I fixed it a - I had to enable the proxy protocol Stalwart-side (https://stalw.art/docs/server/reverse-proxy/proxy-protocol/). The Nginx config now looks like this:

stream {
	log_format main '$remote_addr [$time_local] '
		'$protocol $status $bytes_sent $bytes_received '
		'$session_time "$upstream_addr" '
		'"$upstream_bytes_sent" "$upstream_bytes_received" "$upstream_connect_time"';

	access_log /var/log/nginx/mail/stream_access.log main;
	error_log /var/log/nginx/mail/stream_error.log;

	# Proxy SMTP
	server {
		listen 25;
		proxy_pass 127.0.0.1:10025;
		proxy_protocol on;
	}

	# Proxy IMAPS
	server {
		listen 993;
		proxy_pass 127.0.0.1:10993;
		proxy_protocol on;
	}

	# Proxy SMTPS
	server {
		listen 465;
		proxy_pass 127.0.0.1:10465;
		proxy_protocol on;
	}
}