Mailu Mail Server and ngnix proxy manager

General
1

Hello, please help
How can I use the Mailu mail server with Nginx proxy manager so that the other WordPress websites still work without a port conflict? Thank you!!!

2

That sounds more like a nginx question. Make sure you proxy all ports required by mailu (probably 25, 143, 465, 587, 993), and note that not all are http, but some are pure TCP.

We run mailu on a separate tiny VM. Reputation of the IP is important, so we don’t want to mess with it.

4

hello,
I just changed the mailu frontend ports to 8080:80 and 8443:443, and everything works great! Thank you !!!

5

Be aware that this might only work for up to 90 days, then the LetsEncrypt cert might expire. Mailu probably uses httpChallenge or tlsChallenge, and those only work with external port 80 and 443, respectively.

6

hello, but that only affects the frontend, right? Email traffic isn’t affected, right? Thank you!

7

Mailu needs port 80 by default, as Mailu is using port 80 for LetsEncrypt httpChallenge (doc).

All mail protocols (SMTP, POP, IMAP) have an encrypted version and they seem to run with the created LetsEncrypt cert:

SMTPS (port 465):

openssl s_client -connect smtp.example.com:465 -servername smtp.example.com -showcerts | openssl x509 -text -noout

SMTP with STARTTLS (port 587):

openssl s_client -starttls smtp -connect smtp.example.com:587 -servername smtp.example.com -showcerts | openssl x509 -text -noout

Replace the two domains in the command and check for NotBefore and NotAfter of the last cert.

8

hello, this is the message :

connect:errno=111
Could not read certificate from
Unable to load certificate

thanks.

9

I don’t know your setup. I can just tell you that my default Mailu setup has the LetsEncrypt TLS certs on all encrypted mail ports and that a re-new will probably fail if you don`t use/forward port 80 to Mailu.

Standard email and HTTP/S ports

SMTP (Simple Mail Transfer Protocol)

  • Port 25: Default SMTP port for sending email
  • Port 465: SMTP over SSL/TLS (SMTPS) for secure email sending
  • Port 587: SMTP with STARTTLS for secure email sending

IMAP (Internet Message Access Protocol)

  • Port 143: Default IMAP port for retrieving email
  • Port 993: IMAP over SSL/TLS (IMAPS) for secure email retrieval

POP3 (Post Office Protocol 3)

  • Port 110: Default POP3 port for retrieving email
  • Port 995: POP3 over SSL/TLS (POP3S) for secure email retrieval

HTTP (Hypertext Transfer Protocol)

  • Port 80: Default HTTP port for unencrypted web traffic
  • Port 443: Default HTTPS port for encrypted web traffic
10

hello, that’s right, if I change the ports then I don’t get a certificate,
but if I deactivate the nginx proxy manager and set the ports to 80 and 443 on Mailu, I get a certificate, but then I have to do this every 90 days,
Thank you.