Stalwart invalid proxy header when adding trusted network to imapstls

[hans-chrstn]

So, I have a weird configuration problem

When I add trusted-networks to my imapstls listener, I get a "proxy protocol error" in my logs:

server.listener.imaptls.proxy.trusted-networks.0 = "traefik-ip"
server.listener.imaptls.proxy.trusted-networks.1 = "docker/16"

2025-10-01T14:22:26Z WARN Proxy protocol error (network.proxy-error) listenerId = "imaptls", localIp = ::, localPort = 993, tls = true, reason = "invalid proxy header"

The issue is resolved by removing the trusted-networks lines and only keeping proxy.override = true:

server.listener.imaptls.bind = "[::]:993"
server.listener.imaptls.protocol = "imap"
server.listener.imaptls.proxy.override = true
# server.listener.imaptls.proxy.trusted-networks.0 = "traefik-ip"
# server.listener.imaptls.proxy.trusted-networks.1 = "docker/16"
server.listener.imaptls.tls.implicit = true

i am using the same stack and following the advice from Discussion #949 as reference

EDIT:
adding any trusted-networks at all fails some type of component so i had to disable every single one to make something like smtp to work:

server.hostname = "mail.domain.tld"
server.listener.http.bind = "[::]:8080"
server.listener.http.protocol = "http"
server.listener.https.bind = "[::]:443"
server.listener.https.protocol = "http"
server.listener.https.tls.implicit = true
server.listener.imap.bind = "[::]:143"
server.listener.imap.protocol = "imap"
server.listener.imaptls.bind = "[::]:993"
server.listener.imaptls.protocol = "imap"
server.listener.imaptls.proxy.override = true
# server.listener.imaptls.proxy.trusted-networks.0 = "traefik-ip"
# server.listener.imaptls.proxy.trusted-networks.1 = "docker/16"
server.listener.imaptls.tls.implicit = true
server.listener.pop3.bind = "[::]:110"
server.listener.pop3.protocol = "pop3"
server.listener.pop3s.bind = "[::]:995"
server.listener.pop3s.protocol = "pop3"
server.listener.pop3s.tls.implicit = true
server.listener.sieve.bind = "[::]:4190"
server.listener.sieve.protocol = "managesieve"
server.listener.sieve.proxy.override = true
# server.listener.sieve.proxy.trusted-networks.0 = "traefik-ip"
# server.listener.sieve.proxy.trusted-networks.1 = "docker/16"
server.listener.sieve.socket.override = false
server.listener.sieve.tls.implicit = true
server.listener.sieve.tls.override = false
server.listener.smtp.bind = "[::]:25"
server.listener.smtp.protocol = "smtp"
server.listener.smtp.proxy.override = true
# server.listener.smtp.proxy.trusted-networks.0 = "traefik-ip"
# server.listener.smtp.proxy.trusted-networks.1 = "docker/16"
server.listener.submission.bind = "[::]:587"
server.listener.submission.protocol = "smtp"
server.listener.submission.proxy.override = true
# server.listener.submission.proxy.trusted-networks.0 = "traefik-ip"
# server.listener.submission.proxy.trusted-networks.1 = "docker/16"
server.listener.submissions.bind = "[::]:465"
server.listener.submissions.protocol = "smtp"
server.listener.submissions.socket.override = false
server.listener.submissions.proxy.override = true
# server.listener.submissions.proxy.trusted-networks.0 = "traefik-ip"
# server.listener.submissions.proxy.trusted-networks.1 = "docker/16"
server.listener.submissions.tls.implicit = true
server.listener.submissions.tls.override = false

[mdecimus]

When I add trusted-networks to my imapstls listener, I get a "proxy protocol error" in my logs:

This means that your proxy server is not including the required headers.