diff --git a/core/nginx/Dockerfile b/core/nginx/Dockerfile
index 52afff72..1b0fb832 100644
--- a/core/nginx/Dockerfile
+++ b/core/nginx/Dockerfile
@@ -17,7 +17,7 @@ ARG VERSION
 LABEL version=$VERSION
 
 RUN set -euxo pipefail \
-  ; apk add --no-cache certbot nginx nginx-mod-http-brotli nginx-mod-mail openssl dovecot-lua dovecot-pigeonhole-plugin 'dovecot-lmtpd<2.4' dovecot-pop3d dovecot-submissiond
+  ; apk add --no-cache certbot nginx nginx-mod-stream nginx-mod-http-brotli nginx-mod-mail openssl dovecot-lua dovecot-pigeonhole-plugin 'dovecot-lmtpd<2.4' dovecot-pop3d dovecot-submissiond
 
 COPY conf/ /conf/
 COPY --from=static /static/ /static/
diff --git a/core/nginx/conf/nginx.conf b/core/nginx/conf/nginx.conf
index 2dba0130..15f1209a 100644
--- a/core/nginx/conf/nginx.conf
+++ b/core/nginx/conf/nginx.conf
@@ -10,6 +10,10 @@ events {
     worker_connections 1024;
 }
 
+stream {
+  include /etc/nginx/tcp.d/*.conf;
+}
+
 http {
     # Standard HTTP configuration with slight hardening
     include /etc/nginx/mime.types;