{
# mailstats
  my $status = $mailstats{'status'} || 'disabled';

  if ($status eq 'enabled') 
  {
	$OUT .="#-------------------------------------------------\n";
	$OUT .="# mailstats settings from smeserver-mailstats\n";
	$OUT .="#-------------------------------------------------\n";
	$OUT .="\n";
	$OUT .= qq(
	# Alias for mailstats
	Alias "/mailstats/js" "/opt/mailstats/js/"
	Alias "/mailstats/css" "/opt/mailstats/css/"
	Alias "/mailstats" "/opt/mailstats/html/"
	);
	# $httpd_admin{ValidFrom} contains space-separated IPs or CIDRs
	my $valid_from = ${'httpd-admin'}{ValidFrom} // "";
	my $require_ip = $localAccess." ".join(" ", split(/[,\s]+/, $valid_from));
	# Remove any /255.255.255.255 substrings
	$require_ip =~ s{/255\.255\.255\.255}{}g;

	$OUT .= qq(
	<Directory "/opt/mailstats/html">
		Options Indexes FollowSymLinks
		AllowOverride None
		Require ip $require_ip

		<FilesMatch .php\$\>
			SetHandler "proxy:unix:/var/run/php-fpm/php74.sock|fcgi://localhost"
		</FilesMatch>

	</Directory>

	<Directory "/opt/mailstats/css">
		AllowOverride None
		Require ip $require_ip
	</Directory>

	<Directory "/opt/mailstats/js">
		AllowOverride None
		Require ip $require_ip
	</Directory>
	);
  } else {
      $OUT .= "# mailstats is disabled";
  }
}
