diff --git a/services/mailu/helmrelease.yaml b/services/mailu/helmrelease.yaml
index e84b376..7eab19a 100644
--- a/services/mailu/helmrelease.yaml
+++ b/services/mailu/helmrelease.yaml
@@ -219,6 +219,8 @@ spec:
       overrides:
         postfix.cf: |
           mynetworks = 127.0.0.0/8 [::1]/128 10.42.0.0/16 10.43.0.0/16 192.168.22.0/24
+          recipient_canonical_maps = regexp:/overrides/recipient_canonical, ${podop}recipientmap
+          recipient_canonical_classes = envelope_recipient,header_recipient
           smtpd_delay_reject = yes
           smtpd_helo_required = yes
           smtpd_helo_restrictions = reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname
@@ -238,6 +240,8 @@ spec:
           smtpd_client_message_rate_limit = 100
           smtpd_client_recipient_rate_limit = 200
           smtpd_recipient_limit = 100
+        recipient_canonical: |
+          /^double-bounce@mail\.bstein\.dev$/ double-bounce@bstein.dev
       podAnnotations:
         bstein.dev/restarted-at: "2026-01-06T00:00:00Z"
     redis: