180 lines
3.9 KiB
YAML
180 lines
3.9 KiB
YAML
---
|
|
# ------------------------------------------
|
|
# -- Database extension is used to manage
|
|
# -- database with db-operator
|
|
# ------------------------------------------
|
|
ext-database:
|
|
enabled: true
|
|
name: mailu-postgres16
|
|
instance: postgres16
|
|
extraDatabase:
|
|
enabled: true
|
|
name: roundcube-postgres16
|
|
instance: postgres16
|
|
|
|
# ------------------------------------------
|
|
# -- Istio extenstion. Just because I'm
|
|
# -- not using ingress nginx
|
|
# ------------------------------------------
|
|
traefik:
|
|
enabled: true
|
|
tcpRoutes:
|
|
- name: mailu-smtp
|
|
service: mailu-front
|
|
match: HostSNI(`*`)
|
|
entrypoint: smtp
|
|
port: 25
|
|
- name: mailu-smtps
|
|
match: HostSNI(`*`)
|
|
service: mailu-front
|
|
entrypoint: smtps
|
|
port: 465
|
|
- name: mailu-smpt-startls
|
|
match: HostSNI(`*`)
|
|
service: mailu-front
|
|
entrypoint: smtp-startls
|
|
port: 587
|
|
- name: mailu-imap
|
|
match: HostSNI(`*`)
|
|
service: mailu-front
|
|
entrypoint: imap
|
|
port: 143
|
|
- name: mailu-imaps
|
|
match: HostSNI(`*`)
|
|
service: mailu-front
|
|
entrypoint: imaps
|
|
port: 993
|
|
- name: mailu-pop3
|
|
match: HostSNI(`*`)
|
|
service: mailu-front
|
|
entrypoint: pop3
|
|
port: 110
|
|
- name: mailu-pop3s
|
|
match: HostSNI(`*`)
|
|
service: mailu-front
|
|
entrypoint: pop3s
|
|
port: 993
|
|
subnet: 10.244.0.0/16
|
|
sessionCookieSecure: true
|
|
hostnames:
|
|
- badhouseplants.net
|
|
- email.badhouseplants.net
|
|
domain: badhouseplants.net
|
|
persistence:
|
|
single_pvc: false
|
|
limits:
|
|
messageRatelimit:
|
|
value: "10/day"
|
|
tls:
|
|
outboundLevel: secure
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: traefik
|
|
tls: true
|
|
annotations:
|
|
kubernetes.io/tls-acme: "true"
|
|
kubernetes.io/ingress.allow-http: "false"
|
|
kubernetes.io/ingress.global-static-ip-name: ""
|
|
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
|
|
tlsFlavorOverride: mail
|
|
realIpFrom: traefik.kube-system.svc.cluster.local
|
|
realIpHeader: "X-Real-IP"
|
|
front:
|
|
hostPort:
|
|
enabled: false
|
|
admin:
|
|
resources:
|
|
requests:
|
|
memory: 100Mi
|
|
cpu: 70m
|
|
limits:
|
|
memory: 700Mi
|
|
cpu: 400m
|
|
persistence:
|
|
size: 1Gi
|
|
redis:
|
|
resources:
|
|
requests:
|
|
memory: 100Mi
|
|
cpu: 70m
|
|
limits:
|
|
memory: 200Mi
|
|
cpu: 200m
|
|
master:
|
|
persistence:
|
|
enabled: false
|
|
postfix:
|
|
resources:
|
|
requests:
|
|
memory: 1024Mi
|
|
cpu: 200m
|
|
limits:
|
|
memory: 1024Mi
|
|
cpu: 200m
|
|
persistence:
|
|
size: 1Gi
|
|
dovecot:
|
|
logLevel: DEBUG
|
|
resources:
|
|
requests:
|
|
memory: 100Mi
|
|
cpu: 70m
|
|
limits:
|
|
memory: 400Mi
|
|
cpu: 300m
|
|
persistence:
|
|
size: 1Gi
|
|
roundcube:
|
|
resources:
|
|
requests:
|
|
memory: 100Mi
|
|
cpu: 70m
|
|
limits:
|
|
memory: 200Mi
|
|
cpu: 200m
|
|
persistence:
|
|
size: 1Gi
|
|
mysql:
|
|
enabled: false
|
|
postgresql:
|
|
enabled: false
|
|
## If using the built-in MariaDB or PostgreSQL, the `roundcube` database will be created automatically.
|
|
externalDatabase:
|
|
## @param externalDatabase.enabled Set to true to use an external database
|
|
enabled: true
|
|
type: postgresql
|
|
existingSecret: mailu-postgres16-creds
|
|
existingSecretDatabaseKey: POSTGRES_DB
|
|
existingSecretUsernameKey: POSTGRES_USER
|
|
existingSecretPasswordKey: POSTGRES_PASSWORD
|
|
host: postgres16-postgresql.database-service.svc.cluster.local
|
|
port: 5432
|
|
rspamd:
|
|
resources:
|
|
requests:
|
|
memory: 100Mi
|
|
cpu: 100m
|
|
limits:
|
|
memory: 500Mi
|
|
cpu: 400m
|
|
startupProbe:
|
|
periodSeconds: 30
|
|
failureThreshold: 900
|
|
timeoutSeconds: 20
|
|
livenessProbe: {}
|
|
readinessProbe: {}
|
|
webmail:
|
|
persistence:
|
|
size: 2Gi
|
|
storageClass: ""
|
|
accessModes: [ReadWriteOnce]
|
|
claimNameOverride: ""
|
|
annotations: {}
|
|
global:
|
|
database:
|
|
roundcube:
|
|
database: applications-roundcube-postgres16
|
|
username: applications-roundcube-postgres16
|
|
existingSecret: roundcube-postgres16-creds
|
|
existingSecretPasswordKey: POSTGRES_PASSWORD
|