domain: dvirlabs.com
hostnames:
  - mail.dvirlabs.com

replicaCount: 1

ingress:
  enabled: true
  className: traefik
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: "web,websecure"
    traefik.ingress.kubernetes.io/router.tls: "true"
  hosts:
    - host: mail.dvirlabs.com
      paths:
        - path: /
          pathType: Prefix
  tls:
    - hosts:
        - mail.dvirlabs.com
      secretName: mailu-certificates

persistence:
  enabled: true
  storageClass: nfs-client
  size: 10Gi

admin:
  username: admin
  initialPassword: "changeme123"

tls:
  certmanager:
    enabled: true

front:
  realIpFrom:
    - 192.168.10.0/24
  externalService:
    enabled: true
    type: LoadBalancer
    externalTrafficPolicy: Cluster
    ports:
      smtp: true
  nodeSelector: {}  # הסר את ההגבלה ל־master אם יש לך מספיק נודים

# הסרת hostPort אם נתמך:
front:
  containerPortsOverride:
    smtp: null
    smtps: null
    smtpd: null
    imap: null
    imaps: null
    pop3: null
    pop3s: null

dkim:
  enabled: true