103 lines
2.0 KiB
YAML
103 lines
2.0 KiB
YAML
## Stalwart Mail Server configuration
|
|
## Default values for stalwart chart
|
|
|
|
## Image configuration
|
|
image:
|
|
repository: stalwartlabs/stalwart
|
|
tag: v0.13.0
|
|
pullPolicy: IfNotPresent
|
|
|
|
## Namespace
|
|
namespace: mail-services
|
|
|
|
## Replica count (should be 1 for StatefulSet with persistent data)
|
|
replicaCount: 1
|
|
|
|
## Service configuration
|
|
service:
|
|
type: ClusterIP
|
|
# Admin/Web UI port
|
|
web:
|
|
port: 8080
|
|
targetPort: 8080
|
|
# SMTP ports
|
|
smtp:
|
|
port: 25
|
|
targetPort: 25
|
|
smtps:
|
|
port: 465
|
|
targetPort: 465
|
|
submission:
|
|
port: 587
|
|
targetPort: 587
|
|
# IMAP ports
|
|
imap:
|
|
port: 143
|
|
targetPort: 143
|
|
imaps:
|
|
port: 993
|
|
targetPort: 993
|
|
|
|
## Ingress configuration for admin UI
|
|
ingress:
|
|
enabled: true
|
|
className: traefik
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
hosts:
|
|
- host: mail-admin.dvirlabs.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
servicePort: 8080
|
|
tls: []
|
|
|
|
## Persistence configuration
|
|
persistence:
|
|
enabled: true
|
|
storageClass: nfs-client
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
# Where Stalwart stores mail data
|
|
mountPath: /opt/stalwart-mail
|
|
|
|
## Resource limits
|
|
resources:
|
|
requests:
|
|
memory: "512Mi"
|
|
cpu: "250m"
|
|
limits:
|
|
memory: "2Gi"
|
|
cpu: "1000m"
|
|
|
|
## Environment variables for Stalwart configuration
|
|
env:
|
|
# Admin credentials - CHANGE THESE!
|
|
# Or reference a secret using envFrom
|
|
STALWART_ADMIN_USER: "admin@dvirlabs.com"
|
|
# Password should come from a secret
|
|
# STALWART_ADMIN_PASSWORD: defined in secret
|
|
|
|
## Secret configuration
|
|
secret:
|
|
# Set to true to create a secret
|
|
create: true
|
|
# Name of the secret (if create: false, this should reference an existing secret)
|
|
name: stalwart-credentials
|
|
# Admin password - CHANGE THIS or use external secrets later
|
|
adminPassword: "CHANGE_ME_PLEASE"
|
|
|
|
## Pod Security Context
|
|
securityContext:
|
|
{} # Allow Stalwart to run with its default user
|
|
|
|
## Node selector
|
|
nodeSelector: {}
|
|
|
|
## Tolerations
|
|
tolerations: []
|
|
|
|
## Affinity
|
|
affinity: {}
|