unkin-agent
3019291e5c
Name the smarthost mail-in.main.unkin.net and serve the *.main.unkin.net wildcard
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
2026-10-12 22:15:11 +11:00
unkin-agent
926967b298
Route gateway mail through the rspamd milter, accept XFORWARD from gateways
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
2026-10-12 22:05:50 +11:00
unkin-agent
d19c7d7942
Stop relay_domains matching subdomains, refresh positive verify cache hourly
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
2026-10-12 22:01:08 +11:00
unkin-agent
4f6150e93a
Require TLS between smarthost and gateways over public IPs, merge mynetworks and milter map
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
2026-10-12 21:52:54 +11:00
unkin-agent
a27023c7c9
Relay outbound via mta1/mta2.edge.unkin.net
ci/woodpecker/pr/kubeconform Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-12 21:48:08 +11:00
unkin-agent
8105ba11f4
Serve all smarthost clients on port 25, rename gateways to mta1/mta2, grow spool to 50Gi
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
2026-10-12 21:46:32 +11:00
unkin-agent
92f6c1472b
Restrict smarthost ingress and shorten negative recipient cache
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
2026-10-12 21:42:28 +11:00
unkin-agent
7501dbca7d
Add postfix smarthost to the mail namespace
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
2026-10-12 21:33:42 +11:00
unkin-agent
1d9b7ec924
Add mail namespace with Stalwart backing stores ( #538 )
...
Stalwart needs a Postgres metadata store and an S3 blob store before it can be deployed into the new `mail` namespace.
- add CNPG Cluster `stalwart-db` (db/owner `stalwart`, CNPG-minted `stalwart-db-app` creds) with barman backups to a dedicated `cnpg-mail` bucket and a nightly ScheduledBackup
- add cephrgw Bucket `stalwart-blobs` with an owner user writing RW keys to `stalwart-blobs-s3`
- add the au-syd1 overlay, platform ApplicationSet path and project destination
Reviewed-on: #538
Co-authored-by: unkin-agent <unkin-agent@unkin.net >
Co-committed-by: unkin-agent <unkin-agent@unkin.net >
2026-10-12 00:25:41 +11:00
unkin-agent