unkinben
1cf08dd5c1
- postfix namespace with Deployment + HPA (2-6 replicas) - rspamd Deployment + HPA (2-6 replicas) with milter interface - postfix configured to relay inbound mail to stalwart via transport maps - rspamd milter on port 11332 for spam scanning and DKIM signing - DKIM keys stored in Vault at kubernetes/namespace/postfix/default/dkim-keys - TLS cert via cert-manager (vault-issuer) for mail.main.unkin.net - rspamd web UI exposed via Traefik Gateway at rspamd.k8s.syd1.au.unkin.net - postfix external LoadBalancer service for inbound MX on port 25 - artifactapi: add boky/postfix and rspamd/rspamd to dockerhub cache
101 lines
2.4 KiB
YAML
101 lines
2.4 KiB
YAML
remotes:
|
|
ghcr:
|
|
base_url: "https://ghcr.io"
|
|
package: "docker"
|
|
description: "GitHub Container Registry"
|
|
immutable_patterns:
|
|
- "^cloudnative-pg/cloudnative-pg"
|
|
- "^emberstack/helm-charts"
|
|
- "^kanidm/"
|
|
- "^openvoxproject/"
|
|
- "^stakater/reloader"
|
|
- "^voxpupuli/puppetboard"
|
|
- "^woodpecker-ci/helm"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
dockerhub:
|
|
base_url: "https://registry-1.docker.io"
|
|
package: "docker"
|
|
description: "Docker Hub registry"
|
|
immutable_patterns:
|
|
- "^boky/postfix"
|
|
- "^library/almalinux"
|
|
- "^library/busybox"
|
|
- "^library/debian"
|
|
- "^library/fedora"
|
|
- "^library/nginx"
|
|
- "^library/postgres"
|
|
- "^library/redis"
|
|
- "^beats/filebeat"
|
|
- "^bitnami/"
|
|
- "^curlimages/curl"
|
|
- "^emberstack/kubernetes-reflector"
|
|
- "^hashicorp/consul"
|
|
- "^hashicorp/vault"
|
|
- "^jfrog/"
|
|
- "^rancher/"
|
|
- "^rspamd/rspamd"
|
|
- "^traefik/"
|
|
- "^ubi9/ubi-minimal"
|
|
- "^victoriametrics/"
|
|
- "^woodpeckerci/"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
quay:
|
|
base_url: "https://quay.io"
|
|
package: "docker"
|
|
description: "Quay.io container registry"
|
|
immutable_patterns:
|
|
- "^brancz/kube-rbac-proxy"
|
|
- "^cephcsi/cephcsi"
|
|
- "^jetstack/cert-manager-"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
k8s-registry:
|
|
base_url: "https://registry.k8s.io"
|
|
package: "docker"
|
|
description: "Kubernetes container registry"
|
|
immutable_patterns:
|
|
- "^external-dns/external-dns"
|
|
- "^sig-storage/"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
gitlab:
|
|
base_url: "https://registry.gitlab.com"
|
|
package: "docker"
|
|
description: "GitLab container registry"
|
|
immutable_patterns:
|
|
- "^purelb/purelb"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
elastic:
|
|
base_url: "https://docker.elastic.co"
|
|
package: "docker"
|
|
description: "Elastic container registry"
|
|
immutable_patterns:
|
|
- "^eck/eck-operator"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
gcr:
|
|
base_url: "https://gcr.io"
|
|
package: "docker"
|
|
description: "Google Container Registry"
|
|
immutable_patterns:
|
|
- "^k8s-staging-nfd/charts"
|
|
- "^k8s-staging-nfd/node-feature-discovery"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|