argocd-apps/apps/base/postfix/resources/rspamd/local.d/worker-proxy.inc at 1cf08dd5c13c7ae0db4bab18660225c1497e75f2 - argocd-apps - Gitea

unkin/argocd-apps

Files

T

unkinben 1cf08dd5c1 feat(postfix): deploy postfix MTA and rspamd spam filter

- postfix namespace with Deployment + HPA (2-6 replicas)
- rspamd Deployment + HPA (2-6 replicas) with milter interface
- postfix configured to relay inbound mail to stalwart via transport maps
- rspamd milter on port 11332 for spam scanning and DKIM signing
- DKIM keys stored in Vault at kubernetes/namespace/postfix/default/dkim-keys
- TLS cert via cert-manager (vault-issuer) for mail.main.unkin.net
- rspamd web UI exposed via Traefik Gateway at rspamd.k8s.syd1.au.unkin.net
- postfix external LoadBalancer service for inbound MX on port 25
- artifactapi: add boky/postfix and rspamd/rspamd to dockerhub cache

2026-05-24 00:43:56 +10:00

8 lines

101 B

C++

Raw Blame History

 milter = yes;
 bind_socket = "*:11332";
 upstream "local" {
     default = yes;
     self_scan = yes;
 }