unkin-agent
82b86072ee
Stalwart is the mailbox server for the mail migration and runs multi-node from the start, so it needs a coordinator and a shared in-memory store. - run Stalwart as a 3-replica StatefulSet with a headless Service, topology spread and a PDB - add the `mail-valkey` ValkeyCluster as in-memory store and coordinator - keep data in CNPG Postgres and blobs in cephrgw S3 - converge settings from plan.ndjson in a PostSync Job, then roll the StatefulSet - add a global `spam-to-junk` Sieve script filing rspamd-tagged mail into Junk and stopping - exempt LMTP from the inbound throttles, as all inbound mail comes from the smarthost - label pods as smarthost clients and move the client LoadBalancer to 198.18.200.18 Reviewed-on: #539 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
73 lines
1.8 KiB
YAML
73 lines
1.8 KiB
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- clamav.yaml
|
|
- cnpg_backup.yaml
|
|
- cnpg_cluster.yaml
|
|
- gateway.yaml
|
|
- httproute.yaml
|
|
- namespace.yaml
|
|
- rspamd-deployment.yaml
|
|
- rspamd-sa-rules.yaml
|
|
- rspamd-valkey.yaml
|
|
- rspamd-vault.yaml
|
|
- smarthost-networkpolicy.yaml
|
|
- smarthost-pdb.yaml
|
|
- smarthost-service.yaml
|
|
- smarthost-statefulset.yaml
|
|
- stalwart-apply-job.yaml
|
|
- stalwart-apply-rbac.yaml
|
|
- stalwart-blobs-bucket.yaml
|
|
- stalwart-configmap.yaml
|
|
- stalwart-pdb.yaml
|
|
- stalwart-service.yaml
|
|
- stalwart-statefulset.yaml
|
|
- valkey.yaml
|
|
- vaultauth.yaml
|
|
- vaultstaticsecret.yaml
|
|
- vmpodscrape.yaml
|
|
|
|
configMapGenerator:
|
|
- name: rspamd-config
|
|
namespace: mail
|
|
options:
|
|
disableNameSuffixHash: true
|
|
files:
|
|
- rspamd/actions.conf
|
|
- rspamd/antivirus.conf
|
|
- rspamd/dkim_signing.conf
|
|
- rspamd/external_relay.conf
|
|
- rspamd/force_actions.conf
|
|
- rspamd/gpt.conf
|
|
- rspamd/greylist.conf
|
|
- rspamd/history_redis.conf
|
|
- rspamd/local_networks.map
|
|
- rspamd/milter_headers.conf
|
|
- rspamd/options.inc
|
|
- rspamd/redis.conf
|
|
- rspamd/settings.conf
|
|
- rspamd/spamassassin.conf
|
|
- rspamd/worker-controller.inc
|
|
- rspamd/worker-normal.inc
|
|
- rspamd/worker-proxy.inc
|
|
- name: rspamd-valkey-scripts
|
|
namespace: mail
|
|
options:
|
|
disableNameSuffixHash: true
|
|
files:
|
|
- rspamd-valkey/start.sh
|
|
- name: smarthost-config
|
|
namespace: mail
|
|
options:
|
|
disableNameSuffixHash: true
|
|
files:
|
|
- smarthost/main.cf
|
|
- smarthost/master.cf
|
|
- smarthost/relay_domains
|
|
- smarthost/transport
|
|
- smarthost/gateways.cidr
|
|
- smarthost/mynetworks.cidr
|
|
- smarthost/tls_policy
|