unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 7 Actions Packages Projects Releases Wiki Activity
Files
52cfabb38f029733812b2561de0d1163a5cb7f5b
argocd-apps/apps/base/mail/smarthost
T
History
unkin-agent 52cfabb38f Verify smarthost edge relays against the internal CA (#548) 
The edge MTAs present certificates from the internal Vault PKI, so the smarthost cannot verify mta1/mta2.edge.unkin.net against the system CA bundle.

- pin both edge relay TLS policies to the internal CA via `tafile=`
- mount `vault-ca-cert` into the smarthost pods and reload on change

---------

Co-authored-by: BenVincent <benvin@main.unkin.net>
Reviewed-on: #548
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>
2026-10-14 22:06:30 +11:00
..
gateways.cidr
Add postfix smarthost to the mail namespace (#541)
2026-10-12 22:30:47 +11:00
main.cf
Add postfix smarthost to the mail namespace (#541)
2026-10-12 22:30:47 +11:00
master.cf
Add postfix smarthost to the mail namespace (#541)
2026-10-12 22:30:47 +11:00
mynetworks.cidr
Add postfix smarthost to the mail namespace (#541)
2026-10-12 22:30:47 +11:00
relay_domains
Add main.unkin.net as a second mail domain (#550)
2026-10-13 21:43:43 +11:00
tls_policy
Verify smarthost edge relays against the internal CA (#548)
2026-10-14 22:06:30 +11:00
transport
Add main.unkin.net as a second mail domain (#550)
2026-10-13 21:43:43 +11:00