unkinben
b09cd1628d
- mailgateway namespace with Deployment + HPA (2-6 replicas) - rspamd Deployment + HPA (2-6 replicas) with milter interface - postfix configured to relay inbound mail to stalwart via transport maps - rspamd milter on port 11332 for spam scanning and DKIM signing - DKIM keys stored in Vault at kubernetes/namespace/mailgateway/default/dkim-keys - TLS cert via cert-manager (vault-issuer) for mail.main.unkin.net - rspamd web UI exposed via Traefik Gateway at rspamd.k8s.syd1.au.unkin.net - postfix external LoadBalancer service for inbound MX on port 25 - Add full main.cf and master.cf as ConfigMap resources mounted via subPath - main.cf: relay-only gateway config, texthash: transport maps, rspamd milter - master.cf: standard smtp + submission (587, TLS required) + internal processes - MAILNAME/MY_NETWORKS/MY_DESTINATION env vars kept in sync with main.cf - LOG_TO_STDOUT=1 for k8s log collection
33 lines
845 B
YAML
33 lines
845 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- certificate.yaml
|
|
- gateway.yaml
|
|
- httproute.yaml
|
|
- namespace.yaml
|
|
- postfix-deployment.yaml
|
|
- postfix-hpa.yaml
|
|
- rspamd-deployment.yaml
|
|
- rspamd-hpa.yaml
|
|
- services.yaml
|
|
- vaultauth.yaml
|
|
- vaultstaticsecret.yaml
|
|
|
|
configMapGenerator:
|
|
- name: postfix-config
|
|
files:
|
|
- main.cf=resources/postfix/main.cf
|
|
- master.cf=resources/postfix/master.cf
|
|
- transport=resources/postfix/transport
|
|
options:
|
|
disableNameSuffixHash: true
|
|
- name: rspamd-config
|
|
files:
|
|
- worker-proxy.inc=resources/rspamd/local.d/worker-proxy.inc
|
|
- dkim_signing.conf=resources/rspamd/local.d/dkim_signing.conf
|
|
- milter_headers.conf=resources/rspamd/local.d/milter_headers.conf
|
|
options:
|
|
disableNameSuffixHash: true
|