unkinben
f9d9166baa
- stalwart namespace with Deployment + HPA (2-6 replicas) - CNPG PostgreSQL cluster (3 instances, 20Gi cephrbd-fast-delete) with PgBouncer pooler - S3/Ceph-RGW for blob storage (stalwart-maildata bucket, lz4 compressed) - Secrets from Vault: postgres-credentials, s3-credentials, stalwart-admin - TLS cert via cert-manager (vault-issuer) for mail.main.unkin.net - SMTP relay on port 25 (internal ClusterIP, trusted pod CIDRs) - Submission on port 587, IMAP 143/993, HTTPS 443 via LoadBalancer - HTTP port 8080 for Traefik reverse proxy (web admin at mail.k8s.syd1.au.unkin.net) - Outbound mail routed through postfix.postfix.svc.cluster.local:25 - Spam filtering offloaded to postfix/rspamd (disabled internally) - artifactapi: add stalwartlabs/stalwart to ghcr cache
100 lines
2.4 KiB
YAML
100 lines
2.4 KiB
YAML
remotes:
|
|
ghcr:
|
|
base_url: "https://ghcr.io"
|
|
package: "docker"
|
|
description: "GitHub Container Registry"
|
|
immutable_patterns:
|
|
- "^cloudnative-pg/cloudnative-pg"
|
|
- "^emberstack/helm-charts"
|
|
- "^kanidm/"
|
|
- "^openvoxproject/"
|
|
- "^stakater/reloader"
|
|
- "^stalwartlabs/stalwart"
|
|
- "^voxpupuli/puppetboard"
|
|
- "^woodpecker-ci/helm"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
dockerhub:
|
|
base_url: "https://registry-1.docker.io"
|
|
package: "docker"
|
|
description: "Docker Hub registry"
|
|
immutable_patterns:
|
|
- "^library/almalinux"
|
|
- "^library/busybox"
|
|
- "^library/debian"
|
|
- "^library/fedora"
|
|
- "^library/nginx"
|
|
- "^library/postgres"
|
|
- "^library/redis"
|
|
- "^beats/filebeat"
|
|
- "^bitnami/"
|
|
- "^curlimages/curl"
|
|
- "^emberstack/kubernetes-reflector"
|
|
- "^hashicorp/consul"
|
|
- "^hashicorp/vault"
|
|
- "^jfrog/"
|
|
- "^rancher/"
|
|
- "^traefik/"
|
|
- "^ubi9/ubi-minimal"
|
|
- "^victoriametrics/"
|
|
- "^woodpeckerci/"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
quay:
|
|
base_url: "https://quay.io"
|
|
package: "docker"
|
|
description: "Quay.io container registry"
|
|
immutable_patterns:
|
|
- "^brancz/kube-rbac-proxy"
|
|
- "^cephcsi/cephcsi"
|
|
- "^jetstack/cert-manager-"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
k8s-registry:
|
|
base_url: "https://registry.k8s.io"
|
|
package: "docker"
|
|
description: "Kubernetes container registry"
|
|
immutable_patterns:
|
|
- "^external-dns/external-dns"
|
|
- "^sig-storage/"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
gitlab:
|
|
base_url: "https://registry.gitlab.com"
|
|
package: "docker"
|
|
description: "GitLab container registry"
|
|
immutable_patterns:
|
|
- "^purelb/purelb"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
elastic:
|
|
base_url: "https://docker.elastic.co"
|
|
package: "docker"
|
|
description: "Elastic container registry"
|
|
immutable_patterns:
|
|
- "^eck/eck-operator"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|
|
|
|
gcr:
|
|
base_url: "https://gcr.io"
|
|
package: "docker"
|
|
description: "Google Container Registry"
|
|
immutable_patterns:
|
|
- "^k8s-staging-nfd/charts"
|
|
- "^k8s-staging-nfd/node-feature-discovery"
|
|
cache:
|
|
immutable_ttl: 0
|
|
mutable_ttl: 300
|