feat: manage haproxy for stalwart

- add frontends for imap, imaps and smtp
- add backends for webadmin, imap, imaps and smtp

hieradata/roles/infra/mail/backend.yaml

@@ -2,6 +2,7 @@
 hiera_include:
   - stalwart
   - profiles::sql::postgresdb
+  - profiles::stalwart::haproxy
 
 # additional altnames
 profiles::pki::vault::alt_names:
@@ -13,6 +14,8 @@ profiles::sql::postgresdb::cluster_name: "patroni-shared-%{facts.environment}"
 profiles::sql::postgresdb::dbname: stalwart
 profiles::sql::postgresdb::dbuser: stalwart
 
+# export backends to haproxy
+profiles::stalwart::haproxy::enable: true
 
 # Cluster role for node discovery
 stalwart::cluster_role: "%{facts.enc_role}"
@@ -32,7 +35,7 @@ stalwart::s3_region: "%{facts.region}"
 stalwart::domains:
   - 'mail.unkin.net'
 stalwart::postfix_relay_host: 'out-mta.main.unkin.net'
-stalwart::manage_dns_records: true   # DNS records point to individual servers
+stalwart::manage_dns_records: false
 
 ## With load balancer:
 #stalwart::manage_dns_records: true