unkin/puppet-prod
2
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity
1,130 Commits 18 Branches 0 Tags 3 MiB
develop
Commit Graph

4 Commits

Author SHA1 Message Date
Ben Vincent
9eff241003 feat: add SMTP submission listener and enhance stalwart configuration (#425) 
- add SMTP submission listener on port 587 with TLS requirement
- configure HAProxy frontend/backend for submission with send-proxy-v2 support
- add send-proxy-v2 support to all listeners
- add dynamic HAProxy node discovery for proxy trusted networks
- use service hostname instead of node FQDN for autoconfig/autodiscover
- remove redundant IMAP/IMAPS/SMTP alt-names from TLS certificates
- update VRRP CNAME configuration to use mail.main.unkin.net

Reviewed-on: #425
 2025-11-09 18:48:06 +11:00
Ben Vincent
2c9fb3d86a chore: add stalwart required tls alt names (#422) 
- add alt-names for service addresses stalwart is expected to reply too

Reviewed-on: #422
 2025-11-08 21:28:41 +11:00
Ben Vincent
5b0365c096 feat: manage haproxy for stalwart (#420) 
- add frontends for imap, imaps and smtp
- add backends for webadmin, imap, imaps and smtp

Reviewed-on: #420
 2025-11-08 21:07:43 +11:00
Ben Vincent
9dd74013ea feat: create stalwart module (#418) 
- add stalwart module
- add psql database on the shared patroni instance
- add ceph-rgw credentials to eyaml
- ensure psql pass and s3 access key are converted to sensitive

Reviewed-on: #418
 2025-11-08 19:09:30 +11:00