add stalwart

clusters/cl01tl/platform/stalwart/values.yaml

@@ -0,0 +1,150 @@
+tubearchivist:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: stalwartlabs/mail-server
+            tag: v0.9.0
+            pullPolicy: IfNotPresent
+          resources:
+            requests:
+              cpu: 100m
+              memory: 1Gi
+  serviceAccount:
+    create: true
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 8080
+          protocol: HTTP
+        smtp:
+          port: 25
+          targetPort: 25
+          protocol: TCP
+        smtps:
+          port: 465
+          targetPort: 465
+          protocol: TCP
+        imaps:
+          port: 993
+          targetPort: 993
+          protocol: TCP
+  ingress:
+    main:
+      className: traefik
+      annotations:
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        traefik.ingress.kubernetes.io/router.tls: "true"
+        cert-manager.io/cluster-issuer: letsencrypt-issuer
+      hosts:
+        - host: stalwart.alexlebens.net
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: stalwart
+                port: 80
+      tls:
+        - secretName: stalwart-secret-tls
+          hosts:
+            - stalwart.alexlebens.net
+  persistence:
+    config:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 10Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /opt/stalwart-mail
+              readOnly: false
+minio:
+  existingSecret:
+    name: stalwart-minio-root-secret
+  tenant:
+    name: minio-stalwart
+    configuration:
+      name: stalwart-minio-config-secret
+    pools:
+      - servers: 3
+        name: pool
+        volumesPerServer: 2
+        size: 10Gi
+        storageClassName: ceph-block
+    mountPath: /export
+    subPath: /data
+    metrics:
+      enabled: true
+      port: 9000
+      protocol: http
+    certificate:
+      requestAutoCert: false
+  ingress:
+    console:
+      enabled: true
+      ingressClassName: traefik
+      annotations:
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        traefik.ingress.kubernetes.io/router.tls: "true"
+        cert-manager.io/cluster-issuer: letsencrypt-issuer
+      tls:
+        - secretName: minio-stalwart-console-secret-tls
+          hosts:
+            - minio-stalwart.alexlebens.net
+      host: minio-stalwart.alexlebens.net
+      path: /
+      pathType: Prefix
+redis:
+  architecture: standalone
+  auth:
+    enabled: false
+elasticsearch:
+  global:
+    storageClass: ceph-block
+  extraEnvVars:
+    - name: discovery.type
+      value: single-node
+    - name: xpack.security.enabled
+      value: "true"
+  extraEnvVarsSecret: stalwart-elasticsearch-secret
+  extraVolumeMounts:
+    - name: snapshot
+      mountPath: /usr/share/elasticsearch/data/snapshot
+  snapshotRepoPath: /usr/share/elasticsearch/data/snapshot
+  master:
+    masterOnly: false
+    replicaCount: 1
+  data:
+    replicaCount: 0
+  coordinating:
+    replicaCount: 0
+  ingest:
+    enabled: false
+    replicaCount: 0
+postgres-16-cluster:
+  mode: standalone
+  cluster:
+    walStorage:
+      storageClass: local-path
+    storage:
+      storageClass: local-path
+    monitoring:
+      enabled: true
+      prometheusRule:
+        enabled: false
+  backup:
+    enabled: true
+    endpointURL: https://s3.us-east-2.amazonaws.com
+    destinationPath: s3://cl01tl-postgresql-backups/stalwart
+    endpointCredentials: stalwart-postgresql-16-cluster-backup-secret
+    backupIndex: 1
+    retentionPolicy: 14d