Files
infrastructure/clusters/cl01tl/platform/stalwart/values.yaml
Renovate Bot f4bc65a3b5
All checks were successful
lint-test-helm / helm-lint (push) Successful in 8s
renovate / renovate (push) Successful in 1m32s
Update stalwartlabs/stalwart Docker tag to v0.14.1 (#1831)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [stalwartlabs/stalwart](https://github.com/stalwartlabs/stalwart) | minor | `v0.13.4` -> `v0.14.1` |

---

### Release Notes

<details>
<summary>stalwartlabs/stalwart (stalwartlabs/stalwart)</summary>

### [`v0.14.1`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.14.1)

[Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.14.0...v0.14.1)

#### \[0.14.1] - 2025-10-28

If you are upgrading from v0.13.4 and below, this version includes **breaking changes** to the internal directory, calendar and contacts. Please read the [upgrading documentation](https://stalw.art/docs/install/upgrade) for more information on how to upgrade from previous versions.

#### Added

- Autoconfig for CalDAV, CardDAV and WebDAV ([#&#8203;1937](https://github.com/stalwartlabs/stalwart/issues/1937))

#### Changed

- HTTP: Remove HTTP STS `preload` directive.

#### Fixed

- Directory: Keep OTP Auth and AppPasswords unless the remote directory provides new ones ([#&#8203;2319](https://github.com/stalwartlabs/stalwart/issues/2319))
- JMAP: Fix `ContactCard/set` and `CalendarEvent/set` destroy methods ([#&#8203;2308](https://github.com/stalwartlabs/stalwart/issues/2308)).

<hr />

##### Check binary attestation at [here](https://github.com/stalwartlabs/stalwart/attestations/12525264)

### [`v0.14.0`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.14.0)

[Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.13.4...v0.14.0)

#### \[0.14.0] - 2025-10-22

If you are upgrading from v0.13.4 and below, this version includes **breaking changes** to the internal directory, calendar and contacts. Please read the [upgrading documentation](https://stalw.art/docs/install/upgrade) for more information on how to upgrade from previous versions.

#### Added

- JMAP for Calendars ([draft-ietf-jmap-calendars](https://datatracker.ietf.org/doc/draft-ietf-jmap-calendars/)).
- JMAP for Contacts  ([RFC 9610](https://datatracker.ietf.org/doc/rfc9610/)).
- JMAP for File Storage ([draft-ietf-jmap-filenode](https://datatracker.ietf.org/doc/draft-ietf-jmap-filenode/)).
- JMAP Sharing ([RFC 9670](https://datatracker.ietf.org/doc/rfc9670/))
- CalDAV: support for `supported-calendar-component-set` ([#&#8203;1893](https://github.com/stalwartlabs/stalwart/issues/1893))
- i18n: Greek language support (contributed by [@&#8203;infl00p](https://github.com/infl00p))
- i18n: Swedish language support (contributed by [@&#8203;purung](https://github.com/purung))

#### Changed

- **Breaking Database Changes** (migrated automatically on first start):
  - Internal directory schema changed.
  - Calendar and Contacts storage schema changed.
  - Sieve scripts storage schema changed.
  - Push Subscriptions storage schema changed.
- Replaced `sieve.untrusted.limits.max-scripts` and `jmap.push.max-total` with `object-quota.*` settings.
- Cluster node roles now allow sharding.

#### Fixed

- Push Subscription: Clean-up of expired subscriptions and cluster notification of changes ([#&#8203;1248](https://github.com/stalwartlabs/stalwart/issues/1248))
- CalDAV: Per-user CalDAV properties ([#&#8203;2058](https://github.com/stalwartlabs/stalwart/issues/2058))

<hr />

##### Check binary attestation at [here](https://github.com/stalwartlabs/stalwart/attestations/12279657)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTUuNCIsInVwZGF0ZWRJblZlciI6IjQyLjUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/1831
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-11-24 18:33:03 +00:00

113 lines
3.0 KiB
YAML

stalwart:
controllers:
main:
type: deployment
replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
containers:
main:
image:
repository: stalwartlabs/stalwart
tag: v0.14.1
pullPolicy: IfNotPresent
resources:
requests:
cpu: 10m
memory: 128Mi
service:
main:
controller: main
ports:
http:
port: 80
targetPort: 8080
protocol: HTTP
smtp:
port: 25
targetPort: 25
protocol: TCP
smtps:
port: 465
targetPort: 465
protocol: TCP
imap:
port: 143
targetPort: 143
protocol: TCP
imaps:
port: 993
targetPort: 993
protocol: TCP
persistence:
config:
forceRename: stalwart-config
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 10Gi
retain: true
advancedMounts:
main:
main:
- path: /opt/stalwart
readOnly: false
postgres-17-cluster:
mode: recovery
cluster:
storage:
storageClass: local-path
walStorage:
storageClass: local-path
monitoring:
enabled: true
prometheusRule:
enabled: true
resources:
requests:
cpu: 200m
recovery:
method: objectStore
objectStore:
destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-17-cluster
endpointURL: http://garage-main.garage:3900
index: 1
endpointCredentials: stalwart-postgresql-17-cluster-backup-secret-garage
backup:
objectStore:
- name: external
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/stalwart/stalwart-postgresql-17-cluster
index: 1
retentionPolicy: "30d"
isWALArchiver: false
- name: garage-local
destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-17-cluster
index: 1
endpointURL: http://garage-main.garage:3900
endpointCredentials: stalwart-postgresql-17-cluster-backup-secret-garage
endpointCredentialsIncludeRegion: true
retentionPolicy: "3d"
isWALArchiver: true
# - name: garage-remote
# destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-17-cluster
# index: 1
# endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
# endpointCredentials: stalwart-postgresql-17-cluster-backup-secret-garage
# retentionPolicy: "30d"
# data:
# compression: bzip2
# jobs: 2
scheduledBackups:
- name: daily-backup
suspend: false
schedule: "0 0 0 * * *"
backupName: external
- name: live-backup
suspend: false
immediate: true
schedule: "0 0 0 * * *"
backupName: garage-local
# - name: weekly-backup
# suspend: false
# schedule: "0 0 4 * * SAT"
# backupName: garage-remote