This PR contains the following updates: | Package | Update | Change | Pending | |---|---|---|---| | [stalwartlabs/stalwart](https://github.com/stalwartlabs/stalwart) | minor | `v0.14.1` -> `v0.15.0` | `v0.15.1` | --- ### Release Notes <details> <summary>stalwartlabs/stalwart (stalwartlabs/stalwart)</summary> ### [`v0.15.0`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.15.0) [Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.14.1...v0.15.0) #### \[0.15.0] - 2025-12-16 This version includes **multiple breaking changes**. Please read the [upgrading documentation](https://github.com/stalwartlabs/stalwart/blob/main/UPGRADING/v0_15.md) for more information on how to upgrade from previous versions. #### Added - Linear spam classifier using FTRL-Proximal and feature/cuckoo hashing. - Meilisearch store backend implementation ([#​1482](https://github.com/stalwartlabs/stalwart/issues/1482)). - PostgreSQL and mySQL native full-text search support. - Multiple performance improvements and database access optimizations. - Encryption-at-rest: Spam training privacy setting. - Enterprise: Undelete e-mail feature now includes From/Subject/Received information. - IMAP: Implemented new keywords and mailbox attributes described in [draft-ietf-mailmaint-messageflag-mailboxattribute-13](https://datatracker.ietf.org/doc/html/draft-ietf-mailmaint-messageflag-mailboxattribute-13) #### Changed - IMAP: Always return special use flags in responses. #### Fixed - JMAP: `FileNode/set` fails to delete files ([#​2485](https://github.com/stalwartlabs/stalwart/issues/2485)). - JMAP: Return error when using `blobId` in JSContact and JSCalendar ([#​2431](https://github.com/stalwartlabs/stalwart/issues/2431)). - Directory: Deletion of list or domain issues ([#​2415](https://github.com/stalwartlabs/stalwart/issues/2415)). - MTA: Headers and body stripped from mail delivery subsystem failure notifications ([#​2344](https://github.com/stalwartlabs/stalwart/issues/2344)). - MTA: Hooks only run if sieve script, milter or rewrite is configured ([#​2317](https://github.com/stalwartlabs/stalwart/issues/2317)). - Autodiscover: Endpoint should be case insensitive ([#​2440](https://github.com/stalwartlabs/stalwart/issues/2440)). - Housekeeper: Panic during DST transition ([#​2366](https://github.com/stalwartlabs/stalwart/issues/2366)). - Import/Export: Fix import/export utility ([#​1882](https://github.com/stalwartlabs/stalwart/issues/1882)). - Enterprise: Remove tenant admin permissions when license is invalid. <hr /> ##### Check binary attestation at [here](https://github.com/stalwartlabs/stalwart/attestations/15221862) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2672 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
118 lines
3.2 KiB
YAML
118 lines
3.2 KiB
YAML
stalwart:
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: stalwartlabs/stalwart
|
|
tag: v0.15.0
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
http:
|
|
port: 80
|
|
targetPort: 8080
|
|
protocol: HTTP
|
|
smtp:
|
|
port: 25
|
|
targetPort: 25
|
|
protocol: TCP
|
|
smtps:
|
|
port: 465
|
|
targetPort: 465
|
|
protocol: TCP
|
|
imap:
|
|
port: 143
|
|
targetPort: 143
|
|
protocol: TCP
|
|
imaps:
|
|
port: 993
|
|
targetPort: 993
|
|
protocol: TCP
|
|
persistence:
|
|
config:
|
|
forceRename: stalwart-config
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
retain: true
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /opt/stalwart
|
|
readOnly: false
|
|
postgres-18-cluster:
|
|
mode: recovery
|
|
cluster:
|
|
storage:
|
|
storageClass: local-path
|
|
walStorage:
|
|
storageClass: local-path
|
|
recovery:
|
|
method: objectStore
|
|
objectStore:
|
|
destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-18-cluster
|
|
endpointURL: http://garage-main.garage:3900
|
|
index: 1
|
|
endpointCredentials: stalwart-postgresql-18-cluster-backup-secret-garage
|
|
backup:
|
|
objectStore:
|
|
- name: garage-local
|
|
destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-18-cluster
|
|
index: 1
|
|
endpointURL: http://garage-main.garage:3900
|
|
endpointCredentials: stalwart-postgresql-18-cluster-backup-secret-garage
|
|
endpointCredentialsIncludeRegion: true
|
|
retentionPolicy: "3d"
|
|
isWALArchiver: true
|
|
# - name: external
|
|
# destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/stalwart/stalwart-postgresql-18-cluster
|
|
# index: 1
|
|
# retentionPolicy: "30d"
|
|
# isWALArchiver: false
|
|
# - name: garage-remote
|
|
# destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-18-cluster
|
|
# index: 1
|
|
# endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
|
|
# endpointCredentials: stalwart-postgresql-18-cluster-backup-secret-garage
|
|
# retentionPolicy: "30d"
|
|
# data:
|
|
# compression: bzip2
|
|
# jobs: 2
|
|
scheduledBackups:
|
|
- name: live-backup
|
|
suspend: false
|
|
immediate: true
|
|
schedule: "0 0 0 * * *"
|
|
backupName: garage-local
|
|
# - name: daily-backup
|
|
# suspend: false
|
|
# immediate: true
|
|
# schedule: "0 0 0 * * *"
|
|
# backupName: external
|
|
# - name: weekly-backup
|
|
# suspend: true
|
|
# immediate: true
|
|
# schedule: "0 0 4 * * SAT"
|
|
# backupName: garage-remote
|
|
redis-replication:
|
|
existingSecret:
|
|
enabled: false
|
|
redisReplication:
|
|
clusterSize: 3
|
|
redisSentinel:
|
|
enabled: true
|
|
clusterSize: 3
|
|
volsync-target-config:
|
|
pvcTarget: stalwart-config
|