commit 021619d5e8fb4f535d5bc04f84b2e4825fded236
parent dde7351fb2b770cfe374cd0157d12db777825063
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Wed, 1 Oct 2025 19:48:38 +0200
Meow
Diffstat:
3 files changed, 47 insertions(+), 45 deletions(-)
diff --git a/apps/talos_cluster/mailserver/mailman-nginx.conf b/apps/talos_cluster/mailserver/mailman-nginx.conf
@@ -64,13 +64,6 @@ http {
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options DENY;
add_header X-XSS-Protection "1; mode=block";
-
- # Health check endpoint for probes
- location /health {
- access_log off;
- return 200 "healthy\n";
- add_header Content-Type text/plain;
- }
location /static {
alias /opt/mailman-web-data/static;
diff --git a/apps/talos_cluster/mailserver/mailman-secrets.yaml b/apps/talos_cluster/mailserver/mailman-secrets.yaml
@@ -5,11 +5,11 @@ metadata:
namespace: mailserver
type: Opaque
stringData:
- apikey: ENC[AES256_GCM,data:MrIdh09AUFPQ9eyt2ErVh4C67GqmtFHeKsGZQAc+A1ausjEAIICbRhkWySEOdlGzXzzUIybJKJGci4YXXPklTg==,iv:NIUw4CWav42S0LkEKG1o789qDG9vZ2/PWwbJlEwQG10=,tag:cxB3dihmnFZyCoSlkUJJDA==,type:str]
- restpassword: ENC[AES256_GCM,data:JxiBhamP/xXTO6sBNluH5KT9Pv/ZJxwuzIpmG1xcZmIFFgLV4XV6nLAPPYjXtqOZeehq+JTvsLIVZ8gMU22CwA==,iv:CdFQTtjsPKpUE2ur9hKHj3EgYDrq1pb4V9TXdDsBXVY=,tag:bJQ7d8qLZYCfsOup8l+pHw==,type:str]
- websecretkey: ENC[AES256_GCM,data:RzizcyOM3KCFF0XcOIkTP82P2xk+PprkmcHwD/AP7JmtHODx/7mWeaFKdMbqRAuHvNwKCSp56q60/4KnL4FB+w==,iv:+iKfAWHtB2KvU+LVZHE6YmJIkRfRk+siUTj65w5ok8c=,tag:+X9bRhpAUuKfgRPDgw0jsw==,type:str]
- smtp_user: ENC[AES256_GCM,data:lXp85M8+BEiOERjlyBHgefxYdUjDvn/7/8Mx8jWk,iv:baYjLHT908btkM5mH+4Ovc5GYiM1QmTmDr2Ir2FqDU4=,tag:jgnanadko2EVYwhACJtfsQ==,type:str]
- smtp_password: ENC[AES256_GCM,data:zlvmJBzy16t6JsPzev+TOCoi0ll2MTzx7erl05i6VUbxdFPFu5PBM4uw9LQxFJ/nCg1G9WUesGRLP9c18ilqtw==,iv:dGDvrPvPgpBzgaFdpO6EnCnjyP3Jai9dw1/C3RR7oZk=,tag:KTT8htdRT9aQRetY4P39aw==,type:str]
+ apikey: ENC[AES256_GCM,data:6hcmXgaze9UPlpL4a60VNK+ROz6JYHNoq+N5OkAnhotXIW0zIy5xk5SFcKzKBwwvr9ZhLBkH5yF7+zvnvpEFHA==,iv:kERRJIKjETOTH0HbqKEFk65nIC1hHcgakVbCW+b+Cg4=,tag:gpcdwGFvtDbowG4eF2BHjA==,type:str]
+ restpassword: ENC[AES256_GCM,data:CQrSfuHKHWgpeYc6g1j8DSXqBfzsGBj+eXUx+T07PDU7/mA+UUP+iYnom+98VZ2/cmJGKs03RHjiQEf14E3q5w==,iv:OE7UKd3T6rqBWNTnalgjuXX9sGxqR1E82o6GKQrUljo=,tag:8HCCeAsqm/fpxwarFP7bZQ==,type:str]
+ websecretkey: ENC[AES256_GCM,data:13MrKIW68a7aFutqq+KhKWH4hfSea3UPGRjXAus8nfsDpuB+UIx4AGulVVQfumyT7QcaSKPvYSK8Kwbope3ySA==,iv:MSD/tyY7WeaENRHjAzMGj1McJiS/CxJx+bqyTpPbBo4=,tag:4RGHwpev0Mmjj9iSOIiELw==,type:str]
+ smtp_user: ENC[AES256_GCM,data:OJbPxcgMwfaJaBeRxAl0BMkHrwsoWZzuP7tJN5rC,iv:7vPcAx3lWfUS2qqHhg7CNcM6kMK7JRXWy4R5D2pT3lo=,tag:ds9MEA5Ad8ex+bHHAn/qzA==,type:str]
+ smtp_password: ENC[AES256_GCM,data:V7jt5nrYaGuZ8Xy5f0s4pkimVuKPMwIdDx4kOfw72xY3DkFQNwkopLl2fvo6kb5pAviiI5ilHEcAED1KSez6IQ==,iv:bDw3yRoT8UeoW9at2JOnT3WaMklj1FAbqwbyM7TP8pA=,tag:al6hGowKvjPEudpsZy0pZA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -19,14 +19,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUS2tjU3BFdDRNN3psOU0y
- cFBTZU9vTE5LeTA4bVVQczFORjczSXZYc0IwCjk2TnNVb1haQWVtWnNTdkhJS0I4
- NHRiZDJRSVRkTVZHN25vYzJNSmt3a28KLS0tIG1hZ0toZGFSRzN5WnR3czF5UkRu
- eTljY2NsekZmeXZnQ2FNOWlKc0xNa3cKCdal25tG7UXBVRRIHCsQEwKcgm/NoRXM
- hOrC9LA6afpRxEewszkuD56lX76CL3QlZcKjXM2UMd7vZ6k/EFfpxw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrblpCb1BlSm44dHYyTlE5
+ U0ZVZzFiMnpFUkNER3p5RXpHaStqMnJ6QXowCisxaWhnaWs3VVJsZ25jUUdvNHBM
+ UFVFMGhiZjZvREpxd0JyMnozVW1YV1UKLS0tIE91QjZhdjRGYUNKUmozY3R0NFNv
+ bUN2dWNGM1EyNDJZZ0hHZDEyanpudmMKjXXuuQBSm90Nur725aXvhNY/b6E77Xeu
+ NiQszbEDsGJyAisEnTCTn/xtlmLARjIlZ8ut3nKSry27U/PCb71nDA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-01T17:12:26Z"
- mac: ENC[AES256_GCM,data:5NvQy8y6zSGsGMePHXZHjLa9vJ3xNW/8KmfDhzxFF0YbkJhWaZEnHP4cmALXAS3Zf/rltDbc6xnulOq5Sh9Fa5YFk8HfIPUSpNlATpjDZJLmvCww/XLbGEx+hRco6ApIXRLX0vGCukuKISvFUxBGuzi1WdqjywezR+xIgq2xXA4=,iv:B6jTA9wuibNYNH1xIctmiWRRfGxlQcpeZMuyx7hs/AI=,tag:mRM8zCcpucDLO6bOl1oYAg==,type:str]
+ lastmodified: "2025-10-01T17:48:35Z"
+ mac: ENC[AES256_GCM,data:ko1/OeJMtip+6FcQqFYFi0tYyiUxozUvPYMjqziXNPwfBacEFEPjbMpFBQBkaPVC+2TjArdJDmBR7vi3ElBH68j0YnQY4R65Zjq7C2kwDaVOTHLh+LyVB7+7sJd1U4XacOhIWx77anCwVuMjI46gSns2YDmbi22QVryHiKhVIaM=,iv:b0CC7gVCk1ERpsry8l52sP/3qyM9nRpmUd6ZLOW8eNE=,tag:LlJheHarMLvIIhnPU2+yJw==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -38,9 +38,9 @@ metadata:
namespace: mailserver
type: Opaque
stringData:
- mailman-extra.cfg: ENC[AES256_GCM,data:x1ZI0vEnOsCah3RpZ924IOcTDPhEj2FKxrXT/AybBzkYfyxvzph7dsNuNhZwGIUCyi8ylw==,iv:dAHAJsvsEJ+eo6RGd90hoegFr1W7h3VIJv43HDmV4rY=,tag:6akhfj6y8e6M697EryS3xA==,type:str]
- settings_local.py: ENC[AES256_GCM,data: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,iv:CHRFw7O14byhy/VNLiAzzYsgwzLgAw+GCCELgKx+d4k=,tag:jEHY+zOLNskhIbStpc+CTw==,type:str]
- chown: ENC[AES256_GCM,data:aRC3turuJPlCnrrRn10zQbIPNETQHyukbPo2MgucA8MjXo4=,iv:y18at3ChVt1Jw3PtmtQGbPbGrc+GWWIeroIb/fDS/ig=,tag:YCNtnbnrrLd+5rg9aB5b3Q==,type:str]
+ mailman-extra.cfg: ENC[AES256_GCM,data:Ayes7SIkNzeJtua3nmu5BQ1aGfd0kfRSi/jm/342Dzq9MQJmqPLpulrGKq67kXBPO759TA==,iv:brwd6nf8XXzs4gM9JmAY6/N1Vqpg9BPtmp+wcNDjkuM=,tag:pPtbhQGp5IRKLd4GGG8wJg==,type:str]
+ settings_local.py: ENC[AES256_GCM,data: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,iv:Qk1/nGnXDV6xFVYPf3xmQgcyljvUJ6I9MUe/wumboF8=,tag:+qEbJyKxir+OudXbl5wmyQ==,type:str]
+ chown: ENC[AES256_GCM,data:ugRnwrzXWn+cbAJEfQjnBUzjw6IMNSwVFrIa0d9u9Y4ASDo=,iv:trhxB8Pl5OGpdxD4BWbTZ2XMhJPdS8kR1XIVfl+tECE=,tag:AssuIAxkGJVieRZCSOCngg==,type:str]
sops:
kms: []
gcp_kms: []
@@ -50,14 +50,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUS2tjU3BFdDRNN3psOU0y
- cFBTZU9vTE5LeTA4bVVQczFORjczSXZYc0IwCjk2TnNVb1haQWVtWnNTdkhJS0I4
- NHRiZDJRSVRkTVZHN25vYzJNSmt3a28KLS0tIG1hZ0toZGFSRzN5WnR3czF5UkRu
- eTljY2NsekZmeXZnQ2FNOWlKc0xNa3cKCdal25tG7UXBVRRIHCsQEwKcgm/NoRXM
- hOrC9LA6afpRxEewszkuD56lX76CL3QlZcKjXM2UMd7vZ6k/EFfpxw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrblpCb1BlSm44dHYyTlE5
+ U0ZVZzFiMnpFUkNER3p5RXpHaStqMnJ6QXowCisxaWhnaWs3VVJsZ25jUUdvNHBM
+ UFVFMGhiZjZvREpxd0JyMnozVW1YV1UKLS0tIE91QjZhdjRGYUNKUmozY3R0NFNv
+ bUN2dWNGM1EyNDJZZ0hHZDEyanpudmMKjXXuuQBSm90Nur725aXvhNY/b6E77Xeu
+ NiQszbEDsGJyAisEnTCTn/xtlmLARjIlZ8ut3nKSry27U/PCb71nDA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-01T17:12:26Z"
- mac: ENC[AES256_GCM,data:5NvQy8y6zSGsGMePHXZHjLa9vJ3xNW/8KmfDhzxFF0YbkJhWaZEnHP4cmALXAS3Zf/rltDbc6xnulOq5Sh9Fa5YFk8HfIPUSpNlATpjDZJLmvCww/XLbGEx+hRco6ApIXRLX0vGCukuKISvFUxBGuzi1WdqjywezR+xIgq2xXA4=,iv:B6jTA9wuibNYNH1xIctmiWRRfGxlQcpeZMuyx7hs/AI=,tag:mRM8zCcpucDLO6bOl1oYAg==,type:str]
+ lastmodified: "2025-10-01T17:48:35Z"
+ mac: ENC[AES256_GCM,data:ko1/OeJMtip+6FcQqFYFi0tYyiUxozUvPYMjqziXNPwfBacEFEPjbMpFBQBkaPVC+2TjArdJDmBR7vi3ElBH68j0YnQY4R65Zjq7C2kwDaVOTHLh+LyVB7+7sJd1U4XacOhIWx77anCwVuMjI46gSns2YDmbi22QVryHiKhVIaM=,iv:b0CC7gVCk1ERpsry8l52sP/3qyM9nRpmUd6ZLOW8eNE=,tag:LlJheHarMLvIIhnPU2+yJw==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -69,7 +69,7 @@ metadata:
namespace: mailserver
type: Opaque
stringData:
- url: ENC[AES256_GCM,data:waED0V70Hdbf88gQHRvJWIS5AaBKWqxHpS7TJbAHl+h7rohDIc8ar07mFcWtugtbiHUhO7gpfBuP3q6Gx8jzusN3n64GuQkbUTCaCLZqBacWItYF35T3vXN2nv2zn7KYvICxQZvyPZl1/eUBWf7qunj1L+bVCakKpCotgClwfrN8yeHPoUag7lvPtC0/kVOWKQ==,iv:Bcxt+YosmpWoCcKbVQR7aIsZAqAoJ3Ikj3vGNflLEyI=,tag:ZyenUMfXBgESgRJ98KXpnA==,type:str]
+ url: ENC[AES256_GCM,data:bV2DYSmEnQs7YI1u1hWVogrLqASd+aQ5JgEdhHmMSvwDwGdcE5r6ZIazahItjNpJuuiYMisMNln6Op2xWNhubh3zrAtlulcGzVEOfMVp7aC+kC8P6uEU1TeQLLgxXNRIFQmN6/I/O7C69Nk3jVQ6EjyK3eHqwcjhfxiJ2+JlUNP3GggpBAO9zhgPR5HbKDV4FA==,iv:L4HiTQUDM3W8OMhw4OOJMF4YRrVYQTFyhOrVK7seEkw=,tag:7lQHpqsx1TL4KTBqO55+aw==,type:str]
sops:
kms: []
gcp_kms: []
@@ -79,14 +79,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUS2tjU3BFdDRNN3psOU0y
- cFBTZU9vTE5LeTA4bVVQczFORjczSXZYc0IwCjk2TnNVb1haQWVtWnNTdkhJS0I4
- NHRiZDJRSVRkTVZHN25vYzJNSmt3a28KLS0tIG1hZ0toZGFSRzN5WnR3czF5UkRu
- eTljY2NsekZmeXZnQ2FNOWlKc0xNa3cKCdal25tG7UXBVRRIHCsQEwKcgm/NoRXM
- hOrC9LA6afpRxEewszkuD56lX76CL3QlZcKjXM2UMd7vZ6k/EFfpxw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrblpCb1BlSm44dHYyTlE5
+ U0ZVZzFiMnpFUkNER3p5RXpHaStqMnJ6QXowCisxaWhnaWs3VVJsZ25jUUdvNHBM
+ UFVFMGhiZjZvREpxd0JyMnozVW1YV1UKLS0tIE91QjZhdjRGYUNKUmozY3R0NFNv
+ bUN2dWNGM1EyNDJZZ0hHZDEyanpudmMKjXXuuQBSm90Nur725aXvhNY/b6E77Xeu
+ NiQszbEDsGJyAisEnTCTn/xtlmLARjIlZ8ut3nKSry27U/PCb71nDA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-01T17:12:26Z"
- mac: ENC[AES256_GCM,data:5NvQy8y6zSGsGMePHXZHjLa9vJ3xNW/8KmfDhzxFF0YbkJhWaZEnHP4cmALXAS3Zf/rltDbc6xnulOq5Sh9Fa5YFk8HfIPUSpNlATpjDZJLmvCww/XLbGEx+hRco6ApIXRLX0vGCukuKISvFUxBGuzi1WdqjywezR+xIgq2xXA4=,iv:B6jTA9wuibNYNH1xIctmiWRRfGxlQcpeZMuyx7hs/AI=,tag:mRM8zCcpucDLO6bOl1oYAg==,type:str]
+ lastmodified: "2025-10-01T17:48:35Z"
+ mac: ENC[AES256_GCM,data:ko1/OeJMtip+6FcQqFYFi0tYyiUxozUvPYMjqziXNPwfBacEFEPjbMpFBQBkaPVC+2TjArdJDmBR7vi3ElBH68j0YnQY4R65Zjq7C2kwDaVOTHLh+LyVB7+7sJd1U4XacOhIWx77anCwVuMjI46gSns2YDmbi22QVryHiKhVIaM=,iv:b0CC7gVCk1ERpsry8l52sP/3qyM9nRpmUd6ZLOW8eNE=,tag:LlJheHarMLvIIhnPU2+yJw==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -98,7 +98,7 @@ metadata:
namespace: mailserver
type: Opaque
stringData:
- url: ENC[AES256_GCM,data:CQXzMOAyyiP4QeNweMoDoW+zbMOSY2BcSsjFVYbSTuNohNubGTTwlpvpO7NF44hxFAxEARrH9j2oX5rTptFMAdVRfgVU1weVnmPgNFBvsUivpdhsRwFpIngbfrTkucoVaVw5b1Ggit69sZ2vx5Xv89J6icmRfu8TBogwcsFzitoQhpLK+3qFQ0wRn9oaNTvxMA==,iv:X1wRJ3cn+11DB/+qId9nBJDbavC7mRsM5nkA3A6IbW0=,tag:fgvNp6z6a5uFpgUm+RApRw==,type:str]
+ url: ENC[AES256_GCM,data:WigfCNe6M+vUf80BzwlUIC5x7iIHdAQdjJHo3LOlSJt+Y6ES2tuib639UA1Dqmvl9vRffI969cKAt3YnrVOIjhc5nit6TM4/4ids/VeMZqMuEMTX7QreM1KHIluIvHUic7SmzJO25B8Hb2sOM27MHl3dSwCiD797XOSsw49zKR/ZSrZK5aRwnUKvtCGj12LJ3g==,iv:dBheHaQ0uwZikaeBxEtBSZ6NQkOH0wkGTkB+E4XBuKo=,tag:1KWxA7YciH6J3AiFPX86Dg==,type:str]
sops:
kms: []
gcp_kms: []
@@ -108,14 +108,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUS2tjU3BFdDRNN3psOU0y
- cFBTZU9vTE5LeTA4bVVQczFORjczSXZYc0IwCjk2TnNVb1haQWVtWnNTdkhJS0I4
- NHRiZDJRSVRkTVZHN25vYzJNSmt3a28KLS0tIG1hZ0toZGFSRzN5WnR3czF5UkRu
- eTljY2NsekZmeXZnQ2FNOWlKc0xNa3cKCdal25tG7UXBVRRIHCsQEwKcgm/NoRXM
- hOrC9LA6afpRxEewszkuD56lX76CL3QlZcKjXM2UMd7vZ6k/EFfpxw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrblpCb1BlSm44dHYyTlE5
+ U0ZVZzFiMnpFUkNER3p5RXpHaStqMnJ6QXowCisxaWhnaWs3VVJsZ25jUUdvNHBM
+ UFVFMGhiZjZvREpxd0JyMnozVW1YV1UKLS0tIE91QjZhdjRGYUNKUmozY3R0NFNv
+ bUN2dWNGM1EyNDJZZ0hHZDEyanpudmMKjXXuuQBSm90Nur725aXvhNY/b6E77Xeu
+ NiQszbEDsGJyAisEnTCTn/xtlmLARjIlZ8ut3nKSry27U/PCb71nDA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-01T17:12:26Z"
- mac: ENC[AES256_GCM,data:5NvQy8y6zSGsGMePHXZHjLa9vJ3xNW/8KmfDhzxFF0YbkJhWaZEnHP4cmALXAS3Zf/rltDbc6xnulOq5Sh9Fa5YFk8HfIPUSpNlATpjDZJLmvCww/XLbGEx+hRco6ApIXRLX0vGCukuKISvFUxBGuzi1WdqjywezR+xIgq2xXA4=,iv:B6jTA9wuibNYNH1xIctmiWRRfGxlQcpeZMuyx7hs/AI=,tag:mRM8zCcpucDLO6bOl1oYAg==,type:str]
+ lastmodified: "2025-10-01T17:48:35Z"
+ mac: ENC[AES256_GCM,data:ko1/OeJMtip+6FcQqFYFi0tYyiUxozUvPYMjqziXNPwfBacEFEPjbMpFBQBkaPVC+2TjArdJDmBR7vi3ElBH68j0YnQY4R65Zjq7C2kwDaVOTHLh+LyVB7+7sJd1U4XacOhIWx77anCwVuMjI46gSns2YDmbi22QVryHiKhVIaM=,iv:b0CC7gVCk1ERpsry8l52sP/3qyM9nRpmUd6ZLOW8eNE=,tag:LlJheHarMLvIIhnPU2+yJw==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/apps/talos_cluster/mailserver/mailman.yaml b/apps/talos_cluster/mailserver/mailman.yaml
@@ -189,6 +189,9 @@ spec:
httpGet:
path: /mailman3/lists/
port: 9090
+ httpHeaders:
+ - name: Host
+ value: lists.midnightthoughts.space
initialDelaySeconds: 30
periodSeconds: 10
timeoutSeconds: 5
@@ -197,6 +200,9 @@ spec:
httpGet:
path: /mailman3/lists/
port: 9090
+ httpHeaders:
+ - name: Host
+ value: lists.midnightthoughts.space
periodSeconds: 30
timeoutSeconds: 5
failureThreshold: 3
@@ -204,6 +210,9 @@ spec:
httpGet:
path: /mailman3/lists/
port: 9090
+ httpHeaders:
+ - name: Host
+ value: lists.midnightthoughts.space
periodSeconds: 10
timeoutSeconds: 3
failureThreshold: 3
