commit 33e45220457440cb09970b63cfedc0b78f12c035
parent b1575fb2a64ee250206b73efcad1f81d94e4c8e3
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Wed, 1 Oct 2025 16:24:45 +0200
Meow
Diffstat:
2 files changed, 39 insertions(+), 38 deletions(-)
diff --git a/apps/talos_cluster/mailserver/mailman-secrets.yaml b/apps/talos_cluster/mailserver/mailman-secrets.yaml
@@ -5,11 +5,11 @@ metadata:
namespace: mailserver
type: Opaque
stringData:
- apikey: ENC[AES256_GCM,data:UapmPlTrf/ORHNn4d9wc48CX9kVO7CF1a09MYU0Vay5wjHJAB/gHNFHJmfqmSkfpKoCDBo3JgMk9toJv1sPp5g==,iv:W3us7r5OTQVOuW+EwRwgFq73mm5TP7Q2URypPDB7PUo=,tag:rsDMhY5CQQx8ae0gb9R+Zg==,type:str]
- restpassword: ENC[AES256_GCM,data:E3dHW7eRgJhdddzDE4XjFUTc25q8TtcsMre+yMu8Y96kKsZLLvz8YYfj5/qE1jGjzZ+wL8fC36BuTP24SYlopQ==,iv:FghjV3sXtsn3iWXrIQTHY8y/Cdc7gDSl5sm54szIL5g=,tag:06yIyfMO7nTf6mYrmr8NNQ==,type:str]
- websecretkey: ENC[AES256_GCM,data:Vs9gqWYnb6ddE0URVwaIBa5LqaLJ6YPbAdwjbh6x/HRy2VTQmxhlChzANzTVDsdrkzhBc4bMIHo3o/lifLrV/Q==,iv:PLe2mEDNJAmnzF0/7D9ha097nBtrXxKkXOlB8mCRVlk=,tag:2Qgdj7P+sNLy6wqX+8nrDQ==,type:str]
- smtp_user: ENC[AES256_GCM,data:LTjUFmvVTzm3nF64XFhIUPBySs1GS+vO3J3nBDLL,iv:SZZVzH253L1VQH9LHGwkbxkQqm39Fywi7KmrJpRMIHE=,tag:FA4x/zxboqPhB7mtUe5f2Q==,type:str]
- smtp_password: ENC[AES256_GCM,data:YyGU0YOJQ1+V,iv:6U7oDgOIr6LfJny/Sq1CvUnBeCPnMBahb99nOWvUFeA=,tag:1hJeyuCRFfOD41Gjb1FMbQ==,type:str]
+ apikey: ENC[AES256_GCM,data:BjYQ6mPqT5Nv3kqygTx7SsbaDfrvh8u7V+NjCq72USZVaBD4RMh8yOZAky4JtDfIZPbP5c6BMben8wsaoMWwTQ==,iv:MP6xE/HQniELCNLacpcusP6g5pM+73KpLrAg59vy2DU=,tag:W8teFCoyyrA/OgmwKituNQ==,type:str]
+ restpassword: ENC[AES256_GCM,data:+TIsV8uGU78K0NzEN++3c8vkKQRwL/ePN4skXAZY7Oq9/s7a9e4UaFn1Mv6m3i8p/tMGi2vbDm3T2Tns8snzGw==,iv:YUDJIaogrkJidMIAOq6FziZlNeQu9h9ipQcFE2Gn78I=,tag:5F4erlmxCtfDmQSEhLRJrQ==,type:str]
+ websecretkey: ENC[AES256_GCM,data:9D64pQq4B0mgwm6ZBnRgmDm5Bi805x5PB4Bym6FZqr+Dj9dUKvAAjAi9NVOeOu0Qyjuvn2uLm0FnXs44cKn9/A==,iv:JK1YPgUjP8NizGQLSjZK3YajcrZvOqsUtI4tbyx3lJE=,tag:m0q3r4zv7XmtR7WrHTo8fg==,type:str]
+ smtp_user: ENC[AES256_GCM,data:b3SVrMkZZrekImNq36M+J0ynJ+jzU7zlVXIg6PgH,iv:DxgdOyrZoLBJIjsi6HCzFMIGSvHBAhR4si/ci8YmwAY=,tag:Kra+2FmaE4HFm7fNNXz/Uw==,type:str]
+ smtp_password: ENC[AES256_GCM,data:JenFpb9OaI5E,iv:dHK9dXFCxt46CTAoXnEKwsoUakYh/KVTqpZNmsCWvtg=,tag:ltSnAeHdcAmy3uMFBZgFuA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -19,14 +19,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRFc0N1EyY3E3Y1kyR0V0
- Zy8zR3VJa1NsZnhYekZvck9kRUhnRFkyYmxJCmplS21IKzRibEVOYk02TjcwSE4w
- ejhrUW5JSUN3ZHBzbzZXbGtrbjhlVEkKLS0tIHcvU3B1bVR4N3VGN0NnTUlzbkRr
- N2tSM1FGWSt0R2JWOThhdTZLWi9BZU0KXoHJjARoRpJQe1qw+9eWv/FBABTN8WRK
- G7n96i2QPijuSAT1v+DXcr+hlcJVYAU4Yt3MtRPqGwwFLtQ+Qz9sPA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkYXl6d2lGc0l6NFExaU1t
+ dmMrN1pjalRHNzZEeVppcGoyK0JCV2ZwQW1RCk1hMmdKeXVsUFczODJCNmdMTitR
+ QVZlVkE0SEMrSkpXejRuOStxSjl6eEUKLS0tIGlhZ29pMUw5ZEtQbm1ycG5QbmJw
+ ajhHOHBOS2gyRFFEMzRjdDBJbXA4dGcKZhz26aA2v6pQWHghEc4O1temo22fCARt
+ SqNPRIC/7/R1jmWMwDZ/DHTfvfBAXUeMyTCph0B6E2QfvefqCiUySA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-01T13:04:48Z"
- mac: ENC[AES256_GCM,data:/qk9zse1LXtT66rTY9k3M4Ivu3ahou6SqAPjvoPdGtMjGzxrS+3px3+8XhI5BrHveFS3NF8hp3RSXnEz9e1zYvGzrkIH3Zp8RCxqY6cmX2FVUTposzfjKh5FW8nQdM1k9NpTnUkyTLeP4b15+jYiCCX9I+sSIouj2vs2kMjajZY=,iv:39ZaY/JUp47W8HoGtTkn2C/VtiH2wo+ZoAyI9k8bljc=,tag:dv5gPxme0vOniNTL/oiHeA==,type:str]
+ lastmodified: "2025-10-01T14:24:43Z"
+ mac: ENC[AES256_GCM,data:WpPNbQt6v2ZRhkML4WoX5PO8JUnVPlgJC4+ypN5RQKMZBfaUr+FRCr3lXeqczAvBKzwWCsoRG3IfDeejL8uj2LIBxbNS8rLwW7VI9HAf4U05xCrJfKfpm3Xg4bWDTa3/VhoTFEQC5ZwoRgoE8jLBOpzneNyL2ekNFXgudzeS/uQ=,iv:nntYk0sy8LFfcb6JgElibF8SAb7mQmTO/9vjkvFx8q8=,tag:gmDISNxqEKzrqmj4CxCjZQ==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -38,9 +38,9 @@ metadata:
namespace: mailserver
type: Opaque
stringData:
- mailman-extra.cfg: ENC[AES256_GCM,data:FyAMe/pk2gLAae2thF4c70zA7BNHafWxt+XNJ8vOpCJ5orGxWaSzO3r2OQcBccpeCkPrOw==,iv:m+e/AUBN6bFm6Xjga9Xikq7Ui6RIgfbgljmZyvGobak=,tag:wtwyl+6qub4Wd1q/FqS5MQ==,type:str]
- settings_local.py: ENC[AES256_GCM,data:NAYp56WZLMhYOn1CwQe0eGfRGRrYuFRoIpBEb0h1g7iBocGS/kTrjNVi0jcnpVB5e+Gg0g235Et0M4QK0r/E1x7ij/hNUl91Fj+22hcrO3UZsuTRHGmImWGXuIRh83U1gLsuiXS9Jhz2pAD+vbWcbT8XzMCF2ZEgtyJLR4ESadKq91f/ci2ShbT0y4idniujfKmTZdwKvBC6ZOo/nbjriC3IAZDAlMYiMYjoPjd3jwP4ftzL5IGuQt+GRhW9rGfeJ2pAezFda6RiEjwPLP9vzuMegG1yLRmQ0M+3p+8lJ0Q+T42weXTP6b932PJWHtzBWi58LG+JHoVYMMYidXvw1Kn085ZbeuURHvqax+0ClS0pWGZS2FMQa6RuH1JeqbsIQ3ot8s09Yk842OfLdYgP04TZX+ZLdXXew+X2ze8x1u3pGW32+2abBg3sSNoZSR8O207O/+g/st87J9PfHByqxEnF1bnc1LWeaANU+v50rs1/A7eMLjVcdZ5/pvVPfxQrFMEzAj4p+9MucxyABsuQxwlcBI+fI2R/AbnJO58jftnChmsGeUHRfJAr7yXDA+qkTmHnyAevJiSOTPOmUwbuiSc=,iv:+1Yk+XlfndnL+0xxnbCcx46oLieMGLFNDMx/E1NDe9w=,tag:NjegR69T4CYCi1vyMxAPYA==,type:str]
- chown: ENC[AES256_GCM,data:YQ+mrFi6FsV0c44yQKWwFHfCNTDegUxrdPN+2hapQ+k3i68=,iv:j8OfDKCiOjCzqB4PWZgy1Uut6bkN1pSE+v8bqTT4Hbs=,tag:n1MhqwSaT4lIrAYl9B4PCA==,type:str]
+ mailman-extra.cfg: ENC[AES256_GCM,data:jd25iEy3T+fFFB8tfgFwgO6dz/0mSneF7khF30mXBud7ycf5tGbou7tu5F6tBQbsvvPThQ==,iv:1t9nA/kD+sXLRb144EZtkaPRn7zMOARyQk0i+l1bWow=,tag:MnX6SaZhAJj8bq5E0FOWrQ==,type:str]
+ settings_local.py: ENC[AES256_GCM,data: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,iv:8qJllrY5PsMPqU+s4N4DCbOkJb7UCePW2KTbtqhIOfc=,tag:VEKsss3EavAt2gGdoF0Rzg==,type:str]
+ chown: ENC[AES256_GCM,data:yslyIcwzVwkn36tyMKwkI3wqagIWJfKYKOiR072Wzf5DmI4=,iv:6+x5wVlUba5ro5Mmt3Bc1M1OhoA66ouSpRhmdUFyfgE=,tag:xOxX9YpHHyCU7fT5dUw12g==,type:str]
sops:
kms: []
gcp_kms: []
@@ -50,14 +50,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRFc0N1EyY3E3Y1kyR0V0
- Zy8zR3VJa1NsZnhYekZvck9kRUhnRFkyYmxJCmplS21IKzRibEVOYk02TjcwSE4w
- ejhrUW5JSUN3ZHBzbzZXbGtrbjhlVEkKLS0tIHcvU3B1bVR4N3VGN0NnTUlzbkRr
- N2tSM1FGWSt0R2JWOThhdTZLWi9BZU0KXoHJjARoRpJQe1qw+9eWv/FBABTN8WRK
- G7n96i2QPijuSAT1v+DXcr+hlcJVYAU4Yt3MtRPqGwwFLtQ+Qz9sPA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkYXl6d2lGc0l6NFExaU1t
+ dmMrN1pjalRHNzZEeVppcGoyK0JCV2ZwQW1RCk1hMmdKeXVsUFczODJCNmdMTitR
+ QVZlVkE0SEMrSkpXejRuOStxSjl6eEUKLS0tIGlhZ29pMUw5ZEtQbm1ycG5QbmJw
+ ajhHOHBOS2gyRFFEMzRjdDBJbXA4dGcKZhz26aA2v6pQWHghEc4O1temo22fCARt
+ SqNPRIC/7/R1jmWMwDZ/DHTfvfBAXUeMyTCph0B6E2QfvefqCiUySA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-01T13:04:48Z"
- mac: ENC[AES256_GCM,data:/qk9zse1LXtT66rTY9k3M4Ivu3ahou6SqAPjvoPdGtMjGzxrS+3px3+8XhI5BrHveFS3NF8hp3RSXnEz9e1zYvGzrkIH3Zp8RCxqY6cmX2FVUTposzfjKh5FW8nQdM1k9NpTnUkyTLeP4b15+jYiCCX9I+sSIouj2vs2kMjajZY=,iv:39ZaY/JUp47W8HoGtTkn2C/VtiH2wo+ZoAyI9k8bljc=,tag:dv5gPxme0vOniNTL/oiHeA==,type:str]
+ lastmodified: "2025-10-01T14:24:43Z"
+ mac: ENC[AES256_GCM,data:WpPNbQt6v2ZRhkML4WoX5PO8JUnVPlgJC4+ypN5RQKMZBfaUr+FRCr3lXeqczAvBKzwWCsoRG3IfDeejL8uj2LIBxbNS8rLwW7VI9HAf4U05xCrJfKfpm3Xg4bWDTa3/VhoTFEQC5ZwoRgoE8jLBOpzneNyL2ekNFXgudzeS/uQ=,iv:nntYk0sy8LFfcb6JgElibF8SAb7mQmTO/9vjkvFx8q8=,tag:gmDISNxqEKzrqmj4CxCjZQ==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -69,7 +69,7 @@ metadata:
namespace: mailserver
type: Opaque
stringData:
- url: ENC[AES256_GCM,data:IPis78lneAVVhANfk4RhlYIeV4cgndL0kAio9x+P0pt/cykjW5JGnSD3bGODaqqEiy7gTBnR8TWDFGgGfc0lUdlaDo999qskEjvkHVFQlSFt31369J+378qzUTVw14sECyQkw6VplV0xghskN/p5XlgETN3UjulzGsmTQ1CjUrcb/164JvIEyVqHTRM3qn8P1Q==,iv:zOzOabUsccghot43dvi6nhQWbooprRhxkJE2F+VoEfM=,tag:IeBGSk9jNxn6izAci/vCzw==,type:str]
+ url: ENC[AES256_GCM,data:baHGDYciSq8HB5qeIFca5W3ba063pOTyQGK9KY9UAlufHXFdsuMfQQWQa4tNJtn6gr8IlV9rJRIsRvoKSkqhFh+vep2LRG0WnSN0CwE3eUsu0+B/MwWvnHfxlSJji4XkGispqObBmnPvnnqNOBjd6bCEdWsx2AFvx7ptM+OMjSwMkmKPHyzgH1LjJLQYfUqYyg==,iv:kFvSDhld2wDGB6+34Yv0zP190jGv41+UYoFrUZz24DI=,tag:4NoNT7Sb5fZLLJhKsKazRw==,type:str]
sops:
kms: []
gcp_kms: []
@@ -79,14 +79,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRFc0N1EyY3E3Y1kyR0V0
- Zy8zR3VJa1NsZnhYekZvck9kRUhnRFkyYmxJCmplS21IKzRibEVOYk02TjcwSE4w
- ejhrUW5JSUN3ZHBzbzZXbGtrbjhlVEkKLS0tIHcvU3B1bVR4N3VGN0NnTUlzbkRr
- N2tSM1FGWSt0R2JWOThhdTZLWi9BZU0KXoHJjARoRpJQe1qw+9eWv/FBABTN8WRK
- G7n96i2QPijuSAT1v+DXcr+hlcJVYAU4Yt3MtRPqGwwFLtQ+Qz9sPA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkYXl6d2lGc0l6NFExaU1t
+ dmMrN1pjalRHNzZEeVppcGoyK0JCV2ZwQW1RCk1hMmdKeXVsUFczODJCNmdMTitR
+ QVZlVkE0SEMrSkpXejRuOStxSjl6eEUKLS0tIGlhZ29pMUw5ZEtQbm1ycG5QbmJw
+ ajhHOHBOS2gyRFFEMzRjdDBJbXA4dGcKZhz26aA2v6pQWHghEc4O1temo22fCARt
+ SqNPRIC/7/R1jmWMwDZ/DHTfvfBAXUeMyTCph0B6E2QfvefqCiUySA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-01T13:04:48Z"
- mac: ENC[AES256_GCM,data:/qk9zse1LXtT66rTY9k3M4Ivu3ahou6SqAPjvoPdGtMjGzxrS+3px3+8XhI5BrHveFS3NF8hp3RSXnEz9e1zYvGzrkIH3Zp8RCxqY6cmX2FVUTposzfjKh5FW8nQdM1k9NpTnUkyTLeP4b15+jYiCCX9I+sSIouj2vs2kMjajZY=,iv:39ZaY/JUp47W8HoGtTkn2C/VtiH2wo+ZoAyI9k8bljc=,tag:dv5gPxme0vOniNTL/oiHeA==,type:str]
+ lastmodified: "2025-10-01T14:24:43Z"
+ mac: ENC[AES256_GCM,data:WpPNbQt6v2ZRhkML4WoX5PO8JUnVPlgJC4+ypN5RQKMZBfaUr+FRCr3lXeqczAvBKzwWCsoRG3IfDeejL8uj2LIBxbNS8rLwW7VI9HAf4U05xCrJfKfpm3Xg4bWDTa3/VhoTFEQC5ZwoRgoE8jLBOpzneNyL2ekNFXgudzeS/uQ=,iv:nntYk0sy8LFfcb6JgElibF8SAb7mQmTO/9vjkvFx8q8=,tag:gmDISNxqEKzrqmj4CxCjZQ==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -98,7 +98,7 @@ metadata:
namespace: mailserver
type: Opaque
stringData:
- url: ENC[AES256_GCM,data:AR4023JY/rJaG0oUguJKQX5LoCL5v3YORhA7SavgDy6rFsEWNKMtSLtmWrtFs4nRLhFf9sWh3omy2ahuUNmUqXqp3OhU4IymcXUxxJ/7Y/6uK6QV0YkhtkdSdhoPKsb7hQI9RCUaQl9jW6aAlcUEWZAocljkA9Ajjfk5mwfrbA3/DFeH1uXmGBrmV6AWsJMJaQ==,iv:1uwzjClW/iTN9PwJHv1yT+X8TF6MH8w6jwfW7r0Y3m0=,tag:C9LiCOehCzszA5vUaNG9Iw==,type:str]
+ url: ENC[AES256_GCM,data:nsbZnqAujSeX0f4yKy5ZO8tqAzYGd8idqt6LES8y+njYxwyn9bvXmM0rRJSWpeEQW38EPc51Hb8pqXcL91dc7kgNYAZx2/tLXSiN9+Cx9eF6roEKzgpEXhN/afr3B369y6ZmxO7UpXyRsE0cGtakBu+vD5drZJW3d5pbu0ad5kCBn0tA/y+gDe62IhfQ1Rimqw==,iv:a1Q31Xedytj0fmaHs9YGKJVx/xwmiMwfMEQDTNCzmuM=,tag:2Z1OyoA6p1OJVZAbp56uZg==,type:str]
sops:
kms: []
gcp_kms: []
@@ -108,14 +108,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRFc0N1EyY3E3Y1kyR0V0
- Zy8zR3VJa1NsZnhYekZvck9kRUhnRFkyYmxJCmplS21IKzRibEVOYk02TjcwSE4w
- ejhrUW5JSUN3ZHBzbzZXbGtrbjhlVEkKLS0tIHcvU3B1bVR4N3VGN0NnTUlzbkRr
- N2tSM1FGWSt0R2JWOThhdTZLWi9BZU0KXoHJjARoRpJQe1qw+9eWv/FBABTN8WRK
- G7n96i2QPijuSAT1v+DXcr+hlcJVYAU4Yt3MtRPqGwwFLtQ+Qz9sPA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkYXl6d2lGc0l6NFExaU1t
+ dmMrN1pjalRHNzZEeVppcGoyK0JCV2ZwQW1RCk1hMmdKeXVsUFczODJCNmdMTitR
+ QVZlVkE0SEMrSkpXejRuOStxSjl6eEUKLS0tIGlhZ29pMUw5ZEtQbm1ycG5QbmJw
+ ajhHOHBOS2gyRFFEMzRjdDBJbXA4dGcKZhz26aA2v6pQWHghEc4O1temo22fCARt
+ SqNPRIC/7/R1jmWMwDZ/DHTfvfBAXUeMyTCph0B6E2QfvefqCiUySA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-01T13:04:48Z"
- mac: ENC[AES256_GCM,data:/qk9zse1LXtT66rTY9k3M4Ivu3ahou6SqAPjvoPdGtMjGzxrS+3px3+8XhI5BrHveFS3NF8hp3RSXnEz9e1zYvGzrkIH3Zp8RCxqY6cmX2FVUTposzfjKh5FW8nQdM1k9NpTnUkyTLeP4b15+jYiCCX9I+sSIouj2vs2kMjajZY=,iv:39ZaY/JUp47W8HoGtTkn2C/VtiH2wo+ZoAyI9k8bljc=,tag:dv5gPxme0vOniNTL/oiHeA==,type:str]
+ lastmodified: "2025-10-01T14:24:43Z"
+ mac: ENC[AES256_GCM,data:WpPNbQt6v2ZRhkML4WoX5PO8JUnVPlgJC4+ypN5RQKMZBfaUr+FRCr3lXeqczAvBKzwWCsoRG3IfDeejL8uj2LIBxbNS8rLwW7VI9HAf4U05xCrJfKfpm3Xg4bWDTa3/VhoTFEQC5ZwoRgoE8jLBOpzneNyL2ekNFXgudzeS/uQ=,iv:nntYk0sy8LFfcb6JgElibF8SAb7mQmTO/9vjkvFx8q8=,tag:gmDISNxqEKzrqmj4CxCjZQ==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/apps/talos_cluster/mailserver/release.yaml b/apps/talos_cluster/mailserver/release.yaml
@@ -343,6 +343,7 @@ spec:
# Enable PROXY Protocol support (different setting as port 25 is handled via postscreen), optionally configure a `syslog_name` to distinguish in logs:
postconf -P 12525/inet/postscreen_upstream_proxy_protocol=haproxy 12525/inet/postscreen_cache_map=proxy:btree:\$data_directory/postscreen_12525_cache 12525/inet/syslog_name=postfix/smtpd-proxyprotocol
{{- end }}
+
echo "10.0.0.0/8
172.16.0.0/12
192.168.0.0/16" >> /etc/opendkim/TrustedHosts
