cluster

commit a727df6c5ec367294f98b5426524d5d4151c2c1d
parent d042eee3e73c6950ab42bc333e38df3a1312aa63
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Wed,  1 Oct 2025 15:50:28 +0200

Meow

Diffstat:
M
apps/talos_cluster/mailserver/kustomization.yaml
 | 
7
+++++++
A
apps/talos_cluster/mailserver/mailman-nginx.conf
 | 
27
+++++++++++++++++++++++++++
M
apps/talos_cluster/mailserver/mailman.yaml
 | 
18
++++++++++++++++++

3 files changed, 52 insertions(+), 0 deletions(-)
diff --git a/apps/talos_cluster/mailserver/kustomization.yaml b/apps/talos_cluster/mailserver/kustomization.yaml
@@ -18,3 +18,10 @@ configMapGenerator:
       options:
           labels:
               app: mta-sts-server
+    - name: mailman-nginx
+      namespace: mailserver
+      files:
+          - nginx.conf=mailman-nginx.conf
+      options:
+          labels:
+              app: mailman
diff --git a/apps/talos_cluster/mailserver/mailman-nginx.conf b/apps/talos_cluster/mailserver/mailman-nginx.conf
@@ -0,0 +1,27 @@
+worker_processes  auto;
+pid /tmp/nginx.pid
+client_body_temp_path /tmp/nginx/client_body;
+fastcgi_temp_path /tmp/nginx/fastcgi;
+uwsgi_temp_path /tmp/nginx/uwsgi;
+scgi_temp_path /tmp/nginx/scgi;
+events {
+    worker_connections  10240;
+}
+http {
+    server {
+        listen       9090;
+        server_name  _;
+
+        location /static {
+            alias /opt/mailman/web/static;
+            autoindex off;
+        }
+
+        location / {
+            uwsgi_pass localhost:8080;
+            include uwsgi_params;
+            uwsgi_read_timeout 300;
+        }
+    }
+}
+
diff --git a/apps/talos_cluster/mailserver/mailman.yaml b/apps/talos_cluster/mailserver/mailman.yaml
@@ -177,11 +177,29 @@ spec:
                       - name: mailman-extra
                         mountPath: /usr/bin/chown
                         subPath: chown
+                - name: nginx
+                  image: ghcr.io/nginx/nginx-unprivileged:stable-alpine
+                  imagePullPolicy: IfNotPresent
+                  ports:
+                      - name: http
+                        containerPort: 9090
+                  volumeMounts:
+                      - name: mailman-web
+                        mountPath: /opt/mailman-web-data
+                        readOnly: true
+                      - name: nginx-config
+                        mountPath: /etc/nginx/nginx.conf
+                        subPath: nginx.conf
+                        readOnly: true
+
             volumes:
                 - name: mailman-extra
                   secret:
                       secretName: mailman-extra
                       defaultMode: 0555
+                - name: nginx-config
+                  configMap:
+                      name: mailman-nginx
     volumeClaimTemplates:
         - apiVersion: v1
           kind: PersistentVolumeClaim