cluster

commit b97f0669a19779c8b60754f19bd8901b9c8cad9d
parent 3f86239e3f9544b7bf8b5bc273ac672111677364
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Fri, 17 Apr 2026 21:39:42 +0200

mayhaps?

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/mediawiki/configmap.yaml
 | 
12
++++++++++--
M
apps/talos_cluster/stalwart/release.yaml
 | 
15
+++++++++++++++

2 files changed, 25 insertions(+), 2 deletions(-)
diff --git a/apps/talos_cluster/mediawiki/configmap.yaml b/apps/talos_cluster/mediawiki/configmap.yaml
@@ -45,12 +45,20 @@ data:
     $wgPasswordSender      = 'support@midnightthoughts.space';
 
     $wgSMTP = [
-        'host'     => 'ssl://mail.midnightthoughts.space',
+        'host'     => 'stalwart-mail.stalwart.svc.cluster.local',
         'IDHost'   => 'wiki.mtrnord.blog',
-        'port'     => 465,
+        'port'     => 2587,
         'auth'     => true,
         'username' => 'support@midnightthoughts.space',
         'password' => getenv('MW_SMTP_PASSWORD') ?: '',
+        // port 2587 is an internal-only listener with no PROXY protocol requirement;
+        // cert is for mail.midnightthoughts.space so peer verification is disabled
+        'socket_options' => [
+            'ssl' => [
+                'verify_peer'      => false,
+                'verify_peer_name' => false,
+            ],
+        ],
     ];
 
     # Caching — Valkey for shared object/session/parser cache, APCu for localisation
diff --git a/apps/talos_cluster/stalwart/release.yaml b/apps/talos_cluster/stalwart/release.yaml
@@ -22,6 +22,18 @@ spec:
     - kustomize:
         patches:
           - target:
+              version: v1
+              kind: Service
+              name: stalwart-mail
+            patch: |
+              - op: add
+                path: /spec/ports/-
+                value:
+                  name: submission-internal
+                  port: 2587
+                  protocol: TCP
+                  targetPort: 2587
+          - target:
               group: monitoring.coreos.com
               version: v1
               kind: ServiceMonitor
@@ -215,6 +227,9 @@ spec:
               trusted-networks:
                 - 10.0.0.0/8
                 - fd00::/8
+          submission-internal:
+            bind: ["[::]:2587"]
+            protocol: smtp
           submissions:
             bind: ["[::]:465"]
             protocol: smtp