commit dae2b6bfe49f3fe5aefc563c7fc89489fd0d9fad
parent a5e165be2356a56e22a47b298f47f4f25e3665dc
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Mon, 4 Aug 2025 16:57:11 +0200
Migrate mailserver
Diffstat:
2 files changed, 146 insertions(+), 146 deletions(-)
diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml
@@ -37,7 +37,7 @@ resources:
#- ../base/jenkins
- ../base/mariadb-operator
- ../base/osticket
- - ../base/mailserver
+ #- ../base/mailserver
#- ../base/miro-neoboard-exporter
- ../base/envoy-gateway
#- ../base/vault
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -52,65 +52,65 @@ spec:
kind: EnvoyProxy
name: custom-proxy-config
namespace: envoy-gateway
----
-apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
- name: email-gateway
- namespace: envoy-gateway
- annotations:
- cert-manager.io/cluster-issuer: letsencrypt-dns
-spec:
- gatewayClassName: envoy-gateway-class
- infrastructure:
- annotations:
- external-dns.alpha.kubernetes.io/access: public
- load-balancer.hetzner.cloud/location: hel1
- load-balancer.hetzner.cloud/name: email-envoy
- load-balancer.hetzner.cloud/use-private-ip: "true"
- load-balancer.hetzner.cloud/uses-proxyprotocol: "false"
- # no wildcards due to Envoy bug: https://github.com/envoyproxy/gateway/issues/2675#issuecomment-1960449002
- listeners:
- - name: smtp
- protocol: TCP
- port: 25
- allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
- - name: submissions
- protocol: TCP
- port: 465
- allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
- - name: submission
- protocol: TCP
- port: 587
- allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
- - name: imap
- protocol: TCP
- port: 143
- allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
- - name: imaps
- protocol: TCP
- port: 993
- allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+# ---
+# apiVersion: gateway.networking.k8s.io/v1
+# kind: Gateway
+# metadata:
+# name: email-gateway
+# namespace: envoy-gateway
+# annotations:
+# cert-manager.io/cluster-issuer: letsencrypt-dns
+# spec:
+# gatewayClassName: envoy-gateway-class
+# infrastructure:
+# annotations:
+# external-dns.alpha.kubernetes.io/access: public
+# load-balancer.hetzner.cloud/location: hel1
+# load-balancer.hetzner.cloud/name: email-envoy
+# load-balancer.hetzner.cloud/use-private-ip: "true"
+# load-balancer.hetzner.cloud/uses-proxyprotocol: "false"
+# # no wildcards due to Envoy bug: https://github.com/envoyproxy/gateway/issues/2675#issuecomment-1960449002
+# listeners:
+# - name: smtp
+# protocol: TCP
+# port: 25
+# allowedRoutes:
+# kinds:
+# - kind: TCPRoute
+# namespaces:
+# from: All
+# - name: submissions
+# protocol: TCP
+# port: 465
+# allowedRoutes:
+# kinds:
+# - kind: TCPRoute
+# namespaces:
+# from: All
+# - name: submission
+# protocol: TCP
+# port: 587
+# allowedRoutes:
+# kinds:
+# - kind: TCPRoute
+# namespaces:
+# from: All
+# - name: imap
+# protocol: TCP
+# port: 143
+# allowedRoutes:
+# kinds:
+# - kind: TCPRoute
+# namespaces:
+# from: All
+# - name: imaps
+# protocol: TCP
+# port: 993
+# allowedRoutes:
+# kinds:
+# - kind: TCPRoute
+# namespaces:
+# from: All
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
@@ -159,25 +159,25 @@ spec:
hostname: "docuseal.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: docuseal.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: docuseal.midnightthoughts.space-tls
- name: https-midnightthoughts-neoboard
protocol: HTTPS
hostname: "miro-export.neoboard.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: miro-export.neoboard.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: miro-export.neoboard.midnightthoughts.space-tls
# - name: https-midnightthoughts-certs
# protocol: HTTPS
# hostname: "certs.midnightthoughts.space"
@@ -255,13 +255,13 @@ spec:
hostname: "bugzilla.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: bugzilla.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: bugzilla.midnightthoughts.space-tls
# - name: https-midnightthoughts-root
# protocol: HTTPS
# hostname: "midnightthoughts.space"
@@ -303,13 +303,13 @@ spec:
hostname: "rspamd.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rspamd.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rspamd.midnightthoughts.space-tls
# - name: https-midnightthoughts-grafana
# protocol: HTTPS
# hostname: "grafana.midnightthoughts.space"
@@ -327,13 +327,13 @@ spec:
hostname: "osticket.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: osticket.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: osticket.midnightthoughts.space-tls
# - name: https-midnightthoughts-vault
# protocol: HTTPS
# hostname: "vault.midnightthoughts.space"
@@ -351,13 +351,13 @@ spec:
hostname: "rook.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rook.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rook.midnightthoughts.space-tls
# - name: https-midnightthoughts-jenkins
# protocol: HTTPS
# hostname: "jenkins.midnightthoughts.space"
@@ -423,13 +423,13 @@ spec:
hostname: "plane.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: plane.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: plane.midnightthoughts.space
# - name: https-midnightthoughts-irc
# protocol: HTTPS
# hostname: "irc.midnightthoughts.space"
@@ -531,13 +531,13 @@ spec:
hostname: "mastodon.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: mastodon.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: mastodon.mtrnord.blog-tls
# - name: https-api-connectivity-tester-mtrnord-blog
# protocol: HTTPS
# hostname: "api.connectivity-tester.mtrnord.blog"
@@ -591,55 +591,55 @@ spec:
hostname: "notify.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: notify.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: notify.mtrnord.blog-tls
- name: https-rss-mtrnord-blog
protocol: HTTPS
hostname: "rss.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rss.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rss.mtrnord.blog-tls
- name: http
protocol: HTTP
port: 80
allowedRoutes:
- namespaces:
- from: "All"
- # - name: ldap
- # protocol: TCP
- # port: 389
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
- # - name: gerrit-ssh
- # protocol: TCP
- # port: 29418
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
- # - name: ircs
- # protocol: TCP
- # port: 6697
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
+ namespaces:
+ from: "All"
+ # - name: ldap
+ # protocol: TCP
+ # port: 389
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
+ # - name: gerrit-ssh
+ # protocol: TCP
+ # port: 29418
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
+ # - name: ircs
+ # protocol: TCP
+ # port: 6697
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: ClientTrafficPolicy
