Add LDAP outpost, SOGo on K8s, Stalwart OIDC

apps/templates/authentik-helm.yaml

@@ -66,15 +66,32 @@ spec:
                   secretKeyRef:
                     name: vault-oidc-client-secret
                     key: client_secret
+              - name: STALWART_OIDC_CLIENT_SECRET
+                valueFrom:
+                  secretKeyRef:
+                    name: stalwart-oidc-client-secret
+                    key: client_secret
           server:
             volumes:
-              - name: custom-blueprints
+              - name: blueprint-vault
                 configMap:
                   name: authentik-blueprint-vault
+              - name: blueprint-mail
+                configMap:
+                  name: authentik-blueprint-mail
+              - name: blueprint-ldap
+                configMap:
+                  name: authentik-blueprint-ldap
             volumeMounts:
-              - name: custom-blueprints
+              - name: blueprint-vault
                 mountPath: /blueprints/custom/vault-oidc.yaml
                 subPath: vault-oidc.yaml
+              - name: blueprint-mail
+                mountPath: /blueprints/custom/mail-oidc.yaml
+                subPath: mail-oidc.yaml
+              - name: blueprint-ldap
+                mountPath: /blueprints/custom/ldap.yaml
+                subPath: ldap.yaml
             ingress:
               enabled: true
               ingressClassName: nginx
@@ -88,13 +105,25 @@ spec:
                     - authentik.rubenhensen.nl
           worker:
             volumes:
-              - name: custom-blueprints
+              - name: blueprint-vault
                 configMap:
                   name: authentik-blueprint-vault
+              - name: blueprint-mail
+                configMap:
+                  name: authentik-blueprint-mail
+              - name: blueprint-ldap
+                configMap:
+                  name: authentik-blueprint-ldap
             volumeMounts:
-              - name: custom-blueprints
+              - name: blueprint-vault
                 mountPath: /blueprints/custom/vault-oidc.yaml
                 subPath: vault-oidc.yaml
+              - name: blueprint-mail
+                mountPath: /blueprints/custom/mail-oidc.yaml
+                subPath: mail-oidc.yaml
+              - name: blueprint-ldap
+                mountPath: /blueprints/custom/ldap.yaml
+                subPath: ldap.yaml
           postgresql:
             enabled: false
           redis:

apps/templates/sogo-mail-helm.yaml

@@ -0,0 +1,56 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: sogo-mail
+  namespace: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  syncPolicy:
+    syncOptions:
+      - CreateNamespace=true
+    automated:
+      prune: true
+      selfHeal: true
+  project: default
+  sources:
+    - chart: sogo
+      repoURL: https://helm.snry.xyz/docker-sogo/
+      targetRevision: 0.3.5
+      helm:
+        values: |
+          sogo:
+            host: mail.rubenhensen.nl
+            existingSecrets:
+              - sogo-mail-secrets
+          ingress:
+            enabled: true
+            className: nginx
+            annotations:
+              kubernetes.io/tls-acme: "true"
+              cert-manager.io/cluster-issuer: prod-cluster-issuer
+              nginx.ingress.kubernetes.io/server-snippet: |-
+                proxy_http_version 1.1;
+                proxy_hide_header X-Powered-By;
+
+                location = / {
+                  rewrite ^(.*)$ /SOGo;
+                  allow all;
+                }
+
+            tls:
+              - secretName: sogo-mail-tls
+                hosts:
+                  - mail.rubenhensen.nl
+            path: /
+            pathType: Prefix
+          memcached:
+            enabled: true
+    - repoURL: https://github.com/rubenhensen/k8scd.git
+      targetRevision: HEAD
+      path: sogo-mail
+      directory:
+        include: "*.yaml"
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: sogo-mail