Add LDAP outpost, SOGo on K8s, Stalwart OIDC

2026-09-19 11:02:55 +02:00 · 2026-03-15 14:30:05 +01:00
parent 0a9185ff3e
commit 3977722740
8 changed files with 270 additions and 4 deletions
@@ -0,0 +1,46 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: sogo-mail-secrets
+spec:
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  refreshInterval: 15m
+  target:
+    name: sogo-mail-secrets
+    creationPolicy: Owner
+    template:
+      engineVersion: v2
+      data:
+        SOGoProfileURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_user_profile"
+        OCSFolderInfoURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_folder_info"
+        OCSSessionsFolderURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_sessions_folder"
+        OCSCacheFolderURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_cache_folder"
+        OCSStoreURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_store"
+        OCSAclURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_acl"
+        SOGoUserSources__yaml: |
+          - type: ldap
+            id: authentik
+            CNFieldName: cn
+            IDFieldName: cn
+            UIDFieldName: cn
+            bindDN: "cn={{ .ldap_bind_user }},ou=users,DC=ldap,DC=goauthentik,DC=io"
+            bindPassword: "{{ .ldap_bind_password }}"
+            hostname: "ldap://ak-outpost-ldap-outpost.authentik.svc.cluster.local:3389"
+            baseDN: "ou=users,DC=ldap,DC=goauthentik,DC=io"
+            canAuthenticate: YES
+            isAddressBook: YES
+            bindAsCurrentUser: YES
+            LoginFieldNames: ("mail")
+            MailFieldNames: ("mail")
+            displayName: "Shared Addresses"
+            filter: "(objectClass=user)"
+        SOGoIMAPServer: "imaps://mail.rubenhensen.nl:993/?tls=YES&tlsVerifyMode=none"
+        SOGoSMTPServer: "smtp://mail.rubenhensen.nl:587/?tls=YES&tlsVerifyMode=none"
+        SOGoSMTPAuthenticationType: "PLAIN"
+        SOGoMailDomain: "rubenhensen.nl"
+        SOGoForceExternalLoginWithEmail: "YES"
+  dataFrom:
+    - extract:
+        key: kv/sogo-mail