mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-09-16 18:02:55 +02:00
Remove sogo
This commit is contained in:
@@ -1,64 +0,0 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: sogo-mail
|
||||
namespace: argocd
|
||||
finalizers:
|
||||
- resources-finalizer.argocd.argoproj.io
|
||||
spec:
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
project: default
|
||||
sources:
|
||||
- chart: sogo
|
||||
repoURL: https://helm.snry.xyz/docker-sogo/
|
||||
targetRevision: 0.3.5
|
||||
helm:
|
||||
values: |
|
||||
image:
|
||||
tag: "5.12.5"
|
||||
sogo:
|
||||
host: mail.rubenhensen.nl
|
||||
enableVerboseLogs: true
|
||||
extraEnv:
|
||||
- name: PGSSLMODE
|
||||
value: "disable"
|
||||
existingSecrets:
|
||||
- sogo-mail-secrets
|
||||
ingress:
|
||||
enabled: true
|
||||
className: nginx
|
||||
annotations:
|
||||
kubernetes.io/tls-acme: "true"
|
||||
cert-manager.io/cluster-issuer: prod-cluster-issuer
|
||||
nginx.ingress.kubernetes.io/server-snippet: |-
|
||||
proxy_http_version 1.1;
|
||||
proxy_hide_header X-Powered-By;
|
||||
|
||||
location = / {
|
||||
rewrite ^(.*)$ /SOGo;
|
||||
allow all;
|
||||
}
|
||||
|
||||
tls:
|
||||
- secretName: sogo-mail-tls
|
||||
hosts:
|
||||
- mail.rubenhensen.nl
|
||||
path: /
|
||||
pathType: Prefix
|
||||
memcached:
|
||||
enabled: true
|
||||
image:
|
||||
tag: latest
|
||||
- repoURL: https://github.com/rubenhensen/k8scd.git
|
||||
targetRevision: HEAD
|
||||
path: sogo-mail
|
||||
directory:
|
||||
include: "*.yaml"
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: sogo-mail
|
||||
@@ -6,7 +6,7 @@ records:
|
||||
- name: mail
|
||||
expire: 300
|
||||
type: A
|
||||
content: "62.41.87.114"
|
||||
content: "46.224.26.65"
|
||||
- name: stalwart
|
||||
expire: 300
|
||||
type: A
|
||||
|
||||
@@ -1,21 +0,0 @@
|
||||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: sogo-mail-postgres-credentials
|
||||
spec:
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
kind: ClusterSecretStore
|
||||
refreshInterval: 15m
|
||||
target:
|
||||
name: sogo-mail-postgres-credentials
|
||||
creationPolicy: Owner
|
||||
data:
|
||||
- secretKey: username
|
||||
remoteRef:
|
||||
key: kv/sogo-mail
|
||||
property: postgres_user
|
||||
- secretKey: password
|
||||
remoteRef:
|
||||
key: kv/sogo-mail
|
||||
property: postgres_pw
|
||||
@@ -1,16 +0,0 @@
|
||||
apiVersion: postgresql.cnpg.io/v1
|
||||
kind: Cluster
|
||||
metadata:
|
||||
name: sogo-mail-postgres
|
||||
spec:
|
||||
instances: 1
|
||||
primaryUpdateStrategy: unsupervised
|
||||
bootstrap:
|
||||
initdb:
|
||||
database: sogo
|
||||
owner: sogo
|
||||
secret:
|
||||
name: sogo-mail-postgres-credentials
|
||||
storage:
|
||||
storageClass: longhorn
|
||||
size: 20Gi
|
||||
@@ -1,52 +0,0 @@
|
||||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: sogo-mail-secrets
|
||||
spec:
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
kind: ClusterSecretStore
|
||||
refreshInterval: 15m
|
||||
target:
|
||||
name: sogo-mail-secrets
|
||||
creationPolicy: Owner
|
||||
template:
|
||||
engineVersion: v2
|
||||
data:
|
||||
SOGoProfileURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_user_profile"
|
||||
OCSFolderInfoURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_folder_info"
|
||||
OCSSessionsFolderURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_sessions_folder"
|
||||
OCSCacheFolderURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_cache_folder"
|
||||
OCSStoreURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_store"
|
||||
OCSAclURL: "postgresql://{{ .postgres_user }}:{{ .postgres_pw }}@sogo-mail-postgres-rw:5432/sogo/sogo_acl"
|
||||
SOGoUserSources__yaml: |
|
||||
- type: ldap
|
||||
id: authentik
|
||||
CNFieldName: cn
|
||||
IDFieldName: cn
|
||||
UIDFieldName: cn
|
||||
bindDN: "cn={{ .ldap_bind_user }},ou=users,DC=ldap,DC=goauthentik,DC=io"
|
||||
bindPassword: "{{ .ldap_bind_password }}"
|
||||
hostname: "ldap://ak-outpost-ldap-outpost.authentik.svc.cluster.local:389"
|
||||
baseDN: "ou=users,DC=ldap,DC=goauthentik,DC=io"
|
||||
canAuthenticate: YES
|
||||
isAddressBook: YES
|
||||
bindAsCurrentUser: NO
|
||||
LoginFieldNames:
|
||||
- mail
|
||||
MailFieldNames:
|
||||
- mail
|
||||
displayName: "Shared Addresses"
|
||||
filter: "(objectClass=user)"
|
||||
SOGoSieveServer: "sieve://stalwart.rubenhensen.nl:4190/?tls=YES&tlsVerifyMode=allowInsecureLocalhost"
|
||||
SOGoIMAPServer: "imaps://stalwart.rubenhensen.nl:993"
|
||||
SOGoMailingMechanism: "smtp"
|
||||
SOGoSMTPServer: "smtp://stalwart.rubenhensen.nl:587/?tls=YES&tlsVerifyMode=allowInsecureLocalhost"
|
||||
SOGoSMTPAuthenticationType: "PLAIN"
|
||||
NGImap4DisableIMAP4Pooling: "NO"
|
||||
SOGoMailQuotaEnabled: "NO"
|
||||
SOGoMailDomain: "rubenhensen.nl"
|
||||
SOGoForceExternalLoginWithEmail: "YES"
|
||||
dataFrom:
|
||||
- extract:
|
||||
key: kv/sogo-mail
|
||||
Reference in New Issue
Block a user