image: repository: stalwartlabs/stalwart pullPolicy: IfNotPresent tag: "latest" service: type: NodePort ports: http: 8080 https: 443 smtp: 25 submission: 587 smtps: 465 imap: 143 imaps: 993 sieve: 4190 persistence: enabled: true storageClass: longhorn accessMode: ReadWriteOnce size: 10Gi mountPath: /opt/stalwart replicaCount: 1 tls: secretName: letsencrypt-prod config: hostname: "mail.hensen.io" # Whitelist cluster IPs to prevent ingress from being banned allowedIPs: - "127.0.0.1" - "::1" - "10.0.0.0/8" # Trust X-Forwarded-For header from reverse proxy for real client IP useXForwarded: true