apiVersion: v1
kind: ConfigMap
metadata:
  name: {{ include "stalwart.fullname" . }}-config
  labels:
    {{- include "stalwart.labels" . | nindent 4 }}
data:
  config.toml: |
    [server]
    hostname = "{{ .Values.config.hostname }}"
    max-connections = 8192
    allowed-ip = {{ .Values.config.allowedIPs | toJson }}

    [server.socket]
    backlog = 1024
    nodelay = true
    reuse-addr = true
    reuse-port = true

    [server.listener.http]
    bind = "[::]:8080"
    protocol = "http"

    [server.listener.https]
    bind = "[::]:443"
    protocol = "http"
    tls.implicit = true

    [server.listener.smtp]
    bind = "[::]:25"
    protocol = "smtp"

    [server.listener.submission]
    bind = "[::]:587"
    protocol = "smtp"

    [server.listener.submissions]
    bind = "[::]:465"
    protocol = "smtp"
    tls.implicit = true

    [server.listener.imap]
    bind = "[::]:143"
    protocol = "imap"

    [server.listener.imaptls]
    bind = "[::]:993"
    protocol = "imap"
    tls.implicit = true

    [server.listener.pop3]
    bind = "[::]:110"
    protocol = "pop3"

    [server.listener.pop3s]
    bind = "[::]:995"
    protocol = "pop3"
    tls.implicit = true

    [server.listener.sieve]
    bind = "[::]:4190"
    protocol = "managesieve"

    [http]
    use-x-forwarded = {{ .Values.config.useXForwarded }}

    [storage]
    data = "rocksdb"
    blob = "rocksdb"
    fts = "rocksdb"
    lookup = "rocksdb"
    directory = "internal"

    [store.rocksdb]
    type = "rocksdb"
    path = "/opt/stalwart/data"
    compression = "lz4"

    [directory.internal]
    type = "internal"
    store = "rocksdb"

    [authentication.fallback-admin]
    user = "%{env:STALWART_ADMIN_USER}%"
    secret = "%{env:STALWART_ADMIN_PASSWORD}%"

    [queue.strategy]
    route = [ { if = "is_local_domain('', rcpt_domain)", then = "'local'" },                                                                                           
              { else = "'smtp2go'" } ] 

    [queue.route."smtp2go"]
    type = "relay"
    address = "mail-eu.smtp2go.com"
    port = 2525
    protocol = "smtp"

    [queue.route."smtp2go".tls]
    implicit = false
    allow-invalid-certs = false

    [queue.route."smtp2go".auth]
    username = "%{env:SMTP2GO_USER}%"
    secret = "%{env:SMTP2GO_PASSWORD}%"

    [certificate."default"]
    cert = "%{file:/opt/stalwart/certs/tls.crt}%"
    private-key = "%{file:/opt/stalwart/certs/tls.key}%"
    default = true

    [tracer.log]
    type = "log"
    enable = true
    level = "info"
    path = "/opt/stalwart/logs"
    prefix = "stalwart.log"
    rotate = "daily"
    ansi = false