mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-09-17 02:12:55 +02:00
Ruben Hensen
98 lines
2.2 KiB
YAML
98 lines
2.2 KiB
YAML
---
|
|
stalwart_version: "0.15.5"
|
|
|
|
stalwart_system_user: "stalwart"
|
|
stalwart_system_group: "stalwart"
|
|
|
|
stalwart_service_state: "started"
|
|
stalwart_service_enabled: true
|
|
|
|
stalwart_server_hostname: "mail.rubenhensen.nl"
|
|
stalwart_server_max_connections: 8192
|
|
|
|
# Storage backend
|
|
stalwart_storage_data: "rocksdb"
|
|
stalwart_storage_fts: "rocksdb"
|
|
stalwart_storage_blob: "rocksdb"
|
|
stalwart_storage_lookup: "rocksdb"
|
|
|
|
# Admin credentials
|
|
stalwart_fallback_admin_login: "admin"
|
|
stalwart_fallback_admin_password: "changeme!" # override via vault in host_vars
|
|
|
|
# Listeners
|
|
stalwart_server_listeners:
|
|
- name: "smtp"
|
|
bind: "[::]:25"
|
|
protocol: "smtp"
|
|
- name: "submission"
|
|
bind: "[::]:587"
|
|
protocol: "smtp"
|
|
- name: "submissions"
|
|
bind: "[::]:465"
|
|
protocol: "smtp"
|
|
options:
|
|
tls.implicit: true
|
|
- name: "imaptls"
|
|
bind: "[::]:993"
|
|
protocol: "imap"
|
|
options:
|
|
tls.implicit: true
|
|
- name: "https"
|
|
bind: "127.0.0.1:8443"
|
|
protocol: "http"
|
|
options:
|
|
tls.implicit: true
|
|
- name: "http"
|
|
bind: "127.0.0.1:8080"
|
|
protocol: "http"
|
|
|
|
# Stores
|
|
stalwart_stores:
|
|
- name: "rocksdb"
|
|
type: "rocksdb"
|
|
options:
|
|
path: "{{ stalwart_data_path }}"
|
|
compression: "lz4"
|
|
- name: "postgresql"
|
|
type: "postgresql"
|
|
options:
|
|
host: "127.0.0.1"
|
|
port: 5432
|
|
database: "{{ stalwart_db_name }}"
|
|
user: "{{ stalwart_db_user }}"
|
|
password: "{{ stalwart_db_password }}"
|
|
|
|
# Directory
|
|
stalwart_directory_type: "sql"
|
|
stalwart_directory_options:
|
|
store: "postgresql"
|
|
|
|
# Database
|
|
stalwart_db_name: "stalwart"
|
|
stalwart_db_user: "stalwart"
|
|
stalwart_db_password: "{{ vault_stalwart_db_password }}"
|
|
|
|
# Tracers
|
|
stalwart_tracers:
|
|
- type: "stdout"
|
|
options:
|
|
level: "info"
|
|
ansi: false
|
|
enable: true
|
|
- type: "log"
|
|
options:
|
|
level: "info"
|
|
path: "{{ stalwart_logs_path }}"
|
|
prefix: "stalwart.log"
|
|
rotate: "daily"
|
|
ansi: false
|
|
enable: true
|
|
|
|
# TLS certificate (managed by certbot)
|
|
stalwart_tls_cert: "/etc/letsencrypt/live/{{ stalwart_server_hostname }}/fullchain.pem"
|
|
stalwart_tls_key: "/etc/letsencrypt/live/{{ stalwart_server_hostname }}/privkey.pem"
|
|
|
|
# Extra config sections (list of {name, options} dicts)
|
|
stalwart_additional_configs: []
|