cert 3

deployment/deploy-yml.tmpl

@@ -36,7 +36,7 @@ spec:
               mountPath: /etc/exim/db
               readOnly: true
             - name: tls-cert
-              mountPath: /etc/exim/db
+              mountPath: /etc/exim/ssl
               readOnly: true
       volumes:
         - name: exim-config
@@ -50,11 +50,14 @@ spec:
         - name: tls-cert
           secret:
             secretName: exim-forwarder-cert
+            defaultMode: 0644
             items:
               - key: tls.crt
                 path: server.crt
+                mode: 0644
               - key: tls.key
                 path: server.key
+                mode: 0400
 ---
 apiVersion: v1
 kind: Service

exim.conf

@@ -1,8 +1,8 @@
 domainlist forward_domains = lsearch;/etc/exim/db/forward_domains
 
 tls_advertise_hosts = *
-tls_certificate = /etc/exim/db/server.crt
-tls_privatekey = /etc/exim/db/server.key
+tls_certificate = /etc/exim/ssl/server.crt
+tls_privatekey = /etc/exim/ssl/server.key
 
 
 # acl_smtp_connect = acl_connect