apiVersion: v1
kind: ConfigMap
metadata:
  name: exim-forwarder-config
data:
  domains: |
    mainscnt.eu
  addresses: |
    wn@mainscnt.eu: wolfgang.hottgenroth@icloud.com
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: exim-forwarder
  annotations:
    configmap.reloader.stakater.com/reload: "exim-forwarder-config"
    secret.reloader.stakater.com/reload: "exim-forwarder-cert"
spec:
  replicas: 1
  selector:
    matchLabels:
      app: exim-forwarder
  template:
    metadata:
      labels:
        app: exim-forwarder
    spec:
      containers:
        - name: exim-forwarder
          image: %IMAGE%
          ports:
            - name: smtp
              containerPort: 25
              protocol: TCP
          readinessProbe:
            tcpSocket:
              port: 25
            initialDelaySeconds: 5
            periodSeconds: 10
            timeoutSeconds: 5
            successThreshold: 1
            failureThreshold: 3
          volumeMounts:
            - name: exim-config
              mountPath: /etc/exim/db
              readOnly: true
            - name: tls-cert
              mountPath: /etc/exim/ssl
              readOnly: true
      volumes:
        - name: exim-config
          configMap:
            name: exim-forwarder-config
            items:
              - key: domains
                path: forward_domains
              - key: addresses
                path: forward_addresses
        - name: tls-cert
          secret:
            secretName: exim-forwarder-cert
            defaultMode: 0644
            items:
              - key: tls.crt
                path: server.crt
                mode: 0644
              - key: tls.key
                path: server.key
                mode: 0444
---
apiVersion: v1
kind: Service
metadata:
  name: exim-forwarder
spec:
  type: LoadBalancer
  externalTrafficPolicy: Local
  selector:
    app: exim-forwarder
  ports:
    - name: smtp
      port: 25
      targetPort: 25
      protocol: TCP