Files
exim-forwarder/deployment/deploy-yml.tmpl
Wolfgang Hottgenroth f0c3a986ee
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
cert
2025-10-23 20:45:53 +02:00

98 lines
2.0 KiB
Cheetah

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: exim-forwarder-cert
spec:
secretName: exim-forwarder-cert
duration: 2160h
renewBefore: 360h
subject:
organizations:
- hottis-de
isCA: false
privateKey:
algorithm: RSA
encoding: PKCS1
size: 2048
usages:
- server auth
dnsNames:
- mx.mainscnt.eu
issuerRef:
name: letsencrypt-staging-http
kind: ClusterIssuer
group: cert-manager.io
---
apiVersion: v1
kind: ConfigMap
metadata:
name: exim-forwarder-config
data:
domains: |
mainscnt.eu
addresses: |
wn@mainscnt.eu: wolfgang.hottgenroth@icloud.com
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: exim-forwarder
annotations:
configmap.reloader.stakater.com/reload: "exim-forwarder-config"
spec:
replicas: 1
selector:
matchLabels:
app: exim-forwarder
template:
metadata:
labels:
app: exim-forwarder
spec:
containers:
- name: exim-forwarder
image: %IMAGE%
ports:
- name: smtp
containerPort: 25
protocol: TCP
volumeMounts:
- name: exim-config
mountPath: /etc/exim/db
readOnly: true
- name: tls-cert
mountPath: /etc/exim/db
readOnly: true
volumes:
- name: exim-config
configMap:
name: exim-forwarder-config
items:
- key: domains
path: forward_domains
- key: addresses
path: forward_addresses
- name: tls-cert
secret:
secretName: exim-forwarder-cert
items:
- key: tls.crt
path: server.crt
- key: tls.key
path: server.key
---
apiVersion: v1
kind: Service
metadata:
name: exim-forwarder
spec:
type: LoadBalancer
selector:
app: exim-forwarder
ports:
- name: smtp
port: 25
targetPort: 25
protocol: TCP