viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

upgrade tf providers; do not reset all defaults in postfix; enable spoof protection [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2024-01-01 21:23:06 +00:00
parent 8cd1e448f0
commit 552da26fff
No known key found for this signature in database
GPG key ID: 4056458DBDBF8863
5 changed files with 77 additions and 59 deletions
Download patch file Download diff file Expand all files Collapse all files

15
modules/kubernetes/mailserver/main.tf
View file

@ -2,7 +2,7 @@ variable "tls_secret_name" {}
variable "mailserver_accounts" {}
variable "postfix_account_aliases" {}
variable "opendkim_key" {}
variable "sasl_passwd" {}
variable "sasl_passwd" {} # For sendgrid i.e relayhost
resource "kubernetes_namespace" "mailserver" {
metadata {
@ -43,6 +43,7 @@ resource "kubernetes_config_map" "mailserver_env_config" {
POSTFIX_MESSAGE_SIZE_LIMIT = 1024 * 1024 * 200 # 200 MB
POSTFIX_REJECT_UNKNOWN_CLIENT_HOSTNAME = "1"
TLS_LEVEL = "intermediate"
SPOOF_PROTECTION = "1"
SSL_TYPE = "manual"
SSL_CERT_PATH = "/tmp/ssl/tls.crt"
SSL_KEY_PATH = "/tmp/ssl/tls.key"
@ -185,12 +186,12 @@ resource "kubernetes_deployment" "mailserver" {
sub_path = "postfix-accounts.cf"
read_only = true
}
# volume_mount {
# name = "config"
# mount_path = "/tmp/docker-mailserver/postfix-main.cf"
# sub_path = "postfix-main.cf"
# read_only = true
# }
volume_mount {
name = "config"
mount_path = "/tmp/docker-mailserver/postfix-main.cf"
sub_path = "postfix-main.cf"
read_only = true
}
volume_mount {
name = "config"
mount_path = "/tmp/docker-mailserver/postfix-virtual.cf"