infra/stacks/authentik/modules
Viktor Barzin 4bf3f504ea
All checks were successful
ci/woodpecker/push/default Pipeline was successful
fix(authentik): SMTP host = mail.viktorbarzin.me (svc name fails wildcard-cert verify)
The in-cluster svc name mailserver.mailserver.svc.cluster.local fails Authentik's strict STARTTLS hostname verification (CERTIFICATE_VERIFY_FAILED): the mailserver serves the *.viktorbarzin.me wildcard cert, which doesn't cover the svc DNS name. Use the public name mail.viktorbarzin.me, which resolves in-cluster (10.0.20.1) and matches the cert. Verified end-to-end from an authentik pod (verified TLS + SASL auth + send) before this change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-17 07:13:53 +00:00
..
authentik fix(authentik): SMTP host = mail.viktorbarzin.me (svc name fails wildcard-cert verify) 2026-06-17 07:13:53 +00:00