add tls to gitea/smtpd

highcanfly-club · Jan 15, 2024 · 4836b95 · 4836b95
1 parent 7375771
commit 4836b95
Show file tree

Hide file tree

Showing 20 changed files with 145 additions and 96 deletions.
diff --git a/charts/gitea/Chart.yaml b/charts/gitea/Chart.yaml
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.9.0
+version: 0.9.1
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

diff --git a/charts/gitea/templates/deployment-smtpd.yaml b/charts/gitea/templates/deployment-smtpd.yaml
@@ -20,6 +20,16 @@ spec:
     spec:
       containers:
       - env:
+        {{- if .Values.smtpd.tls.secret }}
+        - name: POSTFIX_smtp_use_tls
+          value: "yes"
+        - name: POSTFIX_smtp_tls_cert_file
+          value: "/etc/cert/tls.crt"
+        - name: POSTFIX_smtp_tls_key_file
+          value: "/etc/cert/tls.key"
+        - name: POSTFIX_smtp_tls_loglevel
+          value: "1"
+        {{ end }}
         - name: ALLOWED_SENDER_DOMAINS
           valueFrom:
             secretKeyRef:
@@ -75,12 +85,32 @@ spec:
         - name: RELAYHOST
           value: {{ .Values.smtpd.relayHost | quote }}
         {{ end }}
+        {{ if .Values.smtpd.relayHostUser }}
+        - name: RELAYHOST_USERNAME 
+          value: {{ .Values.smtpd.relayHostUser | quote }}
+        {{ end }}
+        {{ if .Values.smtpd.relayHostPassword }}
+        - name: RELAYHOST_PASSWORD 
+          value: {{ .Values.smtpd.relayHostPassword | quote }}
+        {{ end }}
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: {{ .Values.kubernetesClusterDomain }}
         image: {{ .Values.smtpd.image.repository }}:{{ .Values.smtpd.image.tag | default .Chart.AppVersion }}
         name: smtpd
         ports:
         - containerPort: 25
         resources: {{- toYaml .Values.smtpd.resources | nindent 10 }}
+        {{- if .Values.smtpd.tls.secret }}
+        volumeMounts:
+          - mountPath: "/etc/cert"
+            name: crt-key
+            readOnly: true
+        {{- end}}
+      {{- if .Values.smtpd.tls.secret }}
+      volumes:
+        - name: crt-key
+          secret:
+            secretName: {{ .Values.smtpd.tls.secret }}
+      {{ end }}
       imagePullSecrets: {{ .Values.imagePullSecrets | default list | toJson }}
       restartPolicy: Always
diff --git a/repo/cert-manager-webhook-oci-1.3.1.tgz b/repo/cert-manager-webhook-oci-1.3.1.tgz
diff --git a/repo/crontab-ui-1.0.0.tgz b/repo/crontab-ui-1.0.0.tgz
diff --git a/repo/dolidock-0.9.13.tgz b/repo/dolidock-0.9.13.tgz
diff --git a/repo/easyappointments-0.2.0.tgz b/repo/easyappointments-0.2.0.tgz
diff --git a/repo/gitea-0.9.1.tgz b/repo/gitea-0.9.1.tgz
diff --git a/repo/hcf-coder-0.2.1.tgz b/repo/hcf-coder-0.2.1.tgz
diff --git a/repo/hcfmailer-1.0.0.tgz b/repo/hcfmailer-1.0.0.tgz
diff --git a/repo/hcfmailerplus-0.2.0.tgz b/repo/hcfmailerplus-0.2.0.tgz
diff --git a/repo/hcfschedule-0.1.0.tgz b/repo/hcfschedule-0.1.0.tgz
diff --git a/repo/helm-dashboard-0.1.9.tgz b/repo/helm-dashboard-0.1.9.tgz
diff --git a/repo/index.html b/repo/index.html
@@ -96,8 +96,8 @@ <h2>Charts</h2>
 				<li>
 					<p>
 						gitea
-						(<a href="https://helm-repo.highcanfly.club/gitea-0.9.0.tgz" title="https://helm-repo.highcanfly.club/gitea-0.9.0.tgz">
-						0.9.0
+						(<a href="https://helm-repo.highcanfly.club/gitea-0.9.1.tgz" title="https://helm-repo.highcanfly.club/gitea-0.9.1.tgz">
+						0.9.1
 						@
 						1.21.3
 						</a>)
@@ -263,6 +263,6 @@ <h2>Charts</h2>
 
       </ul>
     </section>
-		<time datetime="2024-01-14T12:06:01" pubdate id="generated">Sun Jan 14 2024 12:06:01PM UTC&#43;00:00</time>
+		<time datetime="2024-01-15T06:34:46" pubdate id="generated">Mon Jan 15 2024 06:34:46AM UTC&#43;00:00</time>
   </body>
 </html>