Implement mail server

terraform/k8sapps/iam.tf

@@ -10,6 +10,10 @@ resource "scaleway_iam_application" "nextcloud_app" {
   name = "nextcloud_app"
 }
 
+resource "scaleway_iam_application" "dovecot_app" {
+  name = "dovecot_app"
+}
+
 resource "scaleway_iam_policy" "object_read_write_backup" {
   name           = "K8s backup app policy"
   description    = "Gives k8s backup job access to object storage in project"
@@ -56,6 +60,23 @@ resource "scaleway_iam_policy" "object_read_write_nextcloud" {
   }
 }
 
+resource "scaleway_iam_policy" "object_read_write_dovecot" {
+  name           = "Dovecot app policy"
+  description    = "Gives dovecot job access to object storage in project"
+  application_id = scaleway_iam_application.dovecot_app.id
+
+  rule {
+    project_ids = [data.scaleway_account_project.default.id]
+    permission_set_names = [
+      "ObjectStorageObjectsWrite",
+      "ObjectStorageObjectsRead",
+      "ObjectStorageBucketsRead",
+      "ObjectStorageBucketsWrite",
+      "ObjectStorageObjectsDelete"
+    ]
+  }
+}
+
 resource "scaleway_iam_api_key" "backup_app_api" {
   application_id = scaleway_iam_application.backup_app.id
   description    = "k8s backup app API key"
@@ -70,3 +91,8 @@ resource "scaleway_iam_api_key" "nextcloud_app_api" {
   application_id = scaleway_iam_application.nextcloud_app.id
   description    = "nextcloud access API key"
 }
+
+resource "scaleway_iam_api_key" "dovecot_app_api" {
+  application_id = scaleway_iam_application.dovecot_app.id
+  description    = "dovecot access API key"
+}