alexandre.pires
aee57a8b89
- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand. - Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters. - Removed unused gitea-auth script from playbook_gitea.yml. - Updated systools_version in playbook_systools.yml to 0.4.5. - Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS. - Added a new script test_imaps for IMAP testing. - Updated Terraform configurations for various applications, including: - Added a backup script for MariaDB with retention policy. - Changed Gitea version to 1.24-rootless and adjusted SSH settings. - Updated Nginx configurations to log errors and access to stderr/stdout. - Refactored services to use ClusterIP type and adjusted security contexts for deployments. - Added temporary storage for applications using empty_dir. - Enhanced backup.sh scripts for better error handling and logging.
57 lines
1.6 KiB
Terraform
57 lines
1.6 KiB
Terraform
# This file defines the configuration for stunnel in the mail module.
|
|
|
|
# Creates a Kubernetes ConfigMap for stunnel configuration for Dovecot.
|
|
resource "kubernetes_config_map" "stunnel_dovecot" {
|
|
metadata {
|
|
name = "stunnel-dovecot"
|
|
namespace = kubernetes_namespace.mail.metadata[0].name
|
|
}
|
|
data = {
|
|
"stunnel.conf" = local.dovecot_stunnel_config
|
|
}
|
|
}
|
|
|
|
# Creates a Kubernetes ConfigMap for stunnel configuration for Postfix.
|
|
resource "kubernetes_config_map" "stunnel_postfix" {
|
|
metadata {
|
|
name = "stunnel-postfix"
|
|
namespace = kubernetes_namespace.mail.metadata[0].name
|
|
}
|
|
data = {
|
|
"stunnel.conf" = local.postfix_stunnel_config
|
|
}
|
|
}
|
|
|
|
# Creates a Kubernetes manifest for the stunnel certificate using cert-manager.
|
|
resource "kubernetes_manifest" "stunnel_cert" {
|
|
manifest = {
|
|
apiVersion = "cert-manager.io/v1"
|
|
kind = "Certificate"
|
|
metadata = {
|
|
name = "stunnel-cert"
|
|
namespace = kubernetes_namespace.mail.metadata[0].name
|
|
}
|
|
spec = {
|
|
secretName = "stunnel-cert"
|
|
issuerRef = {
|
|
name = var.issuer
|
|
kind = "ClusterIssuer"
|
|
}
|
|
commonName = "${kubernetes_service.dovecot_auth.metadata[0].name}.${kubernetes_namespace.mail.metadata[0].name}.svc.cluster.local"
|
|
dnsNames = ["${kubernetes_service.dovecot_auth.metadata[0].name}.${kubernetes_namespace.mail.metadata[0].name}.svc.cluster.local"]
|
|
}
|
|
}
|
|
}
|
|
|
|
# Creates a Kubernetes ConfigMap for the CA certificate.
|
|
resource "kubernetes_config_map" "ca_pem" {
|
|
metadata {
|
|
name = "ca-pem"
|
|
namespace = kubernetes_namespace.mail.metadata[0].name
|
|
}
|
|
data = {
|
|
"ca.pem" = var.ca_pem
|
|
}
|
|
}
|
|
|