feat: add calibre, portainer, egress-gateway, trivy-system, kyverno, olallalab

2026-04-29 15:02:13 +02:00
parent 86feb58574
commit 44ee16960b
12 changed files with 329 additions and 0 deletions
@@ -0,0 +1,85 @@
+replicaCount: 2
+
+resources:
+  limits:
+    cpu: 200m
+    memory: 128Mi
+  requests:
+    cpu: 50m
+    memory: 32Mi
+
+service:
+  type: ClusterIP
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8080
+  - name: https
+    port: 443
+    targetPort: 8443
+  - name: smtp-submission
+    port: 587
+    targetPort: 5870
+  - name: smtps
+    port: 465
+    targetPort: 4650
+
+networkPolicy:
+  enabled: true
+  allowExternal: true
+  extraIngress:
+  - ports:
+    - port: 8443
+      protocol: TCP
+    - port: 5870
+      protocol: TCP
+    - port: 4650
+      protocol: TCP
+
+configuration: |
+  global
+    log stdout format raw local0 info
+    maxconn 4096
+
+  defaults
+    log global
+    mode tcp
+    option tcplog
+    option dontlognull
+    timeout connect 10s
+    timeout client  1m
+    timeout server  1m
+
+  # ── HTTP → NPM (192.168.1.10) ──────────────────────────────────────
+  frontend fe_http
+    bind *:8080
+    default_backend be_npm_http
+
+  backend be_npm_http
+    server npm 192.168.1.10:80 check
+
+  # ── HTTPS → NPM con SNI passthrough ────────────────────────────────
+  frontend fe_https
+    bind *:8443
+    tcp-request inspect-delay 5s
+    tcp-request content accept if { req_ssl_hello_type 1 }
+    default_backend be_npm_https
+
+  backend be_npm_https
+    server npm 192.168.1.10:443 check
+
+  # ── SMTP submission (587) → Mailcow ────────────────────────────────
+  frontend fe_smtp_587
+    bind *:5870
+    default_backend be_mailcow_587
+
+  backend be_mailcow_587
+    server mailcow 192.168.1.30:587 check
+
+  # ── SMTPS (465) → Mailcow ──────────────────────────────────────────
+  frontend fe_smtps
+    bind *:4650
+    default_backend be_mailcow_465
+
+  backend be_mailcow_465
+    server mailcow 192.168.1.30:465 check