replicaCount: 2

resources:
  limits:
    cpu: 200m
    memory: 128Mi
  requests:
    cpu: 50m
    memory: 32Mi

service:
  type: ClusterIP
  ports:
  - name: http
    port: 80
    targetPort: 8080
  - name: https
    port: 443
    targetPort: 8443
  - name: smtp-submission
    port: 587
    targetPort: 5870
  - name: smtps
    port: 465
    targetPort: 4650

networkPolicy:
  enabled: true
  allowExternal: true
  extraIngress:
  - ports:
    - port: 8443
      protocol: TCP
    - port: 5870
      protocol: TCP
    - port: 4650
      protocol: TCP

configuration: |
  global
    log stdout format raw local0 info
    maxconn 4096

  defaults
    log global
    mode tcp
    option tcplog
    option dontlognull
    timeout connect 10s
    timeout client  1m
    timeout server  1m

  # ── HTTP → NPM (192.168.1.10) ──────────────────────────────────────
  frontend fe_http
    bind *:8080
    default_backend be_npm_http

  backend be_npm_http
    server npm 192.168.1.10:80 check

  # ── HTTPS → NPM con SNI passthrough ────────────────────────────────
  frontend fe_https
    bind *:8443
    tcp-request inspect-delay 5s
    tcp-request content accept if { req_ssl_hello_type 1 }
    default_backend be_npm_https

  backend be_npm_https
    server npm 192.168.1.10:443 check

  # ── SMTP submission (587) → Mailcow ────────────────────────────────
  frontend fe_smtp_587
    bind *:5870
    default_backend be_mailcow_587

  backend be_mailcow_587
    server mailcow 192.168.1.30:587 check

  # ── SMTPS (465) → Mailcow ──────────────────────────────────────────
  frontend fe_smtps
    bind *:4650
    default_backend be_mailcow_465

  backend be_mailcow_465
    server mailcow 192.168.1.30:465 check