86 lines
2.0 KiB
YAML
86 lines
2.0 KiB
YAML
replicaCount: 2
|
|
|
|
resources:
|
|
limits:
|
|
cpu: 200m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 32Mi
|
|
|
|
service:
|
|
type: ClusterIP
|
|
ports:
|
|
- name: http
|
|
port: 80
|
|
targetPort: 8080
|
|
- name: https
|
|
port: 443
|
|
targetPort: 8443
|
|
- name: smtp-submission
|
|
port: 587
|
|
targetPort: 5870
|
|
- name: smtps
|
|
port: 465
|
|
targetPort: 4650
|
|
|
|
networkPolicy:
|
|
enabled: true
|
|
allowExternal: true
|
|
extraIngress:
|
|
- ports:
|
|
- port: 8443
|
|
protocol: TCP
|
|
- port: 5870
|
|
protocol: TCP
|
|
- port: 4650
|
|
protocol: TCP
|
|
|
|
configuration: |
|
|
global
|
|
log stdout format raw local0 info
|
|
maxconn 4096
|
|
|
|
defaults
|
|
log global
|
|
mode tcp
|
|
option tcplog
|
|
option dontlognull
|
|
timeout connect 10s
|
|
timeout client 1m
|
|
timeout server 1m
|
|
|
|
# ── HTTP → NPM (192.168.1.10) ──────────────────────────────────────
|
|
frontend fe_http
|
|
bind *:8080
|
|
default_backend be_npm_http
|
|
|
|
backend be_npm_http
|
|
server npm 192.168.1.10:80 check
|
|
|
|
# ── HTTPS → NPM con SNI passthrough ────────────────────────────────
|
|
frontend fe_https
|
|
bind *:8443
|
|
tcp-request inspect-delay 5s
|
|
tcp-request content accept if { req_ssl_hello_type 1 }
|
|
default_backend be_npm_https
|
|
|
|
backend be_npm_https
|
|
server npm 192.168.1.10:443 check
|
|
|
|
# ── SMTP submission (587) → Mailcow ────────────────────────────────
|
|
frontend fe_smtp_587
|
|
bind *:5870
|
|
default_backend be_mailcow_587
|
|
|
|
backend be_mailcow_587
|
|
server mailcow 192.168.1.30:587 check
|
|
|
|
# ── SMTPS (465) → Mailcow ──────────────────────────────────────────
|
|
frontend fe_smtps
|
|
bind *:4650
|
|
default_backend be_mailcow_465
|
|
|
|
backend be_mailcow_465
|
|
server mailcow 192.168.1.30:465 check
|