Merge branch 'main' of gitlab.com:oceanbox/manifests

values/argo/manifests/sys-project.yaml

@@ -95,6 +95,7 @@ spec:
   sourceRepos:
   - https://argoproj.github.io/argo-helm
   - https://kubernetes-sigs.github.io/metrics-server/
+  - https://git.oceanbox.io/oceanbox/manifests
   - https://gitlab.com/oceanbox/manifests.git
   - https://kubernetes.github.io/ingress-nginx
   - https://cloudnative-pg.github.io/charts

values/gitea/values/values.yaml

@@ -73,14 +73,12 @@ gitea:
       ENABLE_AUTO_REGISTRATION: true
       ACCOUNT_LINKING: "login"
       USERNAME: "nickname"
-    # mailer:
-    # ENABLED: true
-    # FROM: "noreply@oceanbox.io"
-    # PROTOCOL: "smtp+startls"
-    # SMTP_ADDR: "smtp.office365.com"
-    # SMTP_PORT: 587
-    # USER: "noreply@oceanbox.io"
-    # PASSWD:
+    mailer:
+      ENABLED: true
+      FROM: "gitea@oceanbox.io"
+      PROTOCOL: "smtp"
+      SMTP_ADDR: "postfix-mail.postfix.svc.cluster.local"
+      SMTP_PORT: 587
     database:
       DB_TYPE: postgres
       MAX_OPEN_CONNS: 90

values/postfix/values/values.yaml

@@ -27,16 +27,17 @@ config:
     LOG_FORMAT: "json"
     ALLOW_EMPTY_SENDER_DOMAINS: "true"
     ALLOWED_SENDER_DOMAINS: "oceanbox.io"
-    RELAYHOST: "smtp.office365.com:587"
-    RELAYHOST_USERNAME: "noreply@oceanbox.io"
-    RELAYHOST_PASSWORD: "00c73c4a-1ad5-477d-b773-d5d63986061e"
+    RELAYHOST: "[smtp.office365.com]:587"
+    RELAYHOST_USERNAME: "gitea@oceanbox.io"
+    XOAUTH2_CLIENT_ID: "00c73c4a-1ad5-477d-b773-d5d63986061e"
+    XOAUTH2_SECRET: "3E18Q~ONNftFcCmHIHZmPbLtVqwLDBSCwI9hGagV"
+    XOAUTH2_TOKEN_ENDPOINT: https://login.microsoftonline.com/3f737008-e9a0-4485-9d27-40329d288089/oauth2/v2.0/token
+    # XOAUTH2_INITIAL_ACCESS_TOKEN: ""
+    # XOAUTH2_INITIAL_REFRESH_TOKEN: ""
+    XOAUTH2_SYSLOG_ON_FAILURE: "no"
+    XOAUTH2_FULL_TRACE: "no"
   postfix:
-    myhostname: "oceanbox.io"
-    # mynetworks: "127.0.0.0/8, 10.1.0.0/24"
-    smtp_tls_security_level: "may"
-    # To reduce log noise, only try authentication mechanisms supported by Zoho.com
-    smtpd_sasl_auth_enable: "no"
-    smtp_sasl_mechanism_filter: "plain, login"
+    smtp_tls_security_level: "encrypt"
 
 resources:
   limits: