basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Remove insecure mail ports 143 (IMAP) and 465 (SMTPS)

Browse source 
Drop legacy insecure mail ports per DEV-359 approval:
- Remove port 465 (SMTPS) from SMTP service - enforce STARTTLS on 587
- Remove port 143 (IMAP) from IMAP service - enforce TLS on 993

This reduces attack surface and enforces secure mail protocols.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-22 18:04:05 +00:00
parent d0dc5dc735
commit a551ee5235
1 changed files with 4 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
apps/stalwart/stalwart-fresh-deployment.yaml
View file

@ -36,10 +36,7 @@ spec:
port: 587 port: 587
targetPort: 587 targetPort: 587
protocol: TCP protocol: TCP
- name: submissions # Port 465 (SMTPS) removed per DEV-359 approval - enforce secure protocols
port: 465
targetPort: 465
protocol: TCP
--- ---
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
@ -52,10 +49,7 @@ spec:
selector: selector:
app: stalwart app: stalwart
ports: ports:
- name: imap # Port 143 (IMAP) removed per DEV-359 approval - enforce secure protocols
port: 143
targetPort: 143
protocol: TCP
- name: imaps - name: imaps
port: 993 port: 993
targetPort: 993 targetPort: 993
@ -111,10 +105,8 @@ spec:
name: smtp name: smtp
- containerPort: 587 - containerPort: 587
name: submission name: submission
- containerPort: 465 # Port 465 (SMTPS) removed - enforce STARTTLS on 587
name: submissions # Port 143 (IMAP) removed - enforce TLS on 993
- containerPort: 143
name: imap
- containerPort: 993 - containerPort: 993
name: imaps name: imaps
- containerPort: 8080 - containerPort: 8080