Remove insecure mail ports 143 (IMAP) and 465 (SMTPS)
Drop legacy insecure mail ports per DEV-359 approval: - Remove port 465 (SMTPS) from SMTP service - enforce STARTTLS on 587 - Remove port 143 (IMAP) from IMAP service - enforce TLS on 993 This reduces attack surface and enforces secure mail protocols. Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
parent
d0dc5dc735
commit
a551ee5235
1 changed files with 4 additions and 12 deletions
|
|
@ -36,10 +36,7 @@ spec:
|
|||
port: 587
|
||||
targetPort: 587
|
||||
protocol: TCP
|
||||
- name: submissions
|
||||
port: 465
|
||||
targetPort: 465
|
||||
protocol: TCP
|
||||
# Port 465 (SMTPS) removed per DEV-359 approval - enforce secure protocols
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
|
|
@ -52,10 +49,7 @@ spec:
|
|||
selector:
|
||||
app: stalwart
|
||||
ports:
|
||||
- name: imap
|
||||
port: 143
|
||||
targetPort: 143
|
||||
protocol: TCP
|
||||
# Port 143 (IMAP) removed per DEV-359 approval - enforce secure protocols
|
||||
- name: imaps
|
||||
port: 993
|
||||
targetPort: 993
|
||||
|
|
@ -111,10 +105,8 @@ spec:
|
|||
name: smtp
|
||||
- containerPort: 587
|
||||
name: submission
|
||||
- containerPort: 465
|
||||
name: submissions
|
||||
- containerPort: 143
|
||||
name: imap
|
||||
# Port 465 (SMTPS) removed - enforce STARTTLS on 587
|
||||
# Port 143 (IMAP) removed - enforce TLS on 993
|
||||
- containerPort: 993
|
||||
name: imaps
|
||||
- containerPort: 8080
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue