Remove insecure mail ports 143 (IMAP) and 465 (SMTPS)

Drop legacy insecure mail ports per DEV-359 approval:
- Remove port 465 (SMTPS) from SMTP service - enforce STARTTLS on 587
- Remove port 143 (IMAP) from IMAP service - enforce TLS on 993

This reduces attack surface and enforces secure mail protocols.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-22 18:04:05 +00:00
parent d0dc5dc735
commit a551ee5235

View file

@ -36,10 +36,7 @@ spec:
port: 587
targetPort: 587
protocol: TCP
- name: submissions
port: 465
targetPort: 465
protocol: TCP
# Port 465 (SMTPS) removed per DEV-359 approval - enforce secure protocols
---
apiVersion: v1
kind: Service
@ -52,10 +49,7 @@ spec:
selector:
app: stalwart
ports:
- name: imap
port: 143
targetPort: 143
protocol: TCP
# Port 143 (IMAP) removed per DEV-359 approval - enforce secure protocols
- name: imaps
port: 993
targetPort: 993
@ -111,10 +105,8 @@ spec:
name: smtp
- containerPort: 587
name: submission
- containerPort: 465
name: submissions
- containerPort: 143
name: imap
# Port 465 (SMTPS) removed - enforce STARTTLS on 587
# Port 143 (IMAP) removed - enforce TLS on 993
- containerPort: 993
name: imaps
- containerPort: 8080