basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
stack.basicstack.de/apps/stalwart
History
CTO Agent 509bbebe10 feat(stalwart): Fresh deployment with basic auth 
- Deployed Stalwart v0.16.11 in stalwart namespace
- Configured encrypted hcloud storage (20Gi PVC)
- Set up LoadBalancer services for SMTP/IMAP
- Configured Ingress with TLS for mail.basicstack.de
- Daily backup CronJob with S3/restic
- Bootstrap mode requires web UI setup completion

Refs: DEV-206

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-04 10:17:39 +00:00
..
README.md Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-admin-credentials-sealed.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-backup-restore.md Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-bootstrap-completion-guide.md Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-config-complete.json Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-config-fix-v2.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-config-fix.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-config-with-data.json Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-console-pod.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-dashboard-configmap.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-deployment-new.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-deployment-oidc-only.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-deployment-with-oidc.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-deployment.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-fresh-deployment.yaml feat(stalwart): Fresh deployment with basic auth 2026-07-04 10:17:39 +00:00
stalwart-grafana-dashboard.json Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-helm-fix.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-helm-values-oidc.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-monitoring.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-oauth2-proxy-secret-sealed.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-oidc-config.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-oidc-sealed.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-s3-backup-sealed.yaml Convert all secrets to SealedSecrets for enhanced security 2026-07-01 18:38:27 +00:00
stalwart-service-patch.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-statefulset-patch-v2.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-statefulset-patch-v3.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-statefulset-patch.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-values-correct.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-values-fixed-ports.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00
stalwart-values.yaml Initialize CD/CI repository structure with Stalwart example 2026-07-01 18:08:31 +00:00

README.md

Stalwart Mail Server Deployment

This directory contains the complete deployment configuration for the Stalwart mail server on the basicstack.de cluster.

Files Overview

Deployment Manifests

  • stalwart-deployment.yaml - Basic deployment configuration
  • stalwart-deployment-new.yaml - Updated deployment variant
  • stalwart-deployment-with-oidc.yaml - Deployment with OIDC integration
  • stalwart-deployment-oidc-only.yaml - OIDC-only authentication deployment

Helm Configuration

  • stalwart-values.yaml - Main Helm values file
  • stalwart-values-fixed-ports.yaml - Values with corrected port configurations
  • stalwart-values-correct.yaml - Verified correct values
  • stalwart-helm-values-oidc.yaml - Helm values for OIDC setup
  • stalwart-helm-fix.yaml - Helm chart fixes

Configuration

  • stalwart-oidc-config.yaml - OIDC provider configuration
  • stalwart-config-fix.yaml - Configuration corrections
  • stalwart-config-fix-v2.yaml - Updated configuration fix

Monitoring

  • stalwart-monitoring.yaml - Prometheus ServiceMonitor and metrics
  • stalwart-dashboard-configmap.yaml - Grafana dashboard configuration

Maintenance

  • stalwart-console-pod.yaml - Debug/console pod for troubleshooting
  • stalwart-service-patch.yaml - Service configuration patch
  • stalwart-statefulset-patch.yaml - StatefulSet patches (v1, v2, v3)

Documentation

  • stalwart-backup-restore.md - Backup and restore procedures
  • stalwart-bootstrap-completion-guide.md - Initial setup guide

Deployment Notes

This is a reference implementation showing the evolution of a production deployment. Multiple variants are preserved to show:

  • Different authentication strategies (local vs. OIDC)
  • Configuration iterations and fixes
  • Monitoring integration
  • Operational procedures

When deploying a new service, you don't need this many files - choose the appropriate manifest for your use case and adapt it.

Current Production Deployment

Review the files to determine which manifest represents the current production state, or check the cluster directly with:

kubectl get deployment,statefulset -n stalwart