✨ migrate to smtp-relay

cluster/apps/data/vaultwarden/helm-release.yaml

@@ -45,13 +45,10 @@ spec:
       WEBSOCKET_ENABLED: "true"
       WEBSOCKET_ADDRESS: 0.0.0.0
       WEBSOCKET_PORT: 3012
-      SMTP_HOST: smtp.fastmail.com
+      SMTP_HOST: smtp-relay.default.svc.cluster.local
       SMTP_FROM: vaultwarden@${SECRET_DOMAIN}
       SMTP_FROM_NAME: vaultwarden
-      SMTP_PORT: 587
-      SMTP_SSL: "true"
-      SMTP_USERNAME: ${SECRET_SMTP_USERNAME}
-      SMTP_PASSWORD: ${SECRET_VAULTWARDEN_SMTP_PASSWORD}
+      SMTP_PORT: 2525
 
     service:
       main:

cluster/apps/documentation/outline/patches/env.yaml

@@ -25,9 +25,9 @@ spec:
       PGSSLMODE: require
       PORT: 80
       REDIS_URL: ioredis://eyJkYiI6MTUsInNlbnRpbmVscyI6W3siaG9zdCI6InJlZGlzLW5vZGUtMC5yZWRpcy1oZWFkbGVzcy5kZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsIiwicG9ydCI6MjYzNzl9LHsiaG9zdCI6InJlZGlzLW5vZGUtMS5yZWRpcy1oZWFkbGVzcy5kZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsIiwicG9ydCI6MjYzNzl9LHsiaG9zdCI6InJlZGlzLW5vZGUtMi5yZWRpcy1oZWFkbGVzcy5kZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsIiwicG9ydCI6MjYzNzl9XSwibmFtZSI6InJlZGlzLW1hc3RlciJ9
-      # SMTP_HOST: smtp-relay.default.svc.cluster.local
-      # SMTP_PORT: 2525
-      # SMTP_FROM_EMAIL: "outline@${SECRET_EMAIL_DOMAIN}"
-      # SMTP_SECURE: "false"
+      SMTP_HOST: smtp-relay.default.svc.cluster.local
+      SMTP_PORT: 2525
+      SMTP_FROM_EMAIL: "outline@${SECRET_DOMAIN}"
+      SMTP_SECURE: "false"
       URL: "https://docs.${SECRET_CLUSTER_DOMAIN}"
       WEB_CONCURRENCY: 10

cluster/apps/networking/authelia/helm-release.yaml

@@ -145,12 +145,10 @@ spec:
       notifier:
         smtp:
           enabled: true
-          enabledSecret: true
-          host: smtp.fastmail.com
-          port: 587
-          username: ${SECRET_AUTHELIA_SMTP_EMAIL}
-          sender: ${SECRET_AUTHELIA_SMTP_EMAIL}
-          identifier: ${SECRET_CLUSTER_DOMAIN}
+          host: smtp-relay.default.svc.cluster.local
+          port: 2525
+          sender: authelia@${SECRET_DOMAIN}
+          identifier: ${SECRET_DOMAIN}
 
       identity_providers:
         oidc:
@@ -199,10 +197,6 @@ spec:
         key: JWT_TOKEN
         value: "${SECRET_AUTHELIA_JWT_SECRET}"
         filename: JWT_TOKEN
-      smtp:
-        key: SMTP_PASSWORD
-        value: "${SECRET_AUTHELIA_SMTP_PASSWORD}"
-        filename: SMTP_PASSWORD
       storageEncryptionKey:
         key: STORAGE_ENCRYPTION_KEY
         value: "${SECRET_AUTHELIA_STORAGE_ENCRYPTION_KEY}"

cluster/configuration/cluster-secrets.sops.yaml

@@ -8,8 +8,6 @@ stringData:
     SECRET_AUTHELIA_JWT_SECRET: ENC[AES256_GCM,data:B3+umypR5/b1Emnk5C4iPOKV0guv6kHPm24SOA==,iv:cGSElgFacEEfrYXNYMbfLnJzeILcrfA/hehyJc2pwiM=,tag:Z0VOJic0pnzEicU1tOwDxg==,type:str]
     SECRET_AUTHELIA_SESSION_SECRET: ENC[AES256_GCM,data:Mtm1pKD/EKy0iCp+MZu13FsNWRm1A87831gp5g==,iv:Rgz11SVbvgNEmG2DDEvD7OFtUjr9uc2s6Ba7eAw2VWU=,tag:3DvjMDhZR/Id0+lvaNuQQg==,type:str]
     SECRET_AUTHELIA_POSTGRES_PASSWORD: ENC[AES256_GCM,data:s7FKzSB4j/loBw+kGio=,iv:AaDnVGqR/AnkTtwaWc2MdZMTEzS9oqD69Yx7ERCMLw4=,tag:oxqPv3/ScxDmau5D1jRHgg==,type:str]
-    SECRET_AUTHELIA_SMTP_EMAIL: ENC[AES256_GCM,data:usksxAwWDJgxCejqz5ynheZXhxCuGpE=,iv:9WLNIRs5rPm8tXnQvp8W5ul4I6EHB2u+Y59/TNPSRXk=,tag:AbTglJEGLAk3PgZzqspobg==,type:str]
-    SECRET_AUTHELIA_SMTP_PASSWORD: ENC[AES256_GCM,data:mvCc46QgBCeehMS9KRIu8w==,iv:w8P/rbIdElioKaMLHQ54G/w/qSepgYBoo/B+qUT60xs=,tag:AZxjNRoQ/h7DpqIhH8Mi1w==,type:str]
     SECRET_AUTHELIA_STORAGE_ENCRYPTION_KEY: ENC[AES256_GCM,data:YBU5F2QjInHEVg6zg6QFVqTLCsztq9VDfvAWeg==,iv:SAD1P95b5SUxPsq9+KGEaJr5+/NcC7nFkIZ23SuMe6g=,tag:HTdrjhqmAzoa8Me7YF+9rg==,type:str]
     SECRET_AUTHELIA_USER_CLAUDE_EMAIL: ENC[AES256_GCM,data:zFcLu4r4WFMVU1T1EPgiJKi8CxAyvuE=,iv:pv6ea/TcPEI9jIntJrjo14iBqj9GjgVhWHWrPn6mnQs=,tag:yMbeHtwIkjXt7aNGJU/UWA==,type:str]
     SECRET_AUTHELIA_USER_CLAUDE_PASSWORD: ENC[AES256_GCM,data:LMO3QfNvpse/BEjyOG6cfsllHcJ28OE8LLqlPGZdVOHkqG9C/naZ2Ri4k1x/1fyzL6YUOODZYExj6g3Zdl3zTsbjdVEryTrZ810183Zcb7RjBrXSZB81tk1CW+EARFq5Jc2N,iv:OGlGQQAPrrF9YP+tux39MeZWnrr+F7IsLfklv5xKfkE=,tag:sPewO2VQNR+8aq7S4JiXLg==,type:str]
@@ -68,11 +66,9 @@ stringData:
     SECRET_SONARR_API_KEY: ENC[AES256_GCM,data:JO5N+MeVeQmAlfv/dLJru5oHyVjpy9iUrfrTe4PLVXA=,iv:NjGstpjwFapd2LJNPy6nhXsp9UuCYTBuHRovmHdCSNc=,tag:BARsx6FBISHhxueBSDJSNw==,type:str]
     SECRET_SHARRY_DB_PASSWORD: ENC[AES256_GCM,data:Y0gk4bRcEws2b0SF4AY=,iv:3cQbD/uvWNGjEmz3z8uEbXWwJffIrTj3nSDsGBS0MEU=,tag:RsIBq9zI8+2temGj5r/Lqg==,type:str]
     SECRET_SHARRY_JDBC_URL: ENC[AES256_GCM,data:P+k/ATUM0qBZ9SR9hmTqOOFjRdQMx2oZeTuY0H8MkyEwV893aJNqnimSUgUNtRbuz6c=,iv:JXmHlUfAjEoWC3uHWtW91DLnvFGQviRcK8SqqVg/Z6I=,tag:3ZES+4cRE9B2GXStrs0wOg==,type:str]
-    SECRET_SMTP_USERNAME: ENC[AES256_GCM,data:mxPsPTmiQFngo2ZEAnMHbLhysMn7P8I=,iv:rJkydYYl8ct49IYwsy5zpCmBv9/sW7/qUxsaLxmZCXY=,tag:A8lSLRKW8vGGPAwP7X7KjA==,type:str]
     SECRET_QBITTORRENT_PASSWORD: ENC[AES256_GCM,data:+2IrY0dEoMDmHIuO4qP+LpNk24M=,iv:qZFA6PotReANHTQDpf8nRLtbOkUSFJEkfhS6yEZoleY=,tag:75gwdDU2bCiJms6H/v7kDQ==,type:str]
     SECRET_VAULTWARDEN_ADMIN_TOKEN: ENC[AES256_GCM,data:IK9y9radCvkNHmx7hvjn692zLEPuBDLEm4UkXzsvChXK9Kc79qCYyyCQ5QDbsVoZQDj0Amk138c1XkpEoNvg3g==,iv:UGLSQ0LlMX+qvFyxwOXWUC5j3XnGy12NA8WMIW+HIbM=,tag:ASuRdQmBaati2fRzzq6RwQ==,type:str]
     SECRET_VAULTWARDEN_DB_URL: ENC[AES256_GCM,data:gPjQOdsvGoXcz+mK1ijqeknLYrD55gH3Vv4A2nWrrEeDv/cMxP9QIfDtjxZNz0AggJlJt4n5Kyh5LaP/e5FgpaVYSZjb5/UY3iysTmeiisAx,iv:ej5JaoyB2OQK/so/BuUD8v3UQHVclMT9ATviwJuE9Hc=,tag:wIvcpgwbrjz2D1zc1J8yuA==,type:str]
-    SECRET_VAULTWARDEN_SMTP_PASSWORD: ENC[AES256_GCM,data:j8zz65lWneLFw9U6tYJgjA==,iv:/8w8jFrNoRolZyHyuunJoIdMf04htdXmlbK/ICsRNbk=,tag:oh6vXrtHknXFpW6kWv06Yg==,type:str]
     SECRET_VIKUNJA_JWT_SECRET: ENC[AES256_GCM,data:8axiOB5PPhjEwBoYB3NtT0ewlNWNK92EAIEAi+NR1J4=,iv:uNBL/FfhamQwBzfKbZTPBeGUgbOfKKQM4SdDCGMv+HU=,tag:YpK+cW/ISWj9jGCeWBeJSg==,type:str]
     SECRET_VIKUNJA_PASSWORD: ENC[AES256_GCM,data:m3pGmQGYvqPO0ubxhaDGNg==,iv:hIzZP5JMnG9W3QWr50YeZ9FDRNRh1qOWFliRIDHV6+I=,tag:6/ymdGs4Q2cla+bN8r9KGw==,type:str]
     SECRET_WALLABAG_DB_PASSWORD: ENC[AES256_GCM,data:6kI1fYuCEZzgNSqJ0vE=,iv:QMzl/GI5Wmudv7kp4y5PtyiCygAQDJHfVzLquMkjLsY=,tag:6Dr9lwtxKL1hlskTtcyKBg==,type:str]
@@ -96,8 +92,8 @@ sops:
             WG82VkdBMlNnRzBySFQzMk41cEtXSlEKBqOmq9UpO61C85+pj0ibdT31y4pmFsbm
             pTi4N0vv81kcf4ilqBU5h1gudNCb42Q2iL0eGNR4e3JzH4iaNsvnEg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-09-13T20:14:57Z"
-    mac: ENC[AES256_GCM,data:qvxBkPJv43Cqgk+HKp+pGdOtmwFrjgmzvPWY2ujiFlTqg0ZiWROyhqopuZbJNv3ik0nfcv6ebHvnWw6LJUamdH8lDqhuiAsXLtyqs7rBiucWc7THJ1VQcKlCIKMeHQaUeyA1+9bkfrUGacYeKlIp9/oMTNHxwXiI7joHJUdtnJM=,iv:ASAJVTiLk0tyczd5fmbPAP6GFpkdQp8QWGiZpFyyTM0=,tag:p+iagSry1SvAlAR3uSqYZQ==,type:str]
+    lastmodified: "2022-09-13T20:27:31Z"
+    mac: ENC[AES256_GCM,data:ybA9+ZtgN6rhindjNIZfm0iCWSWuwACt1vOFxLfnNH71AAS6AMl+AYiLpOKq9+jwAoi4T9B+kvdtL8Kmhzc6Q30oqhwKO8SpeLkpkPOE2woqapiZvjk467VVYpUCKEKarXE3bZY+9w0gvms02Jrg421+vnDTEF/HZKamLf4pizo=,iv:iZfsRxkYg//LshAFX2063BT4wcrVe5lErO16DcEgGN0=,tag:s0J1+0Cr6DaFMMN1q645YA==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3