Add new infra architecture 3

infrastructure/platform/mail/mailu-helm/mailu-ingress.yaml

@@ -0,0 +1,28 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: mailu-ingress
+  namespace: bakery-ia  # Same as Mailu's namespace
+  annotations:
+    kubernetes.io/ingress.class: nginx  # Or your Ingress class
+    nginx.ingress.kubernetes.io/proxy-body-size: "100m"  # Allow larger email attachments
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"  # For long connections
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"  # Redirect HTTP to HTTPS
+    # If using Cert-Manager: cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  tls:
+  - hosts:
+    - mail.bakery-ia.local  # or mail.bakewise.ai for prod
+    secretName: mail-tls-secret  # Your TLS Secret
+  rules:
+  - host: mail.bakery-ia.local  # or mail.bakewise.ai for prod
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: mailu-front-http  # Mailu's front service (check with kubectl get svc -n bakery-ia)
+            port:
+              number: 80