Add new infra architecture 5

infrastructure/platform/mail/mailu-helm/dev/values.yaml

@@ -1,5 +1,20 @@
-# Dev-specific Mailu Helm values for Bakery-IA
-# Overrides base configuration for development environment
+# Development-tuned Mailu configuration
+global:
+  # Use the unbound service IP - will be replaced during deployment
+  custom_dns_servers: "unbound-dns.bakery-ia.svc.cluster.local"  # Using service DNS name instead of IP
+
+# Component-specific DNS configuration
+admin:
+  dnsPolicy: "None"
+  dnsConfig:
+    nameservers:
+      - "unbound-dns.bakery-ia.svc.cluster.local"  # Using service DNS name instead of IP
+
+rspamd:
+  dnsPolicy: "None"
+  dnsConfig:
+    nameservers:
+      - "unbound-dns.bakery-ia.svc.cluster.local"  # Using service DNS name instead of IP
 
 # Domain configuration for dev
 domain: "bakery-ia.local"
@@ -12,7 +27,64 @@ externalRelay:
   username: "postmaster@bakery-ia.local"
   password: "mailgun-api-key-replace-in-production"
 
-# Ingress configuration for dev - disabled to use with existing ingress
+# Environment-specific configurations
+persistence:
+  enabled: true
+  # Development: use default storage class
+  storageClass: "standard"
+  size: "5Gi"
+
+# Resource optimizations for development
+resources:
+  admin:
+    requests:
+      cpu: "100m"
+      memory: "128Mi"
+    limits:
+      cpu: "500m"
+      memory: "256Mi"
+  front:
+    requests:
+      cpu: "50m"
+      memory: "64Mi"
+    limits:
+      cpu: "200m"
+      memory: "128Mi"
+  postfix:
+    requests:
+      cpu: "100m"
+      memory: "128Mi"
+    limits:
+      cpu: "300m"
+      memory: "256Mi"
+  dovecot:
+    requests:
+      cpu: "100m"
+      memory: "128Mi"
+    limits:
+      cpu: "300m"
+      memory: "256Mi"
+  rspamd:
+    requests:
+      cpu: "50m"
+      memory: "64Mi"
+    limits:
+      cpu: "200m"
+      memory: "128Mi"
+  clamav:
+    requests:
+      cpu: "100m"
+      memory: "256Mi"
+    limits:
+      cpu: "300m"
+      memory: "512Mi"
+
+replicaCount: 1  # Single replica for development
+
+# Security settings
+secretKey: "generate-strong-key-here-for-development"
+
+# Ingress configuration for development - disabled to use with existing ingress
 ingress:
   enabled: false  # Disable chart's Ingress; use existing one
   tls: false      # Disable TLS in chart since ingress handles it
@@ -33,6 +105,15 @@ welcomeMessage:
 # Log level for dev
 logLevel: "DEBUG"
 
+# Development-specific overrides
+env:
+  DEBUG: "true"
+  LOG_LEVEL: "INFO"
+
+# Disable or simplify monitoring in development
+monitoring:
+  enabled: false
+
 # Network Policy for dev
 networkPolicy:
   enabled: true