Add new infra architecture 9

infrastructure/platform/mail/mailu-helm/dev/values.yaml

@@ -2,7 +2,8 @@
 global:
   # Using Unbound DNS for DNSSEC validation (required by Mailu admin)
   # Unbound service is available at unbound-dns.bakery-ia.svc.cluster.local
-  custom_dns_servers: "10.98.197.120"  # Unbound DNS service IP
+  # Static ClusterIP configured in unbound-helm/values.yaml
+  custom_dns_servers: "10.96.53.53"  # Unbound DNS static ClusterIP
 
 # Redis configuration - use built-in Mailu Redis (no authentication needed)
 externalRedis:
@@ -14,7 +15,7 @@ admin:
   dnsPolicy: "None"
   dnsConfig:
     nameservers:
-      - "10.98.197.120"   # Unbound DNS for DNSSEC validation (forwards cluster.local to kube-dns)
+      - "10.96.53.53"   # Unbound DNS static ClusterIP (forwards cluster.local to kube-dns)
     searches:
       - "bakery-ia.svc.cluster.local"
       - "svc.cluster.local"