Add new infra architecture 9

infrastructure/platform/networking/dns/unbound-helm/templates/service.yaml

@@ -11,6 +11,9 @@ metadata:
   {{- end }}
 spec:
   type: {{ .Values.service.type }}
+  {{- if .Values.service.clusterIP }}
+  clusterIP: {{ .Values.service.clusterIP }}
+  {{- end }}
   ports:
     - name: dns-udp
       port: {{ .Values.service.ports.dnsUdp }}

infrastructure/platform/networking/dns/unbound-helm/values.yaml

@@ -34,6 +34,10 @@ securityContext:
 # Service configuration
 service:
   type: "ClusterIP"
+  # Static ClusterIP for predictable DNS configuration
+  # This allows other services (like Mailu) to reference a stable IP
+  # Must be within the cluster's service CIDR range (typically 10.96.0.0/12)
+  clusterIP: "10.96.53.53"
   ports:
     dnsUdp: 53
     dnsTcp: 53

infrastructure/platform/networking/ingress/base/ingress.yaml

@@ -10,7 +10,7 @@ metadata:
     # Nginx ingress controller annotations
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/proxy-body-size: "100m"
+    nginx.ingress.kubernetes.io/proxy-body-size: "500m"
     nginx.ingress.kubernetes.io/proxy-connect-timeout: "600"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
     nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"