Fix issues 7

infrastructure/platform/mail/mailu-helm/prod/values.yaml

@@ -42,9 +42,18 @@ initialAccount:
 externalRelay:
   host: "[smtp.mailersend.net]:2525"
   # Credentials loaded from existing Kubernetes secret
-  secretName: "mailu-mailersend-credentials"
-  usernameKey: "RELAY_USERNAME"
-  passwordKey: "RELAY_PASSWORD"
+  # Key names use Helm chart defaults (relay-username, relay-password)
+  existingSecret: "mailu-mailersend-credentials"
+
+# Postfix configuration
+# CRITICAL: podAnnotations ensures Postfix restarts when credentials change
+# Without this, Mailu reads SASL credentials only at pod startup and won't pick up secret updates
+postfix:
+  podAnnotations:
+    # UPDATE THIS VALUE when changing mailu-mailersend-credentials secret
+    # This triggers a rolling restart of Postfix to reload SASL credentials
+    # Generate new value: date +%s or use the secret's resourceVersion
+    credentials-version: "1706054400"
 
 # Environment-specific configurations
 persistence: