# Mailgun SMTP Credentials Secret for Mailu
#
# This secret stores Mailgun credentials for outbound email relay.
# Mailu uses Mailgun as an external SMTP relay to send all outbound emails.
#
# HOW TO CONFIGURE:
# 1. Go to https://www.mailgun.com and create an account
# 2. Add and verify your domain (e.g., bakery-ia.dev or bakewise.ai)
# 3. Go to Domain Settings > SMTP credentials
# 4. Note your SMTP credentials:
#    - SMTP hostname: smtp.mailgun.org
#    - Port: 587 (TLS)
#    - Username: usually postmaster@yourdomain.com
#    - Password: your Mailgun SMTP password (NOT API key)
# 5. Base64 encode your password:
#    echo -n 'your-mailgun-smtp-password' | base64
# 6. Replace MAILGUN_SMTP_PASSWORD_BASE64 below with the encoded value
# 7. Apply this secret:
#    kubectl apply -f mailgun-credentials-secret.yaml -n bakery-ia
#
# IMPORTANT NOTES:
# - Use the SMTP password from Mailgun, not the API key
# - The username is typically postmaster@yourdomain.com
# - For sandbox domains, Mailgun requires authorized recipients
# - Production domains need DNS verification (SPF, DKIM, MX records)
#
# DNS RECORDS REQUIRED FOR MAILGUN:
# You will need to add these DNS records for your domain:
# - SPF: TXT record for email authentication
# - DKIM: TXT records for email signing (Mailgun provides these)
# - MX: If you want to receive emails via Mailgun (optional for relay-only)
#
---
apiVersion: v1
kind: Secret
metadata:
  name: mailu-mailgun-credentials
  namespace: bakery-ia
  labels:
    app: mailu
    component: external-relay
type: Opaque
data:
  # Base64 encoded Mailgun SMTP password
  # To encode: echo -n 'your-password' | base64
  # To decode: echo 'encoded-value' | base64 -d
  RELAY_PASSWORD: MAILGUN_SMTP_PASSWORD_BASE64
---
# Development environment secret (separate for different Mailgun domain)
apiVersion: v1
kind: Secret
metadata:
  name: mailu-mailgun-credentials-dev
  namespace: bakery-ia
  labels:
    app: mailu
    component: external-relay
    environment: dev
type: Opaque
data:
  # Mailgun credentials for bakery-ia.dev domain
  RELAY_PASSWORD: MAILGUN_DEV_SMTP_PASSWORD_BASE64
---
# Production environment secret
apiVersion: v1
kind: Secret
metadata:
  name: mailu-mailgun-credentials-prod
  namespace: bakery-ia
  labels:
    app: mailu
    component: external-relay
    environment: prod
type: Opaque
data:
  # Mailgun credentials for bakewise.ai domain
  RELAY_PASSWORD: MAILGUN_PROD_SMTP_PASSWORD_BASE64