apiVersion: v1
kind: ConfigMap
metadata:
  name: mailu-config
  namespace: bakery-ia
  labels:
    app: mailu
    component: config
data:
  # Domain configuration
  DOMAIN: "bakewise.ai"
  HOSTNAMES: "mail.bakewise.ai"
  POSTMASTER: "admin"

  # Kubernetes-specific settings
  # These help Mailu components discover each other in K8s
  FRONT_ADDRESS: "mailu-front.bakery-ia.svc.cluster.local"
  ADMIN_ADDRESS: "mailu-admin.bakery-ia.svc.cluster.local"
  SMTP_ADDRESS: "mailu-smtp.bakery-ia.svc.cluster.local"
  IMAP_ADDRESS: "mailu-imap.bakery-ia.svc.cluster.local"
  ANTISPAM_ADDRESS: "mailu-antispam.bakery-ia.svc.cluster.local"

  # Redis Configuration - Using shared cluster Redis (database 15 reserved for Mailu)
  # The shared Redis has 16 databases (0-15), Mailu uses db 15 for isolation
  # Using plain TCP port 6380 for internal cluster communication (TLS on 6379 for external)
  # Primary configuration: Redis URL is configured in mailu-secrets.yaml as REDIS_URL
  # Format: redis://:password@host:port/db
  # Fallback configuration: REDIS_ADDRESS, REDIS_DB, and REDIS_PW
  REDIS_ADDRESS: "redis-service.bakery-ia.svc.cluster.local:6380"
  REDIS_DB: "15"
  # REDIS_PW is set from secrets for Redis authentication

  # External SMTP Relay Configuration
  # Mailu relays outbound emails through an external service for better deliverability
  # Supported providers: Mailgun, SendGrid, AWS SES, Postmark
  #
  # Provider RELAYHOST examples:
  #   Mailgun:  [smtp.mailgun.org]:587
  #   SendGrid: [smtp.sendgrid.net]:587
  #   AWS SES:  [email-smtp.us-east-1.amazonaws.com]:587
  #   Postmark: [smtp.postmarkapp.com]:587
  #
  # IMPORTANT: Update RELAY_PASSWORD in mailu-secrets.yaml with your provider's API key
  RELAYHOST: "[smtp.mailgun.org]:587"
  RELAY_LOGIN: "postmaster@bakewise.ai"

  # Security settings
  TLS_FLAVOR: "cert"
  AUTH_RATELIMIT_IP: "60/hour"
  AUTH_RATELIMIT_USER: "100/day"

  # Message limits
  MESSAGE_SIZE_LIMIT: "52428800"  # 50MB
  MESSAGE_RATELIMIT: "200/day"

  # Features - disable ClamAV in dev to save resources (enable in prod)
  WEBMAIL: "roundcube"
  ANTIVIRUS: "none"
  ANTISPAM: "rspamd"

  # Postfix configuration
  POSTFIX_MESSAGE_SIZE_LIMIT: "52428800"
  POSTFIX_QUEUE_MINIMUM: "1"
  POSTFIX_QUEUE_LIFETIME: "7d"

  # DKIM configuration
  DKIM_SELECTOR: "mailu"
  DKIM_KEY_LENGTH: "2048"

  # Webmail settings
  WEB_WEBMAIL: "/webmail"
  WEB_ADMIN: "/admin"
  WEBMAIL_ADMIN: "admin@bakewise.ai"

  # Logging
  LOG_LEVEL: "INFO"

  # Disable welcome email during development
  WELCOME: "false"