# Mailgun SMTP Credentials Secret for Mailu
#
# This secret stores Mailgun credentials for outbound email relay.
# Mailu uses Mailgun as an external SMTP relay to send all outbound emails.
#
# ============================================================================
# HOW TO CONFIGURE:
# ============================================================================
#
# 1. Go to https://www.mailgun.com and create an account
#
# 2. Add and verify your domain:
#    - For dev: bakery-ia.dev
#    - For prod: bakewise.ai
#
# 3. Go to Domain Settings > SMTP credentials in Mailgun dashboard
#
# 4. Note your SMTP credentials:
#    - SMTP hostname: smtp.mailgun.org
#    - Port: 587 (TLS/STARTTLS)
#    - Username: typically postmaster@yourdomain.com
#    - Password: your Mailgun SMTP password (NOT the API key)
#
# 5. Base64 encode your credentials:
#    echo -n 'postmaster@bakewise.ai' | base64
#    echo -n 'your-mailgun-smtp-password' | base64
#
# 6. Replace the placeholder values below with your encoded credentials
#
# 7. Apply this secret:
#    kubectl apply -f mailgun-credentials-secret.yaml -n bakery-ia
#
# ============================================================================
# IMPORTANT NOTES:
# ============================================================================
#
# - Use the SMTP password from Mailgun, NOT the API key
# - The username format is: postmaster@yourdomain.com
# - For sandbox domains, Mailgun requires adding authorized recipients
# - Production domains need DNS verification (SPF, DKIM records)
#
# ============================================================================
# DNS RECORDS REQUIRED FOR MAILGUN:
# ============================================================================
#
# Add these DNS records to your domain for proper email delivery:
#
# 1. SPF Record (TXT):
#    Name: @
#    Value: v=spf1 include:mailgun.org ~all
#
# 2. DKIM Records (TXT):
#    Mailgun will provide two DKIM keys to add as TXT records
#    (check your Mailgun domain settings for exact values)
#
# 3. MX Records (optional, only if receiving via Mailgun):
#    Priority 10: mxa.mailgun.org
#    Priority 10: mxb.mailgun.org
#
# ============================================================================
---
apiVersion: v1
kind: Secret
metadata:
  name: mailu-mailgun-credentials
  namespace: bakery-ia
  labels:
    app: mailu
    component: external-relay
  annotations:
    description: "Mailgun SMTP credentials for Mailu external relay"
type: Opaque
stringData:
  # ============================================================================
  # REPLACE THESE VALUES WITH YOUR MAILGUN CREDENTIALS
  # ============================================================================
  #
  # Option 1: Use stringData (plain text - Kubernetes will encode automatically)
  # This is easier for initial setup but shows credentials in the file
  #
  RELAY_USERNAME: "postmaster@sandboxc1bff891532b4f0c83056a68ae080b4c.mailgun.org"
  RELAY_PASSWORD: "2e47104abadad8eb820d00042ea6d5eb-77c6c375-89c7ea55"
  #
  # ============================================================================
  # ALTERNATIVE: Use pre-encoded values (more secure for version control)
  # ============================================================================
  # Comment out stringData above and uncomment data below:
  #
  # data:
  #   # Base64 encoded values
  #   # echo -n 'postmaster@bakewise.ai' | base64
  #   RELAY_USERNAME: cG9zdG1hc3RlckBiYWtld2lzZS5haQ==
  #   # echo -n 'your-password' | base64
  #   RELAY_PASSWORD: WU9VUl9NQUlMR1VOX1NNVFBfUEFTU1dPUkQ=