95 lines
3.5 KiB
YAML
95 lines
3.5 KiB
YAML
# Mailgun SMTP Credentials Secret for Mailu
|
|
#
|
|
# This secret stores Mailgun credentials for outbound email relay.
|
|
# Mailu uses Mailgun as an external SMTP relay to send all outbound emails.
|
|
#
|
|
# ============================================================================
|
|
# HOW TO CONFIGURE:
|
|
# ============================================================================
|
|
#
|
|
# 1. Go to https://www.mailgun.com and create an account
|
|
#
|
|
# 2. Add and verify your domain:
|
|
# - For dev: bakery-ia.dev
|
|
# - For prod: bakewise.ai
|
|
#
|
|
# 3. Go to Domain Settings > SMTP credentials in Mailgun dashboard
|
|
#
|
|
# 4. Note your SMTP credentials:
|
|
# - SMTP hostname: smtp.mailgun.org
|
|
# - Port: 587 (TLS/STARTTLS)
|
|
# - Username: typically postmaster@yourdomain.com
|
|
# - Password: your Mailgun SMTP password (NOT the API key)
|
|
#
|
|
# 5. Base64 encode your credentials:
|
|
# echo -n 'postmaster@bakewise.ai' | base64
|
|
# echo -n 'your-mailgun-smtp-password' | base64
|
|
#
|
|
# 6. Replace the placeholder values below with your encoded credentials
|
|
#
|
|
# 7. Apply this secret:
|
|
# kubectl apply -f mailgun-credentials-secret.yaml -n bakery-ia
|
|
#
|
|
# ============================================================================
|
|
# IMPORTANT NOTES:
|
|
# ============================================================================
|
|
#
|
|
# - Use the SMTP password from Mailgun, NOT the API key
|
|
# - The username format is: postmaster@yourdomain.com
|
|
# - For sandbox domains, Mailgun requires adding authorized recipients
|
|
# - Production domains need DNS verification (SPF, DKIM records)
|
|
#
|
|
# ============================================================================
|
|
# DNS RECORDS REQUIRED FOR MAILGUN:
|
|
# ============================================================================
|
|
#
|
|
# Add these DNS records to your domain for proper email delivery:
|
|
#
|
|
# 1. SPF Record (TXT):
|
|
# Name: @
|
|
# Value: v=spf1 include:mailgun.org ~all
|
|
#
|
|
# 2. DKIM Records (TXT):
|
|
# Mailgun will provide two DKIM keys to add as TXT records
|
|
# (check your Mailgun domain settings for exact values)
|
|
#
|
|
# 3. MX Records (optional, only if receiving via Mailgun):
|
|
# Priority 10: mxa.mailgun.org
|
|
# Priority 10: mxb.mailgun.org
|
|
#
|
|
# ============================================================================
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: mailu-mailgun-credentials
|
|
namespace: bakery-ia
|
|
labels:
|
|
app: mailu
|
|
component: external-relay
|
|
annotations:
|
|
description: "Mailgun SMTP credentials for Mailu external relay"
|
|
type: Opaque
|
|
stringData:
|
|
# ============================================================================
|
|
# REPLACE THESE VALUES WITH YOUR MAILGUN CREDENTIALS
|
|
# ============================================================================
|
|
#
|
|
# Option 1: Use stringData (plain text - Kubernetes will encode automatically)
|
|
# This is easier for initial setup but shows credentials in the file
|
|
#
|
|
RELAY_USERNAME: "postmaster@sandboxc1bff891532b4f0c83056a68ae080b4c.mailgun.org"
|
|
RELAY_PASSWORD: "2e47104abadad8eb820d00042ea6d5eb-77c6c375-89c7ea55"
|
|
#
|
|
# ============================================================================
|
|
# ALTERNATIVE: Use pre-encoded values (more secure for version control)
|
|
# ============================================================================
|
|
# Comment out stringData above and uncomment data below:
|
|
#
|
|
# data:
|
|
# # Base64 encoded values
|
|
# # echo -n 'postmaster@bakewise.ai' | base64
|
|
# RELAY_USERNAME: cG9zdG1hc3RlckBiYWtld2lzZS5haQ==
|
|
# # echo -n 'your-password' | base64
|
|
# RELAY_PASSWORD: WU9VUl9NQUlMR1VOX1NNVFBfUEFTU1dPUkQ=
|