2021-01-17 01:09:41 +00:00
|
|
|
# Default values for opendkim.
|
|
|
|
|
# This is a YAML-formatted file.
|
|
|
|
|
# Declare variables to be passed into your templates.
|
|
|
|
|
|
|
|
|
|
replicaCount: 1
|
|
|
|
|
persistence:
|
|
|
|
|
enabled: false
|
|
|
|
|
existingClaim: mailboxes
|
|
|
|
|
|
|
|
|
|
opendkim:
|
|
|
|
|
image:
|
2023-06-10 05:05:02 +00:00
|
|
|
repository: gitea.geekhome.org/ghp/opendkim
|
2023-08-01 15:35:35 +00:00
|
|
|
tag: 2.11.0-2
|
2021-01-17 01:09:41 +00:00
|
|
|
pullPolicy: Always
|
|
|
|
|
configmaps:
|
|
|
|
|
opendkim: |
|
|
|
|
|
PidFile /var/run/opendkim/opendkim.pid
|
|
|
|
|
Mode sv
|
|
|
|
|
Syslog yes
|
|
|
|
|
SyslogSuccess yes
|
|
|
|
|
LogWhy yes
|
|
|
|
|
UserID opendkim:opendkim
|
|
|
|
|
Socket inet:8891
|
|
|
|
|
Umask 002
|
|
|
|
|
SendReports yes
|
|
|
|
|
SoftwareHeader yes
|
|
|
|
|
Canonicalization relaxed/relaxed
|
|
|
|
|
Domain example.com
|
|
|
|
|
Selector default
|
|
|
|
|
MinimumKeyBits 1024
|
|
|
|
|
KeyTable refile:/etc/opendkim/KeyTable
|
|
|
|
|
SigningTable refile:/etc/opendkim/SigningTable
|
|
|
|
|
ExternalIgnoreList refile:/etc/opendkim/TrustedHosts
|
|
|
|
|
InternalHosts refile:/etc/opendkim/TrustedHosts
|
|
|
|
|
OversignHeaders From
|
|
|
|
|
keytable: |
|
|
|
|
|
default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private
|
|
|
|
|
signingtable: |
|
|
|
|
|
*@example.com default._domainkey.example.com
|
|
|
|
|
trustedhosts: |
|
|
|
|
|
127.0.0.1
|
|
|
|
|
::1
|
|
|
|
|
*.example.com
|
|
|
|
|
default-private: |
|
|
|
|
|
-----BEGIN RSA PRIVATE KEY-----
|
|
|
|
|
YOUR_DKIM_PRIVATE_KEY
|
|
|
|
|
-----END RSA PRIVATE KEY-----
|
|
|
|
|
default-public: |
|
|
|
|
|
default._domainkey IN TXT ( "v=DKIM1; k=rsa; "
|
|
|
|
|
"p=YOUR_DKIM_PUBLIC_KEY" ) ; ----- DKIM key default for example.com
|
|
|
|
|
|
|
|
|
|
service:
|
|
|
|
|
type: ClusterIP
|
|
|
|
|
|
|
|
|
|
imagePullSecrets: []
|
|
|
|
|
nameOverride: ""
|
|
|
|
|
fullnameOverride: ""
|
|
|
|
|
|
|
|
|
|
serviceAccount:
|
|
|
|
|
# Specifies whether a service account should be created
|
|
|
|
|
create: true
|
|
|
|
|
# Annotations to add to the service account
|
|
|
|
|
annotations: {}
|
|
|
|
|
# The name of the service account to use.
|
|
|
|
|
# If not set and create is true, a name is generated using the fullname template
|
|
|
|
|
name:
|
|
|
|
|
|
|
|
|
|
podSecurityContext: {}
|
|
|
|
|
# fsGroup: 2000
|
|
|
|
|
|
|
|
|
|
securityContext: {}
|
|
|
|
|
# capabilities:
|
|
|
|
|
# drop:
|
|
|
|
|
# - ALL
|
|
|
|
|
# readOnlyRootFilesystem: true
|
|
|
|
|
# runAsNonRoot: true
|
|
|
|
|
# runAsUser: 1000
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
resources: {}
|
|
|
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
|
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
|
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
|
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
|
|
|
# limits:
|
|
|
|
|
# cpu: 100m
|
|
|
|
|
# memory: 128Mi
|
|
|
|
|
# requests:
|
|
|
|
|
# cpu: 100m
|
|
|
|
|
# memory: 128Mi
|
|
|
|
|
|
|
|
|
|
nodeSelector: {}
|
|
|
|
|
|
|
|
|
|
tolerations: []
|
|
|
|
|
|
|
|
|
|
affinity: {}
|
