# Default values for opendkim.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1
persistence:
  enabled: false
  existingClaim: mailboxes

opendkim:
  image:
    repository: registry.geekhome.org/ghp/opendkim
    tag: 2.11.0
    pullPolicy: Always
  configmaps:
    opendkim: |
      PidFile	/var/run/opendkim/opendkim.pid
      Mode sv
      Syslog yes
      SyslogSuccess yes
      LogWhy yes
      UserID opendkim:opendkim
      Socket inet:8891
      Umask 002
      SendReports yes
      SoftwareHeader yes
      Canonicalization relaxed/relaxed
      Domain example.com
      Selector default
      MinimumKeyBits 1024
      KeyTable refile:/etc/opendkim/KeyTable
      SigningTable refile:/etc/opendkim/SigningTable
      ExternalIgnoreList refile:/etc/opendkim/TrustedHosts
      InternalHosts	refile:/etc/opendkim/TrustedHosts
      OversignHeaders	From
    keytable: |
      default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private
    signingtable: |
      *@example.com default._domainkey.example.com
    trustedhosts: |
      127.0.0.1
      ::1
      *.example.com
    default-private: |
      -----BEGIN RSA PRIVATE KEY-----
      YOUR_DKIM_PRIVATE_KEY
      -----END RSA PRIVATE KEY-----
    default-public: |
      default._domainkey	IN	TXT	( "v=DKIM1; k=rsa; "
      	  "p=YOUR_DKIM_PUBLIC_KEY" )  ; ----- DKIM key default for example.com

service:
  type: ClusterIP

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name:

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000


resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

nodeSelector: {}

tolerations: []

affinity: {}