coulomb/railiance-apps
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enable IONOS SMTP mailer for Forgejo on railiance01
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Wire forgejo@coulomb.social via smtp.ionos.com:587 in Helm values and add
SOPS-encrypted mailbox password overlay for forgejo-deploy.
This commit is contained in:
tegwick 2026-07-07 02:42:46 +02:00
parent efb095ea2c
commit 24c8882b69
4 changed files with 84 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

43
docs/forgejo-on-railiance01.md
View file

@ -81,6 +81,49 @@ make forgejo-logs
make forgejo-smoke
```
## SMTP (IONOS) — password reset / notifications
Decision: `the-custodian/docs/forgejo-production-decisions.md` (IONOS, 2026-07-07).
Operator provisions a mailbox on `coulomb.social` in the IONOS control panel
(e.g. `forgejo@coulomb.social`). Subdomains use the same IONOS SMTP relay; the
`FROM` address must be a valid mailbox on the zone.
Non-secret Helm values belong in `helm/forgejo-values.yaml` under
`gitea.config.mailer` once ready to enable:
```yaml
gitea:
config:
mailer:
ENABLED: true
FROM: forgejo@coulomb.social
MAILER_TYPE: smtp
HOST: smtp.ionos.com:587 # or smtp.ionos.de:587 for EU accounts
IS_TLS_ENABLED: true
USER: forgejo@coulomb.social
```
Mailbox password goes in `helm/forgejo-secrets.sops.yaml` (encrypt from template):
```yaml
gitea:
config:
mailer:
PASSWD: <IONOS mailbox password>
```
Deploy path:
```bash
cd ~/railiance-apps
make check-sops
KUBECONFIG=~/.kube/config-hosteurope make forgejo-deploy
# T06: Admin → user → Send reset password; confirm email delivery
```
Do not enable `mailer.ENABLED` until the SOPS secret is in place.
## Coexistence with Gitea
Gitea on coulombcore remains canonical until `RAIL-HO-WP-0005` migration drills