Fix Forgejo IONOS SMTP: STARTTLS on smtp.ionos.de
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 3s

Use PROTOCOL=smtp+starttls with the EU relay (smtp.ionos.de). Port 587 with
implicit TLS on smtp.ionos.com failed TLS handshake; .com auth also fails for
EU mailboxes. Document OpenBao PASSWD field mapping in operator docs.
This commit is contained in:
tegwick 2026-07-07 16:40:12 +02:00
parent d61173d66e
commit 3e211a1cb4
2 changed files with 8 additions and 7 deletions

View file

@ -98,9 +98,9 @@ gitea:
mailer:
ENABLED: true
FROM: forgejo@coulomb.social
MAILER_TYPE: smtp
HOST: smtp.ionos.com:587 # or smtp.ionos.de:587 for EU accounts
IS_TLS_ENABLED: true
PROTOCOL: smtp+starttls
SMTP_ADDR: smtp.ionos.de # EU IONOS mailboxes; use smtp.ionos.com for US
SMTP_PORT: 587
USER: forgejo@coulomb.social
```
@ -109,7 +109,7 @@ Mailbox password is stored in **OpenBao** and delivered by External Secrets:
| Item | Value |
| --- | --- |
| OpenBao path | `platform/workloads/forgejo/forgejo-mailer` |
| Field | `MAILER_PASSWD` |
| Field | `PASSWD` (synced to Secret key `MAILER_PASSWD`) |
| ExternalSecret | `manifests/forgejo-mailer-externalsecret.yaml` |
| Helm consumption | `gitea.additionalConfigFromEnvs``GITEA__mailer__PASSWD` |

View file

@ -59,9 +59,10 @@ gitea:
mailer:
ENABLED: true
FROM: forgejo@coulomb.social
MAILER_TYPE: smtp
HOST: smtp.ionos.com:587
IS_TLS_ENABLED: true
# IONOS submission port 587 uses STARTTLS, not implicit TLS (smtps).
PROTOCOL: smtp+starttls
SMTP_ADDR: smtp.ionos.de
SMTP_PORT: 587
USER: forgejo@coulomb.social
actions:
ENABLED: true