From 3e211a1cb4e87b333adf28a0f3ef8bd239484742 Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 7 Jul 2026 16:40:12 +0200 Subject: [PATCH] Fix Forgejo IONOS SMTP: STARTTLS on smtp.ionos.de Use PROTOCOL=smtp+starttls with the EU relay (smtp.ionos.de). Port 587 with implicit TLS on smtp.ionos.com failed TLS handshake; .com auth also fails for EU mailboxes. Document OpenBao PASSWD field mapping in operator docs. --- docs/forgejo-on-railiance01.md | 8 ++++---- helm/forgejo-values.yaml | 7 ++++--- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/docs/forgejo-on-railiance01.md b/docs/forgejo-on-railiance01.md index 16d942c..b68ba5c 100644 --- a/docs/forgejo-on-railiance01.md +++ b/docs/forgejo-on-railiance01.md @@ -98,9 +98,9 @@ gitea: mailer: ENABLED: true FROM: forgejo@coulomb.social - MAILER_TYPE: smtp - HOST: smtp.ionos.com:587 # or smtp.ionos.de:587 for EU accounts - IS_TLS_ENABLED: true + PROTOCOL: smtp+starttls + SMTP_ADDR: smtp.ionos.de # EU IONOS mailboxes; use smtp.ionos.com for US + SMTP_PORT: 587 USER: forgejo@coulomb.social ``` @@ -109,7 +109,7 @@ Mailbox password is stored in **OpenBao** and delivered by External Secrets: | Item | Value | | --- | --- | | OpenBao path | `platform/workloads/forgejo/forgejo-mailer` | -| Field | `MAILER_PASSWD` | +| Field | `PASSWD` (synced to Secret key `MAILER_PASSWD`) | | ExternalSecret | `manifests/forgejo-mailer-externalsecret.yaml` | | Helm consumption | `gitea.additionalConfigFromEnvs` → `GITEA__mailer__PASSWD` | diff --git a/helm/forgejo-values.yaml b/helm/forgejo-values.yaml index 8931638..29f1283 100644 --- a/helm/forgejo-values.yaml +++ b/helm/forgejo-values.yaml @@ -59,9 +59,10 @@ gitea: mailer: ENABLED: true FROM: forgejo@coulomb.social - MAILER_TYPE: smtp - HOST: smtp.ionos.com:587 - IS_TLS_ENABLED: true + # IONOS submission port 587 uses STARTTLS, not implicit TLS (smtps). + PROTOCOL: smtp+starttls + SMTP_ADDR: smtp.ionos.de + SMTP_PORT: 587 USER: forgejo@coulomb.social actions: ENABLED: true \ No newline at end of file