From 79dfb7c6948836f50dba5efb1a6402720718d199 Mon Sep 17 00:00:00 2001
From: Eric Meehan <eric@eom.dev>
Date: Fri, 23 Oct 2026 11:33:01 -0400
Subject: [PATCH] Update

---
 tasks/.main.yml.swp | Bin 12288 -> 0 bytes
 tasks/main.yml      |  92 +++++++++++++++++++++-----------------------
 2 files changed, 44 insertions(+), 48 deletions(-)
 delete mode 100644 tasks/.main.yml.swp

diff --git a/tasks/.main.yml.swp b/tasks/.main.yml.swp
deleted file mode 100644
index c1a94a0ff4bd3f90d51992454b5e76c1cae814f4..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 12288
zcmeI2&x;&I6vxZoKVqWBgLqJ$JBNTcv%d($0nsI^VaaYbWD}Dhveb6J*{N)IRa;fP
zyJLugc+iUny@`1ANAw`5;2)p|!Gn78ASkF858_G9&2RPm>P<|{K@p{zd@?g#uU@_P
z?W$KDQfpIBEG*GOt!aVl4k7j|ey$$5`DgL|VIkP6B;5Y1%bP8>%_1w^l`WqQ4kzc?
zZFo~mO6}BI#!YMRS1whSOFcX3rQ2|m_^DgHJiD^L*cugx3S6ZErSCKk>=v^#(^H{G
zW8!|gYwwAx>>SOa0#SjeKvW<q5EY0DL<OP(QGx%10=~FLJcmTC9VByX@OjNepM#(A
zBPtLThzdjnq5@HYs6bR8Di9Tj3Pc5>0#SkgpaL=#V)1$*-n#+8<NyDM|Nj5(b|Jn2
zAAvW)%it_{7~Bi41;6eQ;!AKIXpn<_;J4jE`~<!NAAsk<X>cF-@irko1?R!5U>juM
zDKG=>2EXqT;ydsOcn`b=UIY@%g9pH!;KHp!`~bcL1=s`5-y*~^co^&hyTOH<h4>zP
z20jEY0SA`BJlGF*fnRQdFYpm~9lQVxI1T2(J>WX<?Ttcw0X_!rfLFkC;0%}pd%@Sx
zGidrQI1k<dZ-ckMo8S!)uc$y&AS!Tq1?VzY!q(%=l$PskTgpr-=SsG1nn+|bv`vU{
z#|D*->0s!w)bBwZV`-7SdrT*`SNN(?byOlfyIRkUa*eHK+^ojX>z18sC7E;%L+N#;
zw=W&&$f1QJr)Z&XOb3njIN+7B9r=}78!x>w+O<bFeFm2unK>TaVl8nzEZuoq_5Id5
z_6ly(L7YAFY!{9WdONn8D&esikxUXqzhqLFA7h!Gw950cPR0WgIrR)$r>CY4sZkh2
z4Jz0=g#lpQ;%$6G7zZ<{@;0?vt&wTXY&<eFGo{7YZ902yWGXuyrIqjPxan~c&JL8J
zC!ZP_YXrT*87JQ08P~ixPD-TF3o7%r-_cf>bmhv;bF~Li_ex~BFiv4K#FxwM4Wt{6
z<b@M@%`ILV1*URLz+tLr7=9&O|CZii?40u|_UV}eOZ6v7loVz4fO8S-`j_RWOLo3C
z8^isfkNwj#SK%X5xvG0;P^L7y2T7)9Fg3|{IVb5zbC`wF_RykJ2%Vcv4y}YIne}MR
zN*IvrU^dgf@!Z)ro@EX68ceAN$(2br_+7$m3d^-c3mxj2l2SukQe$94uHZy<di8Fl
zPE4M2XvfeUEKswBhb;PngejkN4Hi&UDS`<~h;7mFu0m{?Go(;CSUQB7bS0KW^=Z8$
zTWT_zSZ^w8bQr?XmhxTb;e9q<Yz;aYyp}RU)|UI>q=eE?4>{$IEHgh2y;2Q1Wh^V*
zLOl3G393n=3{Id9Qy7Ufo|J#jqJ#dWo^vOlNHvwFMneu-ju?H+7_3Hb%X-2PEM3-F
zFEl=`GIl+b6qJyQ%!ryax42mIN|ahtjPt<Lk%e4SkW`_rj4ZEI4jR;PhpZ`!HqA^;
zjbr|&%0y!9IQJcOBD4%+?vz=kWzNf+Y^@5Vd1APuT;_J=>L|LQxLIsr?Qx;(8s|f=
zP_wF9)nb#kQr;X0l%A1#-Sqn%W|X#xvuB5<tNq4RNC>a18{DIF=Z2wlvB%gA%-`Nz
zp)Tn;Ze5jyx~OY|oXMHs&r!FUvWC`}3TrlzZn|Ulz_z+&EH=D)Tr$m-UM&V~wV;SN
zq&Z6V(VfXswPgEpR6YhGRNsg4H?U7*4#|vG*oRHcjTU@m7mBzkwIACb?=oH{r0v%%
zH|*uR(pP0?>BP$MswAv4^2B=vQ_4kVdT`zrgBTh#&v=VK+orTC?D8%w`k)K)<P_Bf
zKT*XjVSyA`cr6*$zec|Zg>_G-=av?m7$cY7qgMxOYHT(?C>@(JLv^q68cd7XzEQuS
zpIRtpo>zlhu0RE@ElP`x7lp3gHuO`agZgLvs^w0by51MAJvq6KdRMNsP}3$mTL*?a
z=WMgfS>CMdTQI45@0hQ%xK(@S3Jawb`m{xp`i6ZiMT4qi@>RxFW`BB?UNoCc(O5Y;
bf2z5NTCN>87g7{tyy=C~wX|@&IVJu8!@G1z

diff --git a/tasks/main.yml b/tasks/main.yml
index 8928254..925e002 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -4,7 +4,7 @@
 - name: deploy
   kubernetes.core.helm:
     name: mailman3
-    chart_ref: https://github.com/fw8/mailman3-helm-chart.git
+    chart_ref: https://gitea.eom.dev/DevOps/helm-mailman3/releases/download/v1.0.8/helm-mailman3-v1.0.8.tar.gz
     release_namespace: mailman3
     create_namespace: true
     values:
@@ -15,8 +15,8 @@
       # These are the settings that you MUST change before deploying:
       # Initial Settings for the admin account:
       admin:
-        username: admin
-        email: mailman@eom.dev
+        username: mailman_admin
+        email: mailman_admin@eom.dev
         password: "{{ mailman_admin_password }}"
       # some keys have to be provided...
       hyperkittyApiKey: "{{ mailman_hyperkitty_api_key }}"
@@ -28,55 +28,51 @@
       core:
         image:
           repository: maxking/mailman-core
-        podAnnotations: {}
-        podSecurityContext: {}
-        # fsGroup: 2000
-        securityContext: {}
-        # capabilities:
-        #   drop:
-        #   - ALL
-        # readOnlyRootFilesystem: true
-        # runAsNonRoot: true
-        # runAsUser: 1000
-        nodeSelector: {}
-        tolerations: []
-        affinity: {}
-        resources:
-        # We usually recommend not to specify default resources and to leave this as a conscious
-        # choice for the user. This also increases chances charts run on environments with little
-        # resources, such as Minikube. If you do want to specify resources, uncomment the following
-        # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
-          limits:
-            cpu: 100m
-            memory: 512Mi
-          requests:
-            cpu: 100m
-            memory: 128Mi
         persistence:
-          # persistence.existingClaim: ...
-          size: 100Gi
-          accessMode: ReadWriteOnce
+          size: 2Ti
+        resources:
+          limits:
+            memory: 2Gi
+          requests:
+            memory: 512Mi
+      smtp:
+        host: postfix.eom.dev
+        host_user: mailman_admin@eom.dev
+        host_password: "{{ mailman_admin_password }}"
+        use_tls: "true"
+        port: "587"
       web:
         image:
           repository: maxking/mailman-web
-        podAnnotations: {}
-        podSecurityContext: {}
-        securityContext: {}
-        nodeSelector: {}
-        tolerations: []
-        affinity: {}
-        resources: {}
         persistence:
-          # persistence.existingClaim: ...
-          size: 100Gi
-          accessMode: ReadWriteOnce
-      service:
-        type: ClusterIP
+          size: 2Ti
       ingress:
-        enabled: false
-        tls: false
+        enabled: true
+        className: nginx
         annotations:
-          # use NGINX Ingress Controller
-          kubernetes.io/ingress.class: "nginx"
-          # use Cert-Manager for LetsEncrypt Certificates
-          cert-manager.io/issuer: "ca-cert"
+          cert-manager.io/cluster-issuer: ca-issuer
+          nginx.ingress.kubernetes.io/enable-cors: "true"
+          nginx.ingress.kubernetes.io/cors-allow-headers: "X-Forwarded-For"
+        hosts:
+          - host: mailman.eom.dev
+            paths:
+              - path: /
+                pathType: Prefix
+        tls:
+          - hosts:
+            - mailman.eom.dev
+            secretName: mailman3-tls
+      postgresql:
+        enabled: true
+        image:
+          pullPolicy: Always
+        global:
+          postgresql:
+            auth:
+              username: mailman
+              password: "{{ mailman_admin_password }}"
+              database: mailman
+        primary:
+          persistence:
+            enabled: true
+            size: 2Ti