Mabadiliko ya Tabianchi

Embed full SVG content directly instead of partial paths

Removed broken SVG file mount, using CSS background-image to load external logo directly on #logo element

Use SVG image element to embed external logo instead of complex paths with broken transforms

Mount custom logo.svg to **************** to replace the Roundcube watermark/background logo

- Created custom.css with watermark override - Mount CSS file to /var/www/html/custom.css - Configure Roundcube to load additional_stylesheets

Updated skin_logo config to array format to cover: - Main header logo - Small collapsed header logo - Inbox watermark/background logo

Enables automatic SSL certificate creation for mail.kamocrm.com

Bump jws from 3.2.2 to 3.2.3

Required for receiving external SMTP connections on K1M1

Bypassing local Postfix for outgoing mail, connecting directly to smtp.mailgun.org with TLS on port 587

Similar to Dovecot, using Alpine 3.18 with postfix-mysql package installed at runtime for reliable MySQL virtual maps support

boky/postfix is Debian-based, not Alpine

Installed postfix-mysql package at container startup to enable MySQL dictionary lookups for virtual domains/users/aliases

- Enable auth_debug, auth_debug_passwords, auth_verbose - Add dovecot-mysql package for proper SQL support - Add mariadb-connector-c for MySQL protocol compatib...

Changes kamo user from caching_sha2_password to mysql_native_password Required for Dovecot (Alpine/MariaDB) to connect to MySQL 8

Added skin_logo config pointing to **************** Updated deployment annotation to trigger pod restart

Alpine's MariaDB client doesn't support caching_sha2_password plugin This prevents Dovecot from connecting to MySQL for authentication

Added annotation to trigger pod recreation since ConfigMap with subPath doesn't auto-update in running pods

Traefik handles TLS termination, so internal traffic is HTTP Setting force_https=true caused Roundcube to redirect to HTTPS internally creating an infinite redi...

The certificate secret is in kamo namespace, copied to mail namespace tls.secretName explicitly references wildcard-kamocrm-com

Changed tls from certResolver: letsencrypt to tls: {} This allows the auto-cert service to automatically generate certs when mail.kamocrm.com is accessed

Roundcube redirects / to login page (302), failing HTTP readiness probe TCP socket check on port 80 works correctly

Dovecot 2.4 has incompatible configuration changes without clear docs Alpine 3.18 has Dovecot 2.3.20 which uses traditional well-documented syntax - mail_locati...

The listen = * at top level handles binding to all interfaces

In Dovecot 2.4.2: - mail_location is now mail_path (top-level setting, no blocks) - Added dovecot_storage_version = 2.4.2 (required) - Updated SQL user_query to...

- Put mail_location, uid, gid settings inside mail { } block (Dovecot 2.4 requirement) - Put ssl settings inside ssl { } block - Add initContainer to create mai...

The mysql { } block syntax causes 'Unknown section name: mysql' error Use passdb sql { driver = sql; args = **************** } External file has correct format:...

Found in actual examples: - sql_driver = mysql - mysql hostname { user, password, dbname } connection block - passdb sql { query = ... } with named sections - u...

Error said 'Unknown section name: mysql' - the mysql block was wrong Try passdb/userdb WITHOUT names (just passdb { and userdb {) Use args = **************** Ex...

Based on error suggesting passdb_sql_args - maybe SQL settings use sql_ prefix - Named sections: passdb sql { and userdb sql { - driver = sql with sql_driver = ...

Based on examples found: Dovecot 2.4 allows args with named sections - Named sections: passdb sql { and userdb sql { - driver = sql - args = **************** (r...

- Use 'passdb sql {' and 'userdb sql {' (named sections required) - Use 'driver = sql' with 'args = **************** - Maybe args works with named sections even...

- Use 'passdb sql {' and 'userdb sql {' with named sections - Keep SQL settings inline (no args parameter) - Both requirements: named sections AND inline SQL se...