[BUG] Default configuration disables outbound TLS of Postfix

[Birkenstab]

Description:

Using the default values in values.yaml results in TLS being disabled for outbound SMTP connections of Postfix.

Default value of tls.inboundEnforce in values.yaml does not result in the default value of OUTBOUND_TLS_LEVEL environment variable of Mailu being used.

This is because:

• values.yaml default value for the tls.outboundLevel is:

  tls:
  outboundLevel: ""

• This causes the environment variable OUTBOUND_TLS_LEVEL to be set to "" by the config map: OUTBOUND_TLS_LEVEL: {{ .Values.tls.outboundLevel | quote }}

• This causes the configuration value smtp_tls_security_level of Postfix to be set to "" instead of the default value "dane" in the Mailu Postfix Config: smtp_tls_security_level = {{ OUTBOUND_TLS_LEVEL|default('dane') }} The default value would have been used if the environment variable was unset instead of an empty string.

• This causes Postfix to set smtp_tls_security_level to none. This disables TLS for outbound SMTP connections. This causes Postfix to send all emails in unencrypted clear text. See Postfix Config Doc

Possible solutions:

1. Set values.yaml tls.outboundLevel to the default which is dane. Drawback: If Mailu changes its default, it needs to be updated here too.
2. Set tls.outboundLevel to null. I am not sure if this will work and cause the environment variable OUTBOUND_TLS_LEVEL to be unset.

[github-actions[bot]]

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.

[github-actions[bot]]

This issue was closed because it has been stalled for 5 days with no activity.

[dlford]

@fastlorenzo this is still an issue, looks like an easy one for me to get started on if that's alright?