From 2e6484e211f355484f29c7bd7b7ccee1248e8454 Mon Sep 17 00:00:00 2001
From: Jan Funke <jan@fun.ke>
Date: Sun, 30 Nov 2025 10:54:40 +0100
Subject: [PATCH] First draft

---
 .DS_Store      | Bin 0 -> 8196 bytes
 README.md      |   3 +++
 addy-db.volume |   5 ++++
 addy.kube      |  18 +++++++++++++
 addy.yml       |  67 +++++++++++++++++++++++++++++++++++++++++++++++++
 config.map     |  34 +++++++++++++++++++++++++
 secrets.yml    |  10 ++++++++
 7 files changed, 137 insertions(+)
 create mode 100644 .DS_Store
 create mode 100644 README.md
 create mode 100644 addy-db.volume
 create mode 100644 addy.kube
 create mode 100644 addy.yml
 create mode 100644 config.map
 create mode 100644 secrets.yml

diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..023dec069b817c87ab55d55e823347d28bc3fc8e
GIT binary patch
literal 8196
zcmeHMTWl0n7(U;$&>1G+P+KU-vMVc4p~w~}7g5-D+sLKmwk^GIS$20uI$=6fc4oKK
zrlvlrpeDX(RMa=4KA=V+=o5(&H8DOAB+82z6Q6kTh7Tsj|IC>!w1p=xsc}v-=RfDa
zoSFaM@0+t{%NRpTQEz0djxi?F#igcFcbmrT{F>6FKr@3RD4wwgn8}>nkUN;Org(>n
zumWKP!U}{H2rCd)U^-NQ_H5qdJM8<y8unoY!V3H^E5P3mF}k=+269YD|J6aAe*_>|
zNov2*n9c!yOe~PeK#mFNhtitj^nf4~!4U%@oa`~~PBIzDF(E}bg9v8`?u_7s0{`w5
z7xUd2l0t@kSb?wtQ!BvF?o}+ybov{<_5AMS$Z|e6Xqm2;NL+zbQ8{B~Rh3euRvk+B
zJ40zN>lNLWY~cW(bvllfE043e{iZRL(P~nT?PX2dDEI-UZjj5tZqwGCp%$lT>#iT0
z76wI;m5f$5GO{+YsUg<XG};gwX<WB{Z9{D1hQ`rRMXrsn-n=h!%o?zrlOhoWF9SAv
zQevm3W~IA%D@RYsLnb9`xusOj;t5xz%L!i%5|))&syaK;-P7B5;9y46imtKGu(F<6
zGFr2q;byeET*`lY-m&)-j1uMDop-F_fK8UU`K*;MlC#llS!wez;hirymbJ%mP0w`f
z-X705;c**ZXo9Jy&vgo3%3rL<r1gbYHNVI1K_2YxHwrFEML9EPe)PWjRckgplx*AH
zvG?*_+T3bYt)16hGF>xg8NFFIZ`itNAMF}4b+5mVN^X1Rqoz?%l(}f=w6g=o<?6Zx
z3-4JJi3p#YG38ZyiaGOm(e#G3xGal%M3%%ASvz}BrzATZov*0-mPlmDa#=pW^{IkE
zy-=%>l?@b-?Q|*S;4u@8ilVul#|Rf9RBc)>E1KSAWpjoVs2<!*s-4{>k#V4`-6|_R
zd1qjNl5vGDl4_M@?X$!D#_d_x+dXL5<BycuCd++pf3{%k9wJnhBid!z{}@TnL)vuH
za|(Vnb}flSdihe#x^C!{^uoFY)sb|hOV%z?jAq&;lXyU%fuMsNF9R{2Tp@<>3(f_9
z<kvW!ObB(25aT`H{~|2GTG$SDm<<vaPq7!+>+Az|mYri4*_Z4JyT*QCKeC_L&+G>K
z9hI1c8Z5$6EJr==#~Q4~I;=+u?dZTR^dS!&29Cl)5hV;^7?0ygJcXxm3eV$Zyn@qs
z4R7Ebyo>kn5kAHzxQI`21>fQtzQc9=iW~S%Qlx5Wkra^@OUtEtX@#^>+9GY0wn=-X
zJ}D#hiyWjf7Y~i+<PW4_5>p9BzYuc5NoQ_PxacF>w(r>4K5Ys2%^Xg#yK8Fa&5tcz
zv3lLchnvTNC~#Yb>a7&;Q9pqzKI(mBOh&BFMRjqsi)dk-xJgDq&N3ynDo$VdGWWh$
zjYqW^L>w_)rq)NbnM4{fT^U^!)g<Dom?olYRIP%TsQ9r>(N(GjSxh#mn^monI4P!E
z)WxdC6ftRuwnjD1F!`Ut`seHt`<k$Rov{7~Dj;J%VpxU*VS5XbXhtjA2;Y0K7io0j
z5HdJ|9HHHU4F|_jzz9YO>tlEVC-DrP#dCNOFA?HT<5j}@n|KRv<9(dPIh@CbKJvf7
zSGbDrCt<l`B9`&XR4kX$1>17$qhu*FU}DhpomGfOtK;YYwmbj+KYbGjpDe6ESb@J>
z0aUi8TU%(EJH5apvc>2+LKkn`Z%jx(ggWlR_5N|3<oG`fX&eh|$v}<?Nfv7V`VRqr
T%NOo&{}1<naa#Vb?*D%RubYL)

literal 0
HcmV?d00001

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..d9cd5d3
--- /dev/null
+++ b/README.md
@@ -0,0 +1,3 @@
+# Podman Quadlet Collection
+
+This repository contains a collection of services, modelled as podman quadlets.
diff --git a/addy-db.volume b/addy-db.volume
new file mode 100644
index 0000000..345fa26
--- /dev/null
+++ b/addy-db.volume
@@ -0,0 +1,5 @@
+[Unit]
+Description=Addy.io Database Volume
+
+[Volume]
+VolumeName=addy-db-volume
\ No newline at end of file
diff --git a/addy.kube b/addy.kube
new file mode 100644
index 0000000..c185b06
--- /dev/null
+++ b/addy.kube
@@ -0,0 +1,18 @@
+[Unit]
+Description=Addy Mail Service (Pod)
+After=network-online.target
+Requires=addy-db.volume
+After=addy-db.volume
+
+[Kube]
+Yaml=addy.yml
+AutoUpdate=registry
+
+UserNS=keep-id:uid=1000,gid=1000
+ConfigMap=config.map
+
+PublishPort=2525:25
+PublishPort=8000:8000
+
+[Service]
+Restart=always
\ No newline at end of file
diff --git a/addy.yml b/addy.yml
new file mode 100644
index 0000000..9853452
--- /dev/null
+++ b/addy.yml
@@ -0,0 +1,67 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: addy
+spec:
+  restartPolicy: Always
+  containers:
+    - name: addy-db
+      image: mariadb:12
+      args:
+        - "mariadbd"
+        - "--character-set-server=utf8mb4"
+        - "--collation-server=utf8mb4_unicode_ci"
+      env:
+        - name: MARIADB_RANDOM_ROOT_PASSWORD
+          value: "yes"
+        - name: MYSQL_DATABASE
+          value: "anonaddy_db"
+        - name: MYSQL_USER
+          value: "addy_user"
+        - name: MYSQL_PASSWORD
+          value: "secure_password"
+      volumeMounts:
+        - mountPath: /var/lib/mysql
+          name: addy-db-volume
+
+    # --- Redis Service ---
+    - name: addy-redis
+      image: redis:8-alpine
+
+    # --- Addy Application ---
+    - name: addy-app
+      image: anonaddy/anonaddy:latest
+      ports:
+        - containerPort: 25
+          hostPort: 2525
+          protocol: TCP
+        - containerPort: 8000
+          hostPort: 8000
+          protocol: TCP
+      env:
+        # Internal Networking uses localhost inside a Pod
+        - name: DB_HOST
+          value: "127.0.0.1"
+        - name: REDIS_HOST
+          value: "127.0.0.1"
+
+          
+        - name: DB_DATABASE
+          value: "anonaddy_db"
+        - name: DB_USERNAME
+          value: "addy_user"
+        - name: DB_PASSWORD
+          value: "secure_password"
+      volumeMounts:
+        - mountPath: /data
+          name: data-volume
+
+  # --- Volume Definitions ---
+  volumes:
+    - name: addy-db-volume
+      persistentVolumeClaim:
+        claimName: addy-db-volume
+    - name: data-volume
+      hostPath:
+        path: /opt/addy/data
+        type: Directory
\ No newline at end of file
diff --git a/config.map b/config.map
new file mode 100644
index 0000000..542943a
--- /dev/null
+++ b/config.map
@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: addy-config
+data:
+  TZ: "Europe/Berlin"
+  PUID: "1000"
+  PGID: "1000"
+  MEMORY_LIMIT: "256M"
+  UPLOAD_MAX_SIZE: "16M"
+  OPCACHE_MEM_SIZE: "128"
+  REAL_IP_FROM: "0.0.0.0/32"
+  REAL_IP_HEADER: "X-Forwarded-For"
+  LOG_IP_VAR: "remote_addr"
+  APP_DEBUG: "false"
+  APP_URL: "http://127.0.0.1:8000"
+  ANONADDY_RETURN_PATH: "bounces@example.com"
+  ANONADDY_ADMIN_USERNAME: "addy"
+  ANONADDY_ENABLE_REGISTRATION: "true"
+  ANONADDY_DOMAIN: "example.com"
+  ANONADDY_ALL_DOMAINS: "example.com"
+  ANONADDY_HOSTNAME: "mail.example.com"
+  ANONADDY_DNS_RESOLVER: "127.0.0.1"
+  ANONADDY_SECRET: ""
+  ANONADDY_LIMIT: "200"
+  ANONADDY_BANDWIDTH_LIMIT: "104857600"
+  ANONADDY_NEW_ALIAS_LIMIT: "10"
+  ANONADDY_ADDITIONAL_USERNAME_LIMIT: "3"
+  MAIL_FROM_NAME: "addy.io"
+  MAIL_FROM_ADDRESS: "addy@example.com"
+  POSTFIX_DEBUG: "false"
+  POSTFIX_SMTPD_TLS: "false"
+  POSTFIX_SMTP_TLS: "false"
+  MYSQL_DATABASE: "anonaddy
\ No newline at end of file
diff --git a/secrets.yml b/secrets.yml
new file mode 100644
index 0000000..e7fdc53
--- /dev/null
+++ b/secrets.yml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: addy.io-secrets
+type: Opaque
+data:
+  db-pass: c3VwZXItc2VjcmV0LWRiLXBhc3M=
+  api-token: bXktYXBpLXRva2VuLTEyMw==
+  addy-secret: replace-me
+  app-key: ""
\ No newline at end of file