feat: add exim as an email relay

cluster/apps/default/exim/env-secret.sops.yaml

@@ -0,0 +1,73 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: exim-env
+    namespace: default
+stringData:
+    SMARTHOST: ENC[AES256_GCM,data:qVrxSX4zaPsYuhf0/v/J86eF5ePhyw==,iv:wHLc0x+hMCGiA4S/CREoeSlCGwSwUX3i8v1wyZMphEI=,tag:UlUO5bXBEKRNQfxaWpd76w==,type:str]
+    SMTP_USERNAME: ENC[AES256_GCM,data:MqyzlOjnhKVX0NwwUgYWAsJeQkMY3liOdYGjJm3CSaM=,iv:n+Mni0uCKWi8njh3qWy5P4nnLbSEbSupWL+usfKZmTc=,tag:cAwIffSIF2kkmTeDP2ViBg==,type:str]
+    SMTP_PASSWORD: ENC[AES256_GCM,data:BCsrmbOpdh361vJ0zBUZhZNmH6spz0Ld3EGMdHoAg5M=,iv:QE9vghxZ6IuEVmOKrOSpVtSlQaMwC1Lo9onhVctQ+3I=,tag:TwmcVVucV7Q+uM8yufbYrw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-06-05T00:57:25Z"
+    mac: ENC[AES256_GCM,data:4CIy1UYeaW1n2e0annDq+UYFrXmjtVszwRa6VyDHMY0NFE9WTVuaClQe5b7iMo+oGQfb65Rj6RY4emiElQPTJYDlcTDXm2l5iDBSrZoSYYsSagkoudzwzZW3jFF5vHiS9rt3fGBCagISbdnTKi2VK92zct7gPv45CgcWXrdZDKw=,iv:90FT96UHKSH5dKLEO2VLfG7mjyEQ6k6L2/qvEyPIsNY=,tag:jTrALtNU6svEkG20r4srJQ==,type:str]
+    pgp:
+        - created_at: "2024-06-05T00:57:25Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAyqlIeyoxYovARAApIhdlJ/ZVEAtkEgEDrQmSE0NfMVqhG4BpcoLFuyNvLqd
+            Ebj31bIBDD0hdVDhBSOm4KbRquGYKwh9Lxd68seKIJ1q5Be9TUdK5LAWTFZgGQKx
+            evwM6NcdLX/Y6eQvzx4A45XufCtURxUuYTwHwfLH4MqJg50zgcPteWYuew+lG5/Z
+            w1+WDNFpkUiOisHDq3UpU2GRQJ+Z/aabjG0PdsLz66hCkzV5lHGUbaJ7u5hyDFKk
+            OeEC9jNDSkXrj8Pk6fSxMCkWC80I8PpAw4fcVtnAweJx8MXukFJGmKRwY2XrD4Qe
+            6azU+Jbys0MF9JthS0LdXf9n9SILS3yY9JKu3bHs7Y5WVAVs/tkkDvL+nEA/ggY4
+            Hbam9VhCBrO2HfzaVG+EW5k4xC0i0DkUXM2frd5VZ7HUDkLwdL29mghLczlaDb1p
+            D/vueVX92jWApS2nCfE3b20xsu0xi5D4C4weGtfYvbS55RF6sihRKnZ7nP2ZbhBH
+            2Vbf/v9zMReJZV7mfxX68zPwSBRJ9huULWNJLFnnzViYnfB7sPgNi7AQDfjxjCwS
+            YAx79JFFj54cO74daR0+p3+B56fbYyDjzgNTeeXkSFY005ocp0gxUjC8Mzolmu2Q
+            Tiwsj6pbWKZ8lAT7WW5jtKUcuWVBP+qTIwWsTUL2LrlwTCkLhcGQuu7PSgoKIpyF
+            AgwDXjg0p2IN1X8BEACPTyAagPezZsYrf6kKsIfa/mGOtntDqWf+AcAQTaT4eaMi
+            Vh/+vtWn/EXeTsfbXo/lvUhapD4BJNuBhsn7zzfkIHwCoGlkaD61r6lUnW2WENxA
+            0L3/4x/2vAfIF61LPDM8eaMt48AVhrw4HmSwjkbIf/RsS7chepzx6USYyCo8dzzw
+            sQLC2gONH6aJ9NC0TZLpYDuwGTCXCwNQFJPZh2Hlr8NPvCSYqkvkOZPjbWr2r2c/
+            lDs5eo9gWjbcSoRpAE2cCj2oHcwAdW1LuZn8/qRyvjco+Rj13ly5D+wsh7zzJ4l2
+            PHksCvc8pxcxEvYSJwJdJclzS2RCjHLKeV0XlFNMrwcH+5YA8GrKDcaFEVDtUUtB
+            sDr5x2dodadywpNfeEDFvW9YFTZJgTPaRDcvkZ5R+HV/hmR06JobJvAmbxcttRsi
+            81ompTnpQ1EhOpmwiH7We3tIrw9nxJlulN3EOu96QVECuskfKRZwpy2bs2PP/SJF
+            3tIUGFAI3lfiOhGC+IMdYqNwNY1k9d46sDRaVy633rFsT3oUD4sINotOXIRbZHQU
+            kq3wMRI7DKd1oeonjLv1HrpFp58chAHPcYPFDAaqKuvJnduXz2VLFrGrOojU0fxZ
+            6gkAybmGL7lFh/1Qb9Hqt7Ie9C8Wyll/0+SIiyGehqJJHncz3Z+4sTUhoo+Lg9Ro
+            AQkCEN+0/1mIod+SiTRVjqwuKYKN2RVFg2a3vJs/DULxAm9vubwawaY0Xwp1O7hV
+            n4LUKTkl9Cto/nig7DLnHbg5bf1YDoNZxG+pO77851Z5p4/axQeH0wm2UwU9O/Ok
+            srcdJjk5IpM=
+            =vZzM
+            -----END PGP MESSAGE-----
+          fp: BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD
+        - created_at: "2024-06-05T00:57:25Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAy5t8IMoPu4VAQ//T0SGSW7+I/9+nLLSw5DxI9CXMHNN4NIwvk7eGmps6qm1
+            6XSv0LuDwVemC8zstEJA5cCCW7ovNDH0864p6Mzw7qdlpS/Nz4PCgbnKNcZpfxev
+            qqRm2fJGwo+u0YtuEMxtkLcZV3Q/YUXgvcxS+iRrhYlF/LwBCU5aanqDOO05Z21y
+            7fdKglko0o1725ICYH1GKYvpdVEHoklnjzc/tVhsZltzEc4KA0Nfzpg+K4RKod2L
+            Bw5Ro6oxtcJ2j2H+pzdNXyV6Z7UBU/5EFdzTi2eOQvu2/3NrIMvkbMK+1n2HlWXM
+            ZyEeKtwhc26FAD/qwu3yiUd0bPrP1nPvTGCIDMHiq19824bd/ePaTaD0rV3XeC4m
+            7GGbcYlkK5Ub7V7M3ABlpJKoSZ2dnAlbW5V+gTFbHC8tibUoORr1unrsrrGNtIfc
+            /VoUxImlRY2Md45WP80InUuilOSCIhwnYybzotvO036yve0DgJDG06N/icAaKRMp
+            Y+rEk3p2ITF3gUON16I8uzMLunZjdid2PTWAfVJNTM148haqlQFu18U4hylSRwat
+            +LJpOuSKyfEMO8u1IhN3DALflNvXnbDxrj2YdLIS6IJjFgrNG7z+LbVqGlRFW4tu
+            JNzo/vaUkTa3KzN2M9tQW/cSP447ZspCvAc/hAKU2zujj6Juoe3eujQoJZkohUHU
+            aAEJAhCr4d9u8yfYfb7gu3pR0mPWfLhgvSo7UdZryLNMI2KHzua6RZWgG0M0slCT
+            186OlKzBf/4uvTl9gCrIeEZxSTAcBsEGSenvcNMuE0bLFPwG/zB/GU8QUDpI3Kn+
+            oMzpOZ1Jtu4C
+            =k5/v
+            -----END PGP MESSAGE-----
+          fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

cluster/apps/default/exim/helm-release.yaml

@@ -0,0 +1,48 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+  name: exim
+  namespace: default
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.1.0
+      sourceRef:
+        kind: HelmRepository
+        name: bjws-charts
+        namespace: flux-system
+
+  values:
+    controllers:
+      main:
+        pod:
+          securityContext:
+            runAsNonRoot: true
+#            runAsUser: 10000
+#            runAsGroup: 10000
+#            fsGroup: 10000
+#            fsGroupChangePolicy: OnRootMismatch
+
+        containers:
+          main:
+            image:
+              repository: docker.io/devture/exim-relay
+              tag: 4.97.1-r0-0
+
+            env:
+              HOSTNAME: k3s cluster lab
+
+            envFrom:
+              - secretRef:
+                  name: exim-env
+
+    service:
+      app:
+        controller: main
+
+        ports:
+          smtp:
+            port: 8025

cluster/apps/default/exim/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ./env-secret.sops.yaml
+- ./helm-release.yaml

cluster/apps/default/kustomization.yaml

@@ -6,4 +6,5 @@ resources:
 - ./trilium
 - ./mealie
 - ./huginn
+- ./exim
 #- ./whoami