summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2026-07-20 22:53:09 +0300
committerPaul Buetow <paul@buetow.org>2026-07-20 22:53:09 +0300
commit060b853903c397a064bfa97e4aad7f64de8d214b (patch)
tree4bb10d502e7244d556561ef43c5abe217f554371
parent1f10ba08f96d7d6b93d4464eea2df646e06b327f (diff)
protonbridge: probe and expose loopback services correctly
-rw-r--r--f3s/protonbridge/helm-chart/templates/deployment.yaml25
-rw-r--r--f3s/protonbridge/helm-chart/templates/service.yaml6
2 files changed, 21 insertions, 10 deletions
diff --git a/f3s/protonbridge/helm-chart/templates/deployment.yaml b/f3s/protonbridge/helm-chart/templates/deployment.yaml
index 4f6bb64..9394baf 100644
--- a/f3s/protonbridge/helm-chart/templates/deployment.yaml
+++ b/f3s/protonbridge/helm-chart/templates/deployment.yaml
@@ -108,10 +108,10 @@ spec:
value: /bridge-data/.password-store
ports:
- name: imap
- containerPort: 1143
+ containerPort: 143
protocol: TCP
- name: smtp
- containerPort: 1025
+ containerPort: 25
protocol: TCP
volumeMounts:
- name: protonbridge-data
@@ -126,18 +126,27 @@ spec:
mountPath: /root/.local
subPath: dot-local
readinessProbe:
- tcpSocket:
- port: 1143
+ exec:
+ command:
+ - /bin/bash
+ - -c
+ - "</dev/tcp/127.0.0.1/1143"
initialDelaySeconds: 30
periodSeconds: 15
startupProbe:
- tcpSocket:
- port: 1143
+ exec:
+ command:
+ - /bin/bash
+ - -c
+ - "</dev/tcp/127.0.0.1/1143"
periodSeconds: 10
failureThreshold: 30
livenessProbe:
- tcpSocket:
- port: 1143
+ exec:
+ command:
+ - /bin/bash
+ - -c
+ - "</dev/tcp/127.0.0.1/1143"
initialDelaySeconds: 60
periodSeconds: 30
volumes:
diff --git a/f3s/protonbridge/helm-chart/templates/service.yaml b/f3s/protonbridge/helm-chart/templates/service.yaml
index 3a389bb..eeb0d87 100644
--- a/f3s/protonbridge/helm-chart/templates/service.yaml
+++ b/f3s/protonbridge/helm-chart/templates/service.yaml
@@ -11,14 +11,16 @@ spec:
- name: imap
protocol: TCP
port: 1143
- targetPort: 1143
+ # Bridge binds to loopback; socat exposes it on the pod network at port 143.
+ targetPort: 143
# NodePort 30143 — configure email clients as:
# IMAP server: <any-r-vm-lan-ip>:30143, STARTTLS, accept self-signed cert
nodePort: 30143
- name: smtp
protocol: TCP
port: 1025
- targetPort: 1025
+ # Bridge binds to loopback; socat exposes it on the pod network at port 25.
+ targetPort: 25
# NodePort 30025 — configure email clients as:
# SMTP server: <any-r-vm-lan-ip>:30025, STARTTLS, accept self-signed cert
nodePort: 30025