Improvements with hostPort and Proxy Protocol

[mreho]

When using hostPort, the ManageSieve port was not actually exposed — I believe this was simply forgotten in the template.

The second issue is that Proxy Protocol and publicly exposed ports do not necessarily require a Service. When using hostPort and deploying via DaemonSet, front.externalService can be disabled. I had to edit _helpers.tpl to account for this. The advantage of not using an externalService with an upstream Ingress Controller is that it avoids an unnecessary proxy layer.

The third issue occurs when using Proxy Protocol: by default, the chart outputs an error stating that ingress.realIpHeader should not have any value. However, with Proxy Protocol (which is likely the most common case when proxying TCP traffic), this field must indeed be left empty.

Additionally, I moved values that did not belong under ingress. to front..
These are breaking changes.

[mreho]

Just to add some screenshots of my current working setup :

[Copilot]

Pull Request Overview

This PR improves the Helm chart configuration for Mailu by addressing three key issues: missing hostPort exposure for ManageSieve, unnecessary coupling between Proxy Protocol and external services, and incorrect validation logic for Proxy Protocol configuration.

Key changes:

• Added hostPort exposure for ManageSieve (port 4190) when hostPort is enabled
• Moved proxy protocol and TLS configuration from ingress.* to front.* namespace
• Fixed proxy protocol validation to allow empty realIpHeader when using Proxy Protocol

Reviewed Changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
utils/check_env_vars.py	Updated TLS_FLAVOR environment variable mapping from ingress to front namespace
charts/mailu/values.yaml	Moved proxy protocol, realIpHeader, realIpFrom, and tlsFlavorOverride settings from ingress to front section
charts/mailu/templates/front/deployment.yaml	Added hostPort 4190 for ManageSieve when hostPort is enabled and fixed port formatting
charts/mailu/templates/envvars-configmap.yaml	Updated environment variable references to use front namespace instead of ingress
charts/mailu/templates/_services.tpl	Removed dependency on externalService for proxy protocol configuration and updated validation logic
charts/mailu/templates/_helpers.tpl	Updated TLS flavor helper to reference front namespace and fixed deprecated value detection
charts/mailu/README.md	Updated documentation to reflect the configuration namespace changes

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

The comment on line 665 states 'Enabling any of these requires to have ingress.realIpFrom set' but should be updated to reference 'front.realIpFrom' since the configuration has been moved to the front namespace.

[github-actions]

This PR is stale because it has been open 45 days with no activity. Remove stale label or comment or this will be closed in 10 days.

[mreho]

Bump

[github-actions]

This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 14 days.