Helm chart for Stalwart Mail Server with YAML-to-TOML config conversion.

• YAML-to-TOML config - Write your Stalwart configuration as native YAML in values.yaml; the chart automatically renders it to TOML. No more escaping TOML in ConfigMaps.
• StatefulSet with RocksDB persistence and health probes (startup, liveness, readiness)
• Optional Prometheus metrics with ServiceMonitor support (including BasicAuth)
• Optional Ingress and HTTPRoute templates for the management UI
• Production-tested on real mail infrastructure

• Kubernetes >= 1.26
• Helm >= 3.12

helm install stalwart oci://ghcr.io/an0nfunc/stalwart-helm/chart \
  --namespace mail --create-namespace \
  --set config.server.hostname=mail.example.com

Or from source:

git clone https://github.com/an0nfunc/stalwart-helm.git
helm install stalwart ./stalwart-helm/chart/stalwart \
  --namespace mail --create-namespace

Access the admin UI:

kubectl -n mail port-forward svc/stalwart 8080:8080
# Open http://localhost:8080 (default: admin / changeme)

This chart's key feature is native YAML configuration. Instead of embedding raw TOML in a ConfigMap, you write Stalwart's configuration as YAML under the config: key in your values file. The chart's template engine converts it to TOML automatically.

Example - your values.yaml:

config:
  server:
    hostname: "mail.example.com"
  storage:
    data: "rocksdb"
    blob: "s3"
  store:
    s3:
      type: "s3"
      bucket: "my-mail-bucket"
      endpoint: "https://s3.example.com"

Rendered config.toml:

server.hostname = "mail.example.com"
storage.data = "rocksdb"
storage.blob = "s3"
store.s3.type = "s3"
store.s3.bucket = "my-mail-bucket"
store.s3.endpoint = "https://s3.example.com"

Stalwart supports environment variable substitution in config values using %{env:VAR_NAME}% syntax. Combine this with envFrom to inject secrets:

config:
  authentication:
    fallback-admin:
      secret: "%{env:ADMIN_PASSWORD}%"

envFrom:
  - secretRef:
      name: stalwart-secrets

See values.yaml for all available options.

See the examples/ directory for ready-to-use value files:

• minimal.yaml - Bare minimum override
• s3-blob-storage.yaml - S3 for blob storage with env var secrets

helm install stalwart oci://ghcr.io/an0nfunc/stalwart-helm/chart \
  -f examples/s3-blob-storage.yaml \
  --namespace mail --create-namespace

When updating the config: section, the StatefulSet will automatically roll due to a config checksum annotation on the pod template.

Apache 2.0 - see LICENSE.