From 6195005206d9620d00c99a97659683901c639bb0 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Mon, 5 Jan 2026 21:21:47 -0300
Subject: [PATCH] mailu: disable unauthenticated pod relay

---
 services/mailu/helmrelease.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/mailu/helmrelease.yaml b/services/mailu/helmrelease.yaml
index a40f047..339884b 100644
--- a/services/mailu/helmrelease.yaml
+++ b/services/mailu/helmrelease.yaml
@@ -220,6 +220,7 @@ spec:
         smtp_use_tls: "yes"
         smtp_tls_security_level: "encrypt"
         smtp_sasl_security_options: "noanonymous"
+        smtpd_relay_restrictions: "permit_sasl_authenticated, reject_unauth_destination"
     redis:
       enabled: true
       architecture: standalone