Upgrade Dawarich with SMTP settings

[claytono]

Update Dawarich web and Sidekiq to 1.7.8.

Add SMTP relay configuration for Dawarich mailers and digest jobs using the existing relay secret, and keep Authentik-only login by setting ALLOW_EMAIL_PASSWORD_LOGIN=false.

[Copilot]

Pull request overview

This PR updates the Kubernetes manifests for the Dawarich app to deploy Dawarich v1.7.8 and adds SMTP relay configuration so mailers/digest jobs can send email via the existing relay secret, while keeping Authentik-only login by disabling email/password login.

Changes:

• Bump Dawarich image for both web and Sidekiq deployments from 1.7.7 to 1.7.8.
• Introduce a new ExternalSecret (dawarich-smtp) that sources SMTP_PASSWORD from the existing smtp-relay secret.
• Configure SMTP-related environment variables for web + Sidekiq, and set ALLOW_EMAIL_PASSWORD_LOGIN=false for web.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
kubernetes/dawarich/externalsecret.yaml	Adds dawarich-smtp ExternalSecret to surface the relay password as SMTP_PASSWORD for Dawarich.
kubernetes/dawarich/deploy-web.yaml	Upgrades Dawarich web image to 1.7.8 and configures SMTP + disables email/password login.
kubernetes/dawarich/deploy-sidekiq.yaml	Upgrades Sidekiq image to 1.7.8 and configures SMTP for background jobs (e.g., digests).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: fbbc7d78-42cf-4942-9c6f-4cbcd24f6ac3

📥 Commits

Reviewing files that changed from the base of the PR and between 7c56092 and 24bd437.

📒 Files selected for processing (3)

• kubernetes/dawarich/deploy-sidekiq.yaml
• kubernetes/dawarich/deploy-web.yaml
• kubernetes/dawarich/externalsecret.yaml

---

Walkthrough

This PR updates the Dawarich Kubernetes deployment manifests to support SMTP configuration. A new ExternalSecret pulls the SMTP password from a remote secret store, and both Sidekiq and web Deployments are updated with explicit SMTP environment variables, secret references, and container image bumps to 1.7.8. The web Deployment additionally disables email-password login.

Changes

Dawarich SMTP Configuration

Layer / File(s)	Summary
SMTP ExternalSecret resource kubernetes/dawarich/externalsecret.yaml	New dawarich-smtp ExternalSecret resource reads SMTP_PASSWORD from the smtp-relay remote key, providing the secret data consumed by both application Deployments.
Sidekiq SMTP environment kubernetes/dawarich/deploy-sidekiq.yaml	Container image updated to 1.7.8; environment variables for DOMAIN, SMTP_SERVER, SMTP_PORT, SMTP_DOMAIN, SMTP_USERNAME, SMTP_FROM, SMTP_AUTHENTICATION, and SMTP_STARTTLS are added as plaintext configuration.
Web Deployment SMTP & security kubernetes/dawarich/deploy-web.yaml	Container image updated to 1.7.8; full SMTP configuration variables added; SECRET_KEY_BASE and SMTP_PASSWORD sourced from dawarich-secrets and dawarich-smtp secrets respectively; ALLOW_EMAIL_PASSWORD_LOGIN set to false.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• claytono/infra#1724: Both PRs modify the same Dawarich Kubernetes Deployments with image reference bumps; this PR additionally adds SMTP configuration and ExternalSecret wiring.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately reflects the main changes: upgrading Dawarich and adding SMTP settings configuration.
Description check	✅ Passed	The description is directly related to the changeset, clearly explaining the version upgrade, SMTP configuration additions, and login settings changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dawarich-1-7-8-smtp

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}