fix(opendesk-certificates): Template caCertificate options

helmfile/apps/element/values-synapse.yaml.gotmpl

@@ -25,6 +25,14 @@ configuration:
       address:
         per_second: 2
         burst_count: 12
+    # Set higher limits for messages and media due to non-chat Matrix apps and widgets (such as NeoBoard)
+    # https://github.com/nordeck/matrix-neoboard/blob/main/docs/configuration.md#rate-limiting-settings
+    rc_message:
+      per_second: 5
+      burst_count: 25
+    rc_media_create:
+      per_second: 20
+      burst_count: 100
 
   database:
     host: {{ .Values.databases.synapse.host | quote }}

helmfile/apps/open-xchange/values-openxchange.yaml.gotmpl

@@ -256,6 +256,10 @@ appsuite:
               open-xchange-authentication-masterpassword: "enabled"
           properties:
             com.openexchange.calendar.allowOrganizerPartStatChanges: "true"
+            # Mailfilter
+            com.openexchange.mail.filter.passwordSource: global
+            com.openexchange.mail.filter.masterPassword:  {{ .Values.secrets.oxAppSuite.migrationsMasterPassword | quote }}
+            com.openexchange.mail.filter.preferredSaslMech: ""
           propertiesFiles:
             /opt/open-xchange/etc/masterpassword-authentication.properties:
               com.openexchange.authentication.masterpassword.password: {{ .Values.secrets.oxAppSuite.migrationsMasterPassword | quote }}

helmfile/apps/opendesk-services/values-certificates.yaml.gotmpl

@@ -66,6 +66,9 @@ cleanup:
 
 selfSigned:
   enabled: {{ .Values.certificate.selfSigned }}
+  caCertificate:
+    create: {{ .Values.certificate.caCertificate.create }}
+    secretName: {{ .Values.certificate.caCertificate.secretName | quote }}
   keystores:
     jks:
       enabled: true

helmfile/environments/default/certificate.yaml.gotmpl

@@ -9,5 +9,9 @@ certificate:
   # When using `wildcard: true` please ensure you configure the cert-manager accordingly, e.g. using DNS
   # validation (`DNS-01`) in case of letsencrypt.
   wildcard: false
+  # See also `opendesk/docs/enhanced-configuration/self-signed-certificates.md`
   selfSigned: false
+  caCertificate:
+    create: true
+    secretName: ""
 ...