Feature: Redis Sentinel & authentication & perhaps even TLS

[D1StrX]

Environment & Version

Environment

• docker compose
• kubernetes
• docker swarm

Is your feature request related to a problem? Please describe.
New to Mailu, but looking at the Helm chart it doesn't seem to support Redis sentinels, external secret reference for DB password or TLS. Is this really the case? Also using Bitnami Redis Helm chart.

Describe the solution you'd like

• External Redis existing secret reference to the DB password (Must have)
• Redis Sentinel support (Nice to have)
• TLS support (Should have)

Additional context
Add any other context or screenshots about the feature request here.

From: Mailu/helm-charts#237

[nextgens]

We've discussed it and would review any PR you would send for this.

The idea is to introduce three new 'advanced' configuration variables that would take redis-URLs as parameters (redis://{username}:{password}@{host}/{db}) and would default to the current behavior.

REDIS_RATELIMIT
REDIS_QUOTA
REDIS_FUZZDB

You'll need to patch the following files:

docs/configuration.rst
core/admin/mailu/configuration.py
core/rspamd/conf/redis.conf
towncrier/newsfragments/2780.feature

And may find the following URLs useful:
https://rspamd.com/doc/configuration/redis.html
https://redis.readthedocs.io/en/stable/connections.html#sentinel-client (see: core/admin/mailu/utils.py)
https://mailu.io/master/contributors/workflow.html

[D1StrX]

Thanks for confirming the idea. As much I would love to contribute, there is only one slightly issue. I am not a developer 😅
Nor have I worked with Redis from a code perspective, which would it make much easier to relate to code.

[fastlorenzo]

The idea is to introduce three new 'advanced' configuration variables that would take redis-URLs as parameters (redis://{username}:{password}@{host}/{db}) and would default to the current behavior.

I would even add the port as well (optional), and make the username/password optional as well (as Mailu doesn't currently support authentication): redis://[{username}:{password}]@{host}[:{port}]/{db}

[sephentos]

Unfortunately, I can't contribute in terms of code too, but I would also love having at least external Redis support (also in favor of #2616). Offering myself as a tester if needed, just hmu.