From a3b2e97c2cc8658d1716a580b8d1d054722ea65a Mon Sep 17 00:00:00 2001
From: Celes Renata <celes@frameshift.net>
Date: Thu, 16 Apr 2026 05:04:08 +0000
Subject: [PATCH] fix: allow SMTP port 587 egress for Gmail notifications

The trading engine network policy only allowed egress on ports 443
(HTTPS) and 53 (DNS). Gmail SMTP uses port 587 (STARTTLS), causing
'Network is unreachable' when sending notifications.
---
 infra/helm/stonks-oracle/templates/network-policies.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/infra/helm/stonks-oracle/templates/network-policies.yaml b/infra/helm/stonks-oracle/templates/network-policies.yaml
index 4f12c19..a3d4643 100644
--- a/infra/helm/stonks-oracle/templates/network-policies.yaml
+++ b/infra/helm/stonks-oracle/templates/network-policies.yaml
@@ -126,6 +126,8 @@ spec:
       ports:
         - protocol: TCP
           port: 443
+        - protocol: TCP
+          port: 587
     - to:
         - namespaceSelector: {}
       ports: