commit a8ea2cabb0a834ba44e31bd2b2547d2102db945e
parent e5f3b08f17bcb952d65e22b1146f92a9f913b041
Author: MTRNord <mtrnord1@gmail.com>
Date: Sat, 18 Jan 2025 14:38:35 +0100
Fix cors issues(?)
Diffstat:
1 file changed, 30 insertions(+), 20 deletions(-)
diff --git a/apps/base/matrix/synapse/release.yaml b/apps/base/matrix/synapse/release.yaml
@@ -79,10 +79,10 @@ spec:
msc3861:
enabled: true
issuer: https://mas.matrix.midnightthoughts.space/
- client_id: ENC[AES256_GCM,data:q+QbUDMakPgLuBrjExy4I56HsIlYzJGfPOM=,iv:6lFYwvxt0BLGauR/6S1rPq3VP9KaKn7lDmckqlFldtc=,tag:StLvOqzV/xe7H1uY3/aMKQ==,type:str]
+ client_id: ENC[AES256_GCM,data:YfRX4ggPbsJGdrA/0eWFDhuVbLELmUUCXK4=,iv:MZ0RDQKWIBqsPtA185dGt7uIU1Vx1A5MjS02LgfWJUo=,tag:W9yERZNl+tzg6Ox4cXAtOA==,type:str]
client_auth_method: client_secret_basic
- client_secret: ENC[AES256_GCM,data:3XBZ+aqFXTgZotWyKqv9AEvHftCi9VrId/pelMiEhAuc+gEk8MjE/uO4JrmPBvf0nfKroDeoIw5aRUVZ/eH53g==,iv:4l3RCxDboCu6pWSCJ7KH6x+jbUlVCaRqgIqtixuQH4I=,tag:OO5HrjpDipyg18BEeAPUVw==,type:str]
- admin_token: ENC[AES256_GCM,data:CQE+fZY7DScRHcHPI2jtTSoTuRNWUyvoCWAIlZEo4F0=,iv:jHjxJeWfZT4NDndBl00rse7/v4dK3nBPR98qpzkFd7U=,tag:Zd9pj/2CzUFUFtrZ9UQ1HQ==,type:str]
+ client_secret: ENC[AES256_GCM,data:0Ru3JsrkjgIo5kijfHnFcYi6IN5yDRWbTrz2F7/SN8Kpw6+qiGqbLQwd1skyxBx16+12bX2Cu0fgBIQR1t5kTQ==,iv:z+QUKlLm+L+Kh03DSP4u2uYNmjv5+4Q19QifJbA/AvQ=,tag:2X8W++We8+2zUniPRjgeAQ==,type:str]
+ admin_token: ENC[AES256_GCM,data:G4MdcT/dY9HfVm4h1nYxAiDDg6Mx3TiKHXnzZzfcTm0=,iv:wmSsmDHcLYkg2GOv/XP2VtFmUMQSqUiF/lx8YNJa0mM=,tag:Bd0RYOtxg9eRweZL2KQBeA==,type:str]
account_management_url: https://mas.matrix.midnightthoughts.space/account
event_cache_size: 30K
caches:
@@ -122,7 +122,7 @@ spec:
- name: matrix-org-blocker
mountPath: /usr/local/lib/python3.11/site-packages/matrix_invitee_server_blocker
extraCommands:
- - ENC[AES256_GCM,data:5f6V0jEqfvh6HTJR+IZTTtF3rn5l7SIypWf5isg4GRyXPwoEkdzpriOpbj6Zx+uOtc8KiInJ6N9Jwuk9LHVLZYjt6rLaIZn8+i71yPeML9DA3Mtvf+2/QUI3WnxsFs0x7IGLCQwcb0Cwc/jgbJ9QA48hd6kkthKDq2ZB7+oDBZnrWYGx5zkqE7tzQWyB6Hn0qDhjoyJVeJAirUcAfA==,iv:hL3lqE7Rpay0c4ZNiUWFXoV7Mn1zjrDEwi9IzCRW5C4=,tag:WkCvm/Iu45YhO/cWfke8lA==,type:str]
+ - ENC[AES256_GCM,data:5BGwvCZlWzO/ODD+eyRJzAFrvbciOUO5cs6wzMfRpXREK+u63WM3fYyvHvhBCg6RAwFrq8rqt4d35PGNymKCPHafBXblI5S+yItFlQyeKGudQtLWwguHTjF/rujQz/Wg1Mqk+6mzYY3mtNDDhivu5h2+cy3gvN0y3jr9+wqh3NX9azcerR8U4B1X+SUi0iM5RuwQHZGg4drZgpNHTg==,iv:zuuMFdcuXv/GzU3+jmsy8i5/2Ivv5y4dMha/a3yUhEU=,tag:Q4Hwt8vNU1CFXtejVQMaUQ==,type:str]
extraConfig:
enable_authenticated_media: true
event_cache_size: 30K
@@ -311,7 +311,7 @@ spec:
- name: matrix-org-blocker
mountPath: /usr/local/lib/python3.11/site-packages/matrix_invitee_server_blocker
extraCommands:
- - ENC[AES256_GCM,data:NHjoXWSbyRr+efE+TMMpTQs5SCJ/VePtbq5wifM+cs/rabWGT4Rn/Dq3f24tfPuWlxT6Z7C4HF8S39hkfXoA7SpOEltDzQaJbAkZU+fw7Cl9HrCYjPyMDV2yYa7xVUasOVwVYuYpkN42t4Kd2JawA5WI3g4lg1ahbnxIU3WEGy0CNv7xx2q505YmRU28t1hx6aES4RFR4LtquVa2ng==,iv:h9+djWMdm7oZYPxjOuIYeAz6QBH45iLd6dH7hhmg/6o=,tag:WpOUXRgGPoYlA8XJaVz2dg==,type:str]
+ - ENC[AES256_GCM,data:xzPIMLrAHU7cSdac373fiQm3niJDHObtRXRTngC7/1iFMzVa5sDg3s9bbPqBGQKglqEWBA6qH1SdDBFAU3bkPq9p3jGXK4GLefh5BRZCaK4pa78cqxk6ZOiHbhVUPfOhb81/bmMfESWilm0XvQnbG0gF9bPy+gr1O7Xpw/rsXNG/U/aQebGX/cIDPXOR3SHSt1GxURpeyOTLMTb65g==,iv:3zCjjx2i6tCRXvfN+KuIdYyEQ+QySCxJ6Um5ar11360=,tag:1Xfh5Q07mx6toOcVtFDGpg==,type:str]
annotations:
prometheus.io/scrape: "true"
prometheus.io/path: /_synapse/metrics
@@ -335,7 +335,7 @@ spec:
sslmode: require
username: synapse
database: synapse
- password: ENC[AES256_GCM,data:J/aZ6TmAmDqDxlMH1gzfM30patDMUk+7bVTBhnJ6EGcbPDxcNBxtbw3A7rbm7wjCNSYCG/W5kwZJue3zMzUKPQ==,iv:ZgaIj8IkHTLkTXrryv4TNgjFbCAlcdNT+FByrsMA5lM=,tag:PYZxw/di9inYPhd++nXuYQ==,type:str]
+ password: ENC[AES256_GCM,data:dGMp/0+/oPImBuR5Brtp4eL7PfFlB3gDVHO6G+1UuF7bo9jSsMXTlTUZf2D8cS2hUnUG+d923o95hBtqK9ezZQ==,iv:JCCku4n8cyj++KWGm8/G7TP7SOZpm9hBU86Y4quvdps=,tag:ZHOk/dYRdaVObr6t+4LszA==,type:str]
gateway:
parentRefs:
- name: envoy-gateway
@@ -385,14 +385,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0UmVtSGY2R2RyVXMrSE9S
- dklWTW81YkdOM0loOWhCQnpkZjNxNCtmYWlRCmZ4eVcwODJKOFF6QUdmQjVKaU80
- aU1jRmdyajBqRzZGaGhzZ0IyQzYwbUEKLS0tIFBCeGxuV25WR0dSNjc4aXFUcUF4
- K0hCNW83K2lLKzFiOGc2ZkVtN3d5ZXcKA1rKsTMG73TccmppdekluCCdwOIU4uQc
- NbKFRyuJJMm+BWpX9iOSqyeIlKEsv5AGaWeoNi2gn60Pa1tefmnmag==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZGJucXlnb0lnZ1RGMTJD
+ M1BER2VGalFVSEcwd1B4cGR3WGxUYWZoTkJNClJkTHlsdTI0MEZSczdyRCs0UHpO
+ RlA3MXd4WG5udjdJZFN4b2ZDb3FxK2sKLS0tIEc2MjV4WlVZemVJVjQrZmVyQVBT
+ MzhkQkQvN3Ewemx0KzVsRTFhQ1R1SnMKwtcU0QGzQ4LS3TZxl6y4rKGxPbDF3uWe
+ XXdd838gQm6ArTLrE/8l8IJ3sNVoDow1p38KbmVaewD9ElwxxZa3zA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-18T13:33:46Z"
- mac: ENC[AES256_GCM,data:7AxPSVqC208Cvs5UqNLQImtEB+9eQQqRKYXUyFkZwbI/oYojLz1pNkraO3aOrM0KXo+MqD1frlBihYml4Sjn2+sWH2MvYlIekmRly8Q/PGUy82DDv7qibBgQn4uQ8+WLr0A/NDijp454xC6Tx8iK7KTZFfdtJBcA1q6ctbeyhjs=,iv:swdpuAlydLMOi91Lt+13SOQ/HOUqJIYMtMVV7Mr2Og8=,tag:VKWfL2Bj7cNqimi+ylD4KQ==,type:str]
+ lastmodified: "2025-01-18T13:38:26Z"
+ mac: ENC[AES256_GCM,data:do47RkZZnfXTszb76PN2P1CE7AOwzmAKxxuU4ef8l0Bfg/XDvcwZim6SHoxwa/0HhyiCC97pWJUqpB2oz28/4LDltwXaqeqI3T6jLVtuLnviLKxh9OBu5FVM5RzNM5zwtYdtmo+b//i8WltmfpuSBzcCtDrf209koJ5plJfQK2U=,iv:GshzwGaSi3zpZTxckweHnLL0Q5a7S6sWBaa6fOcr3r4=,tag:2r0H5UvEaoQFp8IM82KgVg==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -409,6 +409,16 @@ spec:
cors:
allowOrigins:
- '*'
+ allowMethods:
+ - GET
+ - POST
+ - PUT
+ - DELETE
+ - OPTIONS
+ allowHeaders:
+ - X-Requested-With
+ - Content-Type
+ - Authorization
sops:
kms: []
gcp_kms: []
@@ -418,14 +428,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0UmVtSGY2R2RyVXMrSE9S
- dklWTW81YkdOM0loOWhCQnpkZjNxNCtmYWlRCmZ4eVcwODJKOFF6QUdmQjVKaU80
- aU1jRmdyajBqRzZGaGhzZ0IyQzYwbUEKLS0tIFBCeGxuV25WR0dSNjc4aXFUcUF4
- K0hCNW83K2lLKzFiOGc2ZkVtN3d5ZXcKA1rKsTMG73TccmppdekluCCdwOIU4uQc
- NbKFRyuJJMm+BWpX9iOSqyeIlKEsv5AGaWeoNi2gn60Pa1tefmnmag==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZGJucXlnb0lnZ1RGMTJD
+ M1BER2VGalFVSEcwd1B4cGR3WGxUYWZoTkJNClJkTHlsdTI0MEZSczdyRCs0UHpO
+ RlA3MXd4WG5udjdJZFN4b2ZDb3FxK2sKLS0tIEc2MjV4WlVZemVJVjQrZmVyQVBT
+ MzhkQkQvN3Ewemx0KzVsRTFhQ1R1SnMKwtcU0QGzQ4LS3TZxl6y4rKGxPbDF3uWe
+ XXdd838gQm6ArTLrE/8l8IJ3sNVoDow1p38KbmVaewD9ElwxxZa3zA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-18T13:33:46Z"
- mac: ENC[AES256_GCM,data:7AxPSVqC208Cvs5UqNLQImtEB+9eQQqRKYXUyFkZwbI/oYojLz1pNkraO3aOrM0KXo+MqD1frlBihYml4Sjn2+sWH2MvYlIekmRly8Q/PGUy82DDv7qibBgQn4uQ8+WLr0A/NDijp454xC6Tx8iK7KTZFfdtJBcA1q6ctbeyhjs=,iv:swdpuAlydLMOi91Lt+13SOQ/HOUqJIYMtMVV7Mr2Og8=,tag:VKWfL2Bj7cNqimi+ylD4KQ==,type:str]
+ lastmodified: "2025-01-18T13:38:26Z"
+ mac: ENC[AES256_GCM,data:do47RkZZnfXTszb76PN2P1CE7AOwzmAKxxuU4ef8l0Bfg/XDvcwZim6SHoxwa/0HhyiCC97pWJUqpB2oz28/4LDltwXaqeqI3T6jLVtuLnviLKxh9OBu5FVM5RzNM5zwtYdtmo+b//i8WltmfpuSBzcCtDrf209koJ5plJfQK2U=,iv:GshzwGaSi3zpZTxckweHnLL0Q5a7S6sWBaa6fOcr3r4=,tag:2r0H5UvEaoQFp8IM82KgVg==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
