cluster

commit ad4b1fcba64f6ab5ee73e876d8325eb81e8e694b
parent b37c3342684a89c6f5dd83991a2664ed4222d0a6
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Mon,  9 Feb 2026 20:13:18 +0100

add missing well-known file

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/envoy-gateway/gateway_settings.yaml
 | 
12
++++++++++++
M
apps/talos_cluster/persephone/deployment.yaml
 | 
35
+++++++++++++++++++++++++++++++++++

2 files changed, 47 insertions(+), 0 deletions(-)
diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml
@@ -258,6 +258,18 @@ spec:
         certificateRefs:
           - kind: Secret
             name: persephone.midnightthoughts.space-tls
+    - name: https-midnightthoughts-persephone-matrix
+      protocol: HTTPS
+      hostname: "matrix.persephone.midnightthoughts.space"
+      port: 443
+      allowedRoutes:
+        namespaces:
+          from: "All"
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - kind: Secret
+            name: matrix.persephone.midnightthoughts.space-tls
     - name: ldap
       protocol: TCP
       port: 389
diff --git a/apps/talos_cluster/persephone/deployment.yaml b/apps/talos_cluster/persephone/deployment.yaml
@@ -94,9 +94,44 @@ spec:
   hostnames:
     - persephone.midnightthoughts.space
   rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /.well-known/matrix/server
+      filters:
+        - type: ExtensionRef
+          extensionRef:
+            group: gateway.envoyproxy.io
+            kind: HTTPRouteFilter
+            name: server-wellknown
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: persephone-matrix
+  namespace: persephone
+spec:
+  parentRefs:
+    - name: envoy-gateway
+      namespace: envoy-gateway
+  hostnames:
+    - matrix.persephone.midnightthoughts.space
+  rules:
     - backendRefs:
         - name: persephone
           port: 8008
       timeouts:
         request: 240s
         backendRequest: 0s
+---
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: HTTPRouteFilter
+metadata:
+  name: server-wellknown
+spec:
+  directResponse:
+    contentType: application/json
+    statusCode: 200
+    body:
+      type: Inline
+      inline: '{"m.server": "matrix.persephone.midnightthoughts.space"}'