commit c359ece703f83fc3c7d54baa38308b25aeaee5a7
parent 6e2bf33a9df00410db5b55fb6321ae17217c3381
Author: MTRNord <mtrnord1@gmail.com>
Date: Mon, 12 May 2025 10:50:54 +0200
Deploy meowlnir
Diffstat:
2 files changed, 49 insertions(+), 48 deletions(-)
diff --git a/apps/base/matrix/meowlnir/deployment.yaml b/apps/base/matrix/meowlnir/deployment.yaml
@@ -87,6 +87,7 @@ spec:
- mountPath: /config.yaml
name: meowlnir-config
subPath: config.yaml
+ readOnly: true
- mountPath: /tmp
name: tmp
volumes:
diff --git a/apps/base/matrix/synapse/release.yaml b/apps/base/matrix/synapse/release.yaml
@@ -105,21 +105,21 @@ spec:
modules:
- module: matrix_invitee_server_blocker.InviteeServerBlocker
config:
- broken_servers:
- #- matrix.org
- - matrix.im
- - funami.tech
- - suicideserver.net
- - cuteness-overdose.com
- - xmr.se
- #- module: synapse_rspamd.AntispamModule
- # config:
- # dry_run: true
- # required_score_threshold: 10
- # rspamd_url: http://rspamd-matrix.matrix.svc.cluster.local:11334/checkv2
- # rspamd_password: ENC[AES256_GCM,data:oawyHMbChq7A,iv:PwIpJFtRpWVv7EIqssmdVRFJMKeIT03J9VNoD8LcGpU=,tag:MsYaPedvIxLKz2UiD8NS1Q==,type:str]
- # local_server_address: matrix.midnightthoughts.space
- # matrix_access_token: ENC[AES256_GCM,data:39s3mP9giCwVFslygyZuMIYwvQ9FRxlv2YYkwB5fuWdmQ0ATZ61NRDlx,iv:1ypgEQXrwzbJPkvc5oqFYdDz0JV4gQf6wflYN7yqHDQ=,tag:Dfui+n0hN8jgfr+f+slfjg==,type:str]
+ broken_servers:
+ #- matrix.org
+ - matrix.im
+ - funami.tech
+ - suicideserver.net
+ - cuteness-overdose.com
+ - xmr.se
+ #- module: synapse_rspamd.AntispamModule
+ # config:
+ # dry_run: true
+ # required_score_threshold: 10
+ # rspamd_url: http://rspamd-matrix.matrix.svc.cluster.local:11334/checkv2
+ # rspamd_password: ENC[AES256_GCM,data:oawyHMbChq7A,iv:PwIpJFtRpWVv7EIqssmdVRFJMKeIT03J9VNoD8LcGpU=,tag:MsYaPedvIxLKz2UiD8NS1Q==,type:str]
+ # local_server_address: matrix.midnightthoughts.space
+ # matrix_access_token: ENC[AES256_GCM,data:39s3mP9giCwVFslygyZuMIYwvQ9FRxlv2YYkwB5fuWdmQ0ATZ61NRDlx,iv:1ypgEQXrwzbJPkvc5oqFYdDz0JV4gQf6wflYN7yqHDQ=,tag:Dfui+n0hN8jgfr+f+slfjg==,type:str]
persistence:
enabled: true
size: 20Gi
@@ -161,10 +161,10 @@ spec:
emptyDir: {}
- name: configs
secret:
- secretName: ENC[AES256_GCM,data:WaKxrCREm2zBfQu9,iv:QiP8VDgQxemWgyJclIwg+upoy6mX1287fLhkfM/gXDg=,tag:r7mYQBdGqzbESmxJgt8Izg==,type:str]
+ secretName: ENC[AES256_GCM,data:WaKxrCREm2zBfQu9,iv:QiP8VDgQxemWgyJclIwg+upoy6mX1287fLhkfM/gXDg=,tag:r7mYQBdGqzbESmxJgt8Izg==,type:str]
- name: meowlnir-config
secret:
- secretName: ENC[AES256_GCM,data:SPuBxA0JNcQ=,iv:WjXnBPLznzYI+20MiridDCgMu+gKhH1rUlT6YhbKyQY=,tag:r/gvf3iWJ5X8q29JFc3SNg==,type:str]
+ secretName: ENC[AES256_GCM,data:SPuBxA0JNcQ=,iv:WjXnBPLznzYI+20MiridDCgMu+gKhH1rUlT6YhbKyQY=,tag:r/gvf3iWJ5X8q29JFc3SNg==,type:str]
volumeMounts:
- name: matrix-org-blocker
mountPath: /usr/local/lib/python3.11/site-packages/matrix_invitee_server_blocker
@@ -208,19 +208,19 @@ spec:
modules:
- module: matrix_invitee_server_blocker.InviteeServerBlocker
config:
- broken_servers:
- #- matrix.org
- - matrix.im
- - funami.tech
- - suicideserver.net
- #- module: synapse_rspamd.AntispamModule
- # config:
- # dry_run: true
- # required_score_threshold: 10
- # rspamd_url: http://rspamd-matrix.matrix.svc.cluster.local:11334/checkv2
- # rspamd_password: ENC[AES256_GCM,data:OZXUNW4g3AvV,iv:ZkNtB5dCnyDve0c9WI/E72YWqXyXtHFvnYAAf2TUz9Y=,tag:hYF/MwpEbtYMfOVe6zYlXg==,type:str]
- # local_server_address: matrix.midnightthoughts.space
- # matrix_access_token: ENC[AES256_GCM,data:MFfc6mlpCVg5KQH+ozXmTPFTX+0OjiIZjbn23cVS7SeqQuSqUhjkNxyy,iv:GUoRiYYAogBA4enHp/W+ZQvpkOyaixmd0hNm2gxp2o8=,tag:b6tDDnFpd/pYsrzXHEF0ig==,type:str]
+ broken_servers:
+ #- matrix.org
+ - matrix.im
+ - funami.tech
+ - suicideserver.net
+ #- module: synapse_rspamd.AntispamModule
+ # config:
+ # dry_run: true
+ # required_score_threshold: 10
+ # rspamd_url: http://rspamd-matrix.matrix.svc.cluster.local:11334/checkv2
+ # rspamd_password: ENC[AES256_GCM,data:OZXUNW4g3AvV,iv:ZkNtB5dCnyDve0c9WI/E72YWqXyXtHFvnYAAf2TUz9Y=,tag:hYF/MwpEbtYMfOVe6zYlXg==,type:str]
+ # local_server_address: matrix.midnightthoughts.space
+ # matrix_access_token: ENC[AES256_GCM,data:MFfc6mlpCVg5KQH+ozXmTPFTX+0OjiIZjbn23cVS7SeqQuSqUhjkNxyy,iv:GUoRiYYAogBA4enHp/W+ZQvpkOyaixmd0hNm2gxp2o8=,tag:b6tDDnFpd/pYsrzXHEF0ig==,type:str]
federation_reader:
resources:
requests:
@@ -406,10 +406,10 @@ spec:
emptyDir: {}
- name: configs
secret:
- secretName: ENC[AES256_GCM,data:RPpX6lzD4ZJCDgwj,iv:DdR5qsTLUxsavwJhlzCG3PrAdaZootsl4c1R/8eLRY8=,tag:5W5IzXUE8gPESqCH7vGncA==,type:str]
+ secretName: ENC[AES256_GCM,data:RPpX6lzD4ZJCDgwj,iv:DdR5qsTLUxsavwJhlzCG3PrAdaZootsl4c1R/8eLRY8=,tag:5W5IzXUE8gPESqCH7vGncA==,type:str]
- name: meowlnir-config
secret:
- secretName: ENC[AES256_GCM,data:y7sd8xoX7J8=,iv:pzegUkUTUpNaDlE6doSOwuG5JOqlI2n3dEZpPD3u/90=,tag:FsO+hy+kBVNyOFtdKGKM0g==,type:str]
+ secretName: ENC[AES256_GCM,data:y7sd8xoX7J8=,iv:pzegUkUTUpNaDlE6doSOwuG5JOqlI2n3dEZpPD3u/90=,tag:FsO+hy+kBVNyOFtdKGKM0g==,type:str]
extraVolumeMounts:
- name: matrix-org-blocker
mountPath: /usr/local/lib/python3.11/site-packages/matrix_invitee_server_blocker
@@ -470,16 +470,16 @@ spec:
- matrix.midnightthoughts.space
csPaths:
- backendRefs:
- - kind: Service
- name: mas
- port: 8080
+ - kind: Service
+ name: mas
+ port: 8080
matches:
- - path:
- type: RegularExpression
- value: /_matrix/client/.*/(login|logout|refresh).*
- - path:
- type: RegularExpression
- value: /_matrix/client/(api/v1|r0|v3|unstable)/login/sso/redirect
+ - path:
+ type: RegularExpression
+ value: /_matrix/client/.*/(login|logout|refresh).*
+ - path:
+ type: RegularExpression
+ value: /_matrix/client/(api/v1|r0|v3|unstable)/login/sso/redirect
ingress:
enabled: false
sops:
@@ -490,13 +490,13 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UnBEdzIwdGxWT3JLVVBh
- Y3pmWnY5YmZaZlJhTE4rMVZ2QnJ2TWZGRzBrClBUbTVmUDdxYUVTb2hndWVXVGl5
- bnBQMzdrUjJrWHJENGJjK1JJYVVIOUUKLS0tIHZaSGdzcXlXWlJ2bi9oZmtacWl3
- bEtrOWs0WHA0elJ1QnhpekFwc0lzRDQK63QUTmd5AVmhTBmpB7KytUMl0eNXYhnw
- ACwWIyE70K2gEZMXjfzEUXu5b0HQotG4oNbuP19Q64Y+TBvSDasz8A==
- -----END AGE ENCRYPTED FILE-----
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UnBEdzIwdGxWT3JLVVBh
+ Y3pmWnY5YmZaZlJhTE4rMVZ2QnJ2TWZGRzBrClBUbTVmUDdxYUVTb2hndWVXVGl5
+ bnBQMzdrUjJrWHJENGJjK1JJYVVIOUUKLS0tIHZaSGdzcXlXWlJ2bi9oZmtacWl3
+ bEtrOWs0WHA0elJ1QnhpekFwc0lzRDQK63QUTmd5AVmhTBmpB7KytUMl0eNXYhnw
+ ACwWIyE70K2gEZMXjfzEUXu5b0HQotG4oNbuP19Q64Y+TBvSDasz8A==
+ -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-05-12T08:36:14Z"
mac: ENC[AES256_GCM,data:y914ZTFyei058f5+5xS8DkfIX77VGqn6QuvjYlaAkQhsmfHPiFVEkbeJd1kBIy/vI4U4KPt6VwWDj8fpsycEQajti4GivO/E7b/2GhJwM3NVkEMeRhevDAptNFAcLNLnhj5Bs9NYeuGx/uYu11PSCMuAMaqirBgDQ8VdNsJ3k/0=,iv:1ecp2YlBpqvoTQA0LbMGnQqSC2idqSNhadZqniPLvoo=,tag:q7yY5sqMyWFQaXJtxiQl9A==,type:str]
pgp: []
