cluster

commit c58d7049f497930a90b81a93c27e8804c4cf5083
parent 326728aef5f7b4a8b0c3e8f4e0b9f37b9c1653f5
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue, 14 Jan 2025 18:31:06 +0100

Meow

Diffstat:
M
apps/base/mailserver/release.yaml
 | 
11
+++++++----
M
apps/base/matrix/synapse/release.yaml
 | 
56
+++++++++++++++++++++++++++++++++-----------------------

2 files changed, 40 insertions(+), 27 deletions(-)
diff --git a/apps/base/mailserver/release.yaml b/apps/base/mailserver/release.yaml
@@ -167,8 +167,9 @@ spec:
                 RELAY_PASSWORD:
             resources:
                 requests:
-                    cpu: 100m
-                    memory: 128Mi
+                    cpu: 249m
+                    memory: 294Mi
+                limits: {}
         service:
             annotations:
                 external-dns.alpha.kubernetes.io/hostname: mail.midnightthoughts.space
@@ -218,7 +219,8 @@ spec:
             dovecot.cf:
                 create: true
                 path: dovecot.cf
-                data: "{{- if .Values.proxyProtocol.enabled }}\n  haproxy_trusted_networks = {{ .Values.proxyProtocol.trustedNetworks
+                data:
+                    "{{- if .Values.proxyProtocol.enabled }}\n  haproxy_trusted_networks = {{ .Values.proxyProtocol.trustedNetworks
                     }}\n\n  {{- if and (.Values.deployment.env.ENABLE_IMAP) (not .Values.deployment.env.SMTP_ONLY) }}\n  service
                     imap-login {\n      inet_listener imap {\n          port = 143\n      }\n\n      inet_listener imaps {\n
                     \         port = 993\n          ssl = yes\n      }\n\n      inet_listener imap_proxy {\n          haproxy
@@ -267,7 +269,8 @@ spec:
             user-patches.sh:
                 create: true
                 path: user-patches.sh
-                data: "#!/bin/bash\n\n{{- if .Values.proxyProtocol.enabled }}\n# Make sure to keep this file in sync with
+                data:
+                    "#!/bin/bash\n\n{{- if .Values.proxyProtocol.enabled }}\n# Make sure to keep this file in sync with
                     https://github.com/docker-mailserver/docker-mailserver/blob/master/target/postfix/master.cf!\ncat <<EOS
                     >> /etc/postfix/master.cf\n\n# Submission with proxy\n10587     inet  n       -       n       -       -
                     \      smtpd\n  -o syslog_name=postfix/submission\n  -o smtpd_tls_security_level=encrypt\n  -o smtpd_sasl_auth_enable=yes\n
diff --git a/apps/base/matrix/synapse/release.yaml b/apps/base/matrix/synapse/release.yaml
@@ -88,11 +88,11 @@ spec:
             modules:
                 - module: matrix_invitee_server_blocker.InviteeServerBlocker
                   config:
-                    broken_servers:
-                        #- matrix.org
-                        - matrix.im
-                        - funami.tech
-                        - suicideserver.net
+                      broken_servers:
+                          #- matrix.org
+                          - matrix.im
+                          - funami.tech
+                          - suicideserver.net
         persistence:
             enabled: true
             size: 20Gi
@@ -129,12 +129,17 @@ spec:
                     modules:
                         - module: matrix_invitee_server_blocker.InviteeServerBlocker
                           config:
-                            broken_servers:
-                                #- matrix.org
-                                - matrix.im
-                                - funami.tech
-                                - suicideserver.net
+                              broken_servers:
+                                  #- matrix.org
+                                  - matrix.im
+                                  - funami.tech
+                                  - suicideserver.net
             federation_reader:
+                resources:
+                    requests:
+                        cpu: 100m
+                        memory: 1026Mi
+                    limits: {}
                 replicaCount: 1
                 enabled: true
                 generic: true
@@ -155,6 +160,11 @@ spec:
                 enabled: true
                 generic: true
             generic_frontend:
+                resources:
+                    requests:
+                        cpu: 232m
+                        memory: 1008Mi
+                    limits: {}
                 replicaCount: 1
                 enabled: true
                 generic: true
@@ -298,8 +308,8 @@ spec:
                 - matrix.midnightthoughts.space
             tls:
                 - hosts:
-                    - midnightthoughts.space
-                    - matrix.midnightthoughts.space
+                      - midnightthoughts.space
+                      - matrix.midnightthoughts.space
                   secretName: midnightthoughts-synapse-tls-secret
             annotations:
                 cert-manager.io/cluster-issuer: letsencrypt-dns
@@ -309,10 +319,10 @@ spec:
                 - path: /_matrix/client/.*/(login|logout|refresh)
                   pathType: ImplementationSpecific
                   backend:
-                    service:
-                        name: mas
-                        port:
-                            number: 8080
+                      service:
+                          name: mas
+                          port:
+                              number: 8080
 sops:
     kms: []
     gcp_kms: []
@@ -321,13 +331,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRWlOWnhXaXlBRzZsQkNE
-            Mnp0SldiWE5rN3YrVldLdlJYeEpkcExHdUdFCkEvbE56dmcvKzU2V0FmOU45Um14
-            cXJXSWdyMFVNVEpDTU4wVTNSUnh4dEkKLS0tIDM5VTRHdlNFRGc0dTdZOHAvaHZh
-            aXAvZzFmbmtKWnRla01YdU12YlhjdFEKhKpqgLU6uM8XqJ0rpe9g0cY5KtD0n0t+
-            dTsMGEhbTY2fBJXw+JQkKJFl9EFloYtp0fx/1jcF6pa/BUYmNICtiQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRWlOWnhXaXlBRzZsQkNE
+              Mnp0SldiWE5rN3YrVldLdlJYeEpkcExHdUdFCkEvbE56dmcvKzU2V0FmOU45Um14
+              cXJXSWdyMFVNVEpDTU4wVTNSUnh4dEkKLS0tIDM5VTRHdlNFRGc0dTdZOHAvaHZh
+              aXAvZzFmbmtKWnRla01YdU12YlhjdFEKhKpqgLU6uM8XqJ0rpe9g0cY5KtD0n0t+
+              dTsMGEhbTY2fBJXw+JQkKJFl9EFloYtp0fx/1jcF6pa/BUYmNICtiQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-09-25T16:01:47Z"
     mac: ENC[AES256_GCM,data:A70zcY2uBFZqrJgEY7hefYSdd2n8JTEoozqjlrSb/hGE1A2a89DpWF193GG+E2iDaD92HRG8ZEPU+5m+SMLfVVa+mW47KCb1Ush8rfkW94qmu/5jSuwJ/NHDW5xErx6Mobv3wrJEXl3m2LMsZu455t1hldzBtGDKCKZtSwJAP1c=,iv:GCIogDOgp/QI44f5SB9TM1X9yE4Z8V2CUTBt5173LDs=,tag:HxNrcAVgGMu9MoDKvhtnUQ==,type:str]
     pgp: []