commit ca6d06b96eb00266edb5d19a379add62fb92ac36
parent 3325cb527bbc4da625ae885b22b4cd61938f9a14
Author: MTRNord <mtrnord1@gmail.com>
Date: Fri, 3 May 2024 21:58:07 +0200
Move d4all
Diffstat:
8 files changed, 260 insertions(+), 311 deletions(-)
diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml
@@ -5,6 +5,7 @@ resources:
- ../base/traefik
- ../base/postgres-operator
- ../base/vaultwarden
- #- ../base/matrix/draupnir4all
+ - ../base/matrix/draupnir-synapse
+ - ../base/matrix/draupnir4all
patchesStrategicMerge:
- postgres-operator-values.yaml
diff --git a/apps/2024_cluster/secrets/draupnir-appservice-secret.yaml b/apps/2024_cluster/secrets/draupnir-appservice-secret.yaml
@@ -5,9 +5,9 @@ metadata:
namespace: matrix
type: Opaque
stringData:
- config.appservice.yaml: ENC[AES256_GCM,data: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,iv:3gWFW6/xSTDVs9mHHaqIVoBcLhkK5V0BXHXoQ0noXwY=,tag:wEr7hh4laCl/31KaV0j3Ew==,type:str]
- draupnir-registration.yaml: ENC[AES256_GCM,data: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,iv:YpG2R8GThTc9Ep1i3FNVO/GAYVrTL/6X2M0QM1vsXdk=,tag:gVU0OKJP+R2GEoaNHrLiIQ==,type:str]
- draupnir-config.yaml: ENC[AES256_GCM,data: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,iv:5t9Ewt8Z0gqbe1S9w/NZSfQjwMUMHevrf+5S3Apln3E=,tag:1flRhLgyoCBTgrAMlE3rTQ==,type:str]
+ config.appservice.yaml: ENC[AES256_GCM,data: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,iv:3S/QQIIBiSKPLq0b9dZfC2UtMebAb3M4+bPCWcgkHQU=,tag:K/0wT8Px+TIuTiHC5c9OBQ==,type:str]
+ draupnir-registration.yaml: ENC[AES256_GCM,data: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,iv:EY0hC9W66wPSH7bj5rSiyJdvDmiCa32qMzKsgiN357A=,tag:Ih3TSP1h895GM3irhXsSRg==,type:str]
+ draupnir-config.yaml: ENC[AES256_GCM,data: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,iv:bsQu+JG4ZY1OBZ5UMBcV8Lsfjf+cFWZ+JfYO+axm8Mk=,tag:s0s7mqgJuv93zaPMZabTjA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -17,14 +17,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPVmRVMXdmam5nTjlCY3Ir
- SFVpSXUweUhLQU9RN1ZXV3h1djNFMXkxbHhBCkhhbDdHMnVqeE9XWDNDOVU0am9U
- Q0greEdGRXNJbDRaeWQzSjlGK2VCR2sKLS0tIFpHbzBOODNHWWNoenZUclpiZFVG
- Qi9Hd29oU1FQV1dJbzkvdW43aUxLbFUKfRBPPd/ERlLtrGE4yNavpkt6wCmYaXB2
- CBz2bkEOtLk8BPLDMYm2O47CCg9VjIQd7HlTpIz7HDfEi26wGL6cKA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKUWxnNGdtY3duMjFvc0Nj
+ cE42YUxkRitPeVdWZlBieFgvR0ozR1FpU0ZNCmlSQTVQT2FYSzgxNzRramV2ZUFu
+ T2Qzai9jSEF4Z3lRUVJKK3VqNUhEZFUKLS0tIFQ3Q2s2UmkwRUdPUENzK25oSDZq
+ Ny9DdkVxcXZFM0R3TTUrV3dmNHFZYlUKfH22gOo6ZDwQfSYH+aAkOKXxS4axzh6f
+ zdpj3Eckr5AmLX9H0U76So/iZQndBrpprE/ztQ13HM+P6F4Lj3GSvA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-05-02T12:08:47Z"
- mac: ENC[AES256_GCM,data:Y1M8DP1ehyYsGSKFVyQLAMRBRxGBM3WExGusAosfdbhMdYsAlNW3ird9zxXfzCnqDdBvckRF32TkjZe5wwlPCvoT81QI1djBtjQAg8cGVGDctbADLJ+nG8e691qYdzvOztKK1mU8TQwT3/sZc+aLlNLVHska8+ZtdbcOxTeTiVA=,iv:qXfv13yLA480cEtbQfaJieUsBRGbfrYsP+1OlE8XBoU=,tag:l8qu4lEUsklN2UWb3vh+bA==,type:str]
+ lastmodified: "2024-05-03T19:37:21Z"
+ mac: ENC[AES256_GCM,data:jZPLTwQ+89WihMezsp8Ah8DlEZTUf/S9dqAmrIJHZWyMIqsF0dJ5lWfSJHUZCieFtMAQ+gtibVn5WwK1MUJR2Rk7fU1LZNDiDTgC9cGk674f6B1nf9xdm+/AarELfShnKI49xWcZzD1MZ/FHPqM9e+Kg1OVDy3buEFs83rYq8co=,iv:z6VUcU7juCzT5EwFK+67xsJSE66wZ7FpoVzjjIE+Yys=,tag:dtuN/wONmKTZk//HwbC84Q==,type:str]
pgp: []
- encrypted_regex: ^(uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+ encrypted_regex: ^(clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
version: 3.8.1
diff --git a/apps/base/matrix/draupnir-synapse/release.yaml b/apps/base/matrix/draupnir-synapse/release.yaml
@@ -1,231 +1,251 @@
----
apiVersion: helm.toolkit.fluxcd.io/v2beta2
kind: HelmRelease
metadata:
- name: draupnir-synapse
- namespace: matrix
+ name: draupnir-synapse
+ namespace: matrix
spec:
- chart:
- spec:
- chart: matrix-synapse
- sourceRef:
- kind: HelmRepository
- name: ananace-charts
- interval: 50m
- install:
- remediation:
- retries: 3
- values:
- extraConfig:
- stream_writers:
- events: event_persister
- run_background_tasks_on: background_worker
- opentracing:
- enabled: true
- homeserver_whitelist:
- - "matrix.midnightthoughts.space"
- jaeger_config:
- local_agent:
- reporting_host: tempo.monitoring.svc.cluster.local
- presence:
- enabled: false
- federation_sender_instances:
- - federation-sender-1
- - federation-sender-2
- event_cache_size: 10K
- caches:
- global_factor: 10
- expire_caches: true
- cache_entry_ttl: 240m
- cache_autotuning:
- max_cache_memory_usage: 2048M
- target_cache_memory_usage: 1024M
- min_cache_ttl: 5m
- wellknown:
- enabled: true
- extraData:
- support:
- admins:
- - email_address: "support@nordgedanken.dev"
- role: "admin"
- image:
- pullSecrets:
- - name: docker
- persistence:
- size: 10Gi
- accessMode: ReadWriteMany
- existingClaim: draupnir-synapse-v2
- volumePermissions:
- enabled: true
- workers:
- default:
- # affinity:
- # nodeAffinity:
- # requiredDuringSchedulingIgnoredDuringExecution:
- # nodeSelectorTerms:
- # - matchExpressions:
- # - key: kubernetes.io/hostname
- # operator: NotIn
- # values:
- # - worker-2
- tolerations:
- - key: "arch"
- operator: "Equal"
- value: "arm64"
- effect: "NoSchedule"
- extraEnv:
- - name: JAEGER_AGENT_HOST
- value: tempo.monitoring.svc.cluster.local
- #- name: LD_PRELOAD
- # value: /usr/lib/x86_64-linux-gnu/libjemalloc.so.2
+ chart:
+ spec:
+ chart: matrix-synapse
+ sourceRef:
+ kind: HelmRepository
+ name: ananace-charts
+ interval: 50m
+ install:
+ remediation:
+ retries: 3
+ values:
extraConfig:
- opentracing:
+ stream_writers:
+ events: event_persister
+ run_background_tasks_on: background_worker
+ opentracing:
+ enabled: true
+ homeserver_whitelist:
+ - matrix.midnightthoughts.space
+ presence:
+ enabled: false
+ federation_sender_instances:
+ - federation-sender-1
+ - federation-sender-2
+ event_cache_size: 10K
+ caches:
+ global_factor: 10
+ expire_caches: true
+ cache_entry_ttl: 240m
+ cache_autotuning:
+ max_cache_memory_usage: 2048M
+ target_cache_memory_usage: 1024M
+ min_cache_ttl: 5m
+ wellknown:
enabled: true
- homeserver_whitelist:
- - "matrix.midnightthoughts.space"
- jaeger_config:
- local_agent:
- reporting_host: tempo.monitoring.svc.cluster.local
- event_cache_size: 30K
- caches:
- global_factor: 10
- expire_caches: true
- cache_entry_ttl: 1080m
- sync_response_cache_duration: 2m
- cache_autotuning:
- max_cache_memory_usage: 4069M
- target_cache_memory_usage: 2048M
- min_cache_ttl: 5m
- generic_frontend:
- replicaCount: 2
- enabled: true
- generic: true
- listeners: [client]
- csPaths:
- # Client API requests
- - "/_matrix/client/(api/v1|r0|v3|unstable)/createRoom$"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/publicRooms$"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/state$"
- - "/_matrix/client/(r0|v3|unstable)/account/whoami$"
- - "/_matrix/client/(r0|v3|unstable)/devices$"
- - "/_matrix/client/versions$"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/event/"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/joined_rooms$"
-
- # Encryption requests
- - "/_matrix/client/(r0|v3|unstable)/keys/query$"
- - "/_matrix/client/(r0|v3|unstable)/keys/changes$"
- - "/_matrix/client/(r0|v3|unstable)/keys/claim$"
- - "/_matrix/client/(r0|v3|unstable)/room_keys/"
- - "/_matrix/client/(r0|v3|unstable)/keys/upload/"
-
- # Registration/login requests
- - "/_matrix/client/(r0|v3|unstable)/register$"
- - "/_matrix/client/(r0|v3|unstable)/register/available$"
-
- # Event sending requests
- - "/_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/redact"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/send"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/state/"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/(join|invite|leave|ban|unban|kick)$"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/join/"
- - "/_matrix/client/(api/v1|r0|v3|unstable)/profile/"
- federation_reader:
- replicaCount: 2
- enabled: true
- generic: true
- listeners: [federation]
- paths:
- - "/_matrix/federation/v1/send/"
- appservice:
- enabled: true
- name: appservices
- generic: true
- federation_sender_1:
- labels:
- synapse-component: federation-sender
- app: federation_sender
- name: federation-sender-1
- enabled: true
- federation_sender_2:
- labels:
- synapse-component: federation-sender
- app: federation_sender
- name: federation-sender-2
- enabled: true
- background_worker:
- name: background_worker
- replicaCount: 1
- enabled: true
- generic: true
- event_persister:
- name: event_persister
- replicaCount: 1
- enabled: true
- generic: true
- listeners: [replication]
- synapse:
- # affinity:
- # nodeAffinity:
- # requiredDuringSchedulingIgnoredDuringExecution:
- # nodeSelectorTerms:
- # - matchExpressions:
- # - key: kubernetes.io/hostname
- # operator: NotIn
- # values:
- # - worker-2
- tolerations:
- - key: "arch"
- operator: "Equal"
- value: "arm64"
- effect: "NoSchedule"
- ## Liveness probe configuration to use
- ##
- livenessProbe:
- timeoutSeconds: 60
- failureThreshold: 5
- httpGet:
- path: /health
- port: http
-
- ## Readiness probe configuration to use
- ##
- readinessProbe:
- timeoutSeconds: 60
- failureThreshold: 5
- httpGet:
- path: /health
- port: http
-
- extraCommands: []
- extraEnv:
- - name: JAEGER_AGENT_HOST
- value: tempo.monitoring.svc.cluster.local
- #- name: LD_PRELOAD
- # value: /usr/lib/x86_64-linux-gnu/libjemalloc.so.2
- annotations:
- prometheus.io/scrape: "true"
- prometheus.io/path: "/_synapse/metrics"
- prometheus.io/port: "9090"
-
- externalRedis:
- host: draupnir-synapse-keydb.matrix.svc.cluster.local
- port: 6379
- password: null
- redis:
- enabled: false
- usePassword: false
- password: null
- auth:
- enabled: false
- password: null
- postgresql:
- enabled: false
- externalPostgresql:
- #host: postgres.internal.midnightthoughts.space
- host: 10.0.3.1
- port: 5000
-
- ## Password key to be retrieved from existing secret
- existingSecretPasswordKey: password
- #sslmode: require
+ extraData:
+ support:
+ admins:
+ - email_address: support@nordgedanken.dev
+ role: admin
+ image:
+ pullSecrets:
+ - name: docker
+ persistence:
+ size: 2Gi
+ accessMode: ReadWriteMany
+ existingClaim: draupnir-synapse-v2
+ volumePermissions:
+ enabled: true
+ workers:
+ default:
+ extraConfig:
+ opentracing:
+ enabled: true
+ homeserver_whitelist:
+ - matrix.midnightthoughts.space
+ event_cache_size: 30K
+ caches:
+ global_factor: 10
+ expire_caches: true
+ cache_entry_ttl: 1080m
+ sync_response_cache_duration: 2m
+ cache_autotuning:
+ max_cache_memory_usage: 4069M
+ target_cache_memory_usage: 2048M
+ min_cache_ttl: 5m
+ generic_frontend:
+ replicaCount: 1
+ enabled: true
+ generic: true
+ listeners:
+ - client
+ csPaths:
+ # Client API requests
+ - /_matrix/client/(api/v1|r0|v3|unstable)/createRoom$
+ - /_matrix/client/(api/v1|r0|v3|unstable)/publicRooms$
+ - /_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/state$
+ - /_matrix/client/(r0|v3|unstable)/account/whoami$
+ - /_matrix/client/(r0|v3|unstable)/devices$
+ - /_matrix/client/versions$
+ - /_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/event/
+ - /_matrix/client/(api/v1|r0|v3|unstable)/joined_rooms$
+ # Encryption requests
+ - /_matrix/client/(r0|v3|unstable)/keys/query$
+ - /_matrix/client/(r0|v3|unstable)/keys/changes$
+ - /_matrix/client/(r0|v3|unstable)/keys/claim$
+ - /_matrix/client/(r0|v3|unstable)/room_keys/
+ - /_matrix/client/(r0|v3|unstable)/keys/upload/
+ # Registration/login requests
+ - /_matrix/client/(r0|v3|unstable)/register$
+ - /_matrix/client/(r0|v3|unstable)/register/available$
+ # Event sending requests
+ - /_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/redact
+ - /_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/send
+ - /_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/state/
+ - /_matrix/client/(api/v1|r0|v3|unstable)/rooms/.*/(join|invite|leave|ban|unban|kick)$
+ - /_matrix/client/(api/v1|r0|v3|unstable)/join/
+ - /_matrix/client/(api/v1|r0|v3|unstable)/profile/
+ federation_reader:
+ replicaCount: 1
+ enabled: true
+ generic: true
+ listeners:
+ - federation
+ paths:
+ - /_matrix/federation/v1/send/
+ appservice:
+ enabled: true
+ name: appservices
+ generic: true
+ federation_sender_1:
+ labels:
+ synapse-component: federation-sender
+ app: federation_sender
+ name: federation-sender-1
+ enabled: true
+ federation_sender_2:
+ labels:
+ synapse-component: federation-sender
+ app: federation_sender
+ name: federation-sender-2
+ enabled: true
+ background_worker:
+ name: background_worker
+ replicaCount: 1
+ enabled: true
+ generic: true
+ event_persister:
+ name: event_persister
+ replicaCount: 1
+ enabled: true
+ generic: true
+ listeners:
+ - replication
+ synapse:
+ ## Liveness probe configuration to use
+ ##
+ livenessProbe:
+ timeoutSeconds: 60
+ failureThreshold: 5
+ httpGet:
+ path: /health
+ port: http
+ ## Readiness probe configuration to use
+ ##
+ readinessProbe:
+ timeoutSeconds: 60
+ failureThreshold: 5
+ httpGet:
+ path: /health
+ port: http
+ extraCommands: []
+ annotations:
+ prometheus.io/scrape: "true"
+ prometheus.io/path: /_synapse/metrics
+ prometheus.io/port: "9090"
+ externalRedis:
+ host: draupnir-synapse-keydb.matrix.svc.cluster.local
+ port: 6379
+ password: null
+ redis:
+ enabled: false
+ usePassword: false
+ password: null
+ auth:
+ enabled: false
+ password: null
+ postgresql:
+ enabled: false
+ externalPostgresql:
+ host: postgres-cluster.postgres-cluster.svc.cluster.local
+ port: 5432
+ sslmode: require
+ database: draupnir_synapse
+ username: draupnir_synapse
+ password: ENC[AES256_GCM,data:kQIHr42+coKkDoVU/9SWfIUiNuAmuZ8Dl+2d+Vv0gUvyfeurSvzoIntLCEkSnxgLi91GcUoMcjiycUGVnvPkTQ==,iv:58sXfJ9Q0YtGm7sY/QqQT3LnVcZuINrs2OBJ186PPNM=,tag:PYJFx0UqeChYoW5JsTQAzA==,type:str]
+ signingkey:
+ job:
+ enabled: false
+ serverName: draupnir.midnightthoughts.space
+ publicServerName: matrix.draupnir.midnightthoughts.space
+ wellknown:
+ client:
+ m.homeserver:
+ base_url: https://matrix.draupnir.midnightthoughts.space
+ config:
+ reportStats: true
+ enableRegistration: false
+ extraConfig:
+ use_presence: false
+ app_service_config_files:
+ - /data/draupnir-registration.yaml
+ ingress:
+ traefikPaths: true
+ hosts:
+ - draupnir.midnightthoughts.space
+ - matrix.draupnir.midnightthoughts.space
+ tls:
+ - hosts:
+ - draupnir.midnightthoughts.space
+ - matrix.draupnir.midnightthoughts.space
+ secretName: draupnir-midnightthoughts-synapse-tls-secret
+ annotations:
+ cert-manager.io/cluster-issuer: letsencrypt-dns
+ traefik.ingress.kubernetes.io/router.tls: "true"
+ traefik.ingress.kubernetes.io/router.middlewares: default-hsts@kubernetescrd,default-compress@kubernetescrd,default-redirect-https@kubernetescrd
+ workers:
+ default:
+ volumeMounts:
+ - name: configs
+ mountPath: /data
+ readOnly: true
+ volumes:
+ - name: configs
+ secret:
+ secretName: ENC[AES256_GCM,data:NDCIn9YtNxlKHVjPn9+Rm5SG8Q==,iv:UDZPXuUkrm3odCcHnFudXEMQbU4BjEEJxf5F3x6NCiI=,tag:EtyfaxGEXW0FHy25Aj0Ylg==,type:str]
+ synapse:
+ extraVolumeMounts:
+ - name: configs
+ mountPath: /data
+ readOnly: true
+ extraVolumes:
+ - name: configs
+ secret:
+ secretName: ENC[AES256_GCM,data:Ti0CM/yUjx7vQJnmhqxJ8W8NkA==,iv:11MFd0TLbA3LW4zqrvgSfHC8x7zlv6D7/5CGBuMojPE=,tag:1OIhl68TeexYC1XOQjGfyQ==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvS2RZNmt0dEQ0UUxxaVg5
+ dmczeUZTU1ZUTElISmhpMWNKZnFTNkc2NGxnCmpPWnZoZStGbWxscG1rYjFqRUlJ
+ eVZjTk8wTENOc3cxd3ZLdnROWlFUMDgKLS0tIEJVOVFKY3hzNmNpMjJhY1pXOHFJ
+ RkxTR1RIZVFMcEJUb1AxTU1BaU5NNzAKWzAF33WSKxOEDMY9d+SFqMqVmoTYba8w
+ IQ+Sfs/DUOrpXk6cvbZpT70U6JfhmnHMBkmh02DhtmjYtCnEKlEdMg==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2024-05-03T19:56:13Z"
+ mac: ENC[AES256_GCM,data:UUwJ90GD9n33+32FPNjiYkFC0FwNDFiXb7H1s2pnMgJ9+Ot3z4n8S5MEWD5/KhojeF5X9kry32YyscRn6sd6BwFccZgU2Rdp2wxL2zw2ScFZTbAL6dzo43jRxwGhg47+IKa3h0PMzifeUVMXosZ6kSFIozDOXWHjh5cSsDC0Etg=,iv:+GxvcfGtRiufm6FxdaUcjH2thDlh5m11QN9LEixER3I=,tag:7IX86t7BZvzLYqy4uOvrww==,type:str]
+ pgp: []
+ encrypted_regex: ^(clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+ version: 3.8.1
diff --git a/apps/base/matrix/kustomization.yaml b/apps/base/matrix/kustomization.yaml
@@ -6,6 +6,4 @@ resources:
- ./media-repo
- ./sliding-proxy
- ./synapse
- - ./draupnir-synapse
- - ./draupnir4all
- ./draupnir-fluffy
diff --git a/apps/production/kustomization.yaml b/apps/production/kustomization.yaml
@@ -46,7 +46,6 @@ patchesStrategicMerge:
- postgres-exporter-values.yaml
#- redmine-values.yaml
#- mailu-values.yaml
- - synapse-draupnir.yaml
- forgejo.yaml
- vector-values.yaml
#- synapse-element-call.yaml
diff --git a/apps/production/synapse-draupnir.yaml b/apps/production/synapse-draupnir.yaml
@@ -1,69 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta2
-kind: HelmRelease
-metadata:
- name: draupnir-synapse
- namespace: matrix
-spec:
- chart:
- spec:
- version: 3.9.x
- values:
- signingkey:
- job:
- enabled: false
- # image:
- # repository: ghcr.io/matrix-org/synapse
- # # TODO update properly again
- # tag: v1.89.0
- # #pullPolicy: Always
- serverName: draupnir.midnightthoughts.space
- publicServerName: matrix.draupnir.midnightthoughts.space
- wellknown:
- client:
- m.homeserver:
- base_url: https://matrix.draupnir.midnightthoughts.space
- config:
- reportStats: true
- enableRegistration: false
- extraConfig:
- use_presence: false
- app_service_config_files:
- - /data/draupnir-registration.yaml
- ingress:
- traefikPaths: true
- hosts:
- - draupnir.midnightthoughts.space
- - matrix.draupnir.midnightthoughts.space
- tls:
- - hosts:
- - draupnir.midnightthoughts.space
- - matrix.draupnir.midnightthoughts.space
- secretName: draupnir-midnightthoughts-synapse-tls-secret
- annotations:
- cert-manager.io/cluster-issuer: letsencrypt-http
- traefik.ingress.kubernetes.io/router.tls: "true"
- traefik.ingress.kubernetes.io/router.middlewares: default-hsts@kubernetescrd,default-compress@kubernetescrd,default-redirect-https@kubernetescrd
- workers:
- default:
- volumeMounts:
- - name: configs
- mountPath: "/data"
- readOnly: true
- volumes:
- - name: configs
- secret:
- secretName: draupnir-appservice
- synapse:
- extraVolumeMounts:
- - name: configs
- mountPath: "/data"
- readOnly: true
- extraVolumes:
- - name: configs
- secret:
- secretName: draupnir-appservice
- externalPostgresql:
- username: draupnir_synapse
- ## The name of an existing secret with postgresql credentials
- existingSecret: draupnir-midnightthoughts-postgresql
- database: draupnir_synapse
diff --git a/decrypt.sh b/decrypt.sh
@@ -1,4 +1,4 @@
#!/bin/bash
export SOPS_AGE_KEY_FILE="$(pwd)/age.agekey"
-sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
+sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
diff --git a/encrypt.sh b/encrypt.sh
@@ -1,3 +1,3 @@
#!/bin/bash
-sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
+sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
