commit d532c7642a5c4e5c31785e31de289bb371d06c8f
parent c1f4cc687e85890faf619469ce7ac4de5da45413
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 25 Sep 2024 17:06:50 +0200
Deploy mas try 0
Diffstat:
6 files changed, 216 insertions(+), 1 deletion(-)
diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml
@@ -11,6 +11,7 @@ resources:
- ../base/matrix/draupnir-synapse
- ../base/matrix/draupnir4all
- ../base/matrix/synapse
+ - ../base/matrix/mas
- ../base/matrix/draupnir-fluffy
- ../base/matrix/draupnir-freifunk
- ../base/mastodon
diff --git a/apps/2024_cluster/secrets/kustomization.yaml b/apps/2024_cluster/secrets/kustomization.yaml
@@ -11,3 +11,4 @@ resources:
- cloudflare_ext_dns.yaml
- zertrixt-runner.yaml
- coder.yaml
+ - mas_config.yaml
diff --git a/apps/2024_cluster/secrets/mas_config.yaml b/apps/2024_cluster/secrets/mas_config.yaml
@@ -0,0 +1,116 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ name: mas-config
+ namespace: matrix
+type: Opaque
+stringData:
+ config:
+ http:
+ listeners:
+ - name: ENC[AES256_GCM,data:aGAT,iv:zouNHc+U+Au0911+g8/8x358Id+kws1TrCiHcOg09dA=,tag:5MZs8Tey9I+sGsYGw8nZFg==,type:str]
+ resources:
+ - name: ENC[AES256_GCM,data:gozsS+jTLc6R,iv:4Th2V/ZtS8GBTv+mka8Jh9mlYDzDrg+c4jC77H4ECtM=,tag:WLEoHfHwtx2vURgQrPfoqQ==,type:str]
+ - name: ENC[AES256_GCM,data:wzBnmvM=,iv:6XOHyrEln28aVTGkYNx+jdNKKhf4lNddZ0Mq5lprmHQ=,tag:Y3SC2IlB7pRsKOBODHxSaQ==,type:str]
+ - name: ENC[AES256_GCM,data:PbAMovk=,iv:XvJjh9guA6FWOyHFzl3nENPfAwy7lkzA5gLfwMbT/qk=,tag:85WzpTd74s3wAegWy19y/A==,type:str]
+ - name: ENC[AES256_GCM,data:55MNN/09,iv:Pm7jRSW/CsGwxcSHzw+CNyi6FQkO+Ixff8ePLXDQJUA=,tag:PXcipIKCY9YKqVpnLwsEOw==,type:str]
+ - name: ENC[AES256_GCM,data:+607NRjbBQ==,iv:xCXIoaf1PMdPi3HYLhmGGEyfncKiSxHTH3oqnk8eBp8=,tag:vxIWyxVh6nLBsMCpVQp1TA==,type:str]
+ - name: ENC[AES256_GCM,data:lD95NO0d,iv:Wm0RHoRpdgKDZ7DMtqAB/qSNliO4OutlWKZugtqSf+U=,tag:4NW6L3m7EZSTwN3wmAmsqA==,type:str]
+ binds:
+ - address: ENC[AES256_GCM,data:VczHMzx3k9AR,iv:NOOHbKBAfOZzSGqHP7p/WPK1V0fOlRz/Lqtq/X++3gA=,tag:2fj+m0lfEZTpBXu3CSxCSA==,type:str]
+ proxy_protocol: ENC[AES256_GCM,data:TA/HVdk=,iv:cqWNglBRhCYKSVDVKiBfzmaiAxUvpAp6UoswCXtWr6c=,tag:JgtaQFjaHW2pmqs3/YiGbA==,type:bool]
+ - name: ENC[AES256_GCM,data:jVTv4jO5ElE=,iv:aKoZQj6zSB2VBIJT55bWaK+pi7dyn4FB80ucVGEGwtk=,tag:JZwd/CtCYXGBfufGgJs1eQ==,type:str]
+ resources:
+ - name: ENC[AES256_GCM,data:tzejx1hC,iv:yPtiocPrS2/xKFK0VHJlGCZk3z99Y7WbIWwkh4GY2/o=,tag:KpVwtEdjhMZWJdDoOf4GrA==,type:str]
+ binds:
+ - host: ENC[AES256_GCM,data:ARw/jUlhUgWe,iv:Fq84tsqBOgTgtLCWg8fexL+0IF7ig5fYtBxJjnpRgDA=,tag:z7XOa4O1UYgD7sIZHSvWtg==,type:str]
+ port: ENC[AES256_GCM,data:cXJGVg==,iv:23mYfi/cklN530aB201ZX2h3KRi8S/8OfPCaCIaQ3Mk=,tag:sCh2XnX7sangJ7pd0qKkgw==,type:int]
+ proxy_protocol: ENC[AES256_GCM,data:hKZPJf8=,iv:XWkzNo9bzdg9a8Vif8gIB8ibQVTga5h+wTcc6rP9QXw=,tag:NiH5nolaVPlWVyri9+vq9Q==,type:bool]
+ trusted_proxies:
+ - ENC[AES256_GCM,data:TDlnS4unzzhrAFtfOLI=,iv:cQq+j62POabgisVWWcjQ/zFGEGH+r1w3K5rjDbVNsPc=,tag:RMWizqgJlrIQsVvEgpjWzw==,type:str]
+ - ENC[AES256_GCM,data:yxUULFRGdMsxaniHwA==,iv:wMxPBzpA+ps8PL/YlXnGLH6sfqgG/OQ21KPg6Fgc9U0=,tag:b/r2AAhsLUI2mJ6f6b0dtg==,type:str]
+ - ENC[AES256_GCM,data:evOHEJAw3vPyWF0=,iv:+aq+rhJFwW4Z+NaCyCrcxqxb5rJQvs37qBR2kzeN8Mk=,tag:n4l75zwxG6nmcyJnu2Kyww==,type:str]
+ - ENC[AES256_GCM,data:hSpYpb5Is/y6W3s=,iv:WMXKyV+N2QD61c+xqQBVsKkC6quTkKI66IauGZZGr9o=,tag:yqDxwO1eWYIG0UYiaMxLKQ==,type:str]
+ - ENC[AES256_GCM,data:0yqt8fu1oN4=,iv:mYxOWBWwrC7kYNZQdIgyVm50LxlngcDCVSn1+8iarTI=,tag:At3eySCB/mmtSDUvYqSycQ==,type:str]
+ - ENC[AES256_GCM,data:yTP2r/YRKA==,iv:BdnZVpzIppcVpGoOdqSbj6aASZnz1NTcvCt+OKO4J84=,tag:zupMJyY/gwGRR7OBIKCa8A==,type:str]
+ public_base: ENC[AES256_GCM,data:th1oG8kQaTHC6+UFyaPK8H8I28qbrzGfikUbo5sQabL/S/WAAiJRUjxS,iv:U8W6uL1fNhsTrhjA+MgJB1Eu8wZp1La4miA+gdEVN80=,tag:XBS4caq0qUBrpZuIHOB5kg==,type:str]
+ issuer: ENC[AES256_GCM,data:spN+hFqCl8LxBWafNhf/MxaAfIOmmgc02PGKvV+D7BgPLLyTd9GtZAC4,iv:o/CDRMHxxUiJK6ss2y3PJH9NtZUk4GaElY3WheB8rhk=,tag:4T9H3sofrHH9gEGdEjMBMg==,type:str]
+ database:
+ host: ENC[AES256_GCM,data:vucQhDQgyNfObgb3domR+q7b2oSXrZXoGTDvxrIzWe7IhP0+A3ZPkTYGBtHmKxQiKvuP,iv:pbz7m13fGFwwsNY66YhRLyHmcadyljS7x4U5eauPt4U=,tag:MPVuszLwLPfhzSqW1wmXrg==,type:str]
+ port: ENC[AES256_GCM,data:EIMqdA==,iv:N2Ni11Xav/m6H4brUKow5oVihaOEUJfLwdpIXa4Q8Ao=,tag:538Xwru6OKLB08EuBfJYJA==,type:int]
+ database: ENC[AES256_GCM,data:jPgQZwxIxIRkJqk=,iv:3N9TI7Ra58d8137TCJuCxOycrgLDKNang9bKiiQuGd0=,tag:UKr0yDnV6D3qzJvSsdYLHA==,type:str]
+ username: ENC[AES256_GCM,data:+sODTazqlWcleqY=,iv:ixN7xtykmhc1sbA45wmUzeSEibYM1HQ1IHfroUW6l+g=,tag:Hl+C6H8AyWdzQuWJqQ2SvQ==,type:str]
+ password: ENC[AES256_GCM,data:UQHmnauIts9W+bYj9OwpsuUyS2/exe4CC7G1WRBjfTQu2JgC7O9T+Sqos+bg7eKTzAUeUpVxodqpqTXbIFqzuA==,iv:5N+tghuxydXSX+Odf3P1BtXExC+135NJbdRYm/9Bjhg=,tag:XHTYserhMLgNmsHpkuKWVg==,type:str]
+ max_connections: ENC[AES256_GCM,data:djM=,iv:1WgvQfrCUh8xs9F8XAVRQQ/U15ZGX/v9Gx1UMqyVTM0=,tag:ww83AqOCMoaxNhr+CpufEQ==,type:int]
+ min_connections: ENC[AES256_GCM,data:+w==,iv:12yfE23oflO18d2x8Z8/VfBOmzd+Tw2zoVwy2mk7d+I=,tag:psmW+h94YuDi7kY59qd/Yg==,type:int]
+ connect_timeout: ENC[AES256_GCM,data:0qY=,iv:n0oBVrVfcbeGfSymziLY3jjqChWP7JBfhxJ9H/b8COU=,tag:0XpBIDgc+B/PbdPkZCWXJw==,type:int]
+ idle_timeout: ENC[AES256_GCM,data:ndNu,iv:MyoiWyRwJXcBNe/b6+FO6Uy1Jw1lzKL7ns8Wx0USByU=,tag:JB0l7QZsJwnkXYjBqQ1Z0w==,type:int]
+ max_lifetime: ENC[AES256_GCM,data:w4IAWQ==,iv:bw4+D73yys8xERITQ4BSmj90mg1AgA6rbOfM7nDOcOE=,tag:aN7sw5DBQl5uDZBKX4hJwg==,type:int]
+ email:
+ from: ENC[AES256_GCM,data:QIOeO/Hd/Wtg0mOlAPSUWHz7fYlvIPn4Kji4ckasw4tZ7TOvuMkm6t8=,iv:dmsJO6HVN2pju0XXsBmZv59QBcBP+CdT4SRfFhhviAE=,tag:9lr2+LINGGB38cYyy/lZXw==,type:str]
+ reply_to: ENC[AES256_GCM,data:Jz1n1C5zYAbLyGs09LFUOz3vrgl4t4wgfVRUKWk0h5iBd51s7QQFKTw=,iv:6r+D+apqI8wu7YsBU7kIMOjW9deMl7uDdg726+AfdPI=,tag:UvOzrG9OsaqjYBvX8F4gxw==,type:str]
+ transport: ENC[AES256_GCM,data:ytUoCisDQxym,iv:MM24CejnMFEYpxuZE4hqDyA6jE2hG2w+2n2k1pk4PU0=,tag:6xCLu3ZSTCzN4YefT/44rg==,type:str]
+ secrets:
+ encryption: ENC[AES256_GCM,data:924L3orFqwh+0CWDsaZ/TpAarBJUrGVJnOiGEKASr3hU62yhqC/Dv0udjNTeZptNyFb/aGZLwh8jgwcKIoCYZA==,iv:SB/wsnLXjVByL/qarx9uA1vJCaC+CHYLS5DVfv/Rpjw=,tag:CV5K5bl4kE59E/6xheM9oA==,type:str]
+ keys:
+ - kid: ENC[AES256_GCM,data:cADkGdi1neMFKg==,iv:eu6KnYh3+4lNf++y8IuC5TOr5wR0NhXGjR6beoOPhZI=,tag:xzeP/em8fADUeGg21e1kAQ==,type:str]
+ key: ENC[AES256_GCM,data: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,iv:1NBG2lWC1l48s3F5l8ybIW6fje1IQZmsTwwP6X/3PvE=,tag:PfGodi2r9aWH6N1k/qM5Lg==,type:str]
+ - kid: ENC[AES256_GCM,data:rdjBZ3aOlTS33w==,iv:fb7N79Zob4qxQYglyXXFCcs6RzDSWqz34EV5jbcH5FM=,tag:zareOj4117hpwhaWBzCyyw==,type:str]
+ key: ENC[AES256_GCM,data:GZQ4BV8J0jrFwMPE7Gtl2/QGSB0XLBjP8HKYGvWjx5SKgV+2B0eZylhUYqydWUtGu0DPDAeKkCna33etswzBSHDVSuVFW7zNJriPur9WMrKZBxc9GlZ4R7u4GVq7VFq2oiXPQJXfbeQ/GB/lqNtrCEm4E/e3d5GDMKjQzarfizk+pAAbL3e4noRHf3BNQfQ7mV+Vo03gSJF+AyjSWSNYr7CX+5Hi6mXk8IU3l8rz1+q7CmgJuPzCQKhP1by4AWuvK6bK2ZKcdPGcSRxJ+Mu3cY+yreIppdi+/QYYc9L4+cuUCFs=,iv:Bz5c1QPHIPZy/KU7QaSaf0xKEn1cCJvp9hIddW1UfGk=,tag:ExX2EvvVM7hQRprZ1huPSA==,type:str]
+ - kid: ENC[AES256_GCM,data:fcIwv25yZSbJHg==,iv:LiXftZlMMLChqOvF9BQES5QP6arzh1l41Apcm5Hnu6E=,tag:1/sEfJat61V9LeqBUWW7tQ==,type:str]
+ key: ENC[AES256_GCM,data:qwVQSMyql3wnNDel4Bsd2isFsGD8O8HAxWpjCHjHbsuVyaSYQr4P4YaNj8KMSwzpsMDWh7fVx37wIF1HCKmU0vZT5hR3kNjWqIW1SbqJupb9duLcq+MuAdQeCPBjnWg5NXcjfHNf/1xFT34FPzL4GC80ABzWJfnEfH8F9ajOUJ+mjGTmtmirFMEmb81699M6LGsf5yGMEhPySYgKf5ywvcrt+3WcdVRQCkmH3FSQpxnn6FvW2w/ti2vRR+nNMRo7jmJzTMf9/GqwW3g99Q2DA7BpS0NfckvcvWeauvNKI2MdBRE/LuND9XFaGfjAtU8v9EURUYNmnwna6UH4imnGDSmO6keItdup/yLd66igEi84PO8a0tpfUUdRgGjywfr9,iv:H28n/MoSn4ppSPWkKj1mwnxRVhKfsSyn1MvoPqzZIWM=,tag:KV+WiN0F+qkPYEorkSjSFQ==,type:str]
+ - kid: ENC[AES256_GCM,data:mVbzPuw9NHixIQ==,iv:ufUPfWSPhU/5NhiZPFPTXUI0eQMLeoFpIuV+4u0PB6k=,tag:Xw/vdXl8+koxSidpgs6KTw==,type:str]
+ key: ENC[AES256_GCM,data:uEJMmWNKgx8cK0y3uQAKYzXbIDv3yUNTQiPjod2i44nVgL15i5cwAa63H0EUcTUtQcPiABUGkf77nU959oZH4m8vhjukRgwIDJigO7CHbX71E3jYRUa6ksByKN63LTeK19YuLbpY7uvmpIoPFluUBZSTOVbkYo0prVUNmK96p9utX3WgMDZ6R9oknxYsQy626yaYu8oD2Hyest6eT3Ax0pPF1vEV6j+zFLTfHsPAPs6EpuTpPhBcqxkEWWSPd09boCbh6N2BgstEyBJGPD/iTKZfCuwxevltSD5nZoWAZw==,iv:e236ittzTkSq+Wv296g0YqSdny3dqocy+QYPNRVjtPE=,tag:MD0o2/kztrUuzlTav/X0dA==,type:str]
+ passwords:
+ enabled: ENC[AES256_GCM,data:+HwMbw==,iv:r78HPiuWDp82oFtKw52y62dYYhuK8bceZEvaWKBcyaY=,tag:DdFfubD10KYuQDvlLk7Acg==,type:bool]
+ schemes:
+ - version: ENC[AES256_GCM,data:hg==,iv:LN3zjKG38Ndx01H6Wwq+CpleUgh5fLK1KXBLLAmJdeg=,tag:aJDMUTWdYOXfBN6f2KO5yQ==,type:int]
+ algorithm: ENC[AES256_GCM,data:sSbdvErvqgw=,iv:tvB37YcS2iG7JNSnlrYaJB5iHZenpX+4NJE4FDajV+w=,tag:YkanqKGBZ+lEUzM1HPFLpw==,type:str]
+ minimum_complexity: ENC[AES256_GCM,data:PQ==,iv:NvaaRA2rVTGMuXvJMrR/LxwyBE1C9d87zqt2R3rtYdU=,tag:pBZAxW9hXOCTYCWTXUmBeg==,type:int]
+ matrix:
+ homeserver: ENC[AES256_GCM,data:9BThMuiiQN8bjrCzAG3l5+AJ+bvLSDH9NfOEAndBHiAO0VDyNNDzOEsNUh4=,iv:Y4bZuIw7bPiiVxUOV05n+ywtbqDMvTjrjDDhDeI6IxY=,tag:QGIEU28Rgu8nYyc062L3cw==,type:str]
+ secret: ENC[AES256_GCM,data:1Ki7wtPPqdYSkXgTZt8XoKUV2JDYTsX7kTED7Bfc10s=,iv:REmTnxOc8k1yskCP+VMW9xLy69lx1wJl7IdxfQ9RsTU=,tag:Cfj/bUwXO/Ng12QipPLTsQ==,type:str]
+ endpoint: ENC[AES256_GCM,data:lnMcC6nbf+pDPUVaSxrJMFRmi0u28/TbLc+CiJ3ZKqJQX0OiibntVBNaTdMaLmDt71tXwQ==,iv:tNTFPNkxQfNeD6eVXaIvAg7biw2vrOul2s/TAAaEAL4=,tag:LatlEfFZZ3TZ3a4Jd8AhfQ==,type:str]
+ clients:
+ - client_id: ENC[AES256_GCM,data:TSC72NWoRbW/bPum2m5cKfjszw8JxtQKPsU=,iv:VY1OiapHPSg8twHXuJ2YWIjkMRCv6ZoCjJ5WfPnLhHU=,tag:LrJMotf0KoFPOdMtLTgTDQ==,type:str]
+ client_auth_method: ENC[AES256_GCM,data:lpTsQ5sZjIxwfr8TmR9WOMpCzQ==,iv:lZe1UJAWtmO981P/O1RM/BAM5nCGpqkQPzHtHE/Fr/U=,tag:Yg7VG9X/oV0w/+lQ/z1HyA==,type:str]
+ client_secret: ENC[AES256_GCM,data:Z5qasHU1NGv4wrQROwG0geGTynKmDq5l9fpLpusvUY0fgMQtdmpavf6Eugbq1BJLI6ofWRlEIqPCTLhhGd3VmQ==,iv:KSMdJWTdZAQcSsvC0SUl4GGiWUptFtlith9Sy+4QydQ=,tag:/d4G61n0G3KJMyPG4Dbyhw==,type:str]
+ upstream_oauth2:
+ providers:
+ - id: ENC[AES256_GCM,data:FGZddw0/AfLeMm7clnjLIoh2JdGvxn2q7BA=,iv:GjFHtlySAQIbTO5/XzvKLhsrfPel4DibfObgwgrOd5g=,tag:ZowZI8C9kAWaoqahXz2gHQ==,type:str]
+ human_name: ENC[AES256_GCM,data:LtnMPGeRwLAu,iv:G9xVenJzuLJm7WDR7Nuvvu7389r8f1Noxk5tvS9qiOc=,tag:QBdkwojnHcPcC1VH/RK41Q==,type:str]
+ issuer: null
+ client_id: ENC[AES256_GCM,data:rU+oKlvCLLor/Bx77TjOTLwz0mc1I+kpaQexe88WiRfxKeO31ltwAA==,iv:St9e0lVMrUR78ZP9UpmokMobFkejaa22qq/QTfQ+evE=,tag:oNYLtXxpK0KXoOTsrH6qsg==,type:str]
+ client_secret: ENC[AES256_GCM,data:IrE30YmmimxHeV+6yJjlM0s1SxxMEfHEKLKScTj6GUuVp1vwa+cxs6GD3g7+nhWy1S8oMfguJm8P2tvqD85VZ9K22uEvNi1B1DVgo2OZ3NnEsuXYR/KtvBdfmk8U0oLHybtw1e0VixI7ylr2ahlkPmdVI6Cty+cKmrLqCT5iZxI=,iv:Kst6IYWIk8XRuXPG+l7LdB7/tOznBbvd4IQbDCzgVFE=,tag:S1hFRtpBNBzCa970vo0bUA==,type:str]
+ scope: ENC[AES256_GCM,data:5YuLhM10NN0gj5j5hSPrLhayBgI=,iv:QmvuabcX4xXwOcYLXx14xDiaUkOj1lZTk5FGwnVLkr8=,tag:RGyuZ6rBK9UllrXt07OdBg==,type:str]
+ claims_imports: null
+ localpart:
+ action: ENC[AES256_GCM,data:HE8EnRqF6g==,iv:KvmUfmuwwCo48+UxY+cpjbylBuoqOmXo9Hq/aHy8wIE=,tag:+l8hr62g9BikEqjuaGa9xQ==,type:str]
+ template: ENC[AES256_GCM,data:8kikmFy5BZBkYkoPEisfmR6MtaY+C/tMW0EYGAg=,iv:DbHzK+UdbK4JoXiqXKwpIK8FLsp9VhCdG0mmXSgXE7I=,tag:aRBvHx4Raz6npxNwZfLVDw==,type:str]
+ displayname:
+ action: ENC[AES256_GCM,data:beyjtU876g==,iv:TBUNWu0xUPUSuXthNOl1pTumJBod7J6MFdwBfDFs8aM=,tag:1Cdo4B4xuJlfTXixxwKhLA==,type:str]
+ template: ENC[AES256_GCM,data:bMp4nQFe/bXuNjOn4yh+,iv:GAPzNe/XZCkoFw4rLxrc4WCM+kUNvPZLWiTmjYcJxG0=,tag:q6unv6+x8GXi89ygkLS35Q==,type:str]
+ email:
+ action: ENC[AES256_GCM,data:MbFEAdw/Dg==,iv:GgZMSyweboLkifY6LNDwsHyKpKUcnF9jKQ+RDacD3YI=,tag:8i7GcsWb2lAGl6kuVLDpbg==,type:str]
+ template: ENC[AES256_GCM,data:n82oh5BaiejfLPm5/2etXw==,iv:y2quU27XaYTDPiGZafvDcqcqjlwY/XZboPk3JRAe2dk=,tag:8oYbK8xV9FEx0ZhLPvohng==,type:str]
+ set_email_verification: ENC[AES256_GCM,data:5iPXynQK,iv:TtYHmDYA3tH4G44kKc7Pn6Wtsv+WtGCIVcD5AsXv7ag=,tag:C3fRHUrf4GhTkXNHiDQHOg==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmTnBqMnlhUHozSlVPSUQ1
+ dTR4bEc3ZDd5UnpYaFNlM3phWUtYc3h1QVVjCmpuUTc0ejlXYzlvQTdQMTZnbGg4
+ cnlIKy96VTdKMFVYSWo5SFdlMld4aVEKLS0tIC9USTFTR2ZMWnVEREVoOXZrSkxL
+ S21OSjV4eEYvemZlRWd1R0xpR2liaEkKkhWjtVxJPfLE3zr1X8Odp0RCCq9PubrQ
+ fOdXTTosp9pHGY1fSYSYNxz8oOVcelEI7HtE3Ncoq+/jAN8JQt3KoA==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2024-09-25T15:03:01Z"
+ mac: ENC[AES256_GCM,data:DhmOj6FKGxbZ1xzYzowu1b7K/BP/DjCzsM/sFC3rgZ8nK8frg2oR/dQHLFGotr21FTZ6CUeDuGNOAB17CX9ptljXIDXGDeDx3mV1+jR/B6AONt4wHREhqVFS0BPUMeyoojDa9tIy9fIKrKev/YqOc/KtSULGTz0/Qox1LpjKfHU=,iv:hhfj3Ta6yh8jL57lTKQsfp3pl5r25ip8JOlWD7nJKs4=,tag:TG1Sn0u/8mxfrHyJNlPCsw==,type:str]
+ pgp: []
+ encrypted_regex: ^(admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+ version: 3.8.1
diff --git a/apps/base/matrix/mas/kustomization.yaml b/apps/base/matrix/mas/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: matrix
+resources:
+ - mas_deployment.yaml
diff --git a/apps/base/matrix/mas/mas_deployment.yaml b/apps/base/matrix/mas/mas_deployment.yaml
@@ -0,0 +1,93 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: mas
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: mas
+ template:
+ metadata:
+ labels:
+ app: mas
+ spec:
+ containers:
+ - name: mas
+ # Syn2Mas image
+ image: ghcr.io/element-hq/matrix-authentication-service/syn2mas:latest
+ # Normal image
+ image: ghcr.io/element-hq/matrix-authentication-service:latest
+ imagePullPolicy: Always
+ # Sleep mode
+ command: [ "/bin/bash", "-c", "--" ]
+ args: [ "while true; do sleep 30; done;" ]
+ # Normal mode
+ #args: [ "server" ]
+ ports:
+ - containerPort: 8080
+ - containerPort: 8081
+ # Mount the mas config which is stored in the mas-config secret at the config path and should go to /config.yaml
+ volumeMounts:
+ - name: mas-config
+ mountPath: /config.yaml
+ subPath: config
+ livenessProbe:
+ httpGet:
+ path: /health
+ port: 8081
+ initialDelaySeconds: 10
+ timeoutSeconds: 5
+ readinessProbe:
+ httpGet:
+ path: /health
+ port: 8081
+ initialDelaySeconds: 10
+ timeoutSeconds: 5
+ # Mount the mas config which is stored in the mas-config secret at the config path and should go to /config.yaml
+ volumes:
+ - name: mas-config
+ secret:
+ secretName: mas-config
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: mas
+spec:
+ selector:
+ app: mas
+ ports:
+ - name: http
+ protocol: TCP
+ port: 8080
+ targetPort: 8080
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: mas
+ annotations:
+ traefik.ingress.kubernetes.io/router.priority: "42"
+ cert-manager.io/cluster-issuer: letsencrypt-dns
+ external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
+spec:
+ rules:
+ - host: mas.matrix.midnightthoughts.space
+ http:
+ paths:
+ - path: /
+ pathType: Exact
+ backend:
+ service:
+ name: mas
+ port:
+ number: http
+ - path: /foo
+ pathType: Exact
+ backend:
+ service:
+ name: whoami
+ port:
+ number: 80
diff --git a/encrypt.sh b/encrypt.sh
@@ -3,5 +3,4 @@
sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh \
--encrypt \
--encrypted-regex '^(admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' \
- --mac-only-encrypted \
--in-place "$1"
