commit d82952d2d4dea542021f97ab09d3cf509364a26d
parent 655e6521254b9f971b7d6a178bdfdf174f8beb1d
Author: MTRNord <mtrnord1@gmail.com>
Date: Fri, 2 May 2025 00:11:56 +0200
Test livekit
Diffstat:
1 file changed, 34 insertions(+), 31 deletions(-)
diff --git a/apps/base/matrix/livekit/release.yaml b/apps/base/matrix/livekit/release.yaml
@@ -6,7 +6,7 @@ metadata:
spec:
secretName: livekit.matrix.midnightthoughts.space-tls
privateKey:
- rotationPolicy: ENC[AES256_GCM,data:fnvoyUCp,iv:MdSVceqAo8tj9ZqghAWrdjcjyPrZXXdq0cxcXN+hiDc=,tag:rQn/9tJqeoNCGYXleTpwJQ==,type:str]
+ rotationPolicy: ENC[AES256_GCM,data:mD/4+L74,iv:m9QwmEOPZOo9Fwy9IT6X1hfrz7kI+EvtCba2fYeo41E=,tag:GBoTq2QKCHrH5GAMzCYENQ==,type:str]
issuerRef:
name: letsencrypt-dns
kind: ClusterIssuer
@@ -25,15 +25,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRXpyUXdBS2ZCa2lCKy91
- UUxBVEd0bElsbmw3NWU2aytaWGkxK2k1V0JRCjJPb1Q3ZG5LNkZkSUJqdGtGUk5r
- YXIyR0lDMGtqUVpGQ3NqVDMvc1gxRDgKLS0tIFk3czJMZ25oZTZLK0kzckFUZzBO
- ekdyQWI0K0Y4L0R0TWlybEl1Rm1DZ0kKoHr89ZLRwbuRdxlv9jgo1VnywV/bNM9O
- LrwZKfXx579WTLWh8LlT1xy3NuDWL3S46spExm74wzZ6HjeGdiBBDg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-01T21:52:42Z"
- mac: ENC[AES256_GCM,data:5WlnVDgvDJ7fqDdKB4dN+0RyP+sUrZyvW4TR2Y/HK5rx+RF2xzyVHoZzm0Jlhw4MaJkWg/Z2VMUa2RH0xLmC/oOAqQHEvxs68g306V5n2JWzqKyiQEpk881y7kJ6XB85w/cwTOtcp2+2AG73NfB1mu9Qkd31xbb3jdtaHN4iDK8=,iv:MnsP8ocDqa8cv8DTq+4hXpankGxNbDq2s12n7hxbMuY=,tag:NqMPtTNLW/50Uh+7J0HxOg==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdVMvTkNpUlpRVFp2NTdO
+ MTIweXBxNWZJKzhwZ3pYcm5sQkdFSkc2OWpjCnBxaXFzMHd4NjJLUzVSU2xQWGRG
+ K2oxcE5yaWtmTEJsUG1DTjhVQ0VEQVUKLS0tIFJHM2h5Lzd5L0ExV2ppWm45djhr
+ MTlPTy9sVlE1bmFsWVpDU0NKOGxSOW8KDhJeFob2f1BtJBBNSihLLs/4ak+zvyOi
+ 6JtLtBhroyFAL6kRvL169rOwDYCc4DhMydZND4S+oqdxkr4N8fmaXw==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-05-01T21:59:06Z"
+ mac: ENC[AES256_GCM,data:HTWXfbYqE4ITeAXFvnY15ahjmP3lKM20Y7yLZzIwsshsxwc1YL5VICBwpUrQ0pl0Ys/f+TJ9J6N+y/0a3saqQ3yKcgNAt2rqhXTBJlaRu7Q7A233Bjw+iVhDW3R8SsCrs1wzbexfofVDz790E+8V6mtnYyswZsebsprSDAmBfaw=,iv:sDCFwFlwKBW/ffTIbpfggHkIaElJroofk/DL94vtkxI=,tag:w9MWuHyLWQQVIPuVX+2Skg==,type:str]
pgp: []
encrypted_regex: ^(woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -52,15 +52,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRXpyUXdBS2ZCa2lCKy91
- UUxBVEd0bElsbmw3NWU2aytaWGkxK2k1V0JRCjJPb1Q3ZG5LNkZkSUJqdGtGUk5r
- YXIyR0lDMGtqUVpGQ3NqVDMvc1gxRDgKLS0tIFk3czJMZ25oZTZLK0kzckFUZzBO
- ekdyQWI0K0Y4L0R0TWlybEl1Rm1DZ0kKoHr89ZLRwbuRdxlv9jgo1VnywV/bNM9O
- LrwZKfXx579WTLWh8LlT1xy3NuDWL3S46spExm74wzZ6HjeGdiBBDg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-01T21:52:42Z"
- mac: ENC[AES256_GCM,data:5WlnVDgvDJ7fqDdKB4dN+0RyP+sUrZyvW4TR2Y/HK5rx+RF2xzyVHoZzm0Jlhw4MaJkWg/Z2VMUa2RH0xLmC/oOAqQHEvxs68g306V5n2JWzqKyiQEpk881y7kJ6XB85w/cwTOtcp2+2AG73NfB1mu9Qkd31xbb3jdtaHN4iDK8=,iv:MnsP8ocDqa8cv8DTq+4hXpankGxNbDq2s12n7hxbMuY=,tag:NqMPtTNLW/50Uh+7J0HxOg==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdVMvTkNpUlpRVFp2NTdO
+ MTIweXBxNWZJKzhwZ3pYcm5sQkdFSkc2OWpjCnBxaXFzMHd4NjJLUzVSU2xQWGRG
+ K2oxcE5yaWtmTEJsUG1DTjhVQ0VEQVUKLS0tIFJHM2h5Lzd5L0ExV2ppWm45djhr
+ MTlPTy9sVlE1bmFsWVpDU0NKOGxSOW8KDhJeFob2f1BtJBBNSihLLs/4ak+zvyOi
+ 6JtLtBhroyFAL6kRvL169rOwDYCc4DhMydZND4S+oqdxkr4N8fmaXw==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-05-01T21:59:06Z"
+ mac: ENC[AES256_GCM,data:HTWXfbYqE4ITeAXFvnY15ahjmP3lKM20Y7yLZzIwsshsxwc1YL5VICBwpUrQ0pl0Ys/f+TJ9J6N+y/0a3saqQ3yKcgNAt2rqhXTBJlaRu7Q7A233Bjw+iVhDW3R8SsCrs1wzbexfofVDz790E+8V6mtnYyswZsebsprSDAmBfaw=,iv:sDCFwFlwKBW/ffTIbpfggHkIaElJroofk/DL94vtkxI=,tag:w9MWuHyLWQQVIPuVX+2Skg==,type:str]
pgp: []
encrypted_regex: ^(woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -84,6 +84,9 @@ spec:
remediation:
retries: 3
values:
+ image:
+ tag: v1.8.4
+ pullPolicy: IfNotPresent
replicaCount: 1
# Suggested value for gracefully terminate the pod: 5 hours
terminationGracePeriodSeconds: 18000
@@ -107,7 +110,7 @@ spec:
# one or more API key/secret pairs
# see https://docs.livekit.io/guides/getting-started/#generate-api-key-and-secret
keys:
- woosh: ENC[AES256_GCM,data:ohkmSTZVATMl9S+kxNMMzA==,iv:ztEoARv4e78lGbZFfukQcEBD6rWcVZYmQKxoxagLB/c=,tag:2+m0xwQtLbhwz6KvFuzAtA==,type:str]
+ woosh: ENC[AES256_GCM,data:V9tPJRosTKqQHBqa0n0p+uiM7a0LO8iOibSFmxYT29J4/dQoWMpOVWsQIwWCdlXUcDsACD6jVSi+kXdgR3AwZg==,iv:Wnz8xGQQbUxpyD5S6erlVY80cyMSWtEtV/C9hSHgiGA=,tag:PechMLnqtArRKcRrChGUWQ==,type:str]
turn:
enabled: true
# must match domain of your TLS cert
@@ -140,8 +143,8 @@ spec:
# clusterIssuer: letsencrypt-prod
tls:
- hosts:
- - livekit.matrix.midnightthoughts.space
- - turn.matrix.midnightthoughts.space
+ - livekit.matrix.midnightthoughts.space
+ - turn.matrix.midnightthoughts.space
# with alb, certificates needs to reside in ACM for self-discovery
# with do, use cert-manager and create certificate for turn. Load balancer is autoamtic
# with gke, specify one or more secrets to use for the certificate
@@ -180,15 +183,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRXpyUXdBS2ZCa2lCKy91
- UUxBVEd0bElsbmw3NWU2aytaWGkxK2k1V0JRCjJPb1Q3ZG5LNkZkSUJqdGtGUk5r
- YXIyR0lDMGtqUVpGQ3NqVDMvc1gxRDgKLS0tIFk3czJMZ25oZTZLK0kzckFUZzBO
- ekdyQWI0K0Y4L0R0TWlybEl1Rm1DZ0kKoHr89ZLRwbuRdxlv9jgo1VnywV/bNM9O
- LrwZKfXx579WTLWh8LlT1xy3NuDWL3S46spExm74wzZ6HjeGdiBBDg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-01T21:52:42Z"
- mac: ENC[AES256_GCM,data:5WlnVDgvDJ7fqDdKB4dN+0RyP+sUrZyvW4TR2Y/HK5rx+RF2xzyVHoZzm0Jlhw4MaJkWg/Z2VMUa2RH0xLmC/oOAqQHEvxs68g306V5n2JWzqKyiQEpk881y7kJ6XB85w/cwTOtcp2+2AG73NfB1mu9Qkd31xbb3jdtaHN4iDK8=,iv:MnsP8ocDqa8cv8DTq+4hXpankGxNbDq2s12n7hxbMuY=,tag:NqMPtTNLW/50Uh+7J0HxOg==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdVMvTkNpUlpRVFp2NTdO
+ MTIweXBxNWZJKzhwZ3pYcm5sQkdFSkc2OWpjCnBxaXFzMHd4NjJLUzVSU2xQWGRG
+ K2oxcE5yaWtmTEJsUG1DTjhVQ0VEQVUKLS0tIFJHM2h5Lzd5L0ExV2ppWm45djhr
+ MTlPTy9sVlE1bmFsWVpDU0NKOGxSOW8KDhJeFob2f1BtJBBNSihLLs/4ak+zvyOi
+ 6JtLtBhroyFAL6kRvL169rOwDYCc4DhMydZND4S+oqdxkr4N8fmaXw==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-05-01T21:59:06Z"
+ mac: ENC[AES256_GCM,data:HTWXfbYqE4ITeAXFvnY15ahjmP3lKM20Y7yLZzIwsshsxwc1YL5VICBwpUrQ0pl0Ys/f+TJ9J6N+y/0a3saqQ3yKcgNAt2rqhXTBJlaRu7Q7A233Bjw+iVhDW3R8SsCrs1wzbexfofVDz790E+8V6mtnYyswZsebsprSDAmBfaw=,iv:sDCFwFlwKBW/ffTIbpfggHkIaElJroofk/DL94vtkxI=,tag:w9MWuHyLWQQVIPuVX+2Skg==,type:str]
pgp: []
encrypted_regex: ^(woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
