alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

add discord
All checks were successful
lint-test-helm / lint-helm (push) Successful in 12s
Details
render-manifests-push / render-manifests-push (push) Successful in 32s
Details
renovate / renovate (push) Successful in 1m41s
Details

Browse Source
This commit is contained in:
Alex Lebens
2025-12-13 13:28:52 -06:00
parent dc75525b22
commit 6471b4a264
6 changed files with 202 additions and 158 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
clusters/cl01tl/helm/matrix-synapse/Chart.lock
View File

@@ -8,6 +8,9 @@ dependencies:
- name: app-template - name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/ repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.5.0 version: 4.5.0
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.5.0
- name: cloudflared - name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.23.2 version: 1.23.2
@@ -17,5 +20,5 @@ dependencies:
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 6.16.1 version: 6.16.1
digest: sha256:39947be082bd5217be527bb9a603f5026e877e988100165bb76970e5192b7e56 digest: sha256:70e8b9480a6eac2ffe4b2e049aac1da6b7ff282e8930d555e008fbd769e84a8f
generated: "2025-12-13T12:37:23.30846-06:00" generated: "2025-12-13T13:28:40.160104-06:00"

8
clusters/cl01tl/helm/matrix-synapse/Chart.yaml
View File

@@ -35,10 +35,10 @@ dependencies:
alias: matrix-hookshot alias: matrix-hookshot
version: 4.5.0 version: 4.5.0
repository: https://bjw-s-labs.github.io/helm-charts/ repository: https://bjw-s-labs.github.io/helm-charts/
# - name: app-template - name: app-template
# alias: mautrix-discord alias: mautrix-discord
# repository: https://bjw-s-labs.github.io/helm-charts/ repository: https://bjw-s-labs.github.io/helm-charts/
# version: 4.5.0 version: 4.5.0
- name: app-template - name: app-template
alias: mautrix-whatsapp alias: mautrix-whatsapp
repository: https://bjw-s-labs.github.io/helm-charts/ repository: https://bjw-s-labs.github.io/helm-charts/

16
clusters/cl01tl/helm/matrix-synapse/templates/database.yaml
View File

@@ -1,5 +1,21 @@
apiVersion: postgresql.cnpg.io/v1 apiVersion: postgresql.cnpg.io/v1
kind: Database kind: Database
metadata:
name: matrix-synapse-postgresql-18-cluster-mautrix-discord-database
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: matrix-synapse-postgresql-18-cluster-mautrix-discord-database
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
cluster:
name: matrix-synapse-postgresql-18-cluster
name: mautrix-discord
owner: app
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
metadata: metadata:
name: matrix-synapse-postgresql-18-cluster-mautrix-whatsapp-database name: matrix-synapse-postgresql-18-cluster-mautrix-whatsapp-database
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}

166
clusters/cl01tl/helm/matrix-synapse/templates/external-secret.yaml
View File

@@ -94,34 +94,34 @@ spec:
metadataPolicy: None metadataPolicy: None
property: passkey property: passkey
# --- ---
# apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: mautrix-discord-config-secret name: mautrix-discord-config-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: {{ .Release.Name }}
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# data: data:
# - secretKey: config.yaml - secretKey: config.yaml
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/matrix-synapse/mautrix-discord key: /cl01tl/matrix-synapse/mautrix-discord
# metadataPolicy: None metadataPolicy: None
# property: config property: config
# - secretKey: mautrix-discord-registration.yaml - secretKey: mautrix-discord-registration.yaml
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/matrix-synapse/mautrix-discord key: /cl01tl/matrix-synapse/mautrix-discord
# metadataPolicy: None metadataPolicy: None
# property: registration property: registration
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
@@ -302,61 +302,61 @@ spec:
metadataPolicy: None metadataPolicy: None
property: secret_key property: secret_key
# --- ---
# apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: mautrix-discord-data-backup-secret name: mautrix-discord-data-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: {{ .Release.Name }}
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/mautrix-discord-data" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/mautrix-discord-data"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1

116
clusters/cl01tl/helm/matrix-synapse/templates/replication-source.yaml
View File

@@ -24,62 +24,62 @@ spec:
storageClassName: ceph-block storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot
# --- ---
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: mautrix-discord-data-backup-source name: mautrix-discord-data-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: mautrix-discord-data-backup-source app.kubernetes.io/name: mautrix-discord-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: mautrix-discord-data sourcePVC: mautrix-discord
# trigger: trigger:
# schedule: 0 4 * * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 7 pruneIntervalDays: 7
# repository: mautrix-discord-data-backup-secret repository: mautrix-discord-data-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 3 daily: 3
# weekly: 2 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 1337 runAsUser: 1337
# runAsGroup: 1337 runAsGroup: 1337
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot
# --- ---
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: mautrix-whatsapp-data-backup-source name: mautrix-whatsapp-data-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: mautrix-whatsapp-data-backup-source app.kubernetes.io/name: mautrix-whatsapp-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: mautrix-whatsapp-data sourcePVC: mautrix-whatsapp
# trigger: trigger:
# schedule: 0 4 * * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 7 pruneIntervalDays: 7
# repository: mautrix-whatsapp-data-backup-secret repository: mautrix-whatsapp-data-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 3 daily: 3
# weekly: 2 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 1337 runAsUser: 1337
# runAsGroup: 1337 runAsGroup: 1337
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

47
clusters/cl01tl/helm/matrix-synapse/values.yaml
View File

@@ -29,6 +29,7 @@ matrix-synapse:
- /synapse/config/conf.d/hookshot-registration.yaml - /synapse/config/conf.d/hookshot-registration.yaml
- /synapse/config/conf.d/double-puppet-registration.yaml - /synapse/config/conf.d/double-puppet-registration.yaml
- /synapse/config/conf.d/mautrix-whatsapp-registration.yaml - /synapse/config/conf.d/mautrix-whatsapp-registration.yaml
- /synapse/config/conf.d/mautrix-discord-registration.yaml
synapse: synapse:
strategy: strategy:
type: Recreate type: Recreate
@@ -39,9 +40,9 @@ matrix-synapse:
- name: matrix-hookshot-config-secret - name: matrix-hookshot-config-secret
secret: secret:
secretName: matrix-hookshot-config-secret secretName: matrix-hookshot-config-secret
# - name: mautrix-discord-config-secret - name: mautrix-discord-config-secret
# secret: secret:
# secretName: mautrix-discord-config-secret secretName: mautrix-discord-config-secret
- name: mautrix-whatsapp-config-secret - name: mautrix-whatsapp-config-secret
secret: secret:
secretName: mautrix-whatsapp-config-secret secretName: mautrix-whatsapp-config-secret
@@ -61,10 +62,10 @@ matrix-synapse:
mountPath: /synapse/config/conf.d/hookshot-registration.yaml mountPath: /synapse/config/conf.d/hookshot-registration.yaml
subPath: hookshot-registration.yaml subPath: hookshot-registration.yaml
readOnly: true readOnly: true
# - name: mautrix-discord-config-secret - name: mautrix-discord-config-secret
# mountPath: /synapse/config/conf.d/mautrix-discord-registration.yaml mountPath: /synapse/config/conf.d/mautrix-discord-registration.yaml
# subPath: mautrix-discord-registration.yaml subPath: mautrix-discord-registration.yaml
# readOnly: true readOnly: true
- name: mautrix-whatsapp-config-secret - name: mautrix-whatsapp-config-secret
mountPath: /synapse/config/conf.d/mautrix-whatsapp-registration.yaml mountPath: /synapse/config/conf.d/mautrix-whatsapp-registration.yaml
subPath: mautrix-whatsapp-registration.yaml subPath: mautrix-whatsapp-registration.yaml
@@ -214,6 +215,7 @@ matrix-hookshot:
readOnly: false readOnly: false
mautrix-discord: mautrix-discord:
global: global:
nameOverride: mautrix-discord
fullnameOverride: mautrix-discord fullnameOverride: mautrix-discord
controllers: controllers:
main: main:
@@ -221,6 +223,26 @@ mautrix-discord:
replicas: 1 replicas: 1
strategy: RollingUpdate strategy: RollingUpdate
revisionHistoryLimit: 3 revisionHistoryLimit: 3
initContainers:
init-copy-config:
image:
repository: busybox
tag: 1.37.0
pullPolicy: IfNotPresent
resources:
requests:
cpu: 10m
memory: 128Mi
command:
- /bin/sh
- -ec
- |
echo ">> Coping files ..."
ls /tmp
cp -fv /tmp/config.yaml /data/config.yaml
cp -fv /tmp/mautrix-discord-registration.yaml /data/registration.yaml
echo ">> Files in data:"
ls /data
containers: containers:
main: main:
image: image:
@@ -246,8 +268,8 @@ mautrix-discord:
name: mautrix-discord-config-secret name: mautrix-discord-config-secret
advancedMounts: advancedMounts:
main: main:
main: init-copy-config:
- path: /data/config.yaml - path: /tmp/config.yaml
readOnly: true readOnly: true
mountPropagation: None mountPropagation: None
subPath: config.yaml subPath: config.yaml
@@ -257,8 +279,8 @@ mautrix-discord:
name: mautrix-discord-config-secret name: mautrix-discord-config-secret
advancedMounts: advancedMounts:
main: main:
main: init-copy-config:
- path: /data/mautrix-discord-registration.yaml - path: /tmp/mautrix-discord-registration.yaml
readOnly: true readOnly: true
mountPropagation: None mountPropagation: None
subPath: mautrix-discord-registration.yaml subPath: mautrix-discord-registration.yaml
@@ -269,6 +291,9 @@ mautrix-discord:
retain: true retain: true
advancedMounts: advancedMounts:
main: main:
init-copy-config:
- path: /data
readOnly: false
main: main:
- path: /data - path: /data
readOnly: false readOnly: false