372 lines
9.3 KiB
YAML
372 lines
9.3 KiB
YAML
matrix-synapse:
|
|
serverName: alexlebens.dev
|
|
publicServerName: matrix.alexlebens.dev
|
|
argoCD: true
|
|
signingkey:
|
|
job:
|
|
enabled: false
|
|
existingSecret: matrix-synapse-signingkey
|
|
existingSecretKey: signing.key
|
|
config:
|
|
reportStats: false
|
|
enableRegistration: true
|
|
trustedKeyServers: []
|
|
extraConfig:
|
|
enable_metrics: true
|
|
enable_registration_without_verification: true
|
|
password_config:
|
|
enabled: false
|
|
sso:
|
|
client_whitelist:
|
|
- https://chat.alexlebens.dev/
|
|
update_profile_information: true
|
|
synapse:
|
|
strategy:
|
|
type: Recreate
|
|
extraVolumes:
|
|
- name: matrix-synapse-config-secret
|
|
secret:
|
|
secretName: matrix-synapse-config-secret
|
|
- name: matrix-hookshot-config-secret
|
|
secret:
|
|
secretName: matrix-hookshot-config-secret
|
|
# - name: mautrix-discord-config-secret
|
|
# secret:
|
|
# secretName: mautrix-discord-config-secret
|
|
# - name: mautrix-whatsapp-config-secret
|
|
# secret:
|
|
# secretName: mautrix-whatsapp-config-secret
|
|
- name: double-puppet-registration-secret
|
|
secret:
|
|
secretName: double-puppet-registration-secret
|
|
extraVolumeMounts:
|
|
- name: matrix-synapse-config-secret
|
|
mountPath: /synapse/config/conf.d/oidc.yaml
|
|
subPath: oidc.yaml
|
|
readOnly: true
|
|
- name: matrix-synapse-config-secret
|
|
mountPath: /synapse/config/conf.d/config.yaml
|
|
subPath: config.yaml
|
|
readOnly: true
|
|
- name: matrix-hookshot-config-secret
|
|
mountPath: /synapse/config/conf.d/hookshot-registration.yaml
|
|
subPath: hookshot-registration.yaml
|
|
readOnly: true
|
|
# - name: mautrix-discord-config-secret
|
|
# mountPath: /synapse/config/conf.d/mautrix-discord-registration.yaml
|
|
# subPath: mautrix-discord-registration.yaml
|
|
# readOnly: true
|
|
# - name: mautrix-whatsapp-config-secret
|
|
# mountPath: /synapse/config/conf.d/mautrix-whatsapp-registration.yaml
|
|
# subPath: mautrix-whatsapp-registration.yaml
|
|
# readOnly: true
|
|
- name: double-puppet-registration-secret
|
|
mountPath: /synapse/config/conf.d/double-puppet-registration.yaml
|
|
subPath: double-puppet-registration.yaml
|
|
readOnly: true
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
workers:
|
|
default:
|
|
replicaCount: 0
|
|
generic_worker:
|
|
enabled: false
|
|
pusher:
|
|
enabled: false
|
|
appservice:
|
|
enabled: false
|
|
federation_sender:
|
|
enabled: false
|
|
media_repository:
|
|
enabled: false
|
|
user_dir:
|
|
enabled: false
|
|
wellknown:
|
|
enabled: true
|
|
server:
|
|
m.server: matrix.alexlebens.dev:443
|
|
client:
|
|
m.homeserver:
|
|
base_url: https://matrix.alexlebens.dev
|
|
postgresql:
|
|
enabled: false
|
|
externalPostgresql:
|
|
host: matrix-synapse-postgresql-17-cluster-rw
|
|
port: 5432
|
|
username: app
|
|
database: app
|
|
existingSecret: matrix-synapse-postgresql-17-cluster-app
|
|
existingSecretPasswordKey: password
|
|
redis:
|
|
enabled: false
|
|
externalRedis:
|
|
host: matrix-synapse-valkey-primary
|
|
port: 6379
|
|
existingSecret: matrix-synapse-valkey-secret
|
|
existingSecretPasswordKey: password
|
|
persistence:
|
|
enabled: true
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
volumePermissions:
|
|
enabled: true
|
|
uid: 666
|
|
gid: 666
|
|
ingress:
|
|
enabled: false
|
|
matrix-hookshot:
|
|
global:
|
|
fullnameOverride: matrix-hookshot
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: halfshot/matrix-hookshot
|
|
tag: 7.0.0
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
webhook:
|
|
port: 9000
|
|
targetPort: 9000
|
|
protocol: HTTP
|
|
metrics:
|
|
port: 9001
|
|
targetPort: 9001
|
|
protocol: HTTP
|
|
appservice:
|
|
port: 9002
|
|
targetPort: 9002
|
|
protocol: HTTP
|
|
homeserver:
|
|
port: 9993
|
|
targetPort: 9993
|
|
protocol: HTTP
|
|
persistence:
|
|
config:
|
|
enabled: true
|
|
type: secret
|
|
name: matrix-hookshot-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/config.yml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config.yml
|
|
registration:
|
|
enabled: true
|
|
type: secret
|
|
name: matrix-hookshot-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/registration.yml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: registration.yml
|
|
passkey:
|
|
enabled: true
|
|
type: secret
|
|
name: matrix-hookshot-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/passkey.pem
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: passkey.pem
|
|
mautrix-discord:
|
|
global:
|
|
fullnameOverride: mautrix-discord
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: dock.mau.dev/mautrix/discord
|
|
tag: v0.7.5
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
http:
|
|
port: 29334
|
|
targetPort: 29334
|
|
protocol: HTTP
|
|
persistence:
|
|
data:
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 500Mi
|
|
retain: true
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data
|
|
readOnly: false
|
|
config:
|
|
enabled: true
|
|
type: secret
|
|
name: mautrix-discord-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/config.yaml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config.yaml
|
|
mautrix-whatsapp:
|
|
global:
|
|
fullnameOverride: mautrix-whatsapp
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: dock.mau.dev/mautrix/whatsapp
|
|
tag: v0.12.3
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 64Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
http:
|
|
port: 29333
|
|
targetPort: 29333
|
|
protocol: HTTP
|
|
persistence:
|
|
data:
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 500Mi
|
|
retain: true
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data
|
|
readOnly: false
|
|
config:
|
|
enabled: true
|
|
type: secret
|
|
name: mautrix-whatsapp-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/config.yaml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config.yaml
|
|
valkey-synapse:
|
|
fullnameOverride: matrix-synapse-valkey
|
|
architecture: replication
|
|
auth:
|
|
enabled: true
|
|
existingSecret: matrix-synapse-valkey-secret
|
|
existingSecretPasswordKey: password
|
|
primary:
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
replica:
|
|
replicaCount: 1
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
valkey-hookshot:
|
|
fullnameOverride: matrix-hookshot-valkey
|
|
architecture: replication
|
|
auth:
|
|
enabled: false
|
|
usePasswordFiles: false
|
|
primary:
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
replica:
|
|
replicaCount: 1
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
cloudflared-synapse:
|
|
name: cloudflared-synapse
|
|
existingSecretName: matrix-synapse-cloudflared-synapse-secret
|
|
cloudflared-hookshot:
|
|
name: cloudflared-hookshot
|
|
existingSecretName: matrix-synapse-cloudflared-hookshot-secret
|
|
postgres-17-cluster:
|
|
mode: standalone
|
|
cluster:
|
|
storage:
|
|
storageClass: local-path
|
|
walStorage:
|
|
storageClass: local-path
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
monitoring:
|
|
enabled: true
|
|
prometheusRule:
|
|
enabled: true
|
|
recovery:
|
|
method: objectStore
|
|
objectStore:
|
|
endpointURL: https://nyc3.digitaloceanspaces.com
|
|
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
|
|
endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret
|
|
recoveryIndex: 1
|
|
backup:
|
|
enabled: true
|
|
endpointURL: https://nyc3.digitaloceanspaces.com
|
|
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
|
|
endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret
|
|
backupIndex: 1
|
|
retentionPolicy: "7d"
|