This PR contains the following updates: | Package | Update | Change | |---|---|---| | [halfshot/matrix-hookshot](https://github.com/matrix-org/matrix-hookshot) | minor | `7.0.0` -> `7.1.0` | --- ### Release Notes <details> <summary>matrix-org/matrix-hookshot (halfshot/matrix-hookshot)</summary> ### [`v7.1.0`](https://github.com/matrix-org/matrix-hookshot/blob/HEAD/CHANGELOG.md#710-2025-08-15) [Compare Source](https://github.com/matrix-org/matrix-hookshot/compare/7.0.0...7.1.0) \================== ## Features - Add an option in the config to disable hook bodies in Matrix messages. ([#​1004](https://github.com/matrix-org/matrix-hookshot/issues/1004)) - Hookshot will now ping the homeserver on startup to ensure it can be reached. ([#​1062](https://github.com/matrix-org/matrix-hookshot/issues/1062)) - Multiple config files (merged in order) may now be specified on the command line. ([#​1065](https://github.com/matrix-org/matrix-hookshot/issues/1065)) - Support Matrix v12 rooms. ([#​1077](https://github.com/matrix-org/matrix-hookshot/issues/1077)) - Add support for following room upgrades. Hookshot will now carry across all connections from the predecessor room to the next room. ([#​1079](https://github.com/matrix-org/matrix-hookshot/issues/1079)) ## Bugfixes - Fix bugs in handling server names that includes colons. ([#​1068](https://github.com/matrix-org/matrix-hookshot/issues/1068)) ## Improved Documentation - Instructions for how to setup a developer enviroment [are now included](https://matrix-org.github.io/matrix-hookshot/latest/dev/setup.html). This includes a new `docker-compose.yml` file for development. The previous unmaintained docker-compose setup for multiple workers has been removed. ([#​1065](https://github.com/matrix-org/matrix-hookshot/issues/1065)) ## Internal Changes - Support Node 24, and drop support for Node 23. ([#​1059](https://github.com/matrix-org/matrix-hookshot/issues/1059)) - GitHub and GitLab webhook requests should now be directed to /github and /gitlab respectively. `/` and `/oauth` is now deprecated and will be removed in a future release. ([#​1063](https://github.com/matrix-org/matrix-hookshot/issues/1063)) - Log encrypted device identities for consumption by third party tooling. ([#​1066](https://github.com/matrix-org/matrix-hookshot/issues/1066)) - Update matrix-appservice-bridge to 11.0.0. ([#​1083](https://github.com/matrix-org/matrix-hookshot/issues/1083)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/1237 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
		
			
				
	
	
		
			325 lines
		
	
	
		
			8.4 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			325 lines
		
	
	
		
			8.4 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
matrix-synapse:
 | 
						|
  serverName: alexlebens.dev
 | 
						|
  publicServerName: matrix.alexlebens.dev
 | 
						|
  argoCD: true
 | 
						|
  signingkey:
 | 
						|
    job:
 | 
						|
      enabled: false
 | 
						|
    existingSecret: matrix-synapse-signingkey
 | 
						|
    existingSecretKey: signing.key
 | 
						|
  config:
 | 
						|
    reportStats: false
 | 
						|
    enableRegistration: true
 | 
						|
    trustedKeyServers: []
 | 
						|
  extraConfig:
 | 
						|
    enable_metrics: true
 | 
						|
    enable_registration_without_verification: true
 | 
						|
    password_config:
 | 
						|
      enabled: false
 | 
						|
    sso:
 | 
						|
      client_whitelist:
 | 
						|
        - https://chat.alexlebens.dev/
 | 
						|
      update_profile_information: true
 | 
						|
  synapse:
 | 
						|
    strategy:
 | 
						|
      type: Recreate
 | 
						|
    extraVolumes:
 | 
						|
      - name: matrix-synapse-config-secret
 | 
						|
        secret:
 | 
						|
          secretName: matrix-synapse-config-secret
 | 
						|
      - name: matrix-hookshot-config-secret
 | 
						|
        secret:
 | 
						|
          secretName: matrix-hookshot-config-secret
 | 
						|
      # - name: mautrix-discord-config-secret
 | 
						|
      #   secret:
 | 
						|
      #     secretName: mautrix-discord-config-secret
 | 
						|
      # - name: mautrix-whatsapp-config-secret
 | 
						|
      #   secret:
 | 
						|
      #     secretName: mautrix-whatsapp-config-secret
 | 
						|
      - name: double-puppet-registration-secret
 | 
						|
        secret:
 | 
						|
          secretName: double-puppet-registration-secret
 | 
						|
    extraVolumeMounts:
 | 
						|
      - name: matrix-synapse-config-secret
 | 
						|
        mountPath: /synapse/config/conf.d/oidc.yaml
 | 
						|
        subPath: oidc.yaml
 | 
						|
        readOnly: true
 | 
						|
      - name: matrix-synapse-config-secret
 | 
						|
        mountPath: /synapse/config/conf.d/config.yaml
 | 
						|
        subPath: config.yaml
 | 
						|
        readOnly: true
 | 
						|
      - name: matrix-hookshot-config-secret
 | 
						|
        mountPath: /synapse/config/conf.d/hookshot-registration.yaml
 | 
						|
        subPath: hookshot-registration.yaml
 | 
						|
        readOnly: true
 | 
						|
      # - name: mautrix-discord-config-secret
 | 
						|
      #   mountPath: /synapse/config/conf.d/mautrix-discord-registration.yaml
 | 
						|
      #   subPath: mautrix-discord-registration.yaml
 | 
						|
      #   readOnly: true
 | 
						|
      # - name: mautrix-whatsapp-config-secret
 | 
						|
      #   mountPath: /synapse/config/conf.d/mautrix-whatsapp-registration.yaml
 | 
						|
      #   subPath: mautrix-whatsapp-registration.yaml
 | 
						|
      #   readOnly: true
 | 
						|
      - name: double-puppet-registration-secret
 | 
						|
        mountPath: /synapse/config/conf.d/double-puppet-registration.yaml
 | 
						|
        subPath: double-puppet-registration.yaml
 | 
						|
        readOnly: true
 | 
						|
    resources:
 | 
						|
      requests:
 | 
						|
        cpu: 10m
 | 
						|
        memory: 128Mi
 | 
						|
  workers:
 | 
						|
    default:
 | 
						|
      replicaCount: 0
 | 
						|
    generic_worker:
 | 
						|
      enabled: false
 | 
						|
    pusher:
 | 
						|
      enabled: false
 | 
						|
    appservice:
 | 
						|
      enabled: false
 | 
						|
    federation_sender:
 | 
						|
      enabled: false
 | 
						|
    media_repository:
 | 
						|
      enabled: false
 | 
						|
    user_dir:
 | 
						|
      enabled: false
 | 
						|
  wellknown:
 | 
						|
    enabled: true
 | 
						|
    server:
 | 
						|
      m.server: matrix.alexlebens.dev:443
 | 
						|
    client:
 | 
						|
      m.homeserver:
 | 
						|
        base_url: https://matrix.alexlebens.dev
 | 
						|
  postgresql:
 | 
						|
    enabled: false
 | 
						|
  externalPostgresql:
 | 
						|
    host: matrix-synapse-postgresql-17-cluster-rw
 | 
						|
    port: 5432
 | 
						|
    username: app
 | 
						|
    database: app
 | 
						|
    existingSecret: matrix-synapse-postgresql-17-cluster-app
 | 
						|
    existingSecretPasswordKey: password
 | 
						|
  redis:
 | 
						|
    enabled: false
 | 
						|
  externalRedis:
 | 
						|
    host: redis-replication-matrix-synapse-master
 | 
						|
    port: 6379
 | 
						|
    existingSecret: matrix-synapse-redis-secret
 | 
						|
    existingSecretPasswordKey: password
 | 
						|
  persistence:
 | 
						|
    enabled: true
 | 
						|
    storageClass: ceph-block
 | 
						|
    accessMode: ReadWriteOnce
 | 
						|
    size: 10Gi
 | 
						|
  volumePermissions:
 | 
						|
    enabled: true
 | 
						|
    uid: 666
 | 
						|
    gid: 666
 | 
						|
  ingress:
 | 
						|
    enabled: false
 | 
						|
matrix-hookshot:
 | 
						|
  global:
 | 
						|
    fullnameOverride: matrix-hookshot
 | 
						|
  controllers:
 | 
						|
    main:
 | 
						|
      type: deployment
 | 
						|
      replicas: 1
 | 
						|
      strategy: Recreate
 | 
						|
      revisionHistoryLimit: 3
 | 
						|
      containers:
 | 
						|
        main:
 | 
						|
          image:
 | 
						|
            repository: halfshot/matrix-hookshot
 | 
						|
            tag: 7.1.0
 | 
						|
            pullPolicy: IfNotPresent
 | 
						|
          resources:
 | 
						|
            requests:
 | 
						|
              cpu: 10m
 | 
						|
              memory: 128Mi
 | 
						|
  service:
 | 
						|
    main:
 | 
						|
      controller: main
 | 
						|
      ports:
 | 
						|
        webhook:
 | 
						|
          port: 9000
 | 
						|
          targetPort: 9000
 | 
						|
          protocol: HTTP
 | 
						|
        metrics:
 | 
						|
          port: 9001
 | 
						|
          targetPort: 9001
 | 
						|
          protocol: HTTP
 | 
						|
        appservice:
 | 
						|
          port: 9002
 | 
						|
          targetPort: 9002
 | 
						|
          protocol: HTTP
 | 
						|
        homeserver:
 | 
						|
          port: 9993
 | 
						|
          targetPort: 9993
 | 
						|
          protocol: HTTP
 | 
						|
  persistence:
 | 
						|
    config:
 | 
						|
      enabled: true
 | 
						|
      type: secret
 | 
						|
      name: matrix-hookshot-config-secret
 | 
						|
      advancedMounts:
 | 
						|
        main:
 | 
						|
          main:
 | 
						|
            - path: /data/config.yml
 | 
						|
              readOnly: true
 | 
						|
              mountPropagation: None
 | 
						|
              subPath: config.yml
 | 
						|
    registration:
 | 
						|
      enabled: true
 | 
						|
      type: secret
 | 
						|
      name: matrix-hookshot-config-secret
 | 
						|
      advancedMounts:
 | 
						|
        main:
 | 
						|
          main:
 | 
						|
            - path: /data/registration.yml
 | 
						|
              readOnly: true
 | 
						|
              mountPropagation: None
 | 
						|
              subPath: registration.yml
 | 
						|
    passkey:
 | 
						|
      enabled: true
 | 
						|
      type: secret
 | 
						|
      name: matrix-hookshot-config-secret
 | 
						|
      advancedMounts:
 | 
						|
        main:
 | 
						|
          main:
 | 
						|
            - path: /data/passkey.pem
 | 
						|
              readOnly: true
 | 
						|
              mountPropagation: None
 | 
						|
              subPath: passkey.pem
 | 
						|
mautrix-discord:
 | 
						|
  global:
 | 
						|
    fullnameOverride: mautrix-discord
 | 
						|
  controllers:
 | 
						|
    main:
 | 
						|
      type: deployment
 | 
						|
      replicas: 1
 | 
						|
      strategy: Recreate
 | 
						|
      revisionHistoryLimit: 3
 | 
						|
      containers:
 | 
						|
        main:
 | 
						|
          image:
 | 
						|
            repository: dock.mau.dev/mautrix/discord
 | 
						|
            tag: v0.7.5
 | 
						|
            pullPolicy: IfNotPresent
 | 
						|
          resources:
 | 
						|
            requests:
 | 
						|
              cpu: 10m
 | 
						|
              memory: 128Mi
 | 
						|
  service:
 | 
						|
    main:
 | 
						|
      controller: main
 | 
						|
      ports:
 | 
						|
        http:
 | 
						|
          port: 29334
 | 
						|
          targetPort: 29334
 | 
						|
          protocol: HTTP
 | 
						|
  persistence:
 | 
						|
    data:
 | 
						|
      storageClass: ceph-block
 | 
						|
      accessMode: ReadWriteOnce
 | 
						|
      size: 500Mi
 | 
						|
      retain: true
 | 
						|
      advancedMounts:
 | 
						|
        main:
 | 
						|
          main:
 | 
						|
            - path: /data
 | 
						|
              readOnly: false
 | 
						|
    config:
 | 
						|
      enabled: true
 | 
						|
      type: secret
 | 
						|
      name: mautrix-discord-config-secret
 | 
						|
      advancedMounts:
 | 
						|
        main:
 | 
						|
          main:
 | 
						|
            - path: /data/config.yaml
 | 
						|
              readOnly: true
 | 
						|
              mountPropagation: None
 | 
						|
              subPath: config.yaml
 | 
						|
mautrix-whatsapp:
 | 
						|
  global:
 | 
						|
    fullnameOverride: mautrix-whatsapp
 | 
						|
  controllers:
 | 
						|
    main:
 | 
						|
      type: deployment
 | 
						|
      replicas: 1
 | 
						|
      strategy: Recreate
 | 
						|
      revisionHistoryLimit: 3
 | 
						|
      containers:
 | 
						|
        main:
 | 
						|
          image:
 | 
						|
            repository: dock.mau.dev/mautrix/whatsapp
 | 
						|
            tag: v0.12.4
 | 
						|
            pullPolicy: IfNotPresent
 | 
						|
          resources:
 | 
						|
            requests:
 | 
						|
              cpu: 10m
 | 
						|
              memory: 64Mi
 | 
						|
  service:
 | 
						|
    main:
 | 
						|
      controller: main
 | 
						|
      ports:
 | 
						|
        http:
 | 
						|
          port: 29333
 | 
						|
          targetPort: 29333
 | 
						|
          protocol: HTTP
 | 
						|
  persistence:
 | 
						|
    data:
 | 
						|
      storageClass: ceph-block
 | 
						|
      accessMode: ReadWriteOnce
 | 
						|
      size: 500Mi
 | 
						|
      retain: true
 | 
						|
      advancedMounts:
 | 
						|
        main:
 | 
						|
          main:
 | 
						|
            - path: /data
 | 
						|
              readOnly: false
 | 
						|
    config:
 | 
						|
      enabled: true
 | 
						|
      type: secret
 | 
						|
      name: mautrix-whatsapp-config-secret
 | 
						|
      advancedMounts:
 | 
						|
        main:
 | 
						|
          main:
 | 
						|
            - path: /data/config.yaml
 | 
						|
              readOnly: true
 | 
						|
              mountPropagation: None
 | 
						|
              subPath: config.yaml
 | 
						|
cloudflared-synapse:
 | 
						|
  name: cloudflared-synapse
 | 
						|
  existingSecretName: matrix-synapse-cloudflared-synapse-secret
 | 
						|
cloudflared-hookshot:
 | 
						|
  name: cloudflared-hookshot
 | 
						|
  existingSecretName: matrix-synapse-cloudflared-hookshot-secret
 | 
						|
postgres-17-cluster:
 | 
						|
  mode: standalone
 | 
						|
  cluster:
 | 
						|
    storage:
 | 
						|
      storageClass: local-path
 | 
						|
    walStorage:
 | 
						|
      storageClass: local-path
 | 
						|
    resources:
 | 
						|
      requests:
 | 
						|
        cpu: 200m
 | 
						|
    monitoring:
 | 
						|
      enabled: true
 | 
						|
      prometheusRule:
 | 
						|
        enabled: true
 | 
						|
  recovery:
 | 
						|
    method: objectStore
 | 
						|
    objectStore:
 | 
						|
      endpointURL: https://nyc3.digitaloceanspaces.com
 | 
						|
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
 | 
						|
      endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret
 | 
						|
      recoveryIndex: 1
 | 
						|
  backup:
 | 
						|
    enabled: true
 | 
						|
    endpointURL: https://nyc3.digitaloceanspaces.com
 | 
						|
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
 | 
						|
    endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret
 | 
						|
    backupIndex: 1
 | 
						|
    retentionPolicy: "7d"
 |