This PR contains the following updates: | Package | Update | Change | |---|---|---| | [halfshot/matrix-hookshot](https://github.com/matrix-org/matrix-hookshot) | minor | `7.0.0` -> `7.1.0` | --- ### Release Notes <details> <summary>matrix-org/matrix-hookshot (halfshot/matrix-hookshot)</summary> ### [`v7.1.0`](https://github.com/matrix-org/matrix-hookshot/blob/HEAD/CHANGELOG.md#710-2025-08-15) [Compare Source](https://github.com/matrix-org/matrix-hookshot/compare/7.0.0...7.1.0) \================== ## Features - Add an option in the config to disable hook bodies in Matrix messages. ([#​1004](https://github.com/matrix-org/matrix-hookshot/issues/1004)) - Hookshot will now ping the homeserver on startup to ensure it can be reached. ([#​1062](https://github.com/matrix-org/matrix-hookshot/issues/1062)) - Multiple config files (merged in order) may now be specified on the command line. ([#​1065](https://github.com/matrix-org/matrix-hookshot/issues/1065)) - Support Matrix v12 rooms. ([#​1077](https://github.com/matrix-org/matrix-hookshot/issues/1077)) - Add support for following room upgrades. Hookshot will now carry across all connections from the predecessor room to the next room. ([#​1079](https://github.com/matrix-org/matrix-hookshot/issues/1079)) ## Bugfixes - Fix bugs in handling server names that includes colons. ([#​1068](https://github.com/matrix-org/matrix-hookshot/issues/1068)) ## Improved Documentation - Instructions for how to setup a developer enviroment [are now included](https://matrix-org.github.io/matrix-hookshot/latest/dev/setup.html). This includes a new `docker-compose.yml` file for development. The previous unmaintained docker-compose setup for multiple workers has been removed. ([#​1065](https://github.com/matrix-org/matrix-hookshot/issues/1065)) ## Internal Changes - Support Node 24, and drop support for Node 23. ([#​1059](https://github.com/matrix-org/matrix-hookshot/issues/1059)) - GitHub and GitLab webhook requests should now be directed to /github and /gitlab respectively. `/` and `/oauth` is now deprecated and will be removed in a future release. ([#​1063](https://github.com/matrix-org/matrix-hookshot/issues/1063)) - Log encrypted device identities for consumption by third party tooling. ([#​1066](https://github.com/matrix-org/matrix-hookshot/issues/1066)) - Update matrix-appservice-bridge to 11.0.0. ([#​1083](https://github.com/matrix-org/matrix-hookshot/issues/1083)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/1237 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
325 lines
8.4 KiB
YAML
325 lines
8.4 KiB
YAML
matrix-synapse:
|
|
serverName: alexlebens.dev
|
|
publicServerName: matrix.alexlebens.dev
|
|
argoCD: true
|
|
signingkey:
|
|
job:
|
|
enabled: false
|
|
existingSecret: matrix-synapse-signingkey
|
|
existingSecretKey: signing.key
|
|
config:
|
|
reportStats: false
|
|
enableRegistration: true
|
|
trustedKeyServers: []
|
|
extraConfig:
|
|
enable_metrics: true
|
|
enable_registration_without_verification: true
|
|
password_config:
|
|
enabled: false
|
|
sso:
|
|
client_whitelist:
|
|
- https://chat.alexlebens.dev/
|
|
update_profile_information: true
|
|
synapse:
|
|
strategy:
|
|
type: Recreate
|
|
extraVolumes:
|
|
- name: matrix-synapse-config-secret
|
|
secret:
|
|
secretName: matrix-synapse-config-secret
|
|
- name: matrix-hookshot-config-secret
|
|
secret:
|
|
secretName: matrix-hookshot-config-secret
|
|
# - name: mautrix-discord-config-secret
|
|
# secret:
|
|
# secretName: mautrix-discord-config-secret
|
|
# - name: mautrix-whatsapp-config-secret
|
|
# secret:
|
|
# secretName: mautrix-whatsapp-config-secret
|
|
- name: double-puppet-registration-secret
|
|
secret:
|
|
secretName: double-puppet-registration-secret
|
|
extraVolumeMounts:
|
|
- name: matrix-synapse-config-secret
|
|
mountPath: /synapse/config/conf.d/oidc.yaml
|
|
subPath: oidc.yaml
|
|
readOnly: true
|
|
- name: matrix-synapse-config-secret
|
|
mountPath: /synapse/config/conf.d/config.yaml
|
|
subPath: config.yaml
|
|
readOnly: true
|
|
- name: matrix-hookshot-config-secret
|
|
mountPath: /synapse/config/conf.d/hookshot-registration.yaml
|
|
subPath: hookshot-registration.yaml
|
|
readOnly: true
|
|
# - name: mautrix-discord-config-secret
|
|
# mountPath: /synapse/config/conf.d/mautrix-discord-registration.yaml
|
|
# subPath: mautrix-discord-registration.yaml
|
|
# readOnly: true
|
|
# - name: mautrix-whatsapp-config-secret
|
|
# mountPath: /synapse/config/conf.d/mautrix-whatsapp-registration.yaml
|
|
# subPath: mautrix-whatsapp-registration.yaml
|
|
# readOnly: true
|
|
- name: double-puppet-registration-secret
|
|
mountPath: /synapse/config/conf.d/double-puppet-registration.yaml
|
|
subPath: double-puppet-registration.yaml
|
|
readOnly: true
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
workers:
|
|
default:
|
|
replicaCount: 0
|
|
generic_worker:
|
|
enabled: false
|
|
pusher:
|
|
enabled: false
|
|
appservice:
|
|
enabled: false
|
|
federation_sender:
|
|
enabled: false
|
|
media_repository:
|
|
enabled: false
|
|
user_dir:
|
|
enabled: false
|
|
wellknown:
|
|
enabled: true
|
|
server:
|
|
m.server: matrix.alexlebens.dev:443
|
|
client:
|
|
m.homeserver:
|
|
base_url: https://matrix.alexlebens.dev
|
|
postgresql:
|
|
enabled: false
|
|
externalPostgresql:
|
|
host: matrix-synapse-postgresql-17-cluster-rw
|
|
port: 5432
|
|
username: app
|
|
database: app
|
|
existingSecret: matrix-synapse-postgresql-17-cluster-app
|
|
existingSecretPasswordKey: password
|
|
redis:
|
|
enabled: false
|
|
externalRedis:
|
|
host: redis-replication-matrix-synapse-master
|
|
port: 6379
|
|
existingSecret: matrix-synapse-redis-secret
|
|
existingSecretPasswordKey: password
|
|
persistence:
|
|
enabled: true
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
volumePermissions:
|
|
enabled: true
|
|
uid: 666
|
|
gid: 666
|
|
ingress:
|
|
enabled: false
|
|
matrix-hookshot:
|
|
global:
|
|
fullnameOverride: matrix-hookshot
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: halfshot/matrix-hookshot
|
|
tag: 7.1.0
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
webhook:
|
|
port: 9000
|
|
targetPort: 9000
|
|
protocol: HTTP
|
|
metrics:
|
|
port: 9001
|
|
targetPort: 9001
|
|
protocol: HTTP
|
|
appservice:
|
|
port: 9002
|
|
targetPort: 9002
|
|
protocol: HTTP
|
|
homeserver:
|
|
port: 9993
|
|
targetPort: 9993
|
|
protocol: HTTP
|
|
persistence:
|
|
config:
|
|
enabled: true
|
|
type: secret
|
|
name: matrix-hookshot-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/config.yml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config.yml
|
|
registration:
|
|
enabled: true
|
|
type: secret
|
|
name: matrix-hookshot-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/registration.yml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: registration.yml
|
|
passkey:
|
|
enabled: true
|
|
type: secret
|
|
name: matrix-hookshot-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/passkey.pem
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: passkey.pem
|
|
mautrix-discord:
|
|
global:
|
|
fullnameOverride: mautrix-discord
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: dock.mau.dev/mautrix/discord
|
|
tag: v0.7.5
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
http:
|
|
port: 29334
|
|
targetPort: 29334
|
|
protocol: HTTP
|
|
persistence:
|
|
data:
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 500Mi
|
|
retain: true
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data
|
|
readOnly: false
|
|
config:
|
|
enabled: true
|
|
type: secret
|
|
name: mautrix-discord-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/config.yaml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config.yaml
|
|
mautrix-whatsapp:
|
|
global:
|
|
fullnameOverride: mautrix-whatsapp
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: dock.mau.dev/mautrix/whatsapp
|
|
tag: v0.12.4
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 64Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
http:
|
|
port: 29333
|
|
targetPort: 29333
|
|
protocol: HTTP
|
|
persistence:
|
|
data:
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 500Mi
|
|
retain: true
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data
|
|
readOnly: false
|
|
config:
|
|
enabled: true
|
|
type: secret
|
|
name: mautrix-whatsapp-config-secret
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data/config.yaml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config.yaml
|
|
cloudflared-synapse:
|
|
name: cloudflared-synapse
|
|
existingSecretName: matrix-synapse-cloudflared-synapse-secret
|
|
cloudflared-hookshot:
|
|
name: cloudflared-hookshot
|
|
existingSecretName: matrix-synapse-cloudflared-hookshot-secret
|
|
postgres-17-cluster:
|
|
mode: standalone
|
|
cluster:
|
|
storage:
|
|
storageClass: local-path
|
|
walStorage:
|
|
storageClass: local-path
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
monitoring:
|
|
enabled: true
|
|
prometheusRule:
|
|
enabled: true
|
|
recovery:
|
|
method: objectStore
|
|
objectStore:
|
|
endpointURL: https://nyc3.digitaloceanspaces.com
|
|
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
|
|
endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret
|
|
recoveryIndex: 1
|
|
backup:
|
|
enabled: true
|
|
endpointURL: https://nyc3.digitaloceanspaces.com
|
|
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
|
|
endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret
|
|
backupIndex: 1
|
|
retentionPolicy: "7d"
|