Greg Hellings
26d4e9b771
Configure a matrix database Configure Dendrite into Kubernetes Update vps configuration to new settings
190 lines
5.9 KiB
YAML
190 lines
5.9 KiB
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: dendrite-config
|
|
spec:
|
|
data:
|
|
- &secret
|
|
secretKey: username
|
|
sourceRef:
|
|
storeRef:
|
|
name: bitwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef: &remoteRef
|
|
key: 36d1046b-727e-4e09-a391-b2e90171d3d0
|
|
property: username
|
|
- <<: *secret
|
|
secretKey: password
|
|
remoteRef:
|
|
<<: *remoteRef
|
|
property: password
|
|
- secretKey: matrix_pem
|
|
sourceRef:
|
|
storeRef:
|
|
name: bitwarden-notes
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 6de3500c-7c6e-4419-b4f5-b2ea0018ff28
|
|
target:
|
|
name: dendrite-config
|
|
deletionPolicy: Delete
|
|
template:
|
|
engineVersion: v2
|
|
data:
|
|
matrix.pem: "{{ .matrix_pem }}"
|
|
dendrite.yaml: |
|
|
version: 2
|
|
global:
|
|
server_name: thehellings.com
|
|
key_id: ed25519:auto
|
|
private_key: /etc/dendrite/matrix.pem
|
|
database:
|
|
connection_string: "postgres://{{ .username | urlquery }}:{{ .password | urlquery }}@postgres-rw.db.svc.cluster.local/matrix?sslmode=disable"
|
|
max_open_conns: 90
|
|
max_idle_conns: 2
|
|
conn_max_lifetime: -1
|
|
well_known_server_name: "http://matrix.thehellings.com"
|
|
well_known_client_name: "http://matrix.thehellings.com"
|
|
well_known_sliding_sync_proxy: ""
|
|
disable_federation: false
|
|
presence:
|
|
enable_inbound: false
|
|
enable_outbound: false
|
|
trusted_third_party_id_servers:
|
|
- matrix.org
|
|
- vector.im
|
|
jetstream:
|
|
storage_path: /var/dendrite
|
|
addresses: []
|
|
topic_prefix: Dendrite
|
|
in_memory: false
|
|
disable_tls_validation: true
|
|
credentials_path: ""
|
|
metrics:
|
|
enabled: false
|
|
basic_auth:
|
|
username: metrics
|
|
password: metrics
|
|
sentry:
|
|
enabled: false
|
|
dsn: ""
|
|
environment: ""
|
|
dns_cache:
|
|
enabled: false
|
|
cache_size: 256
|
|
cache_lifetime: 5m0s
|
|
server_notices:
|
|
enabled: true
|
|
local_part: _server
|
|
display_name: Server Alert
|
|
avatar_url: ""
|
|
room_name: Server Alert
|
|
report_stats:
|
|
enabled: false
|
|
endpoint: https://panopticon.matrix.org/push
|
|
cache:
|
|
max_size_estimated: 1073741824
|
|
max_age: 1h0m0s
|
|
app_service_api:
|
|
disable_tls_validation: false
|
|
legacy_auth: false
|
|
legacy_paths: false
|
|
config_files: []
|
|
client_api:
|
|
registration_disabled: true
|
|
registration_requires_token: false
|
|
registration_shared_secret: ""
|
|
guests_disabled: false
|
|
enable_registration_captcha: false
|
|
recaptcha_api_js_url: ""
|
|
recaptcha_sitekey_class: ""
|
|
recaptcha_form_field: ""
|
|
recaptcha_public_key: ""
|
|
recaptcha_private_key: ""
|
|
recaptcha_bypass_secret: ""
|
|
recaptcha_siteverify_api: ""
|
|
turn:
|
|
turn_user_lifetime: ""
|
|
turn_uris: []
|
|
turn_shared_secret: ""
|
|
turn_username: ""
|
|
turn_password: ""
|
|
rate_limiting:
|
|
enabled: true
|
|
threshold: 5
|
|
cooloff_ms: 500
|
|
exempt_user_ids: []
|
|
federation_api:
|
|
send_max_retries: 16
|
|
enable_relays: false
|
|
p2p_retries_until_assumed_offline: 1
|
|
disable_tls_validation: false
|
|
disable_http_keepalives: false
|
|
key_perspectives:
|
|
- server_name: matrix.org
|
|
keys:
|
|
- key_id: ed25519:auto
|
|
public_key: Noi6WqcDj0QmPxCNQqgezwTlBKrfqehY1u2FyWP9uYw
|
|
- key_id: ed25519:a_RXGa
|
|
public_key: l8Hft5qXKn1vfHrg3p4+W8gELQVo8N13JkluMfmn2sQ
|
|
prefer_direct_fetch: false
|
|
deny_networks:
|
|
- 127.0.0.1/8
|
|
- 10.0.0.0/8
|
|
- 172.16.0.0/12
|
|
- 192.168.0.0/16
|
|
- 100.64.0.0/10
|
|
- 169.254.0.0/16
|
|
- ::1/128
|
|
- fe80::/64
|
|
- fc00::/7
|
|
allow_networks:
|
|
- 0.0.0.0/0
|
|
key_server: {}
|
|
media_api:
|
|
base_path: /var/dendrite/media
|
|
max_file_size_bytes: 10485760
|
|
dynamic_thumbnails: false
|
|
max_thumbnail_generators: 10
|
|
thumbnail_sizes:
|
|
- width: 32
|
|
height: 32
|
|
method: crop
|
|
- width: 96
|
|
height: 96
|
|
method: crop
|
|
- width: 640
|
|
height: 480
|
|
method: scale
|
|
room_server:
|
|
default_room_version: "10"
|
|
sync_api:
|
|
real_ip_header: ""
|
|
search:
|
|
enabled: false
|
|
index_path: /var/dendrite/searchindex
|
|
in_memory: false
|
|
language: en
|
|
user_api:
|
|
bcrypt_cost: 10
|
|
openid_token_lifetime_ms: 3600000
|
|
push_gateway_disable_tls_validation: false
|
|
auto_join_rooms: []
|
|
worker_count: 8
|
|
relay_api: {}
|
|
mscs:
|
|
mscs: []
|
|
tracing:
|
|
enabled: false
|
|
jaeger:
|
|
serviceName: ""
|
|
disabled: false
|
|
rpc_metrics: false
|
|
traceid_128bit: false
|
|
tags: []
|
|
sampler: null
|
|
reporter: null
|
|
headers: null
|
|
baggage_restrictions: null
|
|
throttler: null
|