Compare commits

..

5 Commits

Author SHA1 Message Date
Gitea Actions Bot
adb109be28 Auto-update README with current k8s applications
All checks were successful
Terraform / Terraform (pull_request) Successful in 26s
Generated by CI/CD workflow on 2026-03-16 11:55:43

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
2026-03-16 11:55:43 +00:00
Ultradesu
4feed32f94 Rotate furumi token
All checks were successful
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 15s
Check with kubeconform / lint (push) Successful in 10s
Auto-update README / Generate README and Create MR (push) Successful in 18s
2026-03-16 11:55:11 +00:00
Ultradesu
9d67f443c3 Added matrix
All checks were successful
Check with kubeconform / lint (push) Successful in 7s
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s
Auto-update README / Generate README and Create MR (push) Successful in 9s
2026-03-16 11:24:47 +00:00
ab
b12276072a Update terraform/authentik/oauth2-apps.auto.tfvars
All checks were successful
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 14s
Terraform / Terraform (push) Successful in 33s
2026-03-16 11:06:16 +00:00
Ultradesu
04fc582912 Added matrix
All checks were successful
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 8s
Check with kubeconform / lint (push) Successful in 11s
Auto-update README / Generate README and Create MR (push) Successful in 16s
2026-03-16 11:03:23 +00:00
5 changed files with 42 additions and 4 deletions

View File

@@ -22,7 +22,10 @@ spec:
imagePullPolicy: Always
env:
- name: FURUMI_TOKEN
value: "f38387266e75effe891b7953eb9c06b4"
valueFrom:
secretKeyRef:
name: furumi-ng-token
key: TOKEN
- name: FURUMI_ROOT
value: "/media"
ports:

View File

@@ -0,0 +1,23 @@
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: furumi-ng-token
spec:
target:
name: furumi-ng-token
deletionPolicy: Delete
template:
type: Opaque
data:
TOKEN: |-
{{ .token }}
data:
- secretKey: token
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
property: fields[0].value

View File

@@ -6,3 +6,4 @@ resources:
- deployment.yaml
- service.yaml
- servicemonitor.yaml
- external-secrets.yaml

View File

@@ -35,6 +35,11 @@ synapse:
password:
secret: matrix-postgres-creds
secretKey: synapse_db_password
additional:
0-unsafe-locale:
config: |
database:
allow_unsafe_locale: true
media:
storage:
size: 20Gi
@@ -56,9 +61,15 @@ matrixAuthenticationService:
password:
secret: matrix-postgres-creds
secretKey: mas_db_password
## Authentik OIDC upstream provider
## Admin policy
additional:
0-oidc:
0-admin-policy:
config: |
policy:
data:
admin_users:
- username: ultradesu
1-oidc:
configSecret: matrix-oidc-config
configSecretKey: mas-oidc.yaml
# nodeSelector:

View File

@@ -195,7 +195,7 @@ oauth_applications = {
meta_description = "Matrix Chat"
meta_icon = "https://img.icons8.com/ios/100/40C057/matrix-logo.png"
redirect_uris = [
"https://matrix.hexor.cy/_matrix/client/unstable/org.matrix.msc2965/auth/upstream/callback",
"https://auth.matrix.hexor.cy/upstream/callback/001KKV4EKY7KG98W2M9T806K6A",
]
meta_launch_url = "https://matrix.hexor.cy"
client_type = "confidential"