7ece854c02
Gitea + ArgoCD + cert-manager + Traefik + CNPG + monitoring + loki + alloy Matrix homeservers for mrt0rtikize.ru, t0rt1k.tech, roglog.space
161 lines
4.3 KiB
YAML
161 lines
4.3 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: matrix-t0rt1k
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
sources:
|
|
- repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
|
|
targetRevision: master
|
|
path: manifests/matrix-t0rt1k
|
|
directory:
|
|
recurse: true
|
|
include: "*.yaml"
|
|
- repoURL: ghcr.io
|
|
chart: element-hq/ess-helm/matrix-stack
|
|
targetRevision: 26.6.1
|
|
helm:
|
|
values: |
|
|
serverName: t0rt1k.tech
|
|
|
|
certManager:
|
|
clusterIssuer: letsencrypt-production
|
|
|
|
ingress:
|
|
className: traefik
|
|
|
|
postgres:
|
|
enabled: false
|
|
|
|
synapse:
|
|
postgres:
|
|
host: shared-pg-rw.cnpg.svc.cluster.local
|
|
database: synapse_t0rt1k
|
|
user: synapse_t0rt1k
|
|
password:
|
|
secret: pg-creds
|
|
secretKey: synapse
|
|
media:
|
|
storage:
|
|
size: 10Gi
|
|
ingress:
|
|
host: matrix.t0rt1k.tech
|
|
resources:
|
|
requests:
|
|
memory: 256Mi
|
|
cpu: 100m
|
|
limits:
|
|
memory: 1.5Gi
|
|
workers:
|
|
federation-sender:
|
|
enabled: true
|
|
resources:
|
|
requests:
|
|
memory: 192Mi
|
|
cpu: 50m
|
|
limits:
|
|
memory: 256Mi
|
|
federation-reader:
|
|
enabled: true
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
cpu: 50m
|
|
limits:
|
|
memory: 256Mi
|
|
client-reader:
|
|
enabled: true
|
|
replicas: 1
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
cpu: 50m
|
|
limits:
|
|
memory: 256Mi
|
|
initial-synchrotron:
|
|
enabled: true
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
cpu: 50m
|
|
limits:
|
|
memory: 256Mi
|
|
synchrotron:
|
|
enabled: true
|
|
replicas: 1
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
cpu: 50m
|
|
limits:
|
|
memory: 256Mi
|
|
additional:
|
|
0-federation-retry:
|
|
config: |
|
|
destination_min_retry_interval: "1m"
|
|
destination_retry_multiplier: 1.5
|
|
destination_max_retry_interval: "1d"
|
|
|
|
matrixAuthenticationService:
|
|
postgres:
|
|
host: shared-pg-rw.cnpg.svc.cluster.local
|
|
database: mas_t0rt1k
|
|
user: mas_t0rt1k
|
|
password:
|
|
secret: pg-creds
|
|
secretKey: mas
|
|
ingress:
|
|
host: auth.t0rt1k.tech
|
|
resources:
|
|
limits:
|
|
memory: 128Mi
|
|
|
|
elementWeb:
|
|
ingress:
|
|
host: chat.t0rt1k.tech
|
|
|
|
elementAdmin:
|
|
ingress:
|
|
host: admin.t0rt1k.tech
|
|
|
|
matrixRTC:
|
|
ingress:
|
|
host: rtc.t0rt1k.tech
|
|
sfu:
|
|
manualIP: "81.26.181.240"
|
|
useStunToDiscoverPublicIP: false
|
|
exposedServices:
|
|
rtcTcp:
|
|
port: 30007
|
|
portType: NodePort
|
|
nodePort: ""
|
|
rtcMuxedUdp:
|
|
port: 30006
|
|
portType: NodePort
|
|
nodePort: ""
|
|
resources:
|
|
requests:
|
|
memory: 64Mi
|
|
cpu: 50m
|
|
limits:
|
|
memory: 512Mi
|
|
|
|
hookshot:
|
|
enabled: true
|
|
resources:
|
|
limits:
|
|
memory: 256Mi
|
|
ingress:
|
|
host: hookshot.t0rt1k.tech
|
|
className: traefik
|
|
tlsEnabled: true
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: matrix-t0rt1k
|
|
syncPolicy:
|
|
syncOptions:
|
|
- CreateNamespace=true
|