sorb/axion1337.chat-gitops
1
0
Fork 0
Code Issues Pull Requests Packages Projects 1 Releases 24 Wiki Activity
119 Commits 2 Branches 24 Tags
68bf4e213cf0efd40571bd8aee439a00e81923db
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Scrublord MacBad 68bf4e213c Revert to ESS 26.4.0 - URL preview issues in 26.5.0 2026-05-08 00:39:20 +02:00
Scrublord MacBad 644dff9c48 Upgrade to ESS 26.5.0 with oembed support 2026-05-08 00:29:39 +02:00
Scrublord MacBad 8e0f244257 Add oembed configuration directly to synapse values 2026-05-08 00:20:45 +02:00
Scrublord MacBad b000c1b10b Fix oembed configuration format 2026-05-08 00:10:08 +02:00
Scrublord MacBad 24d0cd1201 Add media_repository and oembed configuration for URL previews 2026-05-08 00:06:27 +02:00
Scrublord MacBad 08a38fdfbb Revert to ESS 26.4.0 to test URL preview functionality 2026-05-07 23:58:15 +02:00
Scrublord MacBad eda648eaa7 Add media_repository and thumbnail_generator workers for URL preview support 2026-05-07 23:45:37 +02:00
Scrublord MacBad 575ac0112f fix auto join 2026-05-07 23:23:33 +02:00
Scrublord MacBad 878687f334 test deactivate auto join in synape prior ess upgrade due to invalid room id 2026-05-07 23:11:37 +02:00
Scrublord MacBad 7b4def0fe7 Upgrade ESS 26.5.0 2026-05-07 22:54:05 +02:00
Scrublord MacBad 7b7643cf6e Feat: no new roomlist 2026-05-07 21:26:29 +02:00
Scrublord MacBad a7959474c5 Feat: new room list #32677 2026-05-07 21:16:50 +02:00
Scrublord MacBadandClaude Haiku 4.5 3c2a03e9c3 Deploy Authentik as Identity Provider for Matrix (Stage 1) 
Add Authentik v2026.x with embedded PostgreSQL in new namespace. Includes HelmRelease with valuesFrom injection for encrypted credentials, cert-manager Certificate for auth.axion1337.chat, and Traefik IngressRoute. Authentik serves as OIDC provider for MAS; registration via invitation links only.

DNS A-record setup and Authentik UI configuration (OIDC provider creation) are manual post-deployment steps.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-29 23:44:15 +02:00
Scrublord MacBadandClaude Haiku 4.5 8ff438bd24 Implement TURN server (coturn) for WebRTC video calls 
Add coturn Deployment with hostNetwork mode and init container for secret substitution. Include SOPS-encrypted shared secret, TLS certificate for turn.axion1337.chat, and Synapse TURN configuration with proper relay URIs and credentials.

Resolves DTLS timeout issues in RTC video calls by providing media relay for clients behind NAT/Firewall.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-29 23:07:52 +02:00
Scrublord MacBadandClaude Haiku 4.5 01ad3f2d71 Fix HelmRepository API version 
- Change from v1beta2 to v1 (v1beta2 is deprecated)
- Resolves dry-run failure in monitoring Kustomization

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-24 16:18:17 +02:00
Scrublord MacBadandClaude Haiku 4.5 34bffe40be Add monitoring stack: kube-state-metrics, node-exporter, and Alloy 
- New monitoring namespace
- HelmRepositories: prometheus-community, grafana
- kube-state-metrics: Kubernetes state metrics
- prometheus-node-exporter: Host metrics DaemonSet
- Alloy: Multi-target scraper pushing to Selendis (10.0.0.3:9090 Prometheus, 10.0.0.3:3100 Loki)
  - Scrapes Flux controllers (flux-system:8080)
  - Scrapes kube-state-metrics (monitoring:8080)
  - Scrapes node-exporter DaemonSet (monitoring:9100)
  - Scrapes Synapse metrics (matrix:9000)
  - Pushes pod logs to Loki
- Monitoring Kustomization added to flux-system

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-24 16:14:17 +02:00
Scrublord MacBadandClaude Haiku 4.5 1a1c8ee2c6 Simplify room_list_publication_rules structure 
- Remove unnecessary fields, use minimal rule set
- Allow all users to publish rooms

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-24 15:31:30 +02:00
Scrublord MacBadandClaude Haiku 4.5 78454ba2ef Add room_list_publication_rules to allow room publishing 
- Allow all users to publish public rooms in room list
- Fixes 403 'Not allowed to publish room' error
- Applies to rooms with join_rule: public

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-24 15:11:32 +02:00
Scrublord MacBadandClaude Haiku 4.5 c98997f75e Fix auto_join_rooms configuration property name 
- Rename property from auto-join-rooms to auto_join (underscore instead of dash)
- Keep YAML structure with embedded config

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-24 14:40:45 +02:00
Scrublord MacBadandClaude Haiku 4.5 a323c6bb65 Add auto-join rooms configuration for onboarding 
- New users automatically join !NkFTshKWJMgdTqTbTh:axion1337.chat (onboarding room)
- Federated guests do not auto-join (auto_join_rooms_for_guests: false)

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-24 14:15:45 +02:00
Scrublord MacBadandClaude Haiku 4.5 47625c05b6 Rename retention-config to retention in synapse additional config 
- Use simpler property name 'retention' instead of 'retention-config'
- Helm Chart schema may not allow 'retention-config' naming convention

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-24 13:53:25 +02:00
Scrublord MacBadandClaude Haiku 4.5 42483f32b5 Fix synapse retention-config placement in values 
- Move retention-config from top-level synapse to additional section
- Helm Chart schema requires custom configs under synapse.additional
- Clean up comments (keep inline comments minimal)

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-24 13:48:57 +02:00
Scrublord MacBadandClaude Haiku 4.5 4a95350c72 Add beautiful HTML landing page to element-web-docs setup 
- Create index.html with styled setup guide and download links
- Update init-container to copy index.html to nginx
- Configure nginx to serve index.html as default for /docs/setup/
- Remove directory listing (autoindex), show proper HTML instead

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-23 18:52:33 +02:00
Scrublord MacBadandClaude Haiku 4.5 c85dd39eba Fix Element Web docs server routing and remove redundant nginx Ingress 
- Remove duplicate nginx Ingress from element-web-docs-server.yaml (using Traefik instead)
- Traefik IngressRoute in apex-ingress.yaml now handles /docs/setup routing
- Deployment and Service remain unchanged for file serving

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-04-23 18:42:57 +02:00
Scrublord MacBad bdba4f3e34 fix: use init-container instead of postStart hook 2026-04-23 18:37:08 +02:00
Scrublord MacBad 80fa13b63f feat: separate nginx deployment to serve Element Desktop setup scripts 2026-04-23 18:36:13 +02:00
Scrublord MacBad cf8bc00613 fix: use init-container to copy docs from ConfigMap to nginx html 2026-04-23 18:34:45 +02:00
Scrublord MacBad 0c67a249fa fix: add element-web-docs-configmap to kustomization resources 2026-04-23 18:25:18 +02:00
Scrublord MacBad 4bc0e10631 fix: correct ConfigMap keys and mount structure for /docs/setup/ 2026-04-23 18:18:15 +02:00
Scrublord MacBad 3e07d6c613 fix: move element-web-docs ConfigMap to correct location 2026-04-23 18:17:04 +02:00
Scrublord MacBad 336f2aa1cb feat: serve Element Desktop setup scripts via Element Web at /docs/setup/ 2026-04-23 18:16:03 +02:00
Scrublord MacBad 659acdf601 docs: add Element Desktop setup scripts for Windows, macOS, and Linux 2026-04-23 16:42:16 +02:00
Scrublord MacBad 147ac079f7 feat: add configUrl for Element Desktop auto-loading 2026-04-23 16:33:06 +02:00
Scrublord MacBad 0efe91b1bd custom themes 2026-04-23 15:39:33 +02:00
Scrublord MacBad 6aff1f86d6 fix final mas fix 2026-04-23 15:25:44 +02:00
Scrublord MacBad bdca6d8840 fix mas 2026-04-23 14:01:48 +02:00
Scrublord MacBad b6e2c6f00b missing param 2026-04-23 13:53:24 +02:00
Scrublord MacBad 37149b195b fix mas? 2026-04-23 13:50:35 +02:00
Scrublord MacBad 13e597769c fix secret handling 2026-04-23 11:28:14 +02:00
Scrublord MacBad c17e8f528f fix mas? 2026-04-23 11:25:00 +02:00
Scrublord MacBad 9fdac55e25 fix custom themes syntax 2026-04-23 11:04:47 +02:00
Scrublord MacBad eb21dc9494 feat custom themes 2026-04-23 10:49:58 +02:00
Scrublord MacBad e663dcc0ec fix duplicated mapping ind kustomization file 2026-04-22 16:13:48 +02:00
Scrublord MacBad 2bc536d9d8 fix config security 2026-04-22 15:50:52 +02:00
Scrublord MacBad bf9c510d76 feat: MSC3889/MSC4880 2026-04-22 15:27:10 +02:00
Scrublord MacBad 90b41b37b1 fix mrtc 2026-04-22 15:22:48 +02:00
Scrublord MacBad 9b5c77bb8e fix secret 2026-04-22 15:15:28 +02:00
Scrublord MacBad 4a5f62d17a fix ingress 2026-04-22 15:11:58 +02:00
Scrublord MacBad 245cfcc486 fix valuemapping 2026-04-22 15:04:23 +02:00
Scrublord MacBad 37327eebe2 fix: use correct MAS SMTP config per documentation 2026-04-22 13:55:19 +02:00
Scrublord MacBad b7356b8a2b fix: use IONOS recommended port 587 instead of 465 2026-04-22 13:48:15 +02:00
Scrublord MacBad 6847c52309 fix: add mode field to MAS email configuration 2026-04-22 13:43:43 +02:00
Scrublord MacBad 47768c6761 revert: restore original Element Web config structure 2026-04-22 13:36:27 +02:00
Scrublord MacBad 361f02eddb fix: replace SOPS secret with plain secret for MAS configuration 2026-04-22 13:23:29 +02:00
Scrublord MacBad 9e23202971 fix: remove SOPS secret from valuesFrom, use only ConfigMap 2026-04-22 13:20:27 +02:00
Scrublord MacBad 584adf59d0 fix: reorder kustomization resources to ensure mas-values overrides mas-secrets 2026-04-22 12:45:31 +02:00
Scrublord MacBad dc0652ffe7 fix: add mas-values ConfigMap for email config with transport field 2026-04-22 12:42:16 +02:00
Scrublord MacBad 18d23441be fix: add transport field to MAS email config and update Element Web theme structure 2026-04-22 12:42:16 +02:00
Scrublord MacBad 59eb11d029 fix element values 2026-04-22 01:20:01 +02:00
Scrublord MacBad eb82a385a4 fix synapse values 2026-04-22 00:43:06 +02:00
Scrublord MacBad 189c5a8d2e fix synapse values 2026-04-22 00:35:24 +02:00
Scrublord MacBad 13bb4814b8 fix filename mas 2026-04-22 00:26:11 +02:00
Scrublord MacBad dd9fdfdca7 feat matrix_rtc 2026-04-22 00:19:48 +02:00
Scrublord MacBad b83fce9035 feat: add encrypted SMTP secrets for MAS 2026-04-21 23:32:23 +02:00
Scrublord MacBad 0e6bf71db9 feat: add encrypted SMTP secrets for MAS 2026-04-21 23:31:54 +02:00
Scrublord MacBad 68aec4fc69 fix: disable wellKnownDelegation to resolve ACME cert conflict on axion1337.chat 2026-04-21 23:00:48 +02:00
Scrublord MacBad 2f4e4c9b26 fix: use chart's native certManager configuration instead of manual patches 2026-04-21 22:55:38 +02:00
Scrublord MacBad 007c6e76d0 fix: use JSON6902 patches to inject secretName into ingress TLS 2026-04-21 22:48:28 +02:00
Scrublord MacBad fb471fad46 fix: add tlsSecretName to all ingress configurations 2026-04-21 22:46:59 +02:00
Scrublord MacBad 6fe98f4e87 fix: add TLS config to ingress via kustomize patch 2026-04-21 22:40:14 +02:00
Scrublord MacBad 49eb04022c fix: add explicit Certificate resources for cert-manager 2026-04-21 22:35:48 +02:00
Scrublord MacBad acd1d9dcdf fix: remove unsupported tls property from per-service ingress config 2026-04-21 22:29:38 +02:00
Scrublord MacBad a21afd98b4 fix: add per-service TLS and cert-manager annotations 2026-04-21 22:24:34 +02:00
Scrublord MacBad 16fe49a53e fix ki slop 2026-04-21 21:28:49 +02:00
Scrublord MacBad 760f8830a8 fix: resolve schema violations for postgres and well-known 2026-04-21 20:33:02 +02:00
Scrublord MacBad 1dab3790af fix chart compliancy 2026-04-21 20:22:23 +02:00
Scrublord MacBad a1160d8229 fix: structure values according to ESS component schem 2026-04-21 20:14:56 +02:00
Scrublord MacBad 12bb7e0220 fix: schema alignment with snake_case 2026-04-21 20:10:28 +02:00
Scrublord MacBad 9f30fdcfa0 fix: align values with matrix-stack schema 26.4.0 2026-04-21 20:05:58 +02:00
Scrublord MacBad 8fc3be6319 fix: use official OCI chart matrix-stack from ghcr.io 2026-04-21 20:02:32 +02:00
Scrublord MacBad 1bbcaf1f22 fix: correct chart path and values formatting 2026-04-21 18:04:17 +02:00
Scrublord MacBad 640a4b9e56 feat ESS config 2026-04-21 17:54:26 +02:00
Scrublord MacBad c62db8e017 feat: switch to community helm charts from git source 2026-04-21 17:49:00 +02:00
Scrublord MacBad f973b0679f fix: downgrade HelmRepository to v1 to match cluster CRDs 2026-04-21 17:30:52 +02:00
Scrublord MacBad 268a9378c1 fix: definitive switch to OCI for element chart 2026-04-21 17:11:03 +02:00
Scrublord MacBad 36bea343e1 fix 2026-04-21 17:05:21 +02:00
Scrublord MacBad 309e1fe753 chore: switch to OCI registry for element charts 2026-04-21 16:57:18 +02:00
Scrublord MacBad 097fa09273 fix: move matrix namespace to infra and fix repo URL 2026-04-21 16:44:35 +02:00
Scrublord MacBad fe65e915f4 move namespace.yaml 2026-04-21 16:41:43 +02:00
Scrublord MacBad 957e1d94fe fix namespace.yaml 2026-04-21 16:37:05 +02:00
Scrublord MacBad 58c7476b3d create namespace.yaml 2026-04-21 16:35:32 +02:00
Scrublord MacBad b648ab9203 fix ess helm source 2026-04-21 16:27:13 +02:00
Scrublord MacBad f5ada2a28b refactor: move ESS operator to infra to fix CRD dependency 2026-04-21 16:14:40 +02:00
Scrublord MacBad ff5d34350b feat: deploy element server suite operator and instance 2026-04-21 16:00:51 +02:00
Scrublord MacBad a811b20557 feat: add cert-manager namespace 2026-04-21 15:56:53 +02:00
Scrublord MacBad 962500c37d fix: add sync files to flux-system kustomization 2026-04-21 15:53:23 +02:00
Scrublord MacBad 4864e0cbec fix: sync file locations 2026-04-21 15:48:52 +02:00
Scrublord MacBad 75650fd895 fix: typo in kustomization file 2026-04-21 15:47:32 +02:00
Scrublord MacBad bf648e2d90 move: sync files to the correct flux-system folder 2026-04-21 15:43:52 +02:00
Scrublord MacBad 3f181a4567 refactor: Infra von Apps getrennt und Abhängigkeit hinzugefügt 2026-04-21 15:34:42 +02:00