apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: matrix-stack
  namespace: matrix
spec:
  interval: 1h
  chart:
    spec:
      chart: matrix-stack
      version: "26.4.0"
      sourceRef:
        kind: HelmRepository
        name: element-ess-oci
        namespace: flux-system
  values:
    # Top-Level: serverName – das ist dein Matrix-Homeserver-Name
    serverName: axion1337.chat

    # Interner Postgres an (default ist eh true, hier nur zur Klarheit)
    postgres:
      enabled: true

    # Synapse – API auf matrix.axion1337.chat
    synapse:
      enabled: true
      ingress:
        host: matrix.axion1337.chat
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
          traefik.ingress.kubernetes.io/router.tls: "true"
        tls:
          - secretName: matrix-axion1337-chat-tls
            hosts:
              - matrix.axion1337.chat

    # Matrix Authentication Service – braucht eine Subdomain
    matrixAuthenticationService:
      enabled: true
      ingress:
        host: account.axion1337.chat
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
          traefik.ingress.kubernetes.io/router.tls: "true"
        tls:
          - secretName: account-axion1337-chat-tls
            hosts:
              - account.axion1337.chat

    # Matrix RTC (Element Call) – braucht auch eine Subdomain
    matrixRTC:
      enabled: true
      ingress:
        host: mrtc.axion1337.chat
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
          traefik.ingress.kubernetes.io/router.tls: "true"
        tls:
          - secretName: mrtc-axion1337-chat-tls
            hosts:
              - mrtc.axion1337.chat

    # Element Web
    elementWeb:
      enabled: true
      ingress:
        host: axion1337.chat
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
          traefik.ingress.kubernetes.io/router.tls: "true"
        tls:
          - secretName: axion1337-chat-tls
            hosts:
              - axion1337.chat

    # Element Admin
    elementAdmin:
      enabled: true
      ingress:
        host: admin.axion1337.chat
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
          traefik.ingress.kubernetes.io/router.tls: "true"
        tls:
          - secretName: admin-axion1337-chat-tls
            hosts:
              - admin.axion1337.chat

    # Well-Known auf der Apex-Domain (axion1337.chat/.well-known/matrix/*)
    wellKnownDelegation:
      enabled: true