Thore Cimbal
32e2c8e556
Auto-Deploy on Push / verify-and-notify (push) Successful in 53s
Synapse's own media-scanning module (Issue #19) can never see E2EE attachment content - a structural limit, not a bug. This adds a small standalone HTTP wrapper around the same ClamAV instance, reachable from browser JS at /_scan, so the ThreadNet-Web client fork can scan plaintext both before encrypting/uploading and after downloading/ decrypting - covering both directions regardless of room encryption. Auth via Synapse's own /whoami endpoint, no separate auth system.
53 lines
1.4 KiB
YAML
53 lines
1.4 KiB
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: axion-apex-tls
|
|
namespace: matrix
|
|
spec:
|
|
secretName: axion-apex-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- axion1337.chat
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: axion-apex
|
|
namespace: matrix
|
|
spec:
|
|
entryPoints: [websecure]
|
|
tls:
|
|
secretName: axion-apex-tls
|
|
routes:
|
|
# Höchste Priorität: /.well-known/matrix/* -> wellKnownDelegation-Service
|
|
- match: Host(`axion1337.chat`) && PathPrefix(`/.well-known/matrix`)
|
|
kind: Rule
|
|
priority: 100
|
|
services:
|
|
- name: matrix-stack-well-known
|
|
port: 8010
|
|
# Element Desktop Setup Skripte
|
|
- match: Host(`axion1337.chat`) && PathPrefix(`/docs/setup`)
|
|
kind: Rule
|
|
priority: 50
|
|
services:
|
|
- name: element-web-docs
|
|
port: 80
|
|
# Client-seitiger ClamAV-Scan-Dienst (Issue #19-Erweiterung: Scanning auch für
|
|
# verschlüsselte Räume, direkt vom Browser aus aufgerufen)
|
|
- match: Host(`axion1337.chat`) && PathPrefix(`/_scan`)
|
|
kind: Rule
|
|
priority: 50
|
|
services:
|
|
- name: clamav-http-scanner
|
|
port: 8090
|
|
# Niedrigere Priorität: alles andere -> Element Web
|
|
- match: Host(`axion1337.chat`)
|
|
kind: Rule
|
|
priority: 10
|
|
services:
|
|
- name: matrix-stack-element-web
|
|
port: 80
|