8ff438bd24
Add coturn Deployment with hostNetwork mode and init container for secret substitution. Include SOPS-encrypted shared secret, TLS certificate for turn.axion1337.chat, and Synapse TURN configuration with proper relay URIs and credentials. Resolves DTLS timeout issues in RTC video calls by providing media relay for clients behind NAT/Firewall. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
78 lines
1.5 KiB
YAML
78 lines
1.5 KiB
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: matrix-axion1337-chat-cert
|
|
namespace: matrix
|
|
spec:
|
|
secretName: matrix-axion1337-chat-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- matrix.axion1337.chat
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: account-axion1337-chat-cert
|
|
namespace: matrix
|
|
spec:
|
|
secretName: account-axion1337-chat-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- account.axion1337.chat
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: mrtc-axion1337-chat-cert
|
|
namespace: matrix
|
|
spec:
|
|
secretName: mrtc-axion1337-chat-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- mrtc.axion1337.chat
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: axion1337-chat-cert
|
|
namespace: matrix
|
|
spec:
|
|
secretName: axion1337-chat-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- axion1337.chat
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: admin-axion1337-chat-cert
|
|
namespace: matrix
|
|
spec:
|
|
secretName: admin-axion1337-chat-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- admin.axion1337.chat
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: turn-axion1337-chat-cert
|
|
namespace: matrix
|
|
spec:
|
|
secretName: turn-axion1337-chat-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- turn.axion1337.chat
|