Thore CimbalandClaude Sonnet 5
4a3d7c70a6
Almost every tracked file in the repo had drifted to mode 777 on disk (only files created fresh this session were unaffected), and a chunk of that drift had already been committed as spurious +x bits on plain YAML/Markdown files (authentik.yaml, kustomization.yaml, coturn.yaml, element-server-suite.yaml, TASKS.md, install.md, etc.) - none of these need to be executable. Restored to 644 for regular files, 755 only for actual scripts (postCreateCommand.sh, docker-init.sh, install-hooks.sh, pre-commit hook, element-setup-linux.sh). Also found element-setup-macos.command was missing +x despite having a shebang and being meant for double-click execution on macOS - fixed. Added .gitignore for .DS_Store and .claude/ and stopped tracking the five .DS_Store files that had been committed by accident. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
aXion1337.Chat – Deployment & Konfiguration Dokumentation
Diese Dokumentation beschreibt die Einrichtung und Konfiguration des Matrix-Homeservers für axion1337.chat mit Element Server Suite (ESS) v26.4.0 auf K3S mit Flux CD GitOps.
📋 Übersicht Deployment-Reihenfolge
Die Implementierungen wurden in dieser Reihenfolge durchgeführt. Für neue Setups sollten Sie dieser Abfolge folgen:
| # | Titel | Datei | Status | Zieldomäne |
|---|---|---|---|---|
| 1 | TURN Server für WebRTC Video-Calls | 01-turn-server-setup.md |
✅ Deployed | turn.axion1337.chat |
| 2 | Authentik als Identity Provider | 02-authentik-identity-provider.md |
✅ Stage 1 Deployed | auth.axion1337.chat |
| 3 | Monitoring mit Alloy/Prometheus/Loki | 03-monitoring-integration.md |
✅ Deployed | lokal (10.0.0.3) |
| 4 | Element Web Anpassung & Desktop-Apps | 04-element-customization.md |
✅ Deployed | axion1337.chat |
| 5 | Room Policies (Retention, Publication, Auto-Join) | 05-room-policies.md |
✅ Deployed | Matrix Synapse |
🚀 Quick Start für neue Deployment
Siehe die einzelnen Dokumentationen für detaillierte Anleitung.
🏗️ Architektur-Übersicht
┌─────────────────────────────────────────────────────────────┐
│ Element Web (Apex) │
│ axion1337.chat (HTTP/TLS) │
└──────────────────────┬──────────────────────────────────────┘
│
┌─────────────┼─────────────┐
│ │ │
┌────▼────┐ ┌─────▼──────┐ ┌──▼────────┐
│ MAS │ │ Well-Known │ │Docs/Setup │
│account. │ │matrix/* │ │/setup │
│axion1337 │ │ │ │ │
└────┬────┘ └────────────┘ └───────────┘
│
┌────▼────────────────┐
│ Authentik OIDC │
│ auth.axion1337.chat │
│ (Identity Provider) │
└─────────────────────┘
│
┌────▼────────────────┐
│ Synapse Matrix │
│ matrix.axion1337.chat│
│ (Homeserver) │
└──────────────────────┘
🔑 Kritische Werte & Konfigurationen
Domains
- Apex:
axion1337.chat(Element Web) - Matrix Synapse:
matrix.axion1337.chat - MAS:
account.axion1337.chat - Authentik:
auth.axion1337.chat - TURN Server:
turn.axion1337.chat
Externe Services
- K3S Host IP:
49.13.132.245 - Monitoring Host:
10.0.0.3(Selendis)
📚 Dokumente im Detail
01-turn-server-setup.md
STUN/TURN Server für WebRTC Media Relay (Video-Calls).
02-authentik-identity-provider.md
Authentik als OIDC Provider für Matrix. Registrierung via Einladungs-Links.
03-monitoring-integration.md
Alloy → Prometheus/Loki Monitoring Integration.
04-element-customization.md
Custom Themes, Desktop-Setup-Scripts, Element Admin.
05-room-policies.md
Message Retention, Room Publication, Auto-Join Policies.
🛠️ Wartung & Troubleshooting
Alle Dokumentationen enthalten Troubleshooting-Sektionen für häufige Probleme.