2021-07-31 14:17:15 +00:00
|
|
|
# Fnux's playground
|
|
|
|
|
|
|
|
|
|
Tests made by Timothée for ungleich.
|
|
|
|
|
|
|
|
|
|
## OpenLDAP
|
|
|
|
|
|
|
|
|
|
Simple chart based on [Osixia's OpenLDAP
|
2021-08-02 07:49:28 +00:00
|
|
|
image](https://github.com/osixia/docker-openldap). A TLS certificate is
|
|
|
|
|
automatically generated via Let'sEncrypt, but renewal is not handled yet.
|
|
|
|
|
|
|
|
|
|
TODO: handle TLS certificate renewal.
|
2021-07-31 14:17:15 +00:00
|
|
|
|
|
|
|
|
```
|
2021-08-02 07:49:28 +00:00
|
|
|
kubectl create secret generic ldap1-openldap --from-literal=LDAP_ADMIN_PASSWORD=secretsecretsectet
|
2021-08-02 06:20:58 +00:00
|
|
|
helm install ldap1 ./openldap -f ldap1.fnux-playground.yaml
|
2021-07-31 14:17:15 +00:00
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Matrix Synapse
|
|
|
|
|
|
|
|
|
|
Matrix Homeserver setup based on [Ananace's Helm
|
|
|
|
|
charts](https://github.com/osixia/docker-openldap). I exchanged a few mails
|
|
|
|
|
with him, he's nice!
|
|
|
|
|
|
|
|
|
|
Note: we need to wire up some network policy to firewall the various components.
|
|
|
|
|
Note: there's some configuration and secret management to work on!
|
|
|
|
|
Note: there's a missing bit for IPv6 support (https://gitlab.com/ananace/charts/-/merge_requests/15)
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
helm repo add ananace-charts https://ananace.gitlab.io/charts
|
|
|
|
|
helm repo update
|
|
|
|
|
|
|
|
|
|
helm install matrix ananace-charts/matrix-synapse --set serverName=matrix.fnux-playground.svc.c1.k8s.ooo --set wellknown.enabled=true -f matrix.fnux-playground.yaml
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Ingress
|
|
|
|
|
|
|
|
|
|
Ingress is used by the matrix-synapse chart to distribute requests across
|
|
|
|
|
synapse workers. We could do it ourselve (just generate a NGINX container from
|
|
|
|
|
synapse's config) but there's already ingress logic around, which do this for
|
|
|
|
|
us...
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
|
|
|
|
|
helm repo update
|
|
|
|
|
|
|
|
|
|
helm install ingress-nginx ingress-nginx/ingress-nginx
|
|
|
|
|
```
|
|
|
|
|
|
