ungleich-k8s/apps/matrix

Components

element-web

• Needs config: /app/config.json
• Needs FQDN for HTTPS / nginx
• Maybe limit the builtin webserver to localhost?
  • Configmap to /etc/nginx/conf.d/default.conf
  • Entrypoint nginx -g daemon offD

To add:

add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header Content-Security-Policy "frame-ancestors 'none'";

Missing

• SMTP settings / secrets (ungleich mail + sops?)

admin user

docker exec -it synapse register_new_matrix_user http://localhost:8008 -c /data/homeserver.yaml --help

Usage

Element-Web

• Includes config.json that is being populated by values.yaml
• Includes nginx on port localhost:8080 (http)
• Includes nginx proxy on port 80+443 (http redirect, https)

Synapse

• homeserver.yaml is created from a ConfigMap in /config-ro
• homeserver.yaml is edited using sed to add the postgres password and stored in /config/homeserver.yaml
• Logging configured to stdout

Postgres

Tuned with --no-locale --encoding=UTF8 using POSTGRES_INITDB_ARGS (required by synapse).

See

• https://www.postgresql.org/docs/9.5/app-initdb.html
• https://hub.docker.com/_/postgres
• https://github.com/matrix-org/synapse/blob/develop/docs/postgres.md