ungleich-public
/
ungleich-k8s
6
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
ungleich-k8s/apps/matrix/README.md

1.3 KiB
Raw Blame History

Components

element-web

  • Needs config: /app/config.json
  • Needs FQDN for HTTPS / nginx
  • Maybe limit the builtin webserver to localhost?
    • Configmap to /etc/nginx/conf.d/default.conf
    • Entrypoint nginx -g daemon offD

To add:

add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header Content-Security-Policy "frame-ancestors 'none'";

Missing

  • SMTP settings / secrets (ungleich mail + sops?)

admin user

docker exec -it synapse register_new_matrix_user http://localhost:8008 -c /data/homeserver.yaml --help

Usage

Element-Web

  • Includes config.json that is being populated by values.yaml
  • Includes nginx on port localhost:8080 (http)
  • Includes nginx proxy on port 80+443 (http redirect, https)

Synapse

  • homeserver.yaml is created from a ConfigMap in /config-ro
  • homeserver.yaml is edited using sed to add the postgres password and stored in /config/homeserver.yaml
  • Logging configured to stdout

Postgres

Tuned with --no-locale --encoding=UTF8 using POSTGRES_INITDB_ARGS (required by synapse).

See