| Giorgi Lekveishvili | e009a5d | 2024-01-05 14:10:11 +0400 | [diff] [blame] | 1 | input: { |
| 2 | network: #Network |
| 3 | subdomain: string |
| 4 | } |
| 5 | |
| 6 | _domain: "\(input.subdomain).\(input.network.domain)" |
| 7 | |
| Giorgi Lekveishvili | ef21c13 | 2024-01-17 18:57:58 +0400 | [diff] [blame^] | 8 | name: "Matrix" |
| 9 | namespace: "app-matrix" |
| Giorgi Lekveishvili | e009a5d | 2024-01-05 14:10:11 +0400 | [diff] [blame] | 10 | readme: "matrix application will be installed on \(input.network.name) network and be accessible to any user on https://\(_domain)" |
| Giorgi Lekveishvili | ef21c13 | 2024-01-17 18:57:58 +0400 | [diff] [blame^] | 11 | description: "An open network for secure, decentralised communication" |
| 12 | icon: "<svg xmlns='http://www.w3.org/2000/svg' width='50' height='50' viewBox='0 0 24 24'><path fill='currentColor' d='M.632.55v22.9H2.28V24H0V0h2.28v.55zm7.043 7.26v1.157h.033a3.312 3.312 0 0 1 1.117-1.024c.433-.245.936-.365 1.5-.365c.54 0 1.033.107 1.481.314c.448.208.785.582 1.02 1.108c.254-.374.6-.706 1.034-.992c.434-.287.95-.43 1.546-.43c.453 0 .872.056 1.26.167c.388.11.716.286.993.53c.276.245.489.559.646.951c.152.392.23.863.23 1.417v5.728h-2.349V11.52c0-.286-.01-.559-.032-.812a1.755 1.755 0 0 0-.18-.66a1.106 1.106 0 0 0-.438-.448c-.194-.11-.457-.166-.785-.166c-.332 0-.6.064-.803.189a1.38 1.38 0 0 0-.48.499a1.946 1.946 0 0 0-.231.696a5.56 5.56 0 0 0-.06.785v4.768h-2.35v-4.8c0-.254-.004-.503-.018-.752a2.074 2.074 0 0 0-.143-.688a1.052 1.052 0 0 0-.415-.503c-.194-.125-.476-.19-.854-.19c-.111 0-.259.024-.439.074c-.18.051-.36.143-.53.282a1.637 1.637 0 0 0-.439.595c-.12.259-.18.6-.18 1.02v4.966H5.46V7.81zm15.693 15.64V.55H21.72V0H24v24h-2.28v-.55z'/></svg>" |
| Giorgi Lekveishvili | e009a5d | 2024-01-05 14:10:11 +0400 | [diff] [blame] | 13 | |
| 14 | images: { |
| 15 | matrix: { |
| 16 | repository: "matrixdotorg" |
| 17 | name: "synapse" |
| 18 | tag: "latest" |
| 19 | pullPolicy: "IfNotPresent" |
| 20 | } |
| 21 | postgres: { |
| 22 | repository: "library" |
| 23 | name: "postgres" |
| 24 | tag: "15.3" |
| 25 | pullPolicy: "IfNotPresent" |
| 26 | } |
| 27 | } |
| 28 | |
| 29 | charts: { |
| 30 | matrix: { |
| 31 | chart: "charts/matrix" |
| 32 | sourceRef: { |
| 33 | kind: "GitRepository" |
| 34 | name: "pcloud" |
| 35 | namespace: global.id |
| 36 | } |
| 37 | } |
| 38 | postgres: { |
| 39 | chart: "charts/postgresql" |
| 40 | sourceRef: { |
| 41 | kind: "GitRepository" |
| 42 | name: "pcloud" |
| 43 | namespace: global.id |
| 44 | } |
| 45 | } |
| 46 | } |
| 47 | |
| 48 | helm: { |
| 49 | matrix: { |
| 50 | dependsOn: [ |
| 51 | postgres |
| 52 | ] |
| 53 | chart: charts.matrix |
| 54 | values: { |
| 55 | domain: global.domain |
| 56 | subdomain: input.subdomain |
| 57 | oauth2: { |
| 58 | hydraAdmin: "http://hydra-admin.\(global.namespacePrefix)core-auth.svc.cluster.local" |
| 59 | hydraPublic: "https://hydra.\(global.domain)" |
| 60 | secretName: "oauth2-client" |
| 61 | } |
| 62 | postgresql: { |
| 63 | host: "postgres" |
| 64 | port: 5432 |
| 65 | database: "matrix" |
| 66 | user: "matrix" |
| 67 | password: "matrix" |
| 68 | } |
| 69 | certificateIssuer: _issuerPublic |
| 70 | ingressClassName: _ingressPublic |
| 71 | configMerge: { |
| 72 | configName: "config-to-merge" |
| 73 | fileName: "to-merge.yaml" |
| 74 | } |
| 75 | image: { |
| 76 | repository: images.matrix.fullName |
| 77 | tag: images.matrix.tag |
| 78 | pullPolicy: images.matrix.pullPolicy |
| 79 | } |
| 80 | } |
| 81 | } |
| 82 | postgres: { |
| 83 | chart: charts.postgres |
| 84 | values: { |
| 85 | fullnameOverride: "postgres" |
| 86 | image: { |
| 87 | registry: images.postgres.registry |
| 88 | repository: images.postgres.imageName |
| 89 | tag: images.postgres.tag |
| 90 | pullPolicy: images.postgres.pullPolicy |
| 91 | } |
| 92 | service: { |
| 93 | type: "ClusterIP" |
| 94 | port: 5432 |
| 95 | } |
| 96 | primary: { |
| 97 | initdb: { |
| 98 | scripts: { |
| 99 | "init.sql": """ |
| 100 | CREATE USER matrix WITH PASSWORD 'matrix'; |
| 101 | CREATE DATABASE matrix WITH OWNER = matrix ENCODING = UTF8 LOCALE = 'C' TEMPLATE = template0; |
| 102 | """ |
| 103 | } |
| 104 | } |
| 105 | persistence: { |
| 106 | size: "10Gi" |
| 107 | } |
| 108 | securityContext: { |
| 109 | enabled: true |
| 110 | fsGroup: 0 |
| 111 | } |
| 112 | containerSecurityContext: { |
| 113 | enabled: true |
| 114 | runAsUser: 0 |
| 115 | } |
| 116 | } |
| 117 | volumePermissions: { |
| 118 | securityContext: { |
| 119 | runAsUser: 0 |
| 120 | } |
| 121 | } |
| 122 | } |
| 123 | } |
| 124 | } |