|
|
@@ -45,6 +45,10 @@ spec:
|
|
|
mountPath: "/data/matrix.dezendorf.net.log.config"
|
|
|
subPath: "homeserver-log-config"
|
|
|
readOnly: no
|
|
|
+ - name: "matrix-homeserver-yaml"
|
|
|
+ mountPath: "/data/matrix.dezendorf.net.signing.key"
|
|
|
+ readOnly: no
|
|
|
+ subPath: "matrix-dezendorf-net-signing-key"
|
|
|
- name: "matrix-data-volume"
|
|
|
mountPath: "/data"
|
|
|
readOnly: no
|
|
|
@@ -224,6 +228,9 @@ metadata:
|
|
|
data:
|
|
|
homeserver-log: |
|
|
|
|
|
|
+ matrix-dezendorf-net-signing-key: |
|
|
|
+ ed25519 a_xHsH bCSbSZVaDAz5pgKweKO3nIgXK8PL5rOhfbWbwkh63kg
|
|
|
+
|
|
|
homeserver-yaml: |
|
|
|
# Configuration file for Synapse.
|
|
|
#
|
|
|
@@ -248,9 +255,14 @@ data:
|
|
|
- names: [client, federation]
|
|
|
compress: false
|
|
|
database:
|
|
|
- name: sqlite3
|
|
|
+ name: psycopg2
|
|
|
args:
|
|
|
- database: /data/homeserver.db
|
|
|
+ user: synapse_user
|
|
|
+ password: "Bee1701Charming1!"
|
|
|
+ dbname: synapse
|
|
|
+ host: postgres-mas
|
|
|
+ cp_min: 5
|
|
|
+ cp_max: 10
|
|
|
log_config: "/data/matrix.dezendorf.net.log.config"
|
|
|
media_store_path: /data/media_store
|
|
|
registration_shared_secret: "9.^i#+7YXwrC^bzKMqkenOZb;9ra6jV0zgZMvO:EBQ.CipL47k"
|
|
|
@@ -287,11 +299,11 @@ data:
|
|
|
issuer: https://matrix-auth.dezendorf.net
|
|
|
|
|
|
# Matches the `client_id` in the auth service config
|
|
|
- client_id: 01JNE805N1CE31RTW79FYC68VA
|
|
|
+ client_id: 01JNKPPJSBJR4X9DCM2F631H2E
|
|
|
# Matches the `client_auth_method` in the auth service config
|
|
|
client_auth_method: client_secret_basic
|
|
|
# Matches the `client_secret` in the auth service config
|
|
|
- client_secret: "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"
|
|
|
+ client_secret: "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"
|
|
|
|
|
|
# Matches the `matrix.secret` in the auth service config
|
|
|
admin_token: "yvuN4UMz6ZHWWp4WVNxWbBneWSlNLwYy"
|
|
|
@@ -443,17 +455,17 @@ data:
|
|
|
secret: yvuN4UMz6ZHWWp4WVNxWbBneWSlNLwYy
|
|
|
endpoint: https://matrix.dezendorf.net
|
|
|
clients:
|
|
|
- - client_id: 01JNE805N1CE31RTW79FYC68VA
|
|
|
+ - client_id: 01JNKPPJSBJR4X9DCM2F631H2E
|
|
|
client_auth_method: client_secret_basic
|
|
|
- client_secret: "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"
|
|
|
+ client_secret: "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"
|
|
|
upstream_oauth2:
|
|
|
providers:
|
|
|
- - id: 01JNE805N1CE31RTW79FYC68VA
|
|
|
+ - id: 01JNKPPJSBJR4X9DCM2F631H2E
|
|
|
human_name: Google
|
|
|
brand_name: "google"
|
|
|
issuer: "https://accounts.google.com"
|
|
|
- client_id: "743600892864-394ileehj9l1vfvvip3l3meqb0it6g50.apps.googleusercontent.com"
|
|
|
- client_secret: "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"
|
|
|
+ client_id: "743600892864-giudqeu3spf1h8mp7cblv13ticm1v1pq.apps.googleusercontent.com"
|
|
|
+ client_secret: "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"
|
|
|
token_endpoint_auth_method: client_secret_post
|
|
|
scope: "openid profile email"
|
|
|
claims_imports:
|
