273 lines
6.8 KiB
YAML
273 lines
6.8 KiB
YAML
init:
|
|
version: 0
|
|
namespace: "bases"
|
|
|
|
commons:
|
|
# -- masterPassword to generate secrets
|
|
# @section -- Commons
|
|
masterPassword: "CHANGEME"
|
|
|
|
auth:
|
|
# -- default auth.(.Values.commons.ingress.domain)
|
|
# @section -- Commons
|
|
host:
|
|
|
|
theme:
|
|
# -- title everywhere
|
|
# @section -- Commons theme
|
|
title: myCloud
|
|
# -- logo everywhere
|
|
# @section -- Commons theme
|
|
logo: /static/dist/assets/icons/icon_left_brand.svg
|
|
# -- favicon everywhere
|
|
# @section -- Commons theme
|
|
favicon: /static/dist/assets/icons/icon.png
|
|
|
|
mail:
|
|
# -- smtp server
|
|
# @section -- Commons mail
|
|
host:
|
|
# -- smtp username
|
|
# @section -- Commons mail
|
|
username:
|
|
# -- smtp password
|
|
# @section -- Commons mail
|
|
password:
|
|
# -- send from address
|
|
# @section -- Commons mail
|
|
from:
|
|
# -- smtp server use start tls
|
|
# @section -- Commons mail
|
|
use_tls: false
|
|
# -- smtp server use ssl
|
|
# @section -- Commons mail
|
|
use_ssl: false
|
|
|
|
persistence:
|
|
# -- storageClass of PVC
|
|
# @section -- Commons Persistence
|
|
storageClass:
|
|
hostPath:
|
|
# -- use hostPath instatt of PVC
|
|
# @section -- Commons Persistence
|
|
enabled: false
|
|
# -- use hostPath under the following path
|
|
# @section -- Commons Persistence
|
|
prefix: "/var/lib/mycloud"
|
|
|
|
helm:
|
|
release:
|
|
# -- install of FluxCD HelmRelease
|
|
# @section -- Commons helm release
|
|
install: {}
|
|
# -- test of FluxCD HelmRelease
|
|
# @section -- Commons helm release
|
|
test: {}
|
|
# -- upgrade of FluxCD HelmRelease
|
|
# @section -- Commons helm release
|
|
upgrade: {}
|
|
# -- driftDetection of FluxCD HelmRelease
|
|
# @section -- Commons helm release
|
|
driftDetection: {}
|
|
|
|
ingress:
|
|
# -- top domain for all services
|
|
# @section -- Commons Ingress
|
|
domain: "wrenix.eu"
|
|
# -- annotations for all ingress objects
|
|
# @section -- Commons Ingress
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
tls:
|
|
# -- tls on every ingress
|
|
# @section -- Commons Ingress
|
|
enabled: true
|
|
# -- use own definition of tls (e.g. for own or wildcard certificate)
|
|
# @section -- Commons Ingress
|
|
override: []
|
|
|
|
networkpolicies:
|
|
enabled: false
|
|
from:
|
|
ingress: []
|
|
metrics: []
|
|
to:
|
|
dns: []
|
|
smtp: []
|
|
matrix: []
|
|
|
|
prometheus:
|
|
monitor:
|
|
# -- labels on Pod- and Service-Monitor
|
|
# @section -- Commons Monitoring
|
|
labels: {}
|
|
rules:
|
|
# -- labels on PrometheusRules
|
|
# @section -- Commons Monitoring
|
|
labels: {}
|
|
|
|
grafana:
|
|
dashboards:
|
|
# -- labels of grafana dashboard configmap
|
|
# @section -- Commons Monitoring
|
|
labels:
|
|
grafana_dashboard: "1"
|
|
# -- annotations of grafana dashboard configmap
|
|
# @section -- Commons Monitoring
|
|
annotations:
|
|
|
|
tracing:
|
|
# -- enable tracing on all components
|
|
# @section -- Commons Tracing
|
|
enabled: false
|
|
http:
|
|
# -- http endpoint
|
|
# @section -- Commons Tracing
|
|
endpoint: "http://tempo.monitoring.svc:4318/v1/traces"
|
|
grpc:
|
|
# -- prefer grpc over http
|
|
# @section -- Commons Tracing
|
|
enabled: true
|
|
# -- allow insecure connection per grpc
|
|
# @section -- Commons Tracing
|
|
insecure: true
|
|
# -- grpc endpoint
|
|
# @section -- Commons Tracing
|
|
endpoint: "tempo.monitoring.svc:4317"
|
|
|
|
server:
|
|
# -- default: (commons.ingress.domain)
|
|
host:
|
|
software: "synapse"
|
|
scaling: false
|
|
slidingSync:
|
|
enabled: false
|
|
authenticationService:
|
|
enabled: false
|
|
admins: []
|
|
|
|
auth:
|
|
# -- generated by .commons.masterPassword
|
|
clientID:
|
|
# -- generated by .commons.masterPassword
|
|
clientSecret:
|
|
# -- default: element.(.commons.ingress.domain)
|
|
webClient:
|
|
|
|
mail:
|
|
# -- generade by .commons.mail.from
|
|
from:
|
|
# -- default .commons.mail.host
|
|
host:
|
|
|
|
bridge:
|
|
signal:
|
|
enabled: false
|
|
admins: []
|
|
slack:
|
|
enabled: false
|
|
admins: []
|
|
|
|
livekit:
|
|
# -- deploy livekit for usage with element-call
|
|
enabled: false
|
|
# -- key for api (kind of username)
|
|
key: dev
|
|
# -- secret for api a kind of password (default: generated by .commons.masterPassword)
|
|
secret:
|
|
|
|
ingress:
|
|
server:
|
|
# -- default: matrix.(.commons.ingress.domain)
|
|
host:
|
|
annotations: {}
|
|
wellknown:
|
|
client:
|
|
m.tile_server:
|
|
map_style_url: "https://api.maptiler.com/maps/streets/style.json?key=fU3vlMsMn4Jb6dnEIFsx"
|
|
slidingSync:
|
|
# -- default: sliding.matrix.(.commons.ingress.domain)
|
|
host:
|
|
annotations: {}
|
|
authenticationService:
|
|
# -- default: auth.matrix.(.commons.ingress.domain)
|
|
host:
|
|
annotations: {}
|
|
element:
|
|
enabled: true
|
|
# -- default: element.(.commons.ingress.domain)
|
|
host:
|
|
annotations: {}
|
|
config:
|
|
features:
|
|
feature_notifications: true
|
|
feature_new_room_decoration_ui: true
|
|
feature_location_share_live: true
|
|
hydrogen:
|
|
enabled: false
|
|
# -- default: hydrogen.(.commons.ingress.domain)
|
|
host:
|
|
annotations: {}
|
|
livekit:
|
|
enabled: false
|
|
# -- default: sfu.call.(.commons.ingress.domain)
|
|
host:
|
|
annotations: {}
|
|
elementCall:
|
|
# -- deploy element-call
|
|
enabled: false
|
|
# -- default: call.(.commons.ingress.domain)
|
|
host:
|
|
annotations: {}
|
|
livekitJWT:
|
|
# -- default: call.(.commons.ingress.domain)
|
|
host:
|
|
livekit:
|
|
# -- default: .ingress.livekit.host
|
|
host:
|
|
# -- default: .livekit.key
|
|
key:
|
|
# -- default: .livekit.secret
|
|
secret:
|
|
|
|
databases:
|
|
server:
|
|
# -- default is from mycloud-services
|
|
host: mycloud-services-postgresql
|
|
name: matrix-synapse
|
|
username: matrix-synapse
|
|
# -- generated by .commons.masterPassword (equal to mycloud-services)
|
|
password:
|
|
slidingSync:
|
|
# -- default is from mycloud-services
|
|
host: mycloud-services-postgresql
|
|
name: matrix-sliding-sync
|
|
username: matrix-sliding-sync
|
|
# -- generated by .commons.masterPassword (equal to mycloud-services)
|
|
password:
|
|
authenticationService:
|
|
# -- default is from mycloud-services
|
|
host: mycloud-services-postgresql
|
|
name: matrix-authentication-service
|
|
username: matrix-authentication-service
|
|
# -- generated by .commons.masterPassword (equal to mycloud-services)
|
|
password:
|
|
bridge:
|
|
signal:
|
|
# -- default is from mycloud-services
|
|
host: mycloud-services-postgresql
|
|
name: matrix-bridge-signal
|
|
username: matrix-bridge-signal
|
|
# -- generated by .commons.masterPassword (equal to mycloud-services)
|
|
password:
|
|
slack:
|
|
# -- default is from mycloud-services
|
|
host: mycloud-services-postgresql
|
|
name: matrix-bridge-slack
|
|
username: matrix-bridge-slack
|
|
# -- generated by .commons.masterPassword (equal to mycloud-services)
|
|
password:
|
|
|
|
persistence:
|
|
storageClass:
|
|
size: 16Gi
|