helm-release.yaml

---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: dendrite
  namespace: default
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://k8s-at-home.com/charts/
      chart: dendrite
      version: 6.3.0
      sourceRef:
        kind: HelmRepository
        name: k8s-at-home-charts
        namespace: flux-system
  values:
    image:
      repository: ghcr.io/matrix-org/dendrite-monolith
      tag: v0.9.3
      pullPolicy: IfNotPresent
    ingress:
      main:
        enabled: true
        ingressClassName: nginx
        annotations:
          cert-manager.io/cluster-issuer: zerossl-production
          external-dns.home.arpa/enabled: "true"
        hosts:
          - host: d.${SECRET_DOMAIN}
            paths:
              - path: /
                pathType: Prefix
              - path: /.well-known/matrix/server
                pathType: Prefix
              - path: /.well-known/matrix/client
                pathType: Prefix
          - host: dendrite.${SECRET_DOMAIN}
            paths:
              - path: /.well-known/matrix/server
                pathType: Prefix
              - path: /.well-known/matrix/client
                pathType: Prefix
          - host: ${SECRET_DOMAIN}
            paths:
              - path: /.well-known/matrix/
                pathType: Prefix
              - path: /.well-known/matrix/server
                pathType: Prefix
              - path: /.well-known/matrix/client
                pathType: Prefix
        tls:
          - secretName: dendrite-cert
            hosts:
              - dendrite.${SECRET_DOMAIN}
              - d.${SECRET_DOMAIN}
    persistence:
      media:
        enabled: true
        existingClaim: dendrite-media-pvc
      jetstream:
        enabled: true
        existingClaim: dendrite-jetstream-pvc
    dendrite:
      polylithEnabled: false
      matrix_key_secret:
        existingSecret: dendrite-matrix-key
      global:
        server_name: ${SECRET_DOMAIN}
        well_known_server_name: d.${SECRET_DOMAIN}:443
        well_known_client_name: https://d.${SECRET_DOMAIN}:443
        mscs:
          - msc2946
          - msc2444
        presence:
          enable_outbound: true
          enable_inbound: true
        database:
          connection_string: ${CONNECTION_STRING}
    clientapi:
      config:
        registration_disabled: false
        # registration_shared_secret: ${SECRET_DENDRITE_REGISTRATION_SECRET}
    podAnnotations:
      secret.reloader.stakater.com/reload: "dendrite-config"
    postgresql:
      enabled: false