--- # Note: This chart is released using the config.sample.yml file # # -- Number of replicas to deploy. Consequences of using multiple Hookshot replicas currently unknown. replicaCount: 1 image: # -- Repository to pull hookshot image from repository: halfshot/matrix-hookshot # -- Pull policy for Hookshot image pullPolicy: IfNotPresent # -- Image tag to pull. Defaults to chart's appVersion value as set in Chart.yaml tag: # -- List of names of k8s secrets to be used as ImagePullSecrets for the pod imagePullSecrets: [] # -- Name override for helm chart nameOverride: "" # -- Full name override for helm chart fullnameOverride: "" serviceAccount: # -- Specifies whether a service account should be created create: true # -- Annotations to add to the service account annotations: {} # -- The name of the service account to use. If not set and create is true, a name is generated using the fullname template name: "" # -- Extra annotations for Hookshot pod podAnnotations: {} # -- Pod security context settings podSecurityContext: {} # fsGroup: 2000 # -- Security context settings securityContext: {} # capabilities: # drop: # - ALL # readOnlyRootFilesystem: true # runAsNonRoot: true # runAsUser: 1000 service: # -- Service type for Hookshot service type: ClusterIP # -- Port for Hookshot service port: 80 # -- Extra annotations for service annotations: {} # -- Extra labels for service labels: {} webhook: # -- Webhook port as configured in container port: 9000 metrics: # -- Metrics port as configured in container port: 9001 appservice: # -- Appservice port as configured in container port: 9002 ingress: webhook: # -- Enable ingress for webhook enabled: false # -- Ingress class name for webhook ingress className: "" # -- Annotations for webhook ingress annotations: {} # -- Host configuration for webhook ingress hosts: [] # -- TLS configuration for webhook ingress tls: [] appservice: # -- Enable ingress for appservice enabled: false # -- Ingress class name for appservice ingress className: "" # -- Annotations for appservice ingress annotations: {} # -- Host configuration for appservice ingress hosts: [] # -- TLS configuration for appservice ingress tls: [] # -- Pod resource requests / limits resources: {} # We usually recommend not to specify default resources and to leave this as a conscious # choice for the user. This also increases chances charts run on environments with little # resources, such as Minikube. If you do want to specify resources, uncomment the following # lines, adjust them as necessary, and remove the curly braces after 'resources:'. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi autoscaling: enabled: false # -- Node selector parameters nodeSelector: {} # -- Tolerations for deployment tolerations: [] # -- Affinity settings for deployment affinity: {} hookshot: # -- Name of existing ConfigMap with valid Hookshot configuration existingConfigMap: # -- Raw Hookshot configuration. Gets templated into a YAML file and then loaded unless an existingConfigMap is specified. config: # This is an example configuration file bridge: # Basic homeserver configuration domain: matrix-lp.allarddcs.nl url: http://matrix-lp:8008 mediaUrl: https://matrix-lp.allarddcs.nl port: 9993 bindAddress: 127.0.0.1 passFile: passkey.pem # A passkey used to encrypt tokens stored inside the bridge. # Run openssl genpkey -out passkey.pem -outform PEM -algorithm RSA -pkeyopt rsa_keygen_bits:4096 to generate logging: # Logging settings. You can have a severity debug,info,warn,error level: info colorize: true json: false timestampFormat: HH:mm:ss:SSS listeners: # HTTP Listener configuration. # Bind resource endpoints to ports and addresses. # 'port' must be specified. Each listener must listen on a unique port. # 'bindAddress' will default to '127.0.0.1' if not specified, which may not be suited to Docker environments. # 'resources' may be any of webhooks, widgets, metrics, provisioning - port: 9000 bindAddress: 0.0.0.0 resources: - webhooks - port: 9001 bindAddress: 127.0.0.1 resources: - metrics - provisioning - port: 9002 bindAddress: 0.0.0.0 resources: - widgets registration: generic: # # (Optional) Support for generic webhook events. # #'allowJsTransformationFunctions' will allow users to write short transformation snippets in code, and thus is unsafe in untrusted environments enabled: true # enableHttpGet: false urlPrefix: https://hookshot-lp.allarddcs.nl # userIdPrefix: _webhooks_ # allowJsTransformationFunctions: false # waitForComplete: false #feeds: # # (Optional) Configure this to enable RSS/Atom feed support # enabled: false # pollConcurrency: 4 # pollIntervalSeconds: 600 # pollTimeoutSeconds: 30 #provisioning: # # (Optional) Provisioning API for integration managers # secret: "!secretToken" #bot: # # (Optional) Define profile information for the bot user # displayname: Hookshot Bot # avatar: mxc://half-shot.uk/2876e89ccade4cb615e210c458e2a7a6883fe17d #serviceBots: # # (Optional) Define additional bot users for specific services # - localpart: feeds # displayname: Feeds # avatar: ./assets/feeds_avatar.png # prefix: "!feeds" # service: feeds #metrics: # # (Optional) Prometheus metrics support # enabled: true #cache: # # (Optional) Cache options for large scale deployments. # # For encryption to work, this must be configured. # redisUri: redis://localhost:6379 #queue: # # (Optional) Message queue configuration options for large scale deployments. # # For encryption to work, this must not be configured. # redisUri: redis://localhost:6379 #widgets: # # (Optional) EXPERIMENTAL support for complimentary widgets # addToAdminRooms: false # disallowedIpRanges: # - 127.0.0.0/8 # - 10.0.0.0/8 # - 172.16.0.0/12 # - 192.168.0.0/16 # - 100.64.0.0/10 # - 192.0.0.0/24 # - 169.254.0.0/16 # - 192.88.99.0/24 # - 198.18.0.0/15 # - 192.0.2.0/24 # - 198.51.100.0/24 # - 203.0.113.0/24 # - 224.0.0.0/4 # - ::1/128 # - fe80::/10 # - fc00::/7 # - 2001:db8::/32 # - ff00::/8 # - fec0::/10 # roomSetupWidget: # addOnInvite: false # publicUrl: https://example.com/widgetapi/v1/static/ # branding: # widgetTitle: Hookshot Configuration #sentry: # # (Optional) Configure Sentry error reporting # dsn: https://examplePublicKey@o0.ingest.sentry.io/0 # environment: production #permissions: # # (Optional) Permissions for using the bridge. See docs/setup.md#permissions for help # - actor: example.com # services: # - service: "*" # level: admin id: matrix-hookshot as_token: "" hs_token: "" namespaces: rooms: [] users: [] sender_localpart: hookshot url: "http://example.com" rate_limited: false passkey: ""