syncapi.yaml

---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/common-3.0.1/charts/library/common/values.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: matrix-sliding-sync
  namespace: social
spec:
  releaseName: matrix-sliding-sync
  interval: 15m
  chart:
    spec:
      # renovate: registryUrl=https://bjw-s.github.io/helm-charts
      chart: app-template
      version: 3.6.0
      interval: 15m
      sourceRef:
        kind: HelmRepository
        name: bjw-s-helm-charts
        namespace: flux-system
  values:
    defaultPodOptions:
      tolerations:
      - key: "arm"
        operator: "Exists"
    controllers:
      main:
        strategy: Recreate
        initContainers:
          init-db:
            image:
              repository: ghcr.io/onedr0p/postgres-init
              tag: 16.6
            env:
              INIT_POSTGRES_DBNAME: syncv3
              INIT_POSTGRES_HOST: dendrite-psql-v16-rw.default.svc.cluster.local
              INIT_POSTGRES_SUPER_PASS: ${SECRET_CNPG_SUPER_PASS}
              INIT_POSTGRES_USER: dendrite
              INIT_POSTGRES_PASS: ${SECRET_DENDRITE_POSTGRES_PASSWORD}
        containers:
          main:
            image:
              repository: ghcr.io/matrix-org/sliding-sync
              pullPolicy: IfNotPresent
              tag: v0.99.19@sha256:b940cab564355b15a604d5522d9db3615f889d8e9870989d8f17e189aecb4c18
            env:
              TZ: America/Chicago
              SYNCV3_SERVER: "https://dendrite.${SECRET_DOMAIN}"
              SYNCV3_DB: postgresql://dendrite:${SECRET_DENDRITE_POSTGRES_PASSWORD}@dendrite-psql-v16-rw.default.svc/syncv3?sslmode=disable
              SYNCV3_SECRET: ${SECRET_SYNCV3_SECRET}
    service:
      main:
        controller: main
        ports:
          http:
            port: 8008
    ingress:
      main:
        enabled: true
        annotations:
          kubernetes.io/tls-acme: "true"
          cert-manager.io/cluster-issuer: letsencrypt-prod
        hosts:
          - host: syncv3.${SECRET_DOMAIN}
            paths:
              - path: /
                pathType: Prefix
                service:
                  identifier: main
                  port: http
        className: nginx-external