From e37c1f9057ed986ac50b86463a4dbe6bf5d77f02 Mon Sep 17 00:00:00 2001 From: Quentin Dufour Date: Thu, 25 Aug 2022 01:02:16 +0200 Subject: Deploy Matrix --- cluster/prod/app/matrix/secrets/chat/coturn/static-auth | 1 + cluster/prod/app/matrix/secrets/chat/coturn/static_auth_secret_zinzdev | 1 + cluster/prod/app/matrix/secrets/chat/easybridge/as_token | 1 + cluster/prod/app/matrix/secrets/chat/easybridge/db_pass | 1 + cluster/prod/app/matrix/secrets/chat/easybridge/db_user | 1 + cluster/prod/app/matrix/secrets/chat/easybridge/hs_token | 1 + cluster/prod/app/matrix/secrets/chat/easybridge/web_session_key | 2 ++ cluster/prod/app/matrix/secrets/chat/fb2mx/as_token | 1 + cluster/prod/app/matrix/secrets/chat/fb2mx/db_url | 1 + cluster/prod/app/matrix/secrets/chat/fb2mx/hs_token | 1 + cluster/prod/app/matrix/secrets/chat/synapse/homeserver.signing.key | 1 + cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.crt | 1 + cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.dh | 1 + cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.key | 1 + cluster/prod/app/matrix/secrets/chat/synapse/ldap_binddn | 1 + cluster/prod/app/matrix/secrets/chat/synapse/ldap_bindpw | 1 + cluster/prod/app/matrix/secrets/chat/synapse/postgres_db | 1 + cluster/prod/app/matrix/secrets/chat/synapse/postgres_pwd | 1 + cluster/prod/app/matrix/secrets/chat/synapse/postgres_user | 1 + cluster/prod/app/matrix/secrets/chat/synapse/registration_shared_secret | 1 + cluster/prod/app/matrix/secrets/chat/synapse/s3_access_key | 1 + cluster/prod/app/matrix/secrets/chat/synapse/s3_secret_key | 1 + 22 files changed, 23 insertions(+) create mode 100644 cluster/prod/app/matrix/secrets/chat/coturn/static-auth create mode 100644 cluster/prod/app/matrix/secrets/chat/coturn/static_auth_secret_zinzdev create mode 100644 cluster/prod/app/matrix/secrets/chat/easybridge/as_token create mode 100644 cluster/prod/app/matrix/secrets/chat/easybridge/db_pass create mode 100644 cluster/prod/app/matrix/secrets/chat/easybridge/db_user create mode 100644 cluster/prod/app/matrix/secrets/chat/easybridge/hs_token create mode 100644 cluster/prod/app/matrix/secrets/chat/easybridge/web_session_key create mode 100644 cluster/prod/app/matrix/secrets/chat/fb2mx/as_token create mode 100644 cluster/prod/app/matrix/secrets/chat/fb2mx/db_url create mode 100644 cluster/prod/app/matrix/secrets/chat/fb2mx/hs_token create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/homeserver.signing.key create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.crt create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.dh create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.key create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/ldap_binddn create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/ldap_bindpw create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/postgres_db create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/postgres_pwd create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/postgres_user create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/registration_shared_secret create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/s3_access_key create mode 100644 cluster/prod/app/matrix/secrets/chat/synapse/s3_secret_key (limited to 'cluster/prod/app/matrix/secrets') diff --git a/cluster/prod/app/matrix/secrets/chat/coturn/static-auth b/cluster/prod/app/matrix/secrets/chat/coturn/static-auth new file mode 100644 index 0000000..43628ef --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/coturn/static-auth @@ -0,0 +1 @@ +USER coturn static-auth (what is this?) diff --git a/cluster/prod/app/matrix/secrets/chat/coturn/static_auth_secret_zinzdev b/cluster/prod/app/matrix/secrets/chat/coturn/static_auth_secret_zinzdev new file mode 100644 index 0000000..c61486d --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/coturn/static_auth_secret_zinzdev @@ -0,0 +1 @@ +USER Serveur coturn (TURN/STUN) d'Adrien, c'est un jeton d'identification. \ No newline at end of file diff --git a/cluster/prod/app/matrix/secrets/chat/easybridge/as_token b/cluster/prod/app/matrix/secrets/chat/easybridge/as_token new file mode 100644 index 0000000..5fa4e3c --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/easybridge/as_token @@ -0,0 +1 @@ +CMD openssl rand -hex 32 diff --git a/cluster/prod/app/matrix/secrets/chat/easybridge/db_pass b/cluster/prod/app/matrix/secrets/chat/easybridge/db_pass new file mode 100644 index 0000000..7e1f94b --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/easybridge/db_pass @@ -0,0 +1 @@ +SERVICE_PASSWORD easybridge diff --git a/cluster/prod/app/matrix/secrets/chat/easybridge/db_user b/cluster/prod/app/matrix/secrets/chat/easybridge/db_user new file mode 100644 index 0000000..436267c --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/easybridge/db_user @@ -0,0 +1 @@ +CONST easybridge diff --git a/cluster/prod/app/matrix/secrets/chat/easybridge/hs_token b/cluster/prod/app/matrix/secrets/chat/easybridge/hs_token new file mode 100644 index 0000000..5fa4e3c --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/easybridge/hs_token @@ -0,0 +1 @@ +CMD openssl rand -hex 32 diff --git a/cluster/prod/app/matrix/secrets/chat/easybridge/web_session_key b/cluster/prod/app/matrix/secrets/chat/easybridge/web_session_key new file mode 100644 index 0000000..614bed7 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/easybridge/web_session_key @@ -0,0 +1,2 @@ +CMD openssl rand -hex 32 + diff --git a/cluster/prod/app/matrix/secrets/chat/fb2mx/as_token b/cluster/prod/app/matrix/secrets/chat/fb2mx/as_token new file mode 100644 index 0000000..5fa4e3c --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/fb2mx/as_token @@ -0,0 +1 @@ +CMD openssl rand -hex 32 diff --git a/cluster/prod/app/matrix/secrets/chat/fb2mx/db_url b/cluster/prod/app/matrix/secrets/chat/fb2mx/db_url new file mode 100644 index 0000000..f06e265 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/fb2mx/db_url @@ -0,0 +1 @@ +USER fb2mx database URL, format: postgres://username:password@hostname/dbname diff --git a/cluster/prod/app/matrix/secrets/chat/fb2mx/hs_token b/cluster/prod/app/matrix/secrets/chat/fb2mx/hs_token new file mode 100644 index 0000000..5fa4e3c --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/fb2mx/hs_token @@ -0,0 +1 @@ +CMD openssl rand -hex 32 diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.signing.key b/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.signing.key new file mode 100644 index 0000000..099bd18 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.signing.key @@ -0,0 +1 @@ +USER Synapse homeserver ed25519 signing key diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.crt b/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.crt new file mode 100644 index 0000000..b696093 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.crt @@ -0,0 +1 @@ +SSL_CERT synapse im.deuxfleurs.fr diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.dh b/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.dh new file mode 100644 index 0000000..0231fed --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.dh @@ -0,0 +1 @@ +USER_LONG DH parameters for matrix ssl key? how does this work? diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.key b/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.key new file mode 100644 index 0000000..feee544 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/homeserver.tls.key @@ -0,0 +1 @@ +SSL_KEY synapse im.deuxfleurs.fr diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/ldap_binddn b/cluster/prod/app/matrix/secrets/chat/synapse/ldap_binddn new file mode 100644 index 0000000..2631bef --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/ldap_binddn @@ -0,0 +1 @@ +SERVICE_DN matrix Matrix chat server diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/ldap_bindpw b/cluster/prod/app/matrix/secrets/chat/synapse/ldap_bindpw new file mode 100644 index 0000000..ba07446 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/ldap_bindpw @@ -0,0 +1 @@ +SERVICE_PASSWORD matrix diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/postgres_db b/cluster/prod/app/matrix/secrets/chat/synapse/postgres_db new file mode 100644 index 0000000..74eefa7 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/postgres_db @@ -0,0 +1 @@ +CONST synapse diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/postgres_pwd b/cluster/prod/app/matrix/secrets/chat/synapse/postgres_pwd new file mode 100644 index 0000000..ba07446 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/postgres_pwd @@ -0,0 +1 @@ +SERVICE_PASSWORD matrix diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/postgres_user b/cluster/prod/app/matrix/secrets/chat/synapse/postgres_user new file mode 100644 index 0000000..b08e86a --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/postgres_user @@ -0,0 +1 @@ +CONST matrix diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/registration_shared_secret b/cluster/prod/app/matrix/secrets/chat/synapse/registration_shared_secret new file mode 100644 index 0000000..b82f191 --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/registration_shared_secret @@ -0,0 +1 @@ +CMD head -c 32 /dev/urandom | base64 diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/s3_access_key b/cluster/prod/app/matrix/secrets/chat/synapse/s3_access_key new file mode 100644 index 0000000..ab09a8e --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/s3_access_key @@ -0,0 +1 @@ +USER matrix diff --git a/cluster/prod/app/matrix/secrets/chat/synapse/s3_secret_key b/cluster/prod/app/matrix/secrets/chat/synapse/s3_secret_key new file mode 100644 index 0000000..ab09a8e --- /dev/null +++ b/cluster/prod/app/matrix/secrets/chat/synapse/s3_secret_key @@ -0,0 +1 @@ +USER matrix -- cgit v1.2.3