kustomizations/matrix/element/deployment.yaml

@@ -35,9 +35,6 @@ spec:
             - mountPath: /var/run/pid
               name: ephemeral
               subPath: pid
-            - mountPath: /tmp
-              name: ephemeral
-              subPath: tmp
           readinessProbe:
             httpGet:
               path: /

kustomizations/matrix/element/kustomization.yaml

@@ -16,4 +16,4 @@ configMapGenerator:
       - files/default.conf
 images:
 - name: vectorim/element-web
-  newTag: v1.11.112@sha256:6e38aeb4d30c6e6fd06db85dc20b07facfdad2de0312f352a1c35d516cdf7367
+  newTag: v1.11.67@sha256:5dcccfdebc05852e835de3fbb36d34cd34de2776724f0c8c50167d5da382e8ae

kustomizations/matrix/kustomization.yaml

@@ -10,8 +10,8 @@ resources:
 - bridges/mautrix-telegram
 - ingress.yaml
 images:
-  - name: matrixdotorg/synapse
-    newTag: v1.137.0@sha256:3eb481f26665ce57a7a60d2efc472568ebaeb71a9d01c489c883dccd78526152
+  - name: matrixdotdog/synapse
+    newTag: v1.98.0@sha256:8d962e48a1d88d2fb646c82b1babf4dd0ed765b21a4cf15600d77e90e46dc413
   - name: coturn/coturn
     newTag: 4.6.2@sha256:9a5d44d1aebf28f1a96de4595bbab3eadc1ebd6bda705ca040df907f353f9fb2
   - name: dock.mau.dev/mautrix/slack

kustomizations/matrix/synapse/config-secrets.enc.yaml

@@ -4,7 +4,7 @@ metadata:
     name: config
 type: Opaque
 stringData:
-    homeserver.yaml: ENC[AES256_GCM,data:nw5i5StYk6zi2fel+31NIPTcbvsqmyFSwDOuuqAdQJCLahjNWK0OZtpFk47l5pex/25quaYLSP3c8So189rnvqNLPXdb2ux42hu88OAxs2vrkOKqOtFGZsHZEwYj4x/2LR0teLZMwfqqtZNIlgLD6RL/6mmcxKvQ9+Tme/xRfDxh3YUoakePjZv8aF8Z+SF7VA9XXZwuDiSTkK1vmnkBoEUPVjhu3QvT8YGDmwis+VZV7iCoMwIuV11Fvw7a/ntXjf9UV+NCOkP0Koyhz3Iz0nmZjy+Lq88SunMgxwTK1OWh9/aTKOF3D8j7W/yUI9TgscYHbz+prQkAkIFlnmR3Eu+YEJRxRcKLLWkJTX1R/r7X9xq5h5cc/aX/mvyxgupBkgYTq0xNHxwgdc+Dc6tdiH0vji4QeygQm0QonYDQOvn5/fN2Rs5yggIq2X8kc/Z6TfkmCUb1rQ34JXSmvQVgoJM15oaN5q0N/5F5EYDuXjQ0zJfSd3trWikvE9hdM4ZJqKaHc/cNcUhmse9Q35vPY12TDjp8j0rJPadTSVFwg+G0V/i5PzwH7VgCStvkRu9KqVc9E8BCMk3xz19TSVV/64ipQnRbtEgqyqk9WEwm3RIwn4Ge9Tj3hVCSqtIRdJQdD9aNtfKBofyqnqt5uXPkHSeRBbk8FQ6T0n3wY6CFtCAxULmmxfooMbPlQV9+TRIv53DbY0+j4TsYdwsasrFGSx3nKqtaZP9XJOpuSfpe/Pf/z6zfpJgGsxurY2q+iUe13jVfqUj8UZq0zHPD4nzEAUVtGHQ9whulIyvrIoSeCghAXIXieOioIOHMxEf4ndLoq0kfpo9AuasHZU9g/ur1PlVfDKtNTnv+ouVjvNfrXoVVOoVJr6+pPW3y5N1eTv9TZRuAlGw1cLfam+xeHFfwSt1zABPgTeq4YMonisiAhNaoJk5PrRqUzx053nxkuHEKinkKV5AqFco0CzfE4bsKZBD0rG5HgeVG8HbTPU8D4egaoBssLKZbehCoyY8hAEDqZKmfR8gAIlv9Vad+B22Or13NPBvkgiFYCBfAkMHI8DzrX+rIDfmHLfhcRBhZycxtk/ccTD4n9HZZkMlOeFO/cY7slaiycgqeJScRJOcEwM6AFXum740Mazv8wINvc5vJ6XzhxOMWzz8VhoJWDCuq6Nmz8cPvAck6Zs/BJD4PygJRc11ELTh9d6bjlg49Zl8AnX+bOMCZ6OyX8Z+vSZyro2eUzBJFjUI9vbctEHCtUyEdRUxS7lp8P8FeKk5rax6s6D1arSF8jA5byhvk07ppXZz6r7k3U5W9YmfVCEeGiW1RrdlJCejnlQ0x237FSRrAgrutP5Np3JaGHQOMDcC1QiLk11y+P7elAI6RQAa+cVZR3WiVjPCgw7xaqp5hp2sUFvUKqXF3,iv:Ck6LL0DwSJOGN3rGFFeDAT0HCiykrfa4QU0LS9eeIss=,tag:O0AzdpZB3NclQXxmW1x+Ew==,type:str]
+    homeserver.yaml: ENC[AES256_GCM,data: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,iv:QemGZaVH7IHvLdTjhr+R7FMyuJlGk9UsZMn5aILwwNg=,tag:N3dCm2v044ZrOgPjWSrjuw==,type:str]
     mautrix-slack-bridge.yaml: ENC[AES256_GCM,data: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,iv:GyV3W2Rl+0T3pwrV1/Qv3OV4gYb8btnHMu340brhEcw=,tag:xRywHK6w5TfUdZTfS9XYhw==,type:str]
     mautrix-telegram-bridge.yaml: ENC[AES256_GCM,data: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,iv:7PhPWul/rDWEJB5ecn0myPMwbC6akihS0xZEvyeEB9s=,tag:TMAusZ7EneDQgLsthzaL8w==,type:str]
     doublepuppet.yaml: ENC[AES256_GCM,data:bA8r1TZECeDxIuUxkBcM0MOFdplcB5wus7KEir7LfPWFA06aUCz5o2BU/YKSzf5NlEtwQLlCiaDdONPPfLMvjHxaXBfyd2YCIoqeP7GCCqRnfZE4zaY2QajrUkBZQV9DAvf23Mt9Zw6ByLUHWIGvB95WOGHXxKeyDo0jnUgDWu+Osm+UIkbYKEOBw/rF3NOAUBQxxh9AlxwU/IUMV3++dhbGaTF46RN7FF/XLUJ4d3zt/f9r/UUrPwksiyUFyDRjRuV0ABn0aLneeJhcL2H4MeFnkjuRie9t292ief1UGbbqZnSMSuh//V7UrxKJw3o/asVRQQkxJOVQfAa6TUcBq/kxhuYXDBg1mAFD8/RGmA6pjJGH5+q9Cqaqmj6PgLRU+HS2iZnkkz6FRK6GmSAXu1vcwB0GC6NkLXU75B8j+3b8DV+rM6boKzQgAVNT+McCm0Zg2DdtMvQ//Qqetg8AXOvHXSJZ/zU7HsM42fm8Zk49uF6abKY=,iv:227zkv9T+yoycJNumdo0rV44ngXlM5hYu/1kRBj93r0=,tag:yQq2Aiw2sB4kmp/CeJ0G3g==,type:str]
@@ -15,8 +15,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2025-09-11T01:21:15Z"
-    mac: ENC[AES256_GCM,data:CkilEQZHdz/4ZVdxQ5uJzRef/CWW4JLxc8sGHdJ+fAq+fKs0Ur7IHAvQDu4GV8vZ0Ff3PqbrJODafVvbL0tww1d4Ucn53gz/ZfgSc6DACZ3d8RST/k6ad/JjsPCCifgogjA3TPQE4hehLY8JNi2cZVk02YY3xUFEeva6MWMy6J0=,iv:nRM0whcIFS2VYCN8m7IdGqeJHHPd8ep8zFDofhYKQGw=,tag:WhUk2vmscD3SajzJhSwgtA==,type:str]
+    lastmodified: "2024-03-31T21:34:41Z"
+    mac: ENC[AES256_GCM,data:RZ0jexcJq46ByhdZsG/Ab1ONc0cie8UAY7e5pw4+3IZmh1Zgg41vz1+sbitIUVC1tFjND7Jo0Ess+agS7/b45JZU0rta9rKp7WhCOtAVhBO+BDXmRKMtWynd/TSxoBdUtHG+AlGAoPRmz/4HjUMDoeO0CFoa/jR5Ajfv/xrSa2o=,iv:W/XuQZ8Ju6pv3E/b+0ugDsg9J/FXw0ixfFwLNlmLgxQ=,tag:W+xjNY+AJdZb+dxUrvLosQ==,type:str]
     pgp:
         - created_at: "2024-01-11T20:55:07Z"
           enc: |-

kustomizations/matrix/synapse/deployment.yaml

@@ -54,7 +54,7 @@ spec:
               mountPath: /config/homeserver.yaml
               subPath: homeserver.yaml
             - name: config
-              mountPath: /usr/local/lib/python3.12/site-packages/shared_secret_authenticator.py
+              mountPath: /usr/local/lib/python3.11/site-packages/shared_secret_authenticator.py
               subPath: shared_secret_authenticator.py
             - name: log-config
               mountPath: /config/log.config

kustomizations/matrix/synapse/files/homeserver.yaml

@@ -95,11 +95,4 @@ media_store_path: /data/media_store
 signing_key_path: "/config/keys/signing.key"
 trusted_key_servers:
   - server_name: "matrix.org"
-
-enable_registration: true
-registrations_require_3pid:
-  - email
-allowed_local_3pids:
-  - medium: email
-    pattern: '^[^@]+@distrust\.co$'
 # vim:ft=yaml

kustomizations/website/ingress.yaml

@@ -13,14 +13,14 @@ spec:
     http:
       paths:
       - path: /.well-known/openpgpkey
-        pathType: ImplementationSpecific
+        pathType: Prefix
         backend:
           service:
             name: wellknown-openpgp
             port:
               number: 80
       - path: /.well-known/matrix
-        pathType: ImplementationSpecific
+        pathType: Prefix
         backend:
           service:
             name: wellknown-matrix
@@ -37,7 +37,7 @@ spec:
         pathType: Prefix
         backend:
           service:
-            name: website
+            name: web-form
             port:
               number: 80
   tls: