From 63dcd1b82b332830056e1a795f095d87a8353790 Mon Sep 17 00:00:00 2001
From: Paul Payne <paul@payne.io>
Date: Fri, 19 Jun 2026 21:38:00 +0000
Subject: [PATCH] Removes matrix app (renamed synapse)

---
 matrix/app.yaml                       |   5 -
 matrix/versions/v1/README.md          |  38 -----
 matrix/versions/v1/configmap.yaml     |  66 --------
 matrix/versions/v1/db-init-job.yaml   |  57 -------
 matrix/versions/v1/deployment.yaml    | 221 --------------------------
 matrix/versions/v1/ingress.yaml       |  52 ------
 matrix/versions/v1/kustomization.yaml |  17 --
 matrix/versions/v1/manifest.yaml      |  35 ----
 matrix/versions/v1/namespace.yaml     |   4 -
 matrix/versions/v1/pvc.yaml           |  22 ---
 matrix/versions/v1/service.yaml       |  18 ---
 11 files changed, 535 deletions(-)
 delete mode 100644 matrix/app.yaml
 delete mode 100644 matrix/versions/v1/README.md
 delete mode 100644 matrix/versions/v1/configmap.yaml
 delete mode 100644 matrix/versions/v1/db-init-job.yaml
 delete mode 100644 matrix/versions/v1/deployment.yaml
 delete mode 100644 matrix/versions/v1/ingress.yaml
 delete mode 100644 matrix/versions/v1/kustomization.yaml
 delete mode 100644 matrix/versions/v1/manifest.yaml
 delete mode 100644 matrix/versions/v1/namespace.yaml
 delete mode 100644 matrix/versions/v1/pvc.yaml
 delete mode 100644 matrix/versions/v1/service.yaml

diff --git a/matrix/app.yaml b/matrix/app.yaml
deleted file mode 100644
index fde83f3..0000000
--- a/matrix/app.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-name: matrix
-is: matrix
-description: Matrix is an open standard for secure, decentralized, real-time communication. This deploys the Synapse homeserver for self-hosted Matrix federation and messaging.
-icon: https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/matrix.svg
-latest: "v1"
diff --git a/matrix/versions/v1/README.md b/matrix/versions/v1/README.md
deleted file mode 100644
index 656e557..0000000
--- a/matrix/versions/v1/README.md
+++ /dev/null
@@ -1,38 +0,0 @@
-# Matrix (Synapse)
-
-Matrix is an open standard for secure, decentralized, real-time communication. This deploys the Synapse homeserver for self-hosted Matrix federation and messaging.
-
-## Dependencies
-
-- **PostgreSQL** - Database for storing messages and account data
-- **Redis** - Used for inter-worker communication
-
-## Configuration
-
-Key settings configured through your instance's `config.yaml`:
-
-- **domain** - Where the Synapse web client will be accessible (default: `matrix.{your-cloud-domain}`)
-- **serverName** - Your Matrix server identity, used in user IDs like `@user:{serverName}` (default: `{your-cloud-domain}`)
-- **enableRegistration** - Whether to allow public account creation (default: `false`)
-- **storage** - Persistent volume for Synapse data (default: `50Gi`)
-- **mediaStorage** - Persistent volume for uploaded media (default: `100Gi`)
-- **SMTP** - Email delivery settings inherited from your Wild Cloud instance
-
-## Access
-
-After deployment, the Synapse homeserver will be available at:
-- `https://matrix.{your-cloud-domain}`
-
-Connect using any Matrix client (Element, FluffyChat, etc.) with your server name.
-
-## First-Time Setup
-
-1. Add and deploy the app:
-   ```bash
-   wild app add matrix
-   wild app deploy matrix
-   ```
-
-2. Use the registration shared secret (in your `secrets.yaml`) to create your first admin account, or enable public registration temporarily
-
-3. Connect with a Matrix client and start messaging
diff --git a/matrix/versions/v1/configmap.yaml b/matrix/versions/v1/configmap.yaml
deleted file mode 100644
index 1338105..0000000
--- a/matrix/versions/v1/configmap.yaml
+++ /dev/null
@@ -1,66 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: matrix-config
-data:
-  homeserver.yaml: |
-    server_name: "{{ .serverName }}"
-    public_baseurl: https://{{ .domain }}
-
-    listeners:
-      - port: 8008
-        tls: false
-        type: http
-        x_forwarded: true
-        bind_addresses: ['::']
-        resources:
-          - names: [client, federation]
-            compress: false
-
-    database:
-      name: psycopg2
-      args:
-        user: {{ .db.user }}
-        password: ${DB_PASSWORD}
-        database: {{ .db.name }}
-        host: {{ .db.host }}
-        port: 5432
-        cp_min: 5
-        cp_max: 10
-
-    redis:
-      enabled: true
-      host: {{ .redis.host }}
-      port: 6379
-      password: ${REDIS_PASSWORD}
-
-    media_store_path: /data/media_store
-    uploads_path: /data/uploads
-
-    max_upload_size: 100M
-
-    enable_registration: {{ .enableRegistration }}
-    registration_shared_secret: "${REGISTRATION_SHARED_SECRET}"
-
-    macaroon_secret_key: "${MACAROON_SECRET_KEY}"
-    form_secret: "${FORM_SECRET}"
-
-    signing_key_path: /data/keys/signing.key
-
-    trusted_key_servers:
-      - server_name: "matrix.org"
-
-    email:
-      smtp_host: "{{ .smtp.host }}"
-      smtp_port: {{ .smtp.port }}
-      smtp_user: "{{ .smtp.user }}"
-      smtp_pass: "${SMTP_PASSWORD}"
-      require_transport_security: {{ .smtp.requireTls }}
-      notif_from: "{{ .smtp.from }}"
-      app_name: Matrix
-
-    report_stats: false
-
-    enable_metrics: true
-
-    suppress_key_server_warning: true
diff --git a/matrix/versions/v1/db-init-job.yaml b/matrix/versions/v1/db-init-job.yaml
deleted file mode 100644
index c3090d3..0000000
--- a/matrix/versions/v1/db-init-job.yaml
+++ /dev/null
@@ -1,57 +0,0 @@
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: matrix-db-init
-spec:
-  template:
-    spec:
-      containers:
-        - name: db-init
-          image: postgres:17
-          command: ["/bin/bash", "-c"]
-          args:
-            - |
-              PGPASSWORD=${POSTGRES_ADMIN_PASSWORD} psql -h ${DB_HOSTNAME} -U postgres <<EOF
-              DO \$\$
-              BEGIN
-                IF NOT EXISTS (SELECT FROM pg_catalog.pg_roles WHERE rolname = '${DB_USERNAME}') THEN
-                  CREATE USER ${DB_USERNAME} WITH ENCRYPTED PASSWORD '${DB_PASSWORD}';
-                ELSE
-                  ALTER USER ${DB_USERNAME} WITH ENCRYPTED PASSWORD '${DB_PASSWORD}';
-                END IF;
-              END
-              \$\$;
-
-              SELECT 'CREATE DATABASE ${DB_DATABASE_NAME} ENCODING ''UTF8'' LC_COLLATE ''C'' LC_CTYPE ''C'' TEMPLATE template0' WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = '${DB_DATABASE_NAME}')\gexec
-              ALTER DATABASE ${DB_DATABASE_NAME} OWNER TO ${DB_USERNAME};
-              GRANT ALL PRIVILEGES ON DATABASE ${DB_DATABASE_NAME} TO ${DB_USERNAME};
-              EOF
-          env:
-            - name: POSTGRES_ADMIN_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: postgres.password
-            - name: DB_HOSTNAME
-              value: "{{ .db.host }}"
-            - name: DB_DATABASE_NAME
-              value: "{{ .db.name }}"
-            - name: DB_USERNAME
-              value: "{{ .db.user }}"
-            - name: DB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: dbPassword
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop: [ALL]
-            readOnlyRootFilesystem: false
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 999
-        runAsGroup: 999
-        seccompProfile:
-          type: RuntimeDefault
-      restartPolicy: OnFailure
diff --git a/matrix/versions/v1/deployment.yaml b/matrix/versions/v1/deployment.yaml
deleted file mode 100644
index 078c20b..0000000
--- a/matrix/versions/v1/deployment.yaml
+++ /dev/null
@@ -1,221 +0,0 @@
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: matrix-synapse
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: matrix-synapse
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        app: matrix-synapse
-        component: synapse
-    spec:
-      initContainers:
-        - name: generate-signing-key
-          image: "matrixdotorg/synapse:v1.144.0"
-          command: ["/bin/sh", "-c"]
-          args:
-            - |
-              if [ ! -f /data/keys/signing.key ]; then
-                echo "Generating signing key..."
-                mkdir -p /data/keys
-                # Use Synapse's generate-keys command
-                python3 -m synapse.app.homeserver \
-                  --generate-keys \
-                  --config-path=/config/homeserver.yaml
-                echo "Signing key generated successfully"
-                ls -la /data/keys/
-              else
-                echo "Signing key already exists"
-              fi
-          env:
-            - name: DB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: dbPassword
-            - name: REDIS_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: redis.password
-            - name: REGISTRATION_SHARED_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: registrationSharedSecret
-            - name: MACAROON_SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: macaroonSecretKey
-            - name: FORM_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: formSecret
-            - name: SMTP_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: smtp.password
-          volumeMounts:
-            - name: matrix-data
-              mountPath: /data
-            - name: matrix-config
-              mountPath: /config
-              readOnly: true
-          securityContext:
-            runAsUser: 991
-            runAsGroup: 991
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop: [ALL]
-            readOnlyRootFilesystem: false
-      containers:
-        - name: synapse
-          image: "matrixdotorg/synapse:v1.144.0"
-          command: ["/bin/sh", "-c"]
-          args:
-            - |
-              set -e
-              echo "Starting config substitution..."
-
-              # Substitute environment variables in the config using Python
-              python3 -c "
-              import os
-              import re
-              import sys
-
-              print('Reading config from /config/homeserver.yaml', file=sys.stderr)
-              try:
-                  with open('/config/homeserver.yaml', 'r') as f:
-                      content = f.read()
-                  print(f'Config file read: {len(content)} bytes', file=sys.stderr)
-              except Exception as e:
-                  print(f'Error reading config: {e}', file=sys.stderr)
-                  sys.exit(1)
-
-              # Replace \${VAR} with environment variable values
-              def replace_var(match):
-                  var_name = match.group(1)
-                  value = os.environ.get(var_name, match.group(0))
-                  print(f'Replacing {var_name}: {\"***\" if \"PASSWORD\" in var_name or \"SECRET\" in var_name else value}', file=sys.stderr)
-                  return value
-
-              content = re.sub(r'\\\$\{([A-Z_]+)\}', replace_var, content)
-
-              print('Writing processed config to /data/homeserver.yaml', file=sys.stderr)
-              try:
-                  with open('/data/homeserver.yaml', 'w') as f:
-                      f.write(content)
-                  print('Config file written successfully', file=sys.stderr)
-              except Exception as e:
-                  print(f'Error writing config: {e}', file=sys.stderr)
-                  sys.exit(1)
-              " || { echo "Python script failed with exit code $?"; exit 1; }
-
-              echo "Config substitution complete"
-              ls -la /data/homeserver.yaml
-
-              # Start Synapse with the processed config
-              exec /start.py
-          ports:
-            - containerPort: 8008
-              protocol: TCP
-              name: http
-            - containerPort: 8448
-              protocol: TCP
-              name: federation
-          env:
-            - name: SYNAPSE_CONFIG_PATH
-              value: /data/homeserver.yaml
-            - name: TZ
-              value: "UTC"
-            - name: DB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: dbPassword
-            - name: REDIS_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: redis.password
-            - name: REGISTRATION_SHARED_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: registrationSharedSecret
-            - name: MACAROON_SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: macaroonSecretKey
-            - name: FORM_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: formSecret
-            - name: SMTP_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: matrix-secrets
-                  key: smtp.password
-          volumeMounts:
-            - name: matrix-config
-              mountPath: /config
-              readOnly: true
-            - name: matrix-data
-              mountPath: /data
-            - name: matrix-media
-              mountPath: /data/media_store
-          livenessProbe:
-            httpGet:
-              path: /health
-              port: 8008
-            initialDelaySeconds: 60
-            periodSeconds: 30
-            timeoutSeconds: 5
-          readinessProbe:
-            httpGet:
-              path: /health
-              port: 8008
-            initialDelaySeconds: 30
-            periodSeconds: 10
-            timeoutSeconds: 5
-          resources:
-            requests:
-              memory: "512Mi"
-              cpu: "500m"
-            limits:
-              memory: "2Gi"
-              cpu: "2000m"
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop: [ALL]
-            readOnlyRootFilesystem: false
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 991
-        runAsGroup: 991
-        fsGroup: 991
-        seccompProfile:
-          type: RuntimeDefault
-      volumes:
-        - name: matrix-config
-          configMap:
-            name: matrix-config
-        - name: matrix-data
-          persistentVolumeClaim:
-            claimName: matrix-data-pvc
-        - name: matrix-media
-          persistentVolumeClaim:
-            claimName: matrix-media-pvc
diff --git a/matrix/versions/v1/ingress.yaml b/matrix/versions/v1/ingress.yaml
deleted file mode 100644
index 5518b74..0000000
--- a/matrix/versions/v1/ingress.yaml
+++ /dev/null
@@ -1,52 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: matrix-client-ingress
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-spec:
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}
-  rules:
-    - host: {{ .domain }}
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: matrix-synapse
-                port:
-                  number: 8008
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: matrix-federation-ingress
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-spec:
-  tls:
-    - hosts:
-        - {{ .serverName }}
-      secretName: {{ .tlsSecretName }}
-  rules:
-    - host: {{ .serverName }}
-      http:
-        paths:
-          - path: /.well-known/matrix
-            pathType: Prefix
-            backend:
-              service:
-                name: matrix-synapse
-                port:
-                  number: 8448
diff --git a/matrix/versions/v1/kustomization.yaml b/matrix/versions/v1/kustomization.yaml
deleted file mode 100644
index 2cacfb4..0000000
--- a/matrix/versions/v1/kustomization.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: {{ .namespace }}
-labels:
-  - includeSelectors: true
-    pairs:
-      app: matrix
-      managedBy: kustomize
-      partOf: wild-cloud
-resources:
-  - namespace.yaml
-  - configmap.yaml
-  - pvc.yaml
-  - db-init-job.yaml
-  - deployment.yaml
-  - service.yaml
-  - ingress.yaml
diff --git a/matrix/versions/v1/manifest.yaml b/matrix/versions/v1/manifest.yaml
deleted file mode 100644
index a72519e..0000000
--- a/matrix/versions/v1/manifest.yaml
+++ /dev/null
@@ -1,35 +0,0 @@
-version: v1.144.0-2
-requires:
-  - name: postgres
-  - name: redis
-  - name: smtp
-defaultConfig:
-  namespace: matrix
-  externalDnsDomain: '{{ .cloud.domain }}'
-  storage: 50Gi
-  mediaStorage: 100Gi
-  serverName: '{{ .cloud.domain }}'
-  domain: matrix.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
-  enableRegistration: false
-  db:
-    host: '{{ .apps.postgres.host }}'
-    name: matrix
-    user: matrix
-  redis:
-    host: '{{ .apps.redis.host }}'
-  smtp:
-    host: '{{ .apps.smtp.host }}'
-    port: '{{ .apps.smtp.port }}'
-    from: matrix@{{ .cloud.domain }}
-    user: '{{ .apps.smtp.user }}'
-    requireTls: '{{ .apps.smtp.tls }}'
-defaultSecrets:
-  - key: dbPassword
-  - key: registrationSharedSecret
-  - key: macaroonSecretKey
-  - key: formSecret
-requiredSecrets:
-  - postgres.password
-  - redis.password
-  - smtp.password
diff --git a/matrix/versions/v1/namespace.yaml b/matrix/versions/v1/namespace.yaml
deleted file mode 100644
index 054927e..0000000
--- a/matrix/versions/v1/namespace.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: {{ .namespace }}
diff --git a/matrix/versions/v1/pvc.yaml b/matrix/versions/v1/pvc.yaml
deleted file mode 100644
index bdb8d49..0000000
--- a/matrix/versions/v1/pvc.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: matrix-data-pvc
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: {{ .storage }}
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: matrix-media-pvc
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: {{ .mediaStorage }}
diff --git a/matrix/versions/v1/service.yaml b/matrix/versions/v1/service.yaml
deleted file mode 100644
index 4ce7e53..0000000
--- a/matrix/versions/v1/service.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: matrix-synapse
-spec:
-  type: ClusterIP
-  ports:
-    - name: http
-      port: 8008
-      targetPort: 8008
-      protocol: TCP
-    - name: federation
-      port: 8448
-      targetPort: 8448
-      protocol: TCP
-  selector:
-    app: matrix-synapse