Paul Payne
4d983819c9
feat(synapse): update ingress to use traefik ingress class and bump version feat(syncthing-discovery): introduce syncthing discovery service with deployment and ingress feat(syncthing-relay): add syncthing relay server with deployment and ingress configuration fix(taiga): update liveness and readiness probes to use tcpSocket for health checks fix(taiga): change PVC access mode to ReadWriteMany for media and static storage feat(traefik): add icon and ignore rules for traefik service docs(ushahidi): add notes for Redis configuration and Laravel startup probe adjustments feat(ushahidi): implement dedicated Redis deployment for Ushahidi fix(vllm): update deployment strategy and readiness/liveness probes for improved stability fix(writefreely): pin writefreely image version to v0.15.1 for consistency docs(zulip): add notes for TLS-terminating reverse proxy configuration and expected behavior
CryptPad
CryptPad is a privacy-first, end-to-end encrypted collaboration suite. Documents are encrypted in the browser before being stored — the server never sees plaintext content.
Configuration
Key settings in config.yaml:
- domain - Main domain for CryptPad
- sandboxDomain - Sandbox subdomain for secure iframe isolation (default:
cryptpad-sandbox.{your-cloud-domain}) - storage - Persistent volume size (default:
2Gi)
Usage
No account is required to create documents. Just visit the app URL and start creating spreadsheets, code pads, presentations, or rich-text documents. Share the document URL with collaborators.
Admin Setup
To access the admin panel, you need to register an account and then link it to the adminKey secret:
- Register an account at the app URL
- Go to your user settings and copy your Public Signing Key
- The
adminKeyinsecrets.yamlshould match this key — it is pre-populated with a generated value, but you must replace it with your actual account's public signing key after registering - Once set, the Admin link will appear in the user menu
Notes
- Both the main domain and the sandbox domain must be accessible — CryptPad uses the sandbox domain for secure iframe isolation, and the app will not function correctly if one is missing
- All encryption keys are generated client-side — if you lose your account passphrase, documents cannot be recovered
- The instance can be configured to require registration before creating documents (via the admin panel)