| ... |
... |
@@ -22,6 +22,29 @@ spec: |
|
22
|
22
|
# do not use **internal** postgres db
|
|
23
|
23
|
enabled: false
|
|
24
|
24
|
synapse:
|
|
|
25
|
+ # TLDR; synapse has no HA support ;-; (yet)
|
|
|
26
|
+ # https://matrix.org/blog/2020/11/03/how-we-fixed-synapse-s-scalability/
|
|
|
27
|
+ # Note: we don't have nearly as many users as Matrix.org, so
|
|
|
28
|
+ # fine-tuning the values for our use-case would be best
|
|
|
29
|
+ # workers:
|
|
|
30
|
+ # https://docs.element.io/latest/element-server-suite-classic/advanced-configuration/synapse-section-workers/#worker-types
|
|
|
31
|
+ # client-reader:
|
|
|
32
|
+ # enabled: true
|
|
|
33
|
+ # replicas: 2
|
|
|
34
|
+ # -> We could probably just enable everything, stress test bottenecks and
|
|
|
35
|
+ # increase replication for the bottleneck processes
|
|
|
36
|
+ # As far as we are concerned, our deployment is (very) small, sub 70 users
|
|
|
37
|
+ # as of right now, so configuring workers is pointless
|
|
|
38
|
+ # Synapse will use redis by default for pub/sub IPC when using workers,
|
|
|
39
|
+ # so we might as well enable it for caching
|
|
|
40
|
+ # redis:
|
|
|
41
|
+ # enabled: true
|
|
|
42
|
+ # Also note: workers are more of a scalability thing, not a HA thing
|
|
|
43
|
+ # We can't really have a "hot-spare/hot-replication" synapse server either,
|
|
|
44
|
+ # because of the way synapse streams deal with caching
|
|
|
45
|
+ # (matrix.org itself goes down if the server crashes, so we kinda gotta accept it)
|
|
|
46
|
+ # Best thing we can do for HA is making it come back faster, like our GitLab instance
|
|
|
47
|
+ # Another option is having a "cold-spare", but I have no idea how to do that.
|
|
25
|
48
|
image:
|
|
26
|
49
|
registry: harbor.c3sl.ufpr.br
|
|
27
|
50
|
repository: root/synapse
|
| ... |
... |
@@ -72,6 +95,7 @@ spec: |
|
72
|
95
|
database:
|
|
73
|
96
|
allow_unsafe_locale: true
|
|
74
|
97
|
matrixAuthenticationService:
|
|
|
98
|
+ replicas: 3
|
|
75
|
99
|
ingress:
|
|
76
|
100
|
host: auth.matrix.c3sl.ufpr.br
|
|
77
|
101
|
tlsSecret: mas-tls
|
| ... |
... |
@@ -91,6 +115,7 @@ spec: |
|
91
|
115
|
configSecret: matrix
|
|
92
|
116
|
configSecretKey: masOidcConfig
|
|
93
|
117
|
matrixRTC:
|
|
|
118
|
+ replicas: 3
|
|
94
|
119
|
ingress:
|
|
95
|
120
|
host: rtc.matrix.c3sl.ufpr.br
|
|
96
|
121
|
tlsSecret: rtc-tls
|
| ... |
... |
@@ -98,6 +123,7 @@ spec: |
|
98
|
123
|
ingress:
|
|
99
|
124
|
tlsSecret: well-known-tls
|
|
100
|
125
|
elementWeb:
|
|
|
126
|
+ replicas: 2
|
|
101
|
127
|
image:
|
|
102
|
128
|
registry: docker.io
|
|
103
|
129
|
repository: vectorim/element-web
|