Skip to content

add missing postgresql variable to wire-server secrets templates #792

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

add missing postgresql variable to wire-server secrets templates #792

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
6e313aa
add missing postgresql variable to wire-server secrets templates
Veki301 Jul 10, 2025
d717d7f
fix: add hairpin nat to POSTROUTING chain for cert-manager in nftable…
Veki301 Jul 10, 2025
2f91543
add temporary solution for cert-manager-crds
Veki301 Jul 10, 2025
33216d6
Merge branch 'master' into fix-missing-secrets-values-in-template
julialongtin Nov 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions ansible/files/hetzner_server_nftables.conf.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,9 @@ table ip nat {
}
chain POSTROUTING {
type nat hook postrouting priority 100;

ip saddr 192.168.122.0/24 ip daddr 192.168.122.0/24 oifname virbr0 counter masquerade comment "hairpin NAT for ingress"
Copy link
Member

@julialongtin julialongtin Nov 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what is this needed for?


oifname != docker0 ip saddr 172.17.0.0/16 counter masquerade
oifname $INF_WAN counter masquerade comment "masquerade outgoing traffic"
}
Expand Down
6 changes: 6 additions & 0 deletions offline/docs_ubuntu_22.04.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -837,6 +837,12 @@ Set your domain name with sed:
sed -i "s/example.com/YOURDOMAINHERE/" values/nginx-ingress-services/values.yaml
```

TODO: newer cert-manager release no longer installs CRDs with `installCRDs=true`, `crds.enabled=true` is the new standard, but that one is also failing during install. Install CRDs manually with:

```
d kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.16.3/cert-manager.crds.yaml
```

Install `cert-manager` into a new namespace `cert-manager-ns`.
```
d kubectl create namespace cert-manager-ns
Expand Down
1 change: 1 addition & 0 deletions values/wire-server/demo-secrets.example.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ elasticsearch-index:
password: changeme
brig:
secrets:
pgPassword: verysecurepassword
smtpPassword: dummyPassword
zAuth:
# generate zauth public/private keys with the 'zauth' executable from wire-server:
Expand Down
1 change: 0 additions & 1 deletion values/wire-server/prod-secrets.example.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,6 @@ brig:
secrets:
#retrieve postgresql password from Kubernetes Secret with "kubectl get secret wire-postgresql-external-secret -n default -o jsonpath='{.data.password}' | base64 -d"
pgPassword: verysecurepassword

smtpPassword: dummyPassword
zAuth:
# generate zauth public/private keys with the 'zauth' executable from wire-server:
Expand Down
Loading