Add videobellen

Author: berrydenhartog

kustomization.yaml

@@ -12,4 +12,6 @@ resources:
 - manifests/mailcatcher/
 - manifests/synapse/
 - manifests/element-web/
+- manifests/livekit-jwt/
+- manifests/element-call/
 

manifests/element-call/config.json

@@ -1,14 +1,20 @@
 {
     "default_server_config": {
       "m.homeserver": {
-        "base_url": "https://call.chat.la-suite.apps.digilab.network",
-        "server_name": "lasuite"
+        "base_url": "https://matrix.chat.la-suite.apps.digilab.network",
+        "server_name": "LaSuite"
       }
     },
     "livekit": {
       "livekit_service_url": "https://livekit-jwt.chat.la-suite.apps.digilab.network"
     },
     "features": {
+      "feature_group_calls_without_video_and_audio": true,
       "feature_use_device_session_member_events": true
-    }
+    },
+    "media_devices": {
+      "enable_audio": true,
+      "enable_video": true
+    },
+    "app_prompt": true
   }

manifests/element-call/deployment.yaml

@@ -18,7 +18,7 @@ spec:
       - name: element-call 
         image: ghcr.io/element-hq/element-call:v0.7.1
         ports:
-        - containerPort: 8000
+        - containerPort: 8080
         volumeMounts:
         - name: element-call-config
           mountPath: /app/config.json

manifests/element-call/ingress.yaml

@@ -4,7 +4,6 @@ metadata:
   name: ing
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
-    nginx.ingress.kubernetes.io/rewrite-target: /index.html
 spec:
   rules:
     - host: "call.chat.la-suite.apps.digilab.network"
@@ -16,7 +15,7 @@ spec:
               service:
                 name: svc
                 port:
-                  number: 8000
+                  number: 8080
   tls:
     - hosts:
         - call.chat.la-suite.apps.digilab.network

manifests/element-call/service.yaml

@@ -4,8 +4,8 @@ metadata:
   name: svc
 spec:
   ports:
-    - port: 8000
+    - port: 8080
       protocol: TCP
-      targetPort: 8000
+      targetPort: 8080
   selector:
     app: element-call

manifests/element-web/ingress2.yaml

@@ -6,6 +6,8 @@ metadata:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     nginx.ingress.kubernetes.io/permanent-redirect: "https://element.chat.la-suite.apps.digilab.network"
     nginx.ingress.kubernetes.io/permanent-redirect-code: "302"
+    nginx.ingress.kubernetes.io/enable-cors: "true"
+    nginx.ingress.kubernetes.io/cors-allow-origin: "*.chat.la-suite.apps.digilab.network"
     nginx.ingress.kubernetes.io/configuration-snippet: |
       location = /.well-known/matrix/server {
         default_type application/json;

manifests/livekit-jwt/deployment.yaml

@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dpl
+  labels:
+    app: element-livekit-jwt
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: element-livekit-jwt
+  template:
+    metadata:
+      labels:
+        app: element-livekit-jwt
+    spec:
+      containers:
+      - name: element-livekit-jwt
+        image: ghcr.io/element-hq/lk-jwt-service:0.1.2
+        ports:
+        - containerPort: 8080
+        env:
+        - name: LIVEKIT_URL
+          value: "ws://livekit.meet.la-suite.apps.digilab.network"
+        envFrom:
+        - secretRef:
+            name: sec
+
+
+

manifests/livekit-jwt/ingress.yaml

@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ing
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  rules:
+    - host: "livekit-jwt.chat.la-suite.apps.digilab.network"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: svc
+                port:
+                  number: 8080
+  tls:
+    - hosts:
+        - livekit-jwt.chat.la-suite.apps.digilab.network
+      secretName: element-livekit-jwt-tls

manifests/livekit-jwt/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namePrefix: element-livekitjwt-
+
+resources:
+- deployment.yaml
+- service.yaml
+- ingress.yaml
+- secret.yaml

manifests/livekit-jwt/secret.yaml

@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: sec
+type: Opaque
+stringData:
+    LIVEKIT_KEY: ENC[AES256_GCM,data:Uikj9Z5nqc+TMzcj4XZc,iv:Us0mgk8JmjLMZSQwM6Bp+mTwqFkbTAOtGVQsw/FpZ64=,tag:GSdDwZMy4RmvN86BqEVEyg==,type:str]
+    LIVEKIT_SECRET: ENC[AES256_GCM,data:SqbHCXVpbi67E5BiMvn3HtSVu3KJIXY0G5bPhBulZtKiBhierdpwUOcnXYY=,iv:we3fNR2pZYNaGhpE+3ZRSH0Trrc2r3LYuUmiZsT6jSE=,tag:LOsOgKNUYUP7yF9QdmUl0A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age12wqzdg27tdlumxeg4qcr6pcypa9lpmtzwgtvulkcjlz6s9dmes5skdfazk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmcVRCSWJKcDU4SWZNakd6
+            cy9PSnB4M3QyRG91UHVsNTZYT0JhSG5EOVJnCkpLQjdOL0hhTVJ5clZER0NmN3B3
+            ZlQ1dllxVnJqZ3lIeDhERG5sRVpOQTgKLS0tIHZrYXdhSGx4UDQvRDU4VkEwVWkr
+            NW5aTEJtaFpOaG1xVDZVeldaWXhYc0EKZKOnAUwcnQWp3hHmHImNPtz0nzjPgMTd
+            fYobLJTJT+IjtEBIRLnsy8CaHm94dfUJ5GzMC/wj4Vg5Q/q5mzsn1A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-03-05T07:56:41Z"
+    mac: ENC[AES256_GCM,data:YJQV+MA0Xx7MKyEr20yiKJEmx2v41oSyYQxM4UcJtO+AQ4n5H+rPP3bnr5hWmCDTlaTjVL8Kz1xmY+BayZUTIroonnjjYgj097focCtF0Ak7FDxnopzeglXlPf9Zj3Wbnu3UrjzTdgdNbAF/i74oEztPA0Nw79LlV9lAc06pujk=,iv:GiUINroQikUbk5BLjtRs9lvbnlJMXyD+U8/Q0LfZXbI=,tag:Mm8F/PHGWLQ342LiZ7Y5Yw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

manifests/livekit-jwt/service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: svc
+spec:
+  ports:
+    - port: 8080
+      protocol: TCP
+      targetPort: 8080
+  selector:
+    app: element-livekit-jwt

manifests/synapse/homeserver.yaml

@@ -84,8 +84,8 @@ email:
 
 # temporarily boost rate-limits to avoid breaking WIP MatrixRTC signalling
 rc_message:
-  per_second: 2
-  burst_count: 15
+  per_second: 0.5
+  burst_count: 30
 
 # The maximum allowed duration by which sent events can be delayed, as
 # per MSC4140. Must be a positive value if set.  Defaults to no
@@ -147,4 +147,11 @@ user_directory:
 auto_accept_invites:
   enabled: true
   only_for_direct_messages: true
-  only_from_local_users: true
+  only_from_local_users: true
+
+
+experimental_features:
+  # MSC3266: Room summary API. Used for knocking over federation
+  msc3266_enabled: true
+  # MSC4222 needed for syncv2 state_after. This allow clients to correctly track the state of the room.
+  msc4222_enabled: true