Lots of changes

tasks/matrix.yaml

@@ -36,7 +36,7 @@
               enabled: true
             host: eom.dev
         oidc:
-          enabled: false
+          enabled: true
           providers:
             - idp_id: github
               idp_name: Github
@@ -155,32 +155,88 @@
             cert-manager.io/cluster-issuer: ca-issuer
       coturn:
         enabled: false
+        external: true
+        uris:
+          - turns:coturn.eom.dev?transport=udp
+          - turns:coturn.eom.dev?transport=tcp
+        allowGuests: false
+        sharedSecret: "{{ coturn_shared_secret }}"
+        service:
+          type: LoadBalancer
+          externalTrafficPolicy: Local
         certificate:
           enabled: true
           host: coturn.eom.dev
-          issuer: ca-issuer
-        uris:
-          - turn:coturn.eom.dev?transport=udp
-        allowGuests: true
-        service:
-          type: NodePort
+          issuerName: ca-issuer
         image:
           tag: latest
-          pullPolicy: IfNotPresent
+          pullPolicy: Always
         externalDatabase:
           enabled: true
-          hostname: matrix-postgresql
-          username: matrix
-          password: "{{ matrix_admin_password }}"
-          database: coturn
         postgresql:
-          enabled: false
-          nameOverride: matrix-coturn-postgresql
+          enabled: true
           global:
             postgresql:
               auth:
                 password: "{{ coturn_admin_password }}"
           primary:
+            initdb:
+              scripts:
+                schema.sql: |
+                  CREATE TABLE turnusers_lt (
+                      realm varchar(127) default '',
+                      name varchar(512),
+                      hmackey char(128),
+                      PRIMARY KEY (realm,name)
+                  );
+
+                  CREATE TABLE turn_secret (
+                      realm varchar(127) default '',
+                      value varchar(256),
+                      primary key (realm,value)
+                  );
+
+                  CREATE TABLE allowed_peer_ip (
+                      realm varchar(127) default '',
+                      ip_range varchar(256),
+                      primary key (realm,ip_range)
+                  );
+
+                  CREATE TABLE denied_peer_ip (
+                      realm varchar(127) default '',
+                      ip_range varchar(256),
+                      primary key (realm,ip_range)
+                  );
+
+                  CREATE TABLE turn_origin_to_realm (
+                      origin varchar(127),
+                      realm varchar(127),
+                      primary key (origin)
+                  );
+
+                  CREATE TABLE turn_realm_option (
+                      realm varchar(127) default '',
+                      opt varchar(32),
+                      value varchar(128),
+                      primary key (realm,opt)
+                  );
+
+                  CREATE TABLE oauth_key (
+                      kid varchar(128),
+                      ikm_key varchar(256),
+                      timestamp bigint default 0,
+                      lifetime integer default 0,
+                      as_rs_alg varchar(64) default '',
+                      realm varchar(127),
+                      primary key (kid)
+                  );
+
+                  CREATE TABLE admin_user (
+                      name varchar(32),
+                      realm varchar(127),
+                      password varchar(127),
+                      primary key (name)
+                  );
             persistence:
               size: 256Gi
         coturn:
@@ -243,7 +299,7 @@
             secret: SacP5rWpci6GMqb2
           email:
             from: Matrix Auth Service <matrix-auth-service@eom.dev>
-            reply_to: No reply <no-reply@eom.dev>
+            reply_to: Matrix Auth Service <matrix-auth-service@eom.dev>
             transport: smtp
             mode: tls
             hostname: postfix.eom.dev