Add sftd configuration to wire-server values

Depends on wireapp/wire-server#1325
wireapp · Feb 15, 2021 · 1e83206 · 1e83206
1 parent 6093f60
commit 1e83206
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 0 deletions.
diff --git a/values/wire-server/demo-values.example.yaml b/values/wire-server/demo-values.example.yaml
@@ -2,6 +2,15 @@ tags:
   proxy: false # enable if you want/need giphy/youtube/etc proxying
   spar: false # enable if you want/need Single-Sign-On (SSO)
 
+sftd:
+  replicaCount: 1
+  host: sftd.example.com # change this  !! Needs to be in sync with brig.optSettings.setSftStaticUrl
+  allowOrigin: https://webapp.example.com # change this
+  tls:
+    issuerRef:
+      kind: ClusterIssuer
+      name: letsencrypt-prod
+
 cassandra-migrations:
 #  images:
 #    tag: some-tag (only override if you want a newer/different version than what is in the chart)

diff --git a/values/wire-server/prod-secrets.example.yaml b/values/wire-server/prod-secrets.example.yaml
@@ -1,4 +1,13 @@
 # CHANGEME-PROD: All values here should be changed/reviewed
+sftd:
+  tls:
+    # NOTE: REMOVE these entries if using cert-manager (through tls.issuerRef)
+    crt: |
+      ----BEGIN CERTIFICATE-----
+      -----END CERTIFICATE-----
+    key: |
+      -----BEGIN RSA PRIVATE KEY-----
+      -----END RSA PRIVATE KEY-----
 brig:
   secrets:
     smtpPassword: dummyPassword

diff --git a/values/wire-server/prod-values.example.yaml b/values/wire-server/prod-values.example.yaml
@@ -5,6 +5,17 @@ tags:
   team-settings: false # enable if you need team-settings. Requires a pullSecret
   legalhold: false # Enable if you need legalhold
 
+sftd:
+  replicaCount: 3
+  host: sftd.example.com # change this  !! Needs to be in sync with brig.optSettings.setSftStaticUrl
+  allowOrigin: https://webapp.example.com # change this
+  tls:
+    # !! comment out if using static certificates in prod-secrets.yaml, and not https://cert-manager.io
+    # Points to an existing
+    issuerRef:
+      kind: ClusterIssuer
+      name: letsencrypt-prod
+
 cassandra-migrations:
 #  images:
 #    tag: some-tag (only override if you want a newer/different version than what is in the chart)