From 95a250dc653aee465e59601cd777f338ecf7346d Mon Sep 17 00:00:00 2001
From: jklein <github@justin-klein.de>
Date: Tue, 17 Mar 2026 22:17:55 +0100
Subject: [PATCH] feat(matrix-synapse): added config Secret

---
 matrix-synapse/Chart.yaml                                | 2 +-
 .../templates/matrix-synapse-config.secret.yaml          | 6 ++++++
 matrix-synapse/templates/matrix-synapse.sfs.yaml         | 9 +++++++++
 matrix-synapse/values.yaml                               | 1 +
 4 files changed, 17 insertions(+), 1 deletion(-)
 create mode 100644 matrix-synapse/templates/matrix-synapse-config.secret.yaml

diff --git a/matrix-synapse/Chart.yaml b/matrix-synapse/Chart.yaml
index 6d1ba4a..5e5c047 100644
--- a/matrix-synapse/Chart.yaml
+++ b/matrix-synapse/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: matrix-synapse
 description: A Helm chart to deploy a Matrix Synapse server on Kubernetes
 type: application
-version: 0.1.0+upv1.149.1
+version: 0.2.0+upv1.149.1
 appVersion: "v1.149.1"
 maintainers:
   - name: jklein
\ No newline at end of file
diff --git a/matrix-synapse/templates/matrix-synapse-config.secret.yaml b/matrix-synapse/templates/matrix-synapse-config.secret.yaml
new file mode 100644
index 0000000..c48c1af
--- /dev/null
+++ b/matrix-synapse/templates/matrix-synapse-config.secret.yaml
@@ -0,0 +1,6 @@
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: {{ .Release.Name }}-{{ .Chart.Name }}-config-secret
+spec:
+  itemPath: {{ required "You must provide a configSecret Reference" .Values.matrix.configSecretRef }}
diff --git a/matrix-synapse/templates/matrix-synapse.sfs.yaml b/matrix-synapse/templates/matrix-synapse.sfs.yaml
index 05ce5f0..341b975 100644
--- a/matrix-synapse/templates/matrix-synapse.sfs.yaml
+++ b/matrix-synapse/templates/matrix-synapse.sfs.yaml
@@ -38,7 +38,16 @@ spec:
             - name: matrix-synapse-volume
               mountPath: /data
               subPath: matrix-synapse-data/
+            - name: matrix-synapse-config-secret
+              mountPath: /data/homeserver.yaml
+              subPath: homeserver.yaml
       volumes:
         - name: matrix-synapse-volume
           persistentVolumeClaim:
             claimName: {{ .Release.Name }}-{{ .Chart.Name }}-pvc
+        - name: matrix-synapse-config-secret
+          secret:
+            secretName: {{ .Release.Name }}-{{ .Chart.Name }}-config-secret
+            items:
+              - key: homeserver.yaml
+                path: /homeserver.yaml
diff --git a/matrix-synapse/values.yaml b/matrix-synapse/values.yaml
index 0210717..3e00027 100644
--- a/matrix-synapse/values.yaml
+++ b/matrix-synapse/values.yaml
@@ -1,6 +1,7 @@
 matrix:
   serverName: null
   timezone: UTC
+  configSecretRef: null
 
 storage:
   amount: 10Gi