From 651b40b99dd414a53a8d6298484a5241b7bec519 Mon Sep 17 00:00:00 2001
From: titver968 <vermesan@hotmail.com>
Date: Fri, 17 Oct 2025 09:16:09 +0200
Subject: [PATCH] mattermost new configuration

---
 argocd/apps/mattermost/mattermnost.bak    | 49 +++++++++++++++++
 argocd/apps/mattermost/mattermnost.yaml   | 64 ++++++++++++++---------
 argocd/apps/mattermost/mysql-secrets.yaml | 10 ++++
 3 files changed, 97 insertions(+), 26 deletions(-)
 create mode 100644 argocd/apps/mattermost/mattermnost.bak
 create mode 100644 argocd/apps/mattermost/mysql-secrets.yaml

diff --git a/argocd/apps/mattermost/mattermnost.bak b/argocd/apps/mattermost/mattermnost.bak
new file mode 100644
index 0000000..3ed72bd
--- /dev/null
+++ b/argocd/apps/mattermost/mattermnost.bak
@@ -0,0 +1,49 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: mattermost
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: 'https://helm.mattermost.com'
+    targetRevision: 6.*.*
+    helm:
+      parameters:
+        - name: 'ingress.enabled'
+          value: 'true'
+        - name: 'endpoint'
+          value: 'mattermost.innovation-hub-niedersachsen.de'
+        - name: ingress.hosts[0]
+          value: 'mattermost.innovation-hub-niedersachsen.de'
+        - name: 'ingress.tls[0].hosts[0]'
+          value: 'mattermost.innovation-hub-niedersachsen.de'
+        - name: 'ingress.tls[0].secretName'
+          value: mattermost-tls
+        - name: ingress.annotations.kubernetes\.io\/ingress\.class
+          value: traefik
+        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
+          value: 'true'
+          forceString: true
+        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.middlewares
+          value: 'default-http-redirect@kubernetescrd'
+        - name: ingress.annotations.cert-manager\.io\/cluster-issuer
+          value: lets-encrypt
+        - name: mysql.mysqlUser
+          value: 'mmdbuser'
+        - name: mysql.mysqlPassword
+          value: 'mmdbpwd'
+    chart: mattermost-team-edition
+  destination:
+    server: 'https://kubernetes.default.svc'
+    namespace: mattermost
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels: 
+        pod-security.kubernetes.io/enforce: "privileged"
+    automated:
+      selfHeal: true
+      prune: true
+    syncOptions:
+      - CreateNamespace=true
\ No newline at end of file
diff --git a/argocd/apps/mattermost/mattermnost.yaml b/argocd/apps/mattermost/mattermnost.yaml
index 3ed72bd..18095b3 100644
--- a/argocd/apps/mattermost/mattermnost.yaml
+++ b/argocd/apps/mattermost/mattermnost.yaml
@@ -8,36 +8,48 @@ spec:
   project: default
   source:
     repoURL: 'https://helm.mattermost.com'
-    targetRevision: 6.*.*
-    helm:
-      parameters:
-        - name: 'ingress.enabled'
-          value: 'true'
-        - name: 'endpoint'
-          value: 'mattermost.innovation-hub-niedersachsen.de'
-        - name: ingress.hosts[0]
-          value: 'mattermost.innovation-hub-niedersachsen.de'
-        - name: 'ingress.tls[0].hosts[0]'
-          value: 'mattermost.innovation-hub-niedersachsen.de'
-        - name: 'ingress.tls[0].secretName'
-          value: mattermost-tls
-        - name: ingress.annotations.kubernetes\.io\/ingress\.class
-          value: traefik
-        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
-          value: 'true'
-          forceString: true
-        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.middlewares
-          value: 'default-http-redirect@kubernetescrd'
-        - name: ingress.annotations.cert-manager\.io\/cluster-issuer
-          value: lets-encrypt
-        - name: mysql.mysqlUser
-          value: 'mmdbuser'
-        - name: mysql.mysqlPassword
-          value: 'mmdbpwd'
+    targetRevision: 6.6.85
     chart: mattermost-team-edition
+    helm:
+      valuesObject:
+        # Ingress Configuration
+        ingress:
+          enabled: true
+          hosts:
+            - mattermost.innovation-hub-niedersachsen.de
+          tls:
+            - hosts:
+                - mattermost.innovation-hub-niedersachsen.de
+              secretName: mattermost-tls
+          annotations:
+            kubernetes.io/ingress.class: traefik
+            traefik.ingress.kubernetes.io/router.tls: "true"
+            traefik.ingress.kubernetes.io/router.middlewares: default-http-redirect@kubernetescrd
+            cert-manager.io/cluster-issuer: lets-encrypt
+        
+        # MySQL Database Configuration
+        mysql:
+          enabled: true
+          existingSecret: mattermost-db-credentials
+          mysqlDatabase: "mattermost"
+        
+        # Disable External Database
+        externalDB:
+          enabled: false
+        
+        # Mattermost Configuration
+        configJSON:
+          ServiceSettings:
+            SiteURL: "https://mattermost.innovation-hub-niedersachsen.de"
+            ListenAddress: ":8065"
+          SqlSettings:
+            DriverName: "mysql"
+            DataSourceReplicas: []
+  
   destination:
     server: 'https://kubernetes.default.svc'
     namespace: mattermost
+  
   syncPolicy:
     managedNamespaceMetadata:
       labels: 
diff --git a/argocd/apps/mattermost/mysql-secrets.yaml b/argocd/apps/mattermost/mysql-secrets.yaml
new file mode 100644
index 0000000..5214f72
--- /dev/null
+++ b/argocd/apps/mattermost/mysql-secrets.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mattermost-db-credentials
+  namespace: mattermost
+type: Opaque
+stringData:
+  mysql-root-password: "InnoHubMYSQL_2025!"
+  mysql-password: "mmdbpwd"
+  mysql-user: "mmdbuser"