From ebb300b939b1a0460e0b2c90e3ecff9da1ff89f6 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 17 Jan 2026 18:22:36 -0300
Subject: [PATCH] comms: mount host-specific Element config file

---
 services/comms/helmrelease.yaml | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/services/comms/helmrelease.yaml b/services/comms/helmrelease.yaml
index 406ab51..10554b6 100644
--- a/services/comms/helmrelease.yaml
+++ b/services/comms/helmrelease.yaml
@@ -382,14 +382,18 @@ spec:
         url: https://call.live.bstein.dev
         participant_limit: 16
         brand: Othrys Call
-    nginxConfig: |-
-      add_header X-Frame-Options SAMEORIGIN;
-      add_header X-Content-Type-Options nosniff;
-      add_header X-XSS-Protection "1; mode=block";
-      add_header Content-Security-Policy "frame-ancestors 'self'";
-      location = /config.live.bstein.dev.json {
-        try_files /config.json =404;
-      }
+    extraVolumes:
+      - name: element-config-host
+        configMap:
+          name: othrys-element-element-web
+          items:
+            - key: config.json
+              path: config.live.bstein.dev.json
+    extraVolumeMounts:
+      - name: element-config-host
+        mountPath: /tmp/element-web-config/config.live.bstein.dev.json
+        subPath: config.live.bstein.dev.json
+        readOnly: true
 
     ingress:
       enabled: true