comms: mount host-specific Element config file

services/comms/helmrelease.yaml

@@ -382,14 +382,18 @@ spec:
         url: https://call.live.bstein.dev
         participant_limit: 16
         brand: Othrys Call
-    nginxConfig: |-
+    extraVolumes:
-      add_header X-Frame-Options SAMEORIGIN;
+      - name: element-config-host
-      add_header X-Content-Type-Options nosniff;
+        configMap:
-      add_header X-XSS-Protection "1; mode=block";
+          name: othrys-element-element-web
-      add_header Content-Security-Policy "frame-ancestors 'self'";
+          items:
-      location = /config.live.bstein.dev.json {
+            - key: config.json
-        try_files /config.json =404;
+              path: config.live.bstein.dev.json
-      }
+    extraVolumeMounts:
+      - name: element-config-host
+        mountPath: /tmp/element-web-config/config.live.bstein.dev.json
+        subPath: config.live.bstein.dev.json
+        readOnly: true
 
     ingress:
       enabled: true