cluster

commit 0220d071b125bc9a82f9b11f83857b55c96a7746
parent ad1eecfa138bb69739b19f5a94da5f0f6b2871f9
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue, 14 Jan 2025 18:58:03 +0100

Meow

Diffstat:
M
infrastructure/configs/cnpg-cluster.yaml
 | 
130
++++++++++++++++++++++++++++++++++++++++----------------------------------------

1 file changed, 65 insertions(+), 65 deletions(-)
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -10,13 +10,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
-            b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
-            VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
-            OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
-            mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
+              b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
+              VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
+              OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
+              mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-14T17:44:07Z"
     mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
     pgp: []
@@ -40,13 +40,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
-            b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
-            VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
-            OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
-            mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
+              b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
+              VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
+              OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
+              mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-14T17:44:07Z"
     mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
     pgp: []
@@ -79,13 +79,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
-            b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
-            VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
-            OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
-            mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
+              b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
+              VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
+              OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
+              mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-14T17:44:07Z"
     mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
     pgp: []
@@ -113,7 +113,7 @@ spec:
     plugins:
         - name: barman-cloud.cloudnative-pg.io
           parameters:
-            barmanObjectName: hetzner-store
+              barmanObjectName: hetzner-store
     backup:
         barmanObjectStore:
             destinationPath: s3://midnightthoughts-pg-backup/pg-base-backup
@@ -135,79 +135,79 @@ spec:
               login: true
               superuser: false
               passwordSecret:
-                name: synapse
+                  name: synapse
             - name: draupnir_synapse
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: draupnir-synapse
+                  name: draupnir-synapse
             - name: authentik
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: authentik
+                  name: authentik
             - name: ejabberd
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: ejabberd
+                  name: ejabberd
             - name: vaultwarden
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: vaultwarden
+                  name: vaultwarden
             - name: mastodon
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: mastodon
+                  name: mastodon
             - name: openproject
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: openproject
+                  name: openproject
             - name: plausible
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: plausible
+                  name: plausible
             - name: coder
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: coder
+                  name: coder
             - name: matrix_auth
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: matrix-auth
+                  name: matrix-auth
             - name: cachet
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: cachet
+                  name: cachet
             - name: docuseal
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: docuseal
+                  name: docuseal
             - name: bugzilla
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: bugzilla
+                  name: bugzilla
     #bootstrap:
     #    initdb:
     #        import:
@@ -267,13 +267,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
-            b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
-            VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
-            OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
-            mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
+              b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
+              VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
+              OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
+              mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-14T17:44:07Z"
     mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
     pgp: []
@@ -299,13 +299,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
-            b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
-            VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
-            OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
-            mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
+              b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
+              VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
+              OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
+              mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-14T17:44:07Z"
     mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
     pgp: []
@@ -318,7 +318,7 @@ metadata:
     name: hetzner-backup
     namespace: postgres-cluster
 spec:
-    schedule: 0 0 0 * * *
+    schedule: 5 4 * * 1
     backupOwnerReference: self
     method: plugin
     target: prefer-standby
@@ -335,13 +335,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
-            b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
-            VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
-            OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
-            mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
+              b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
+              VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
+              OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
+              mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-14T17:44:07Z"
     mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
     pgp: []
@@ -354,7 +354,7 @@ metadata:
     name: hetzner-base-backup
     namespace: postgres-cluster
 spec:
-    schedule: 0 0 1 * * *
+    schedule: 5 4 * * 3
     backupOwnerReference: self
     target: prefer-standby
     immediate: true
@@ -368,13 +368,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
-            b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
-            VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
-            OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
-            mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
+              b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
+              VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
+              OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
+              mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-14T17:44:07Z"
     mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
     pgp: []