cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 057c06ee296050e2d392a725896fb8404a90eb01
parent dc913e9608186e159163f53b7b074b5830e433c3
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sat, 20 Dec 2025 23:20:45 +0100

fix format again?

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
Aapps/talos_cluster/immich/.env.database-credentials | 20++++++++++++++++++++
Dapps/talos_cluster/immich/database-credentials.env | 10----------
Mapps/talos_cluster/immich/kustomization.yaml | 2+-
3 files changed, 21 insertions(+), 11 deletions(-)

diff --git a/apps/talos_cluster/immich/.env.database-credentials b/apps/talos_cluster/immich/.env.database-credentials @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data:FXf6xNgDTYsNOa7WNXU4PM0Gge/hIqIIaMGMPnIVJCet9JBvmXuDPeAYnCPRxhUIplVtMmBA3hdGrdvrmU7c6CsYzgdgh6vqu6VggwIFUHo5apN4DDgvIehaFsIzRxQL6n4HogwqxMe3NdFWJNInHl+4ikmwDPBKPxrhuRKpNliUM/TvbOv2ECaXeq1KIZdb69ssisUjdLVJLFilKTmf3xE=,iv:C/6Psl+vHiQLIKjDjf82d0Hqbe2K/niJa4epJX0DQ4g=,tag:x2bD1j7+LOp6E/x8zh8T7Q==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxbWRDV21IaXB2ajllUG9s\naVZFOWM2b1JsaWE4SHIwY1FjSlhPZUZGMHdnCjFwTDZWU2NMbEpLOTNwYSswemYy\ndlFBUkN2ejRyaWdqQWprRUk0RUZkbUUKLS0tIEtUeGhyWEtPMXdHd2xvU2ZtdnNt\nV1ZVRU1Sem4yTnVSaC96WFNNUmpXSU0Kv4ukqqwGY9zNNPefuKlby2gS/wfcCI1W\nmPfYD9fZ5C2ElQNtVCjwOi/tIPtp21pFEGcPHkP4/HwPy32DniJiVA==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-20T22:20:30Z", + "mac": "ENC[AES256_GCM,data:Cm1dSm5GOhDfbk1GRGvvZFt9Slm/Citn45lDxc5zehvefkGoAJiM5NH/W5BS5+Dw1ie5qVezwlOmQeuVuPVVs7hLbPHutfpUEag+oMej5BI7pH+fVh6usCqAAiGaAtGtdeZTsdhiefrJSSRji5xSdgQW2fIwwjgOvjlmCk9XtBs=,iv:F87XMoSPvMYuN5sYYEj71SAHUMWettN/G7F1lmsupH0=,tag:FpALzOhfDelNBmfl3ujlsw==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$", + "version": "3.9.1" + } +} diff --git a/apps/talos_cluster/immich/database-credentials.env b/apps/talos_cluster/immich/database-credentials.env @@ -1,10 +0,0 @@ -host=pg-cluster-v2-rw.postgres-cluster.svc.cluster.local -username=immich -password=ENC[AES256_GCM,data:jVewisKykTl5N0MXsisR9TqJMgckeqbfBZWN1PQXZ5rH5dk0vNOgBDe6nEBdfb83qRUxfTmaEOhcT5C+hJBZKw==,iv:s+bHEgy8/EJx6OggvoXv/GnxWnNHvxXkGSiyp9aQ8Mo=,tag:/nqcs2QMGRtdDtH6j/XIHg==,type:str] -dbname=immich -sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjbWlxTWZGMzM1MHowcThJ\ndjg3S3ZPTEczOW43VHk1bHZBSkxReUt2d0JrCkl6RlpCTC9xMDBVMzgwUzlmaFVG\nYkpBam1UM2RWd0tNdDJGV3J6RGRqTUEKLS0tIFlkUEFyWE5aaW1NKzhoajVPejBO\nN04xeXJHSzNoT1JPR1BFaDdOSkhnc0EKsjFWDJ1GWBMQ0WE04SxL5oKoCVOSURMj\nYfAh7+prcD1yMkn/bCOlJuskq77E358efzNyoNqPTOVRDci5CvBQIQ==\n-----END AGE ENCRYPTED FILE-----\n -sops_age__list_0__map_recipient=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh -sops_encrypted_regex=^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ -sops_lastmodified=2025-12-20T22:16:35Z -sops_mac=ENC[AES256_GCM,data:khHdHOhDA0O7c3PrvOO2oDG2vcKVikhNznKTUgzSDmngyGa9rWD3XYn0V39qPfKWaE8GkT76aVBrSgaNMCr3nrwBMhYb+8S/v4ygla+BPsvuBlvB8UYmT/W9j/l7udtfvhPMeSqO+FtKURxRWJMp3rG3NIOTXgQgXAOMoz1MMts=,iv:znrxyKXh8V2aTYzluo2m0MnZQ09nGiftMMkPbxIHGF0=,tag:r1WrawsaMMmSbO87nXYVAA==,type:str] -sops_version=3.9.1 diff --git a/apps/talos_cluster/immich/kustomization.yaml b/apps/talos_cluster/immich/kustomization.yaml @@ -11,4 +11,4 @@ secretGenerator: options: disableNameSuffixHash: true files: - - database-credentials.env + - .env.database-credentials