cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 0674b9d4d688597bef46a57b9ba4bc1ff7e587df
parent 4ea8345c9ade53da0572b09568641b357e2a9a6b
Author: MTRNord <mtrnord1@gmail.com>
Date:   Thu, 10 Aug 2023 22:27:04 +0200

Fix pg

Diffstat:
Mapps/base/forgejo/release.yaml | 28++++++++++++++++------------
1 file changed, 16 insertions(+), 12 deletions(-)

diff --git a/apps/base/forgejo/release.yaml b/apps/base/forgejo/release.yaml @@ -32,7 +32,7 @@ spec: - SYS_CHROOT signing: enabled: true - privateKey: ENC[AES256_GCM,data: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,iv:8xA8Dfx0RFeDFXPUlB8q4bRMSgvDsJp3Rb8UjdK4HHA=,tag:dPG9V3J+U8Y1mwqyenqNDQ==,type:str] + privateKey: ENC[AES256_GCM,data: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,iv:PEkS6oP058PfphbKr6kSJOwJjHzgUFD5YdJHlKBY4FY=,tag:Tvb53w13gJfReimCrMY6Ug==,type:str] memcached: enabled: true persistence: @@ -56,11 +56,11 @@ spec: - name: keycloak provider: openidConnect key: gitea - secret: ENC[AES256_GCM,data:QfNNEX17h6VhjA5Gh2Up89CsytS7+8ZzS4D2YBczHOc=,iv:hYoYcIA02qjib335xp46kFuCW3F99sZ3qo5kFULXHS8=,tag:N8rTl3hGJXOCPbzIVsFCPA==,type:str] + secret: ENC[AES256_GCM,data:2DJ0InzGyxQV88m/KfY10p8cj/aI9UvKPrt0Xr90eHM=,iv:jb+lbFn5ySzr7K9uOCum2M+BHNgQkZvcRR92yGXru0g=,tag:s5zP2C3qns+0HYkpujP8wg==,type:str] autoDiscoverUrl: https://keycloak.midnightthoughts.space/realms/Gitea/.well-known/openid-configuration admin: username: gitea_admin - password: ENC[AES256_GCM,data:6mI2vU5wN/lATIoz/z8+zJq+Tz83YvW9LiGssSWaM/oOdX23RrG+lrPQOsF7JcPe8Z0mxOuzYo5gu8TCyaf+aA==,iv:mh5VFxBIsWI4ElG00S6x38MpAEdb7ASJ0lZHqipK7Nw=,tag:N9JwoD7ShEDyhP1pPlUU7w==,type:str] + password: ENC[AES256_GCM,data:ETv6CIUqU22YsF9vYPVIbb2Ou4g1aS4IXp5PxyyDKqc8XwVeTvJsUqpg82cLh3kzscNw9KJ0YWRZMeuLJtCZaw==,iv:IBTBUIVZ12r2bPBXCSqVXHP0Z9OwF0sDtTvuEoDKx9M=,tag:dJlmTRmF4z/7EgHOBaxutQ==,type:str] email: ops@nordgedanken.dev metrics: enabled: true @@ -96,14 +96,18 @@ spec: SMTP_PORT: 465 PROTOCOL: smtps USER: ops@nordgedanken.dev - PASSWD: ENC[AES256_GCM,data:rlxYS1berFV/,iv:mwqPFcXm2ArRq75azO68SVyIfsqYJXd9x1tZxWpdgUY=,tag:2Fbi7lYkqAuUWC6R6Ovafg==,type:str] + PASSWD: ENC[AES256_GCM,data:zmppITFeUvel,iv:2qUYpiOM1msEBBOF09234FiocOIdynk0418ComviWoU=,tag:0Rw8z+Bdll7iuQLuX8enFg==,type:str] postgresql: + image: + registry: docker.io + repository: bitnami/postgresql + tag: 11.11.0-debian-10-r62 enabled: true global: postgresql: postgresqlDatabase: gitea postgresqlUsername: gitea - postgresqlPassword: ENC[AES256_GCM,data:ctUJLnd16rRiCUookf5tdAbffII03AAGbyP/iPIjqOQyGJ6JRflc5NEbaV3/50WZgXAYt6p0kH1+to3fNIOiHA==,iv:KFKA1z6ccIoRGYt2EvQJZpPa/ATojg73zgBEKRJMu5o=,tag:HeYRXY94vJ7maerPzrw5qg==,type:str] + postgresqlPassword: ENC[AES256_GCM,data:3isz2cIt9cd2wAJQ8N9LwOnReH9NN8mVnjCMNZ3+eFeoIx1nRV416N+1CEKKzYdDiPYygC3BWZPXVGBTq596sA==,iv:J8RNoj8Ns2vR0hiJobB42eoe+iD50zumHjUm0GTVbCk=,tag:lMmga4D1WakVXajd2DmNAg==,type:str] servicePort: 5432 persistence: enabled: true @@ -117,14 +121,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydE51dlczQ2kvWEczL0lZ - amVQbW5xUGtIVlpzdXA0UTJ5Y09qbzFsN0ZRCjdGbHNtZlphZE9VQnJhaitkOGJ5 - NDFOT1UyR3NHZVlub2RSa3ZCZ3Q3ZWsKLS0tIEpRbG5VTzh5YUNmQ3ZxZ3lDYis2 - enZvT2xGU055MEhpbHN0U0hzVWRTWUEKIKZIchWfWH6DxMX9vqmtDMrMA+qJl75I - pqkwhCp/HBVuXas2Jgxsx104fcoouNJJmmxjaGc5jvaBBxiMQRj4jw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4VnlZaHVsVzMvcjBXaVNq + MGJNMmtYb1c2c3F5T3VnOFYzTXdBL1l5RWpBCjY1YllhQWU2M1VHT3lXYXFQb1Fl + UDk3c1VQRWhDc3Y4MGtQSlQ0N05sbVEKLS0tIHNwcTlTVldHcmVkMUkrOCtiYmZa + MEZEbllJOExob2ZudW1iek8rSllvcmcKGUV/UkPJtHCc18oBf6X7Kfg9xhXG+NsD + JwUjSpbBVRt5Pe7cvRqNXlYTcEC937gLjzW+Fxk6wAoATGi05sm6ag== -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-08-10T20:05:15Z" - mac: ENC[AES256_GCM,data:u1zm81VmcEnl0C7FFCUcAJlqefP/+qYYLzDtHOqiTiz8XR3UMDPf+TUArJyOeXnIVar8LSyTk065GoIelg5/9k/6sBh9yRpSdUelZMwZ8ih//R3JB32+N5nYZsWffb0gCyMAdvmljrfK78hmpYKQCsi7FNWFppsYDSTwsmN7ql0=,iv:LSoDv7bBGtmCbt8fG55VUz2b/s87J9q+Ywl9Cm1Eztw=,tag://B9cZsyqK+q//3M2DMNVQ==,type:str] + lastmodified: "2023-08-10T20:26:57Z" + mac: ENC[AES256_GCM,data:aD5H8JXFIUVSz8ue7qJrA1C8JyiQe9oLNqm7pX6SoD8nv3w+5+vw2vTMOgWMoKtVKxik0Pcj383kNZqOj8/4WxK1Lm4n1hqW22Njo2xpoaSuSVUiWJQm9IDV3toUhLZWyl9xqiG2p6NaCZ0KzaE5kIPpLvhsi+acH1jPgxqWRTM=,iv:JRGthfZmLZvD+pWGSy+cXMyR+erInCFQ9VTvb8XxwKY=,tag:4HMQ9YDP1DP8mZivm63nYg==,type:str] pgp: [] encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ version: 3.7.3