cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README
commit 07435898a3179f6ab078c645263a77c174bc81f2
parent 187267c15200899cdfce3f956f24fa01e8058411
Author: MTRNord <mtrnord1@gmail.com>
Date:   Fri,  3 May 2024 19:29:16 +0200

Add mobile push for vaultwarden

Diffstat:

Mapps/base/vaultwarden/release.yaml | 31++++++++++++++++++-------------


Mdecrypt.sh | 2+-


Mencrypt.sh | 2+-


3 files changed, 20 insertions(+), 15 deletions(-)

diff --git a/apps/base/vaultwarden/release.yaml b/apps/base/vaultwarden/release.yaml
@@ -17,13 +17,18 @@ spec:
     remediation:
       retries: 3
   values:
+    pushNotifications:
+      installationId: ENC[AES256_GCM,data:FnBfSpv3K+R2rWmkooHY9aWjD5c3aMAm6xufiu8/Apg3dZc2,iv:3p2wTGW8u10ZNXTOPoPy8OIalRFhGkjVrWta5JQhOxY=,tag:1veQwIkIGlIEou9bGaIVmQ==,type:str]
+      installationKey: ENC[AES256_GCM,data:fsJxLQlRpyaWEQD4BNbchEcSuzA=,iv:MiMY+O2fRNhQ3mW/JhJMsCJ2S+5D8btCy5btFIWLHB8=,tag:OzxZIN25dnNEQgN0NIXnkQ==,type:str]
+      relayUri: https://push.bitwarden.eu
+      identityUri: https://identity.bitwarden.eu
     signupsAllowed: false
     domain: https://vault.midnightthoughts.space
     signupDomains: nordgedanken.dev
     timeZone: Europe/Berlin
     database:
       type: postgresql
-      uriOverride: ENC[AES256_GCM,data:ptv/omzNlx38wVRgnFS2FCFgPrP+vkvZU9McvBK5GNK49nXYwHL9C9FukcowC23I8qSAWs65EJwDe8Yy2eeyr6FOtN3/kJuJyVyHgPMvRpXg2+89vBCbmfm51AENt6XFD6Se0foFKczxJmJRXCG6A+cevRkXoVlMz23k5152BTPnElqGDiPqCPuCejYKRFhzjg2vZe38M7BX6zVliLw=,iv:PRX2nl8eFnPg5+SBZvC+C2pgQDWgnyTU7ShapP808nk=,tag:89RVmNFGaOfheaSMuncWpA==,type:str]
+      uriOverride: ENC[AES256_GCM,data:e55ev6b5dQKJeIGFU+fnXz0bGeuhqP2MRQHTmU1aA5OgAGN3N5XsWN8/xnbfB4/vURkzX73GMnyfsMNDt0UlLpEs/UCiZSbZsHKorwO+Av+z2xFdwCIOvQFmomAbohAersYQViNvuEIOddjTfOwz9RmR7zYsyCabj4v9ZsThvWsze0bj9pFXzQLNAQdsJ7idAsGWHEG1pF/3JOgDzxo=,iv:m8DzQOYggwHxbqCt4GsHKSoKyI99SE5429iawtY/LBY=,tag:zLFCGOlF8xXiHS6TPYKEFg==,type:str]
     ingress:
       enabled: true
       additionalAnnotations:
@@ -38,15 +43,15 @@ spec:
       host: smtps-proxy.fastmail.com
       from: vault@nordgedanken.dev
       fromName: Vault Administrator
-      username: 
+      username:
         value: mtrnord@nordgedanken.dev
       password:
-        value: ENC[AES256_GCM,data:0lIc8kg+mBC9pwIYwx8X5Q==,iv:NWuUVRN5Jh3MwpsSFNmsTVHWZ35YshdHMFpfcheLUVk=,tag:UT11BacWVPjybwgeZIiA3A==,type:str]
+        value: ENC[AES256_GCM,data:4FHuk1sZ/e3ectoPM2Zp5w==,iv:K0RlQY8q2dB7+r2iDjJc7J1vtsAkO/8haNOps/OmrQc=,tag:/IFTtNjJEQKkK7a0hb8ntQ==,type:str]
       security: force_tls
       port: 465
     data:
-      name: ENC[AES256_GCM,data:I/sQJP+mDOO4K/NpYmScUA==,iv:HvFxdcAjBKM5MZKFb44G6O8tU0p6b9BdaK0xj11PdkI=,tag:4ZBDz6m6yARVUxwqwfPgSw==,type:str]
-      size: ENC[AES256_GCM,data:6Vvn,iv:GdZuNn0Ihu3jt+cV6I6M0ZG/kFAUqRJkH3j3FRgBAMQ=,tag:LUNs9a8dscM9MXl1UniiPQ==,type:str]
+      name: ENC[AES256_GCM,data:H/c6xvK5/SIgcm1f0AONlQ==,iv:rabTAXdgczRnpFq6SbHh9W998GLGOcKNuz1CvSEjBgo=,tag:B3ek4Gaqq5xDiTBxGCChKA==,type:str]
+      size: ENC[AES256_GCM,data:WOAd,iv:UUfcDBTLgNXziLfqhc3NGoZAunxro3hp+OQ3Uyz5OV8=,tag:yOEAh9sSfEQDGt2HtktH7g==,type:str]
     resources:
       requests:
         cpu: 50m
@@ -60,14 +65,14 @@ sops:
     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0eGlYbVZ6OWhnTU9xYjFy
-        YnMzeFdBZjdDRDNiK3RFaU9rMnRscHRyZjFFCnFGSE16TzVNY1EybkxxQlpFMkZL
-        dUF2Q0sxNHZuSHNWMEhjTzJubytRNjQKLS0tIE5ZR3V4MXUyNmxOQ29aU0plZHNj
-        dkljd01LZWlDdjJRWVpVTmlaTkUwTGcKTO6jwFG8Hr/Ud9dlFiSV5iaBW6Fe6bf2
-        whfA5dNK8CMwXlQ3ESpIu9RMwOmxaSuZOc3EWlzjO4n3ZmNDue02Og==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoMWJEWHFTS2NPbDUrM3NG
+        d29iTjNhbzYyTVVYOUNMWXZwdE5LMVMrc1hZCmh2Lzg0aThVK0NGYnRmODJ3WmdQ
+        Y3JtaFlXRE1qZXk2TDR0Nkl3aVZlRDQKLS0tIE5uU0dFR3FURWc4NURDNHJqZ3lm
+        SWdZeTZSVVJGZEVBNjViY1ZxTjNtbUkKbZEVIUkaxy9jN7fZOkZNNP2DNSZI4xm1
+        uF3jRXfiX3i1yekY5Y/a7QD+nXSaArzsqyzHrXYGQ5oRbcmbRwy7fw==
         -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-05-01T16:29:41Z"
-  mac: ENC[AES256_GCM,data:cuah+l3ZTboKFKrXqlOdEUle+k2BeadLiDCen6awAPNaXEn6UUuaGJyrDFlJyUHyqcBs59tAJX/tZt28vjpGph/qXhb9Ps4+exBxprnErbwA91VLeYVsgdEBgDTOCodTGp9mKo7QzoCItMTqiJHAzTCMwxHgRlhxmE3uC1DljzU=,iv:zOLIKwSK4P6z1TTd7jWXz9VL0ikSwdf4oibskphbbHk=,tag:+dvxfmEdXqT+2ONmxH8YjA==,type:str]
+  lastmodified: "2024-05-03T17:28:56Z"
+  mac: ENC[AES256_GCM,data:7QRsqvXi7jzWfPhoO1t2VD2JNzzIsGkkqm7uxLdf7Ct+hrH3J+LsKA49ybi+tgHXwNzA/pkddi5anMBHeJROktnAiGGK46a2iS0oMOjlkEB2CD81WkIjAtfldwq/NHi0i4y7RXcAZN5r1ObIFN+QkKlQ2a+/vXBdWoKeJWe+1is=,iv:nlimsDUpF8qydb4XgPtGXwNu5p3AJowT4e3wmMtFX2o=,tag:NOD6pIcoNI4HM0mVU3V9Lg==,type:str]
   pgp: []
-  encrypted_regex: ^(uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+  encrypted_regex: ^(installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
   version: 3.8.1
diff --git a/decrypt.sh b/decrypt.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 
 export SOPS_AGE_KEY_FILE="$(pwd)/age.agekey"
-sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
+sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
diff --git a/encrypt.sh b/encrypt.sh
@@ -1,3 +1,3 @@
 #!/bin/bash
 
-sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
+sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"