cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 09810b5aa45b6d1c89fc77e39643c9b81e1f609a
parent ecc416f687c8e2b1037521e999a2b7c9936860c0
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sat, 29 Nov 2025 13:45:23 +0100

almost there

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
Aapps/talos_cluster/bookwyrm/admin_code.txt | 21+++++++++++++++++++++
Mapps/talos_cluster/bookwyrm/deployment.yaml | 5+++++
Mapps/talos_cluster/bookwyrm/initJob.yaml | 1+
3 files changed, 27 insertions(+), 0 deletions(-)

diff --git a/apps/talos_cluster/bookwyrm/admin_code.txt b/apps/talos_cluster/bookwyrm/admin_code.txt @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data:XhCrUfHoMKkQ24GQgJX5iNHD9HNRn0YZVCex3Ba/bnqq+y7a,iv:WDlkGAtfYsT613GmOqKStSz67v23P7IAmuJiOIyCDYs=,tag:93E34UhbibUtkhTtlkJsNA==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQQ2NGUzZoRE5QODZsV0R2\nRW0rMnNkdHZ6YlhHNTlOeXlIVWJnUy9wTkIwCmgzSnpkaGFNNFYzSHU1R2k0Rkta\nYzNvSE1QK0JEbHh5dFZ4V0cwWGUzR2cKLS0tIEo3M2RmazM3ZmJjWnpKTnFMNGVa\nSjdlU2ovRWphcFRUTkZla0k2dlhnVjgKzqD+uSoZ4WJt2pvKADO4WOyoiJaUTsY1\n7K3u+oCrykjJAPjwtMSt8huEZ31PWi/dV/+9bT0sd2bTs89/kq20nQ==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-11-29T12:45:11Z", + "mac": "ENC[AES256_GCM,data:h0TDT4OaAm3Xomvw9D6RYLWfdwXKoJi6U8Qy6ZtKmpeV4ZhDHvc6BM/mdnjqDCxGwfYh2bul/nQWVORDfT6tIYqDg9ghkC4wZ94ydWeUGnqtyRbjx+lf62UybEHCNJD5VuNiP6p7uCErP7yzS11ehadQmYSbQQHHph7pEUWhdk8=,iv:FSB6Z8hLpc6c0/+yCXeqjDt9wv1ZlR8XotF5EPqYh2o=,tag:hYGf771T6OfK9cHwRZ6GOg==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/bookwyrm/deployment.yaml b/apps/talos_cluster/bookwyrm/deployment.yaml @@ -45,6 +45,7 @@ spec: initContainers: - name: bookwyrm-update image: ghcr.io/mtrnord/bookwyrm:v0.8.2 + imagePullPolicy: Always command: ["bash"] args: - /hl/bookwyrm.sh @@ -66,6 +67,7 @@ spec: containers: - name: bookwyrm-web image: ghcr.io/mtrnord/bookwyrm:v0.8.2 + imagePullPolicy: Always command: ["python"] args: - "manage.py" @@ -98,6 +100,7 @@ spec: protocol: TCP - name: bookwyrm-celery-worker image: ghcr.io/mtrnord/bookwyrm:v0.8.2 + imagePullPolicy: Always command: ["celery"] args: - "-A" @@ -124,6 +127,7 @@ spec: env: - name: bookwyrm-celery-beat image: ghcr.io/mtrnord/bookwyrm:v0.8.2 + imagePullPolicy: Always command: ["celery"] args: - "-A" @@ -150,6 +154,7 @@ spec: env: - name: bookwyrm-flower image: ghcr.io/mtrnord/bookwyrm:v0.8.2 + imagePullPolicy: Always command: ["celery"] args: - "-A" diff --git a/apps/talos_cluster/bookwyrm/initJob.yaml b/apps/talos_cluster/bookwyrm/initJob.yaml @@ -17,6 +17,7 @@ spec: containers: - name: init-script image: ghcr.io/mtrnord/bookwyrm:v0.8.2 + imagePullPolicy: Always command: ["bash"] args: - /hl/bookwyrm.sh