commit 19f815e582aff8a0877c66fa17d5b900000a2fdf
parent 52109f6bcbf48b55f5f7fcc3583a21a5a3393792
Author: MTRNord <mtrnord1@gmail.com>
Date: Thu, 10 Apr 2025 01:46:04 +0200
Meow
Diffstat:
1 file changed, 34 insertions(+), 30 deletions(-)
diff --git a/apps/base/mastodon/release.yaml b/apps/base/mastodon/release.yaml
@@ -26,8 +26,8 @@ spec:
externalAuth:
oidc:
enabled: true
- client_id: ENC[AES256_GCM,data:ssBMInaM4PniEKjnT6+NX5ylwRMtQ59Lna1g/ICgS2j+66rMp/q+fA==,iv:SF9nAHj5qhgd0FtsmlomTc0PoAM3lbXHJ3gqSshmVck=,tag:g9Lr/S9WQR0uiZLoQxki7w==,type:str]
- client_secret: ENC[AES256_GCM,data:FQqDDMdVsiVQCvAIiU+p/RT48dL2Lyn2Ubj08n+SlhbiTwMeGGKnWpmW6sf1KeGPSuCUpqJR0d3PCckxr53UrI3ni2NefxX1U+m+wBwSCGRWiy3Q6wSeXKwkEULw1ACGyKJgYZH2Cvm6rBl5evB31yQZtMsoB9n46VDgNg5n9Ig=,iv:+nzO17CgfX6y8sfqN2ylSYYIh/VpxliOTy/+WPSx/rU=,tag:Qbd9qxnGcdLsMXvzGPcTMg==,type:str]
+ client_id: ENC[AES256_GCM,data:Mvvvcim8VmbEJAnnaerW76gYA3/ds4RitfGVlJS5dspS73R0CKUPgg==,iv:XfMqFanSoArhPXSxSGy8IplddWcoL8RkFrDsp1+Who0=,tag:w6jEyOxc0WTLRTtBqDhv9Q==,type:str]
+ client_secret: ENC[AES256_GCM,data:J3CUSl8i+tG+NFFC0wIpSO2tzbTbLtuMEl3gWCHJ9GJeZhybIgNgoDujvCdNUh+gZ8z7R8EEPm+lqiJCtghpns3kn6PYWghf69/C38DfbEVNKiHJ1QJhOWAtoei207CedRSNRYtYrtRCnD8qO3tJVdIXWn6qzRwmzvOjitAOPXQ=,iv:DMnOshyriB/b9I6n4HITURnGbgN10zLWjI6/CVB5CeM=,tag:n6E6x2UPZCjs4pg39cPypw==,type:str]
display_name: authentik
discovery: true
issuer: https://auth.midnightthoughts.space/application/o/mastodon/
@@ -102,15 +102,15 @@ spec:
existingClaim: mastodon-system-v2
accessMode: ReadWriteMany
secrets:
- secret_key_base: ENC[AES256_GCM,data:BLR157W5f4JwNT4N0n16efinPrTfK2KADyBdBZB1E+LRt4bzCvaeSuJdSptjACTlTEXqq8NVmG4DtvlK/6khkYySpQ/m8CSvvAfHNiyB/TbaGqNYWs7hrAS/aQrECTOO7ex/pKizjvvBdMHlU3YkMYud/HPk3JY/aVBP8OnvzQM=,iv:Z3f4PVsyZ+KKsY339el+8wopwqwxLJn1WClyBiYcBe0=,tag:ju/IztFSKJ1jz25iaWCg2g==,type:str]
- otp_secret: ENC[AES256_GCM,data:eYGyji3p1htz00iG6XSRgmoLUPYWAjfuTvZI1bzfed9D7KDjzXdg6Yz24eCtq6v6vVDg9dTupeSsaWxZVR2QtuBRqI36tTYQ6aw0RuDzukBlMZQ67wq+hUE/JyeA6C7iUmfgpezrVnoGq1nIueiSYaHz2jzMuw/CTTGU4R+n+yU=,iv:BV2zdq3ebMw1NvfuSb2Z1HVWQ5hRit4sNproLhpymJk=,tag:Ca+cIbnAKwkB4axMJTMKBw==,type:str]
+ secret_key_base: ENC[AES256_GCM,data:/bwOgYoa3hQ6qWg+qE8n5kPI4ti828UVx4P17zMsxW7aF9FoUSshp6en/UR2ZDexfJJj5ip0l07sjzAKWnrcRdGLUUcFnLkK1UvWvB+3wvs1039YXezB1i2y9QfRNab1C8VhEBp6sPQlAytQgHHVNpsQWIjWPjh/eVqZ4bPTaLo=,iv:3pqqi5mY+aYPoJvsrEnWuKv/IfVwwgAWxbg+MoBhcms=,tag:DLZkanmLS+gpwcmXpmAaQA==,type:str]
+ otp_secret: ENC[AES256_GCM,data:bVWLJi8oe/+b5FiN36Nt+1ugQwTo/RAxdDx7q/TNhvl+u71bDhyvxWAyXgq8DIFK4BAqjQdgdK2DnyrfqYgIjUj9C6pt8tAYAinWVMD1lWvv0Lm85uftiBMfka3+LRj/nyU30svC2dAlejKvWr8dpG8cyEyYOvj1SKsi0ciu6HQ=,iv:8W3edmDJ6OcnOEStlJAkjCawpl39gwEDZDJDxDjfDhg=,tag:w1Qw+T+A3YEZxDQze2t8bQ==,type:str]
vapid:
- private_key: ENC[AES256_GCM,data:+PEI0sEalRmGvVckSj6JOOlMY4nxTHirAe6Q6ORY63g51ebd5nIR161fa6Y=,iv:GaGXnAjltAH1klbb7chs/ZGAxK3Nb9A7Z2QLUFU330E=,tag:gGwW6eFMvAzDHj9IIWM3Vg==,type:str]
- public_key: ENC[AES256_GCM,data:JAsv1O31mn6DwDrywZyGZYl6gZPPTlmIe8o3Q4wEXbkQ05/8hYcKq9reIZgfp/qK9JOl1Vy5KnQUhS7Zk0FnmdOLPHCyNEPWYbjRjj5Z591QREeaUIAiUA==,iv:atG8iNt7IMUSVsFjZO6oKq3EDbWFXOQ4Hkv7AhSTtuo=,tag:TotA2MDcHdxRWMXATZ+/2A==,type:str]
+ private_key: ENC[AES256_GCM,data:VZOME545Ev5AKsRG2voZ+mDrNiTMDD54j5Y1onvBPt2D6K3rddMRtOHLl40=,iv:lw6ShPetwLt6amZoSKcpOZ1DM7sB5b6sg86ihkcn5YM=,tag:389QXK53mVTNpCy1xC+VEA==,type:str]
+ public_key: ENC[AES256_GCM,data:YyTwAQDuBKg0gZ1lnkZVRg80umyixSQ66AQyY2t5uSyE3olCrXpkSR5DWdMQdT1fIV10zuUfMvdXm/7MfneCUxQOCnf8B5FnsuEASd2VTZFEtBCALtc7FA==,iv:kxWvRI0ml43aRMT/c3j9HXdQV8U6WRs3XWY7hzH2NxY=,tag:kEmmaVwm+jciR5Xan4Jmfg==,type:str]
activeRecordEncryption:
- primaryKey: ENC[AES256_GCM,data:q6clYY2iu7rc3JxzfVeD9j02+y2taJ1nPeBo4w6zYd4oiS2QXju8M1qDve3iUbfYjqnqlf0lnGkTHh6CJQsC3w==,iv:C9usSBY2dbhmWGxK0Elp3vzBmrotaczKdSCXHFM27ow=,tag:vd5spqrMvLLqsJHN4LfPPg==,type:str]
- deterministicKey: ENC[AES256_GCM,data:MVwCMzBSziJBoVV/V1uP8V+GId1hRtgYGRCqKCNf7CWJK1gWRYoE+qnkXgg8bNLsw8k2Mq8NqlrRhl4LaZWmXQ==,iv:w2mEQTIW9V86qqtrAu52YdBZi5uePF5zZASBac0CoWw=,tag:sDxkKu7D9+KJ7XxlszPJ7g==,type:str]
- keyDerivationSalt: ENC[AES256_GCM,data:v1QtWMeYfreC25t1J5FNKElMGgPjNJgkqxl66lBu5sfGDL/hBoGpFU77kW2DAiGduLO1acf4B+Ak+jb/3hAtvg==,iv:rE4Mru5m1v23oUXhUOV8Xm65YeYMAFAasaqg8FQBZLw=,tag:mesepmI30/pAWdaApmd2Cg==,type:str]
+ primaryKey: ENC[AES256_GCM,data:O/gklYBYpVLHyZjzCLpH8p6I2hKYrfv1h7+vn5rs0zeTL1ZsBqodnKU7Ql9N+ai7cWgKYCeMu4bpIYTPDBue0w==,iv:ebYbWX7aeIu3lFmnfU3Dsc96iMYhH0nRgdxnfM5Fzfs=,tag:+fCLcdhKWnyCqRnYTEb1aw==,type:str]
+ deterministicKey: ENC[AES256_GCM,data:jXWzBrMwoufSVEl7qbpCQeSiYLUaFt7/Y4FcAKTt462d4j0hbLIdIqkH3s2cMxmJ7hGiHhXN8ajGvcRV8kPifw==,iv:OBFQNsCO+J/eriDjhJ9f1qyYzrYmX5sGqZKEJ9OUq44=,tag:QdKWztk7yPLfOi0XOfLNQg==,type:str]
+ keyDerivationSalt: ENC[AES256_GCM,data:950MK6EZJwiH+Hl61VbnQsGIInYz1xnZF+MtLNDBmaR5JuTyJM+JAMVbm/TYFgFMsT7mmzcRTH0vO4eiiqiwwA==,iv:Sjv1vlARMsqd6XbeUhetsh88OI0oSo249TZZd9rD7W4=,tag:1sY8k4KGHyj6yeG6ZX1Q9A==,type:str]
singleUserMode: true
smtp:
domain: smtp.fastmail.com
@@ -120,7 +120,7 @@ spec:
server: smtp.fastmail.com
login: mtrnord@nordgedanken.dev
tls: true
- password: ENC[AES256_GCM,data:MlNefLJXYEdPplmeljIj+A==,iv:+Ss+fr7g97M2EimAd8LXHoHAYNR43CpGlMeZerwG46M=,tag:619AMuExZsR8S0uaJhOIJA==,type:str]
+ password: ENC[AES256_GCM,data:eiSs2kSmJy8grR3vYzv/Hg==,iv:xZWgKZyQmob2N9mCQuap51sko+G/+dIS6dPjSj/VVq8=,tag:PfmZJNuhaUZ94aJfW2Km4w==,type:str]
streaming:
updateStrategy:
type: RollingUpdate
@@ -145,17 +145,21 @@ spec:
auth:
database: mastodon
username: mastodon
- password: ENC[AES256_GCM,data:PDAem1QkWwHeEZqDeHsZdnOTk0yt4cPrX510CBbbUcWyAB2YEubGLPQfk9FRAdW2ga+N1T6nD06IG3SQaUsb1w==,iv:a/F91ucWj4+5venO2ERHyQieTc/akyLIY5F40o88BOA=,tag:ukDgpB/j3WPYLmdCdJTkqQ==,type:str]
+ password: ENC[AES256_GCM,data:vTcd7FoAm/LfWTniQv7nCRWIH5dsS1Ati91jnruSiP4WoCV3VLi2LLpM/WNc8RPcDbgskF8wjQt1EXNEnH2yeQ==,iv:P3/0c0oCb4MdUYLLEvvnACX7S4XXdH0oP+e+PeVQfeE=,tag:UEWld/Orzz7FmsHO6xERvQ==,type:str]
enabled: false
postgresqlHostname: pg-cluster-v2-rw.postgres-cluster.svc.cluster.local
#postgresqlReplicaHostname: main-ctrlc-repl.postgres.svc
redis:
- persistence:
- enabled: false
+ master:
+ persistence:
+ enabled: false
+ sentinel:
+ persistence:
+ enabled: false
enabled: true
#hostname: keydb
auth:
- password: ENC[AES256_GCM,data:xAs/+cBWAhtiP4SZBFn4Ri8X0jxJoQgrsw4Zp4MliJbkpt7uHskYpKsm5qwpvJPAi0Yp0Dj6JvktXljeUcfeSA==,iv:vKm40OYLmUualVhs2OI1gvKDNlbRTqN+NADhUtS9wVU=,tag:phyqRPrpHo3xSQJzhTpiRw==,type:str]
+ password: ENC[AES256_GCM,data:O+ZQj3ooQGuhtIXo0tw0QSxw2JNfZ0GFiXgYWNlW9654of/jPBLZQ1+1ewG+Q3VVAuVsDDzBuVppOCKQwYpZyA==,iv:aHx+RmvD4RmVA30uOLzTBOoTad8eD57IDaQjOp6z5m0=,tag:kpO10u16FP79aenufPNehg==,type:str]
replicaCount: 1
sops:
kms: []
@@ -166,16 +170,16 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqTlZFSW5NTmlsSnRlR1pN
- blM2RWN3SGhBWnRIT1lNcVQ2SnpHZEVOMGg4CkZocUh3eDB4dzdXSVJyZlYvKzFt
- N0VSUFpIQ21zWCtya0JYamo4a09KS28KLS0tIHNndnJSNVljaHlnTERnbVVxSC9C
- aHhKamtXT1Vpb2V5VTN5ZDByVTlHdzgKZFwoWZiMA8m4/EsROS5Czpd2sqqFx/+E
- aOHqzS6D0j2jhz6mPyQ9jnjUXqy2WJsjgINxgST9y1jk5IkJmxjcCA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5aE9ZZC8xMmMzUkF1U2tR
+ czU5aXlTdlBxazRZU2dGUFRSK25jbGhCTDFRClRXQ2prVVFkSXV0NC9Dc0ZFQmxt
+ WnRmamdyRDdBRlhLZjdOMjU3RlpMeEEKLS0tIDdZU2dKTktKQnZ4VmlGQWtMdDFx
+ YW5IWVhoOUVXZVNBZGMrYmZmbXhDWG8Kd1uuO2nZtxK0dp2wrGMlKi1YF9AXpSZV
+ zuII+EmMYocSkqZyOfFmnty7HZmBVpN8/W7hJYiO2LlpwMBBtNm90Q==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-03-19T13:13:05Z"
- mac: ENC[AES256_GCM,data:M/NesUN1qH4vfk86zEaZKqixDZcAlcBmuwkw9gg1XZoDGkX+xf5f/nDhMeyolrpZZcCT8h/LzdiYqQjjNsVx3CZpzcG50opnZA27xLy0JvnwelT/bAyF1JN9lorO5p+XIV3mml/ChfMzkaTYs4V1DuuMeWboKihNobC9NRUdn2U=,iv:+4dLDS4EB5ZKYezlYuUbSrVD4DOdHKBOJivVPtXxkQg=,tag:p8YVLETlYyBC6PzRY28pfg==,type:str]
+ lastmodified: "2025-04-09T23:46:00Z"
+ mac: ENC[AES256_GCM,data:48tOa1fC9GAYvpi2/b+WAaYYT8mJ1gpMVDfC4o9RR1MGawRFylF1zzSThF+1NL2CR8awUULxBJmVWVRaleQDIKNNJboAt2bHTnj9QUOVDEWknhErz867kLkNwOcfLzJtkerxj0djXiVXQwYcHccVCl7qeAa+zYkcdhxpFdX/miA=,iv:XjoVRwNP4IGalhpE1HP+bvvVmhZvcX5sc6Bl+9/HUoY=,tag:11e4Jn1ndNw3i7vS08tyog==,type:str]
pgp: []
- encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(root_password|pgdb_password|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
---
apiVersion: gateway.networking.k8s.io/v1
@@ -219,14 +223,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqTlZFSW5NTmlsSnRlR1pN
- blM2RWN3SGhBWnRIT1lNcVQ2SnpHZEVOMGg4CkZocUh3eDB4dzdXSVJyZlYvKzFt
- N0VSUFpIQ21zWCtya0JYamo4a09KS28KLS0tIHNndnJSNVljaHlnTERnbVVxSC9C
- aHhKamtXT1Vpb2V5VTN5ZDByVTlHdzgKZFwoWZiMA8m4/EsROS5Czpd2sqqFx/+E
- aOHqzS6D0j2jhz6mPyQ9jnjUXqy2WJsjgINxgST9y1jk5IkJmxjcCA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5aE9ZZC8xMmMzUkF1U2tR
+ czU5aXlTdlBxazRZU2dGUFRSK25jbGhCTDFRClRXQ2prVVFkSXV0NC9Dc0ZFQmxt
+ WnRmamdyRDdBRlhLZjdOMjU3RlpMeEEKLS0tIDdZU2dKTktKQnZ4VmlGQWtMdDFx
+ YW5IWVhoOUVXZVNBZGMrYmZmbXhDWG8Kd1uuO2nZtxK0dp2wrGMlKi1YF9AXpSZV
+ zuII+EmMYocSkqZyOfFmnty7HZmBVpN8/W7hJYiO2LlpwMBBtNm90Q==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-03-19T13:13:05Z"
- mac: ENC[AES256_GCM,data:M/NesUN1qH4vfk86zEaZKqixDZcAlcBmuwkw9gg1XZoDGkX+xf5f/nDhMeyolrpZZcCT8h/LzdiYqQjjNsVx3CZpzcG50opnZA27xLy0JvnwelT/bAyF1JN9lorO5p+XIV3mml/ChfMzkaTYs4V1DuuMeWboKihNobC9NRUdn2U=,iv:+4dLDS4EB5ZKYezlYuUbSrVD4DOdHKBOJivVPtXxkQg=,tag:p8YVLETlYyBC6PzRY28pfg==,type:str]
+ lastmodified: "2025-04-09T23:46:00Z"
+ mac: ENC[AES256_GCM,data:48tOa1fC9GAYvpi2/b+WAaYYT8mJ1gpMVDfC4o9RR1MGawRFylF1zzSThF+1NL2CR8awUULxBJmVWVRaleQDIKNNJboAt2bHTnj9QUOVDEWknhErz867kLkNwOcfLzJtkerxj0djXiVXQwYcHccVCl7qeAa+zYkcdhxpFdX/miA=,iv:XjoVRwNP4IGalhpE1HP+bvvVmhZvcX5sc6Bl+9/HUoY=,tag:11e4Jn1ndNw3i7vS08tyog==,type:str]
pgp: []
- encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(root_password|pgdb_password|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
