commit 298a63c4761b6bab6068bcae2c599620a438602b
parent 258f16b6e3ed5714b885e20ff2c326f2a81455b4
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 6 Mar 2024 19:46:51 +0100
Fix insecure flag in egress
Diffstat:
1 file changed, 17 insertions(+), 16 deletions(-)
diff --git a/apps/base/matrix/element-call/release.yaml b/apps/base/matrix/element-call/release.yaml
@@ -23,8 +23,8 @@ spec:
# causing spurious drift detection
force: true
values:
- livekit_key: ENC[AES256_GCM,data:hgwBX/xTh39LdWu5vBrNdyuTAYHdit0aHFNrt+QZ/NAMcK3zI+D+K/u/uuJx2UeDj93GKjbIdjWb5zFR7Ld4vA==,iv:cfOcIArR59wDjuJkr1wxliKoht6qdCe8zps3D0TDux0=,tag:4Sk5tvNhbMrUpquh5h3qFA==,type:str]
- livekit_secret: ENC[AES256_GCM,data:nCCzUSp/Bj7oh+oP7o2a4uZE1TBpiUyIND0ZcKGywBmjbB0/kjJm/oanwQqMwE2mrf50P5ojVcVIcb3fXb5+lg==,iv:tbZmKbiamY7pT+v4f2tTb2M+Mj1WlGa/UI8FxXUfFLo=,tag:d7LuoKE3Vx64itBVUfavXw==,type:str]
+ livekit_key: ENC[AES256_GCM,data:fglX2DfmpXedsW27/2YA9enDf09r9nzNpF2LKcK8PhhGgSPfb4wtK0S+uDgy2dGX7w+8EvXdVbL1cXhF4KONiA==,iv:/uyme29YIO3kpSqna5WAva/vUamRmk/SOB8GnunCyFw=,tag:FD0ejGd4zrJmxm7V8Ta6Pg==,type:str]
+ livekit_secret: ENC[AES256_GCM,data:YxGjXPk0SmyYerr1wg0GD7xoGncH0bCTv0GovzdnYx70mITOqKsDZHEULbDydIO3UaryVDi2lE4YX4THeX7agA==,iv:GAncts/+LGpU+quFxItn6D5B6QR/ObhEpUZbKDMg9/g=,tag:gLX1RWDOWYmdUNX4doxpHA==,type:str]
livekit_ws: wss://call-livekit.midnightthoughts.space
livekit_mgmt:
ingress:
@@ -66,23 +66,24 @@ spec:
podHostNetwork: false
livekit:
keys:
- bQXMwwlTCTbxDd6xRHYaaK5gzOzyb1gzS5E89vrJ96ONp3kEH4Ljh9su5L3BQc33: ENC[AES256_GCM,data:a0Ho8zXZ/PTvVGHulgVGoPX25aPdSXphpnQTqn7e1rvRpX1wCE/DVODQr759T4XiVowGuF+2DsXpj/yT6a7tUw==,iv:LjLl//pMBh0ZVZE0oclUxne1Frtf6V8OBO3PudSvhgw=,tag:6dc1YOd8V33KDJw9eFcGvQ==,type:str]
- iHMQVcTZSmUek9m55nFcvpGWaAR1nGpQggvEmvKyWqWbu099EjSZ2sQkU1ZMpR1h: ENC[AES256_GCM,data:e2zwg47K+S4zUBDYukzwWw3GY1HbvHe5u6H5sTjdnc36goEnTl5QpYWRvRWbmALHRrOMjEipxBOprAK91L4W8g==,iv:N+IUz+n0hKcsrJLMC19moxwtflyfuumsT6iQk5e0QMc=,tag:CH/m0t7JhZlQOQoZwzo1sw==,type:str]
+ bQXMwwlTCTbxDd6xRHYaaK5gzOzyb1gzS5E89vrJ96ONp3kEH4Ljh9su5L3BQc33: ENC[AES256_GCM,data:kvlVmkY/M/cIjFJslzxJK3SI8/iuXyMHEN3lziTyU6e0o+ueNt1oJvYgOslDyqg77YVFTSfGQJZepSt2ldwaEQ==,iv:kaJET9e1A6RulFaJwHAU22GLdGxJmj8goswuViBWuH4=,tag:OKTqpA1tZxWHO3Ynz2Ou7w==,type:str]
+ iHMQVcTZSmUek9m55nFcvpGWaAR1nGpQggvEmvKyWqWbu099EjSZ2sQkU1ZMpR1h: ENC[AES256_GCM,data:En41ewiUltFAKDubaVNjGFJ+Kb2uDwhgklMIbUrWrh4GS5SA7GNaIwsrm/KLGSRAyri7U+r2EWsy9XEQRaHWHg==,iv:18lvUvXYDFGTb7zt+QGQPnrwIpgUyXkH6IjByAMoq4E=,tag:/pCQ7/QD9FO0/yh8hKkgfQ==,type:str]
redis:
address: element-call-redis-master:6379
db: 0
- password: ENC[AES256_GCM,data:Bkqv6vlv1DkOV3rVrW+78hyeuvirz8YimtIQXRB1jeMIvun7i/9zWZPpZ9uBJzH0D6okZrIwMEz7Un0EQ6Ar+w==,iv:IrwrfFaj2yNjp/xKoKbLYtrOzJalqWiT8B/ONrwsEP8=,tag:Wff9HM1yMmr01Z/2ECVQ1A==,type:str]
+ password: ENC[AES256_GCM,data:jr1xgd18hAaFi8KjhpRR1SbzqL5NjdifnO1LMbVjzgSIQ5EFWThiwPUk+Oe5dCQ2PVD+mwM5GsJruJCLLMIDzA==,iv:xY6wExgj/IpYWbWQSaNKBQjw3NgKgiGHaawj7jF6ajU=,tag:/bqQQLTwz94mzKD1hUdb7w==,type:str]
redis:
auth:
- password: ENC[AES256_GCM,data:jVnwCDBbvgHINJ7Poz9oQLiMkXjhl0d/XD+jQcCn7aJMRjc3OSF6bIhMu4Q+8HZLXU/VluR9Pxfj8pREzdA24Q==,iv:I214aG/5q9d332bZbMHShv8+znFXs3UjDlb3Aoftz0M=,tag:ZYfXq0opkIYDap6Tvi1BRQ==,type:str]
+ password: ENC[AES256_GCM,data:apw3XudxGeiSRqVyMxpZsV34WP3CNtiarcgzE5dp8f7TWNf6QpxHFlimwbv3KeYzLzLS9GeW21pppDFPyeSbTA==,iv:qF5bvFZD4wZUudRd5ucXzeE4lX9Q9xrmGLg/LyoFE5w=,tag:yRnZlM4YDNyBs7xTTT7xZg==,type:str]
egress:
egress:
- api_key: ENC[AES256_GCM,data:RbZ4sWA/UP1rlWwNLA6lYulB0mEnED0PGfptsd/+2ovzum0Famk3HqEjAuduIazAZmeXwK/D/pR++/qRDfxnQA==,iv:mgmRZT7AZ3egZjZcE2+U4onm/e1UE1UJjYUHR2FeTkU=,tag:QrKE8xGOWQ4TCynSRB+wKA==,type:str]
- api_secret: ENC[AES256_GCM,data:CgowY1z7DSg7q7WQuKXEI4DFW/aLWAbAEm/FNsoJsRKWUFvohjYhWxOmPfcJvkwG59nLu/SAAevvs8uFoSfJ4g==,iv:56dRTwTehMXr1eligsLiZ2fXSNwtu2HicGGGy5g316A=,tag:vl6McElumf7FF2walXxd7g==,type:str]
+ api_key: ENC[AES256_GCM,data:Npnx9guq8UNmY2K29eajog+juq8uUnsfF+rB7OxA2iJE46EGWKZdSU976ygVRZ4qpXEsczjc4JWp0pw259ZGKw==,iv:uYGX0tkIg7fkiJ4GCDViWbFJOaoulnhe2NB34g4MoRM=,tag:t4icI6W0BB1MPGIJuF+OsA==,type:str]
+ api_secret: ENC[AES256_GCM,data:nTHsxTJ4J/wjSEJyw7w/sVgqbKfHyOLoWN3WbcgTk8ZwgPrYuJHAaxccL7AIxf5NGzvJC1T+QlAgxVCL+Ii7ew==,iv:+h4RBDI07RTWJhrMXzv0rR/o9/jkCJCpT0MzghWSTvg=,tag:FMEm2ZZivoOx6dPBR+GGSA==,type:str]
ws_url: ws://element-call-livekit-server:7880
+ insecure: true
redis:
address: element-call-redis-master:6379
- password: ENC[AES256_GCM,data:gOhIhr7kFAvJXSpC1A9w+c/Sz2G9um8EPbDZTnjDjySZCRwfYVgQ1zrEcom9WexUbWFCKR3PAvWXNb9HiK/AyQ==,iv:3/6+qjBo1ANabddeSsORSW0JGb8SvKPOFT5oZYi4bRk=,tag:lh7z8oW/i48eVTCDzn5Jjw==,type:str]
+ password: ENC[AES256_GCM,data:CS6oemsT2Pn7Oe6mog/jqlyIsC+0OgKbHchteUiaWVCYq5hspqR6YGenXf+c67H/XtMtwBSVcL7S1oQw9ZYMIA==,iv:hF1n148GtwH+bWfdMIFOzqKCv+r25MwrP2uhWzw6xFs=,tag:CXqC5lbs/PIlIK97T6HGNg==,type:str]
db: 0
sops:
kms: []
@@ -93,14 +94,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmblhnaWR6ekFVKzVRb2FK
- MWZCdGFjVFgwaWRMcmdxcVZkU1JrRlVpOFU4CjdJTmhqMlorNlVZV0V5TU9pd3Bo
- WFhSU2QrSmJNVXA3K25hYUdnQnJROVUKLS0tIFdQMmE1T2E0aGEzNFArWWk5dHFB
- Y2pGVUVFT0ZBK29yZUoyVktyMVc0UmMKOUZdMJoWSOWS8DHGev0pY0PQLjYCDNo/
- uO7LUyAZa0h/9ylfoMPmhmloLv8nu7+N28h1MMyQ4V3zNlQmvhpwaw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5T3FhdEdLQ0lsUTRJSnUz
+ TzZOZHBoOHlzVGc4K21tbWxjYUNweGJQTW1JCkZxYU5ubnZJNGJBNURUN3BXRU9U
+ SzBwWXQyWVkyQitpVUVaZzNGM1VPdjAKLS0tIHRQQWxackJzVGczMitGL2RSS25y
+ ang5RlI2RXF0SFB6d2h3emNJOVlCTHMKZYZfLfO9Jbs5WqhNjNGekvhGYlvSoLFp
+ dfvpk33aHJMqJYmkWdXsPBcflpLuxR49Q5UnSPSWKtRkJ6fn73gPLg==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-03-06T13:20:25Z"
- mac: ENC[AES256_GCM,data:bJcR8+wP24b1obxgvlmckBpwpgjyc8cWky3Bngr2nou95qUE4B+CayoOBA0gaq5YcWtfzaoONxked8Hivsgw/uzDgC73gCAJveSWC7gZZ1z+e6ZFuGGVdUB7kDvNV7jWvt8xGbswj/4YQTNazC9U2h1U51Qop8XPX+LevDRKZQY=,iv:Y9GUZO2XKS5uju9EcLUcnwwxCpXKAmGTjXA980jBXF8=,tag:YtK2Y9qUBV+2EefEpRID8w==,type:str]
+ lastmodified: "2024-03-06T14:39:53Z"
+ mac: ENC[AES256_GCM,data:XQSu6tfNYJLENJqMD+WhrWMMN/8WvENkn9e6jELiQlRNdkA9NAMLDyyCRR7X9CxJA7iroYNBOHv7inmQ5TMzk03K1g8pzi+IWW+qhZlK2QqOsNS6R/8TpW0DrUsE8ongWUkm3O32HMAuT5B70moLVCXyMrPdEaDpL8YwYkjmyJ8=,iv:pL5UCdQ+6d3yZUbk+MfnqauvuwH1SH1RYLb+azdNaHs=,tag:Sh3OMmH2ZDGi1V9Rx1bL4w==,type:str]
pgp: []
encrypted_regex: ^(api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
version: 3.8.1
