commit 2d6fd62dfa05f051e6d472434834ba8a1dfbb2b7
parent 688dc2849827a6b8b47712bee3b1042286e98338
Author: MTRNord <mtrnord1@gmail.com>
Date: Sun, 21 Apr 2024 00:05:14 +0200
Fix redis-cluster
Diffstat:
1 file changed, 162 insertions(+), 164 deletions(-)
diff --git a/apps/base/forgejo/release.yaml b/apps/base/forgejo/release.yaml
@@ -1,171 +1,169 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
- name: forgejo
- namespace: forgejo
+ name: forgejo
+ namespace: forgejo
spec:
- releaseName: forgejo
- chart:
- spec:
- chart: forgejo
- sourceRef:
- kind: HelmRepository
- name: forgejo
- interval: 50m
+ releaseName: forgejo
+ chart:
+ spec:
+ chart: forgejo
+ sourceRef:
+ kind: HelmRepository
+ name: forgejo
+ interval: 50m
+ timeout: 25m
+ install:
timeout: 25m
- install:
- timeout: 25m
- remediation:
- retries: 3
- values:
- # image:
- # # Codeberg.org was down.
- # registry: docker.io
- # repository: mtrnord/forgejo
- # # Overrides the image tag whose default is the chart appVersion.
- # tag: "1.20"
- tolerations:
- - key: arch
- operator: Equal
- value: arm64
- effect: NoSchedule
- containerSecurityContext:
- capabilities:
- add:
- - SYS_CHROOT
- signing:
- enabled: true
- privateKey: ENC[AES256_GCM,data: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,iv:EMmDKJFcHA0V+wzCckGBviFYU6yZV6j2d+iRKaz0Yww=,tag:Gmr6ZlDIZ/tZjEfM66ckZA==,type:str]
- persistence:
- enabled: true
- create: false
- size: 50Gi
- claimName: data-forgejo-0
- ingress:
- enabled: true
- annotations:
- cert-manager.io/cluster-issuer: letsencrypt-http
- hosts:
- - host: git.nordgedanken.dev
- paths:
- - path: /
- pathType: Prefix
- tls:
- - secretName: git.nordgedanken.dev-tls
- hosts:
- - git.nordgedanken.dev
- gitea:
- oauth:
- - name: keycloak
- provider: openidConnect
- key: gitea
- secret: ENC[AES256_GCM,data:fQs+IXaqs3A01K/XEX5p4S7mMbWBq1G0pP9k3vbgHBc=,iv:SQY5NPCcqvvVjzlmLl9ct9YRga1JdekZ5j+UjERdUfU=,tag:tBlejTYSL1kughQAvvgVfQ==,type:str]
- autoDiscoverUrl: https://keycloak.midnightthoughts.space/realms/Gitea/.well-known/openid-configuration
- admin:
- username: gitea_admin
- password: ENC[AES256_GCM,data:rqw5msWg2RtYQIwTdSQmkmb2bvt6ecE5IlGOSZHO4PCSdEGXKRBdjQlpprdVvX+2D0LSLXlroo16IS1XWx1Pbg==,iv:EsIn7Cz+K2DC8dtJI2kKrLJTxIWQ7ZysOfIuUcfyOGU=,tag:2SDglBy+6GhowYSjUqXzEA==,type:str]
- email: ops@nordgedanken.dev
- metrics:
- enabled: true
- serviceMonitor:
- enabled: true
- config:
- actions:
- ENABLED: true
- DEFAULT_ACTIONS_URL: https://git.nordgedanken.dev
- indexer:
- ISSUE_INDEXER_TYPE: bleve
- REPO_INDEXER_ENABLED: true
- repository:
- MAX_CREATION_LIMIT: 0
- DISABLE_HTTP_GIT: false
- service:
- DISABLE_REGISTRATION: true
- ALLOW_ONLY_EXTERNAL_REGISTRATION: true
- DEFAULT_KEEP_EMAIL_PRIVATE: true
- oauth2_client:
- ENABLE_AUTO_REGISTRATION: true
- server:
- ROOT_URL: https://git.nordgedanken.dev
- SSH_PORT: 2222
- LFS_START_SERVER: true
- START_SSH_SERVER: true
- federation:
- ENABLED: true
- mailer:
- ENABLED: true
- FROM: ops@nordgedanken.dev
- SMTP_ADDR: mail.nordgedanken.dev
- SMTP_PORT: 465
- PROTOCOL: smtps
- USER: ops@nordgedanken.dev
- PASSWD: ENC[AES256_GCM,data:r91hn6p65iYL,iv:mL9SFDruo4b5QzTHj1X3tJcKJLOdKVW9M86Nf408JaA=,tag:y9lH8RG43QGRMVPcMO9cXw==,type:str]
- session:
- #PROVIDER: redis-cluster
- PROVIDER: redis
- PROVIDER_CONFIG: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- #PROVIDER_CONFIG: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
-
- cache:
- ENABLED: true
- ADAPTER: redis
- #ADAPTER: redis-cluster
- #HOST: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- HOST: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
-
- queue:
- TYPE: redis
- #CONN_STR: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- CONN_STR: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- redis-cluster:
- enable: false
- # networkPolicy:
- # enabled: false
- postgresql-ha:
- enabled: false
+ remediation:
+ retries: 3
+ values:
+ # image:
+ # # Codeberg.org was down.
+ # registry: docker.io
+ # repository: mtrnord/forgejo
+ # # Overrides the image tag whose default is the chart appVersion.
+ # tag: "1.20"
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ containerSecurityContext:
+ capabilities:
+ add:
+ - SYS_CHROOT
+ signing:
+ enabled: true
+ privateKey: ENC[AES256_GCM,data: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,iv:EMmDKJFcHA0V+wzCckGBviFYU6yZV6j2d+iRKaz0Yww=,tag:Gmr6ZlDIZ/tZjEfM66ckZA==,type:str]
+ persistence:
+ enabled: true
+ create: false
+ size: 50Gi
+ claimName: data-forgejo-0
+ ingress:
+ enabled: true
+ annotations:
+ cert-manager.io/cluster-issuer: letsencrypt-http
+ hosts:
+ - host: git.nordgedanken.dev
+ paths:
+ - path: /
+ pathType: Prefix
+ tls:
+ - secretName: git.nordgedanken.dev-tls
+ hosts:
+ - git.nordgedanken.dev
+ gitea:
+ oauth:
+ - name: keycloak
+ provider: openidConnect
+ key: gitea
+ secret: ENC[AES256_GCM,data:fQs+IXaqs3A01K/XEX5p4S7mMbWBq1G0pP9k3vbgHBc=,iv:SQY5NPCcqvvVjzlmLl9ct9YRga1JdekZ5j+UjERdUfU=,tag:tBlejTYSL1kughQAvvgVfQ==,type:str]
+ autoDiscoverUrl: https://keycloak.midnightthoughts.space/realms/Gitea/.well-known/openid-configuration
+ admin:
+ username: gitea_admin
+ password: ENC[AES256_GCM,data:rqw5msWg2RtYQIwTdSQmkmb2bvt6ecE5IlGOSZHO4PCSdEGXKRBdjQlpprdVvX+2D0LSLXlroo16IS1XWx1Pbg==,iv:EsIn7Cz+K2DC8dtJI2kKrLJTxIWQ7ZysOfIuUcfyOGU=,tag:2SDglBy+6GhowYSjUqXzEA==,type:str]
+ email: ops@nordgedanken.dev
+ metrics:
+ enabled: true
+ serviceMonitor:
+ enabled: true
+ config:
+ actions:
+ ENABLED: true
+ DEFAULT_ACTIONS_URL: https://git.nordgedanken.dev
+ indexer:
+ ISSUE_INDEXER_TYPE: bleve
+ REPO_INDEXER_ENABLED: true
+ repository:
+ MAX_CREATION_LIMIT: 0
+ DISABLE_HTTP_GIT: false
+ service:
+ DISABLE_REGISTRATION: true
+ ALLOW_ONLY_EXTERNAL_REGISTRATION: true
+ DEFAULT_KEEP_EMAIL_PRIVATE: true
+ oauth2_client:
+ ENABLE_AUTO_REGISTRATION: true
+ server:
+ ROOT_URL: https://git.nordgedanken.dev
+ SSH_PORT: 2222
+ LFS_START_SERVER: true
+ START_SSH_SERVER: true
+ federation:
+ ENABLED: true
+ mailer:
+ ENABLED: true
+ FROM: ops@nordgedanken.dev
+ SMTP_ADDR: mail.nordgedanken.dev
+ SMTP_PORT: 465
+ PROTOCOL: smtps
+ USER: ops@nordgedanken.dev
+ PASSWD: ENC[AES256_GCM,data:r91hn6p65iYL,iv:mL9SFDruo4b5QzTHj1X3tJcKJLOdKVW9M86Nf408JaA=,tag:y9lH8RG43QGRMVPcMO9cXw==,type:str]
+ session:
+ #PROVIDER: redis-cluster
+ PROVIDER: redis
+ PROVIDER_CONFIG: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ #PROVIDER_CONFIG: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ cache:
+ ENABLED: true
+ ADAPTER: redis
+ #ADAPTER: redis-cluster
+ #HOST: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ HOST: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ queue:
+ TYPE: redis
+ #CONN_STR: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ CONN_STR: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ redis-cluster:
+ enabled: false
+ # networkPolicy:
+ # enabled: false
+ postgresql-ha:
+ enabled: false
+ postgresql:
+ image:
+ registry: docker.io
+ repository: bitnami/postgresql
+ tag: 11.11.0-debian-10-r62
+ enabled: true
+ global:
postgresql:
- image:
- registry: docker.io
- repository: bitnami/postgresql
- tag: 11.11.0-debian-10-r62
- enabled: true
- global:
- postgresql:
- service:
- ports:
- postgresql: 5432
- auth:
- password: ENC[AES256_GCM,data:+WUmzbe4q7Aa58WJW9xjf/gjTNwosK02daY59lc9xeO+ulAL9SiG8IMU+omUxC2ehXdWg3RcUrnlU7U7+uYn1Q==,iv:Q/djXoMbQmRpK2/gHc6IMlGE5dNpUlS03oRe2ZTz2Dg=,tag:TrxIxyT8F2fjB7j+b+Z1tw==,type:str]
- database: gitea
- username: gitea
- auth:
- database: gitea
- username: gitea
- postgresPassword: ENC[AES256_GCM,data:lo+0ocNtFtuW6w==,iv:Xfy04BMJnOoS6ai/3UwEyzHy2epdyuDN0uPaX1kzgQk=,tag:Rebxt9QhP61dkKaXjAsQ0g==,type:str]
- password: ENC[AES256_GCM,data:EmgBmUi9AZfqwGj0EXOfpKB9qS+XBhuQiE39jG5N211EBSaVY6UxFVGKwnpDt6dybfuEZCgwDMz90mAUtWNzYA==,iv:Twmz7YxPDWrbBkEy/xlmNSty34cd7LV2Tac3crxY71o=,tag:poZg4IeF3Yod96937oVWMQ==,type:str]
- persistence:
- enabled: true
- size: 25Gi
- primary:
- networkPolicy:
- enabled: false
+ service:
+ ports:
+ postgresql: 5432
+ auth:
+ password: ENC[AES256_GCM,data:+WUmzbe4q7Aa58WJW9xjf/gjTNwosK02daY59lc9xeO+ulAL9SiG8IMU+omUxC2ehXdWg3RcUrnlU7U7+uYn1Q==,iv:Q/djXoMbQmRpK2/gHc6IMlGE5dNpUlS03oRe2ZTz2Dg=,tag:TrxIxyT8F2fjB7j+b+Z1tw==,type:str]
+ database: gitea
+ username: gitea
+ auth:
+ database: gitea
+ username: gitea
+ postgresPassword: ENC[AES256_GCM,data:lo+0ocNtFtuW6w==,iv:Xfy04BMJnOoS6ai/3UwEyzHy2epdyuDN0uPaX1kzgQk=,tag:Rebxt9QhP61dkKaXjAsQ0g==,type:str]
+ password: ENC[AES256_GCM,data:EmgBmUi9AZfqwGj0EXOfpKB9qS+XBhuQiE39jG5N211EBSaVY6UxFVGKwnpDt6dybfuEZCgwDMz90mAUtWNzYA==,iv:Twmz7YxPDWrbBkEy/xlmNSty34cd7LV2Tac3crxY71o=,tag:poZg4IeF3Yod96937oVWMQ==,type:str]
+ persistence:
+ enabled: true
+ size: 25Gi
+ primary:
+ networkPolicy:
+ enabled: false
sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArSVpTcjJheG5JMXJRejFK
- RHNxYnljZFZwYUZXWi9qOHowLzJBZUd6S3pRCmtLbEw5NG1SQjZaaXB3VVhmSC83
- alc2VGNOejZBMExtRmpoV2U2Z0orVFkKLS0tIFdsdjhZRUlkd2w4ME9aZThxY2Ez
- djA2MWN3ZWYzWEdhV09CWVNqOTh3V0UKNwLgmXiOeYiujjGdhTfowwXjSPdoc8Xu
- 2r8MxgG7QkWkeep1/2Sk3TQvc3A0Q/BcoGgPVuRgoN4f1dKcg58EsQ==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2023-08-17T21:34:01Z"
- mac: ENC[AES256_GCM,data:DruRjRVzmfuUwebTMAOCcFJl17v4y37RP3p/IycPTLhwUK+Lq/OVO7Ie0z0tmJVBj09B0ei8TqDlXfCyreu3qK69WZd65sINQJJ4QBVpIKlme2pmbvTAqZMRliQO+CQBIe05vRojgqH1sqcyu2TfWRLzAJi/r5xVs9AeFBaacpM=,iv:eRX15Zyy09A3E3i6cBSGyPiu+X9dghl8fVfu8z8WsHU=,tag:XWocAQENek6jz9KO8g086g==,type:str]
- pgp: []
- encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
- version: 3.7.3
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArSVpTcjJheG5JMXJRejFK
+ RHNxYnljZFZwYUZXWi9qOHowLzJBZUd6S3pRCmtLbEw5NG1SQjZaaXB3VVhmSC83
+ alc2VGNOejZBMExtRmpoV2U2Z0orVFkKLS0tIFdsdjhZRUlkd2w4ME9aZThxY2Ez
+ djA2MWN3ZWYzWEdhV09CWVNqOTh3V0UKNwLgmXiOeYiujjGdhTfowwXjSPdoc8Xu
+ 2r8MxgG7QkWkeep1/2Sk3TQvc3A0Q/BcoGgPVuRgoN4f1dKcg58EsQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2023-08-17T21:34:01Z"
+ mac: ENC[AES256_GCM,data:DruRjRVzmfuUwebTMAOCcFJl17v4y37RP3p/IycPTLhwUK+Lq/OVO7Ie0z0tmJVBj09B0ei8TqDlXfCyreu3qK69WZd65sINQJJ4QBVpIKlme2pmbvTAqZMRliQO+CQBIe05vRojgqH1sqcyu2TfWRLzAJi/r5xVs9AeFBaacpM=,iv:eRX15Zyy09A3E3i6cBSGyPiu+X9dghl8fVfu8z8WsHU=,tag:XWocAQENek6jz9KO8g086g==,type:str]
+ pgp: []
+ encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+ version: 3.7.3
