commit 321507b30f57a94fc2246d1c489b616a6512b7df
parent 979a9679ac9bf8ca7fb157a1620ba82df07a6a73
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 27 Mar 2024 12:03:29 +0100
Workadventure
Diffstat:
8 files changed, 128 insertions(+), 2 deletions(-)
diff --git a/apps/base/workadventure/kustomization.yaml b/apps/base/workadventure/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: workadventure
+resources:
+ - repository.yaml
+ - release.yaml
diff --git a/apps/base/workadventure/release.yaml b/apps/base/workadventure/release.yaml
@@ -0,0 +1,105 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+ name: workadventure
+ namespace: workadventure
+spec:
+ interval: 5m
+ chart:
+ spec:
+ chart: workadventure
+ sourceRef:
+ kind: HelmRepository
+ name: workadventure
+ interval: 60m
+ version: 0.0.9-dev1
+ install:
+ crds: Create
+ upgrade:
+ crds: CreateReplace
+ # Force recreation due to Helm not properly patching Deployment with e.g. added port,
+ # causing spurious drift detection
+ force: true
+ values:
+ domainName: workadventure.midnightthoughts.space
+ ejabberdDomain: ejabberd.workadventure.midnightthoughts.space
+ singleDomain: true
+ play:
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ secretEnv:
+ ROOM_API_SECRET_KEY: ENC[AES256_GCM,data:CSafytKq0HQErE5yUsJubdTzUMRwyfxRbz0YyhFDdsw5hXtOvxpT0MWdOmterCjoaI8SEcLhiYrB62mM4cq88g==,iv:v4ZgN06iwC+dt2FH4plUTefBrKdxEBvvWC/ezPkW8PY=,tag:bLlYnU/Cb8GKBQmDTG/aOA==,type:str]
+ chat:
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ back:
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ uploader:
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ icon:
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ ejabberd:
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ mapstorage:
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ persistence:
+ enabled: true
+ storageClass: nfs-csi
+ accessMode: ReadWriteOnce
+ storageSize: 1Gi
+ secretEnv:
+ AUTHENTICATION_PASSWORD: ENC[AES256_GCM,data:NgKi2dF9vPV26DhS/Vg5JnC72bktKvxK+msMVxMhBzMUQXCFP8UMkWa2ZKfovb7SsAOq2HK0TMZbnwO1JFlsLg==,iv:4sPOIeyogKzx6PYpiVVRBvzi9C8a4P6JA0/NIZTANjg=,tag:7DVx9pY0zB6fSsaOuRLZNA==,type:str]
+ ingress:
+ enabled: true
+ tls: true
+ secretName: workadventure.midnightthoughts.space-tls
+ annotationsPath:
+ cert-manager.io/cluster-issuer: letsencrypt-http
+ annotationsMapstoragePath:
+ cert-manager.io/cluster-issuer: letsencrypt-http
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIVjAvby96RGxsN0p0OThQ
+ ZmNlRUhPNkpreDI3TlE2ekdUUjNkSjRRREhNCllHZXg1dTlhUjRPaE15N0x3bWM5
+ bDFyUnBHOTVmaDN2c25xMkIrdTFSdTAKLS0tIEJ5Zk5LZjBOUUhUV1k0SldSZnNr
+ ajdUVXhGd1pYM2pXYTgrRFRzTHgwT1EKAGQDPLTqSNUOGt9WdY6y8/3Edr6/MNlF
+ C/AAh+2C4Cr7bUQ++/CdlRBlBVeKuk2iSMXi42Im0kFNGG3CNvNJJg==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2024-03-27T11:03:19Z"
+ mac: ENC[AES256_GCM,data:BqmNaZhfC/sxcUoZevK/+5tGcc87HXAaR0Jn761bkln0RGkezwiJ4XB+VvpthkQMRLyqFZuQJbnnHWN/pBFRy+1vVeQRUpwBSWQRQbusk4NvX72m2wCz9PONlzPMhWRNW0x6UrkN0XdwWf8q1ptgn0zWU1fR+TDFBOAV59zSUQE=,iv:Xt47bGfp76DgmpPdLugOZIiGEvMLBtYZKjmpRtnyLZU=,tag:e4+Yel25ozzIl6gf/ZVfaw==,type:str]
+ pgp: []
+ encrypted_regex: ^(AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+ version: 3.8.1
diff --git a/apps/base/workadventure/repository.yaml b/apps/base/workadventure/repository.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+ name: workadventure
+ namespace: workadventure
+spec:
+ interval: 5m
+ url: https://charts.workadventu.re/
diff --git a/apps/namespaces/kustomization.yaml b/apps/namespaces/kustomization.yaml
@@ -29,3 +29,4 @@ resources:
- element-call.yaml
- openldap.yaml
- n8n.yaml
+ - workadventure.yaml
diff --git a/apps/namespaces/workadventure.yaml b/apps/namespaces/workadventure.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+ name: workadventure
diff --git a/apps/production/kustomization.yaml b/apps/production/kustomization.yaml
@@ -34,6 +34,7 @@ resources:
- ../base/matrix/element-call-synapse
- ../base/openldap
- ../base/n8n
+ - ../base/workadventure
patchesStrategicMerge:
#- cosign-values.yaml
- vaultwarden-values.yaml
diff --git a/decrypt.sh b/decrypt.sh
@@ -1,4 +1,4 @@
#!/bin/bash
export SOPS_AGE_KEY_FILE="$(pwd)/age.agekey"
-sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
+sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
diff --git a/encrypt.sh b/encrypt.sh
@@ -1,3 +1,3 @@
#!/bin/bash
-sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
+sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
