cluster

commit 3b98fe364601928bad48c98d59e0d5d3fce49a83
parent 8647989b1684aad1eeca2cf22dd38174221b8cd6
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 11 May 2025 21:18:14 +0200

Meow

Diffstat:
M
infrastructure/configs/cnpg-cluster.yaml
 | 
130
+++++++++++++++++++++++++++++++++++++++----------------------------------------

1 file changed, 64 insertions(+), 66 deletions(-)
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -10,13 +10,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
-            eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
-            RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
-            VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
-            A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+              eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+              RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+              VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+              A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-11T19:15:36Z"
     mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
     pgp: []
@@ -40,13 +40,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
-            eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
-            RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
-            VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
-            A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+              eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+              RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+              VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+              A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-11T19:15:36Z"
     mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
     pgp: []
@@ -81,8 +81,6 @@ spec:
             effective_io_concurrency: "150"
             random_page_cost: "1.5"
             # Monitoring
-            # per statement resource usage stats
-            shared_preload_libraries: pg_stat_statements
             track_io_timing: "on"
             # track execution times of pl-language procedures if any
             track_functions: pl
@@ -145,91 +143,91 @@ spec:
               login: true
               superuser: false
               passwordSecret:
-                name: synapse
+                  name: synapse
             - name: draupnir_synapse
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: draupnir-synapse
+                  name: draupnir-synapse
             - name: authentik
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: authentik
+                  name: authentik
             - name: ejabberd
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: ejabberd
+                  name: ejabberd
             - name: vaultwarden
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: vaultwarden
+                  name: vaultwarden
             - name: mastodon
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: mastodon
+                  name: mastodon
             - name: openproject
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: openproject
+                  name: openproject
             - name: plausible
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: plausible
+                  name: plausible
             - name: coder
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: coder
+                  name: coder
             - name: matrix_auth
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: matrix-auth
+                  name: matrix-auth
             - name: cachet
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: cachet
+                  name: cachet
             - name: docuseal
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: docuseal
+                  name: docuseal
             - name: bugzilla
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: bugzilla
+                  name: bugzilla
             - name: rundeck
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: rundeck
+                  name: rundeck
             - name: plane
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: plane
+                  name: plane
     #bootstrap:
     #    initdb:
     #        import:
@@ -289,13 +287,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
-            eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
-            RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
-            VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
-            A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+              eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+              RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+              VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+              A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-11T19:15:36Z"
     mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
     pgp: []
@@ -321,13 +319,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
-            eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
-            RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
-            VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
-            A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+              eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+              RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+              VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+              A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-11T19:15:36Z"
     mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
     pgp: []
@@ -354,13 +352,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
-            eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
-            RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
-            VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
-            A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+              eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+              RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+              VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+              A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-11T19:15:36Z"
     mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
     pgp: []
@@ -385,13 +383,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
-            eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
-            RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
-            VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
-            A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+              eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+              RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+              VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+              A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-11T19:15:36Z"
     mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
     pgp: []
@@ -416,13 +414,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
-            eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
-            RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
-            VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
-            A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+              eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+              RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+              VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+              A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-11T19:15:36Z"
     mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
     pgp: []