cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 52e86c1143dfd83db5aa2c91e5de756c7edf2962
parent 1b91d3259708998ebc6ae74540398c00a9201d33
Author: MTRNord <mtrnord1@gmail.com>
Date:   Mon, 13 Jan 2025 15:05:15 +0100

Add miro neoboard exporter

Diffstat:
Mapps/2024_cluster/kustomization.yaml | 1+
Mapps/2024_cluster/namespaces/kustomization.yaml | 1+
Aapps/2024_cluster/namespaces/neoboard.yaml | 4++++
Aapps/base/miro-neoboard-exporter/kustomization.yaml | 5+++++
Aapps/base/miro-neoboard-exporter/release.yaml | 165+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Mapps/base/traefik/release.yaml | 4++--
Minfrastructure/configs/cnpg-cluster.yaml | 112++++++++++++++++++++++++++++++++++++++++----------------------------------------
7 files changed, 234 insertions(+), 58 deletions(-)

diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml @@ -37,3 +37,4 @@ resources: - ../base/mariadb-operator - ../base/osticket - ../base/mailserver + - ../base/miro-neoboard-exporter diff --git a/apps/2024_cluster/namespaces/kustomization.yaml b/apps/2024_cluster/namespaces/kustomization.yaml @@ -26,3 +26,4 @@ resources: - mariadb-operator.yaml - osticket.yaml - mailserver.yaml + - neoboard.yaml diff --git a/apps/2024_cluster/namespaces/neoboard.yaml b/apps/2024_cluster/namespaces/neoboard.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: neoboard diff --git a/apps/base/miro-neoboard-exporter/kustomization.yaml b/apps/base/miro-neoboard-exporter/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: neoboard +resources: + - release.yaml diff --git a/apps/base/miro-neoboard-exporter/release.yaml b/apps/base/miro-neoboard-exporter/release.yaml @@ -0,0 +1,165 @@ +apiVersion: v1 +kind: Secret +metadata: + name: miro-neoboard-exporter-secret + namespace: neoboard +type: Opaque +stringData: + MIRO_CLIENT_ID: ENC[AES256_GCM,data:+olX0T1JgHzoHANWv38M8uhs5w==,iv:3jQyUTMhsVIS+/Fxw4wifovgKuG9CO5FpYs4r0kiX9E=,tag:x6sLUcNUstwCwcjwFSPtFg==,type:str] + MIRO_CLIENT_SECRET: ENC[AES256_GCM,data:+wHWAZGctYockW0iKxGe5xGUyuPerRX7GsILKGElggI=,iv:yNzZHdlrKAxFEnu7m7+YSfokeyVbBNGZ8MzHDOBxZh8=,tag:t0hTqLP+7+8L0k3nv59J3Q==,type:str] + MIRO_REDIRECT_URL: ENC[AES256_GCM,data:d+8rtqINLUtuRFngun2zVGGvVhuYXC0nyfBDTQA5Nb8uR/BwLPIKByNurXYH/RJZqkKzCZzXdJ9H+uhCkOP4Yw==,iv:mWfgAtmACyRkezxI+TvZmDSUh6LvskIqj7aWc3u4hmY=,tag:KA0rNGlHyYM3V1Mwj9lUyg==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TXJ1WGZ1dEZhSXkvdWFR + UUtFUXV5bnZpMUVxS1hhbVhOM1h3LzlnS2xvCjJJVmd1eW41UWVGMDljWUpRSzk4 + a0ZSSGlRaHhTU3pPZGdzYk9WMkNCZGcKLS0tIEJBMDd3VGJOVGdmVE9qNWFTdmZW + VkJGbXg2RzdhcXhhUWxWdG9tSFV3OTAKG3NE0vHeZXYAAGMAhcX7lsxKX0da6fcy + WICgsiu8BF7YLIziFwmseBdkAcfj2+bp/x5H+pm/4KiqLWIoLkHZJg== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-01-13T14:04:42Z" + mac: ENC[AES256_GCM,data:DH6yBuMHNfC5JBTN77w5sgWxEMroe6N6pn6I7UDGYfPuxSfWw2xb6KW/Afp6lSXSHa4uM/CheZmUIqRMtev1HL8wnBMi+cOaaqGdnkitPwR9l6yXgJKz0EVj301VvjToBbNpZ/V8V+IIXKyOTDwcJr6Ohe2vkZ+hVAfQgzgvE9o=,iv:7mg1zK2plJoceSoOd0VLcjgoWtPkkJhwEgy3BYB21ss=,tag:x5yvP6o3IjCOtiD7J78fHg==,type:str] + pgp: [] + encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ + version: 3.9.1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: miro-neoboard-exporter + namespace: neoboard +spec: + replicas: 1 + selector: + matchLabels: + app: miro-neoboard-exporter + template: + metadata: + labels: + app: miro-neoboard-exporter + spec: + containers: + - name: miro-neoboard-exporter + image: ghcr.io/mtrnord/neoboard-exporter:latest + ports: + - containerPort: 3000 + envFrom: + - secretRef: + name: miro-neoboard-exporter-secret + volumeMounts: + - name: env-file + mountPath: /app/.env + subPath: .env + volumes: + - name: env-file + secret: + secretName: ENC[AES256_GCM,data:gkOW+eVOQ0RP480GxcBehStJj3DIqVkE/sSsL8U=,iv:/vcg1rMyustSGjB4/s8ln818bOO9Y+73xKbuh7en1G4=,tag:8plrOyrCFxx8S7cc2/6FxQ==,type:str] + items: + - key: ENC[AES256_GCM,data:en2eP+KOOwwUmbqBuMU=,iv:nzaEk/R9lridlEd5YC5+Qh/K1ChEs3xSev+8JWlQr14=,tag:mU2PbTbV+Bej78wpngPFig==,type:str] + path: ENC[AES256_GCM,data:t7e1TQ==,iv:WY82R4ZmatY3IeD0h73GlyLLEbwK7x5h/fdvA6EhF8c=,tag:ooVbd39aBUMjByQ818jX7g==,type:str] + - key: ENC[AES256_GCM,data:u/APbVYIMxdFKbhbYHQd0QiL,iv:AGJX3rCbGVKoq7blHFFzn0SVvtIOpXvN28WUTpjMCSw=,tag:HXWMfDT+8DiwT4ie07pNBg==,type:str] + path: ENC[AES256_GCM,data:raNPRQ==,iv:QKodxVq8p56yXlmi38kveTnZ5HCR79c7FPQjTA8V7VE=,tag:mt8sWgQI/eAHaZskbrmrNw==,type:str] + - key: ENC[AES256_GCM,data:e3Qb7D2lRP17QX9wyTDdr4M=,iv:J0wbv3RAvrj2cZrwwFOhSoZv5h7sCS9OAkc179f5Pjc=,tag:W6taxOXV0zzCHNq0MHlY1w==,type:str] + path: ENC[AES256_GCM,data:eEHJ8w==,iv:5A1D/H6J0J0+psJB/spH28yX7yfzE/rN8J+0jF8QLqg=,tag:OHnQ8fgo2H1s9wlRch44Gg==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TXJ1WGZ1dEZhSXkvdWFR + UUtFUXV5bnZpMUVxS1hhbVhOM1h3LzlnS2xvCjJJVmd1eW41UWVGMDljWUpRSzk4 + a0ZSSGlRaHhTU3pPZGdzYk9WMkNCZGcKLS0tIEJBMDd3VGJOVGdmVE9qNWFTdmZW + VkJGbXg2RzdhcXhhUWxWdG9tSFV3OTAKG3NE0vHeZXYAAGMAhcX7lsxKX0da6fcy + WICgsiu8BF7YLIziFwmseBdkAcfj2+bp/x5H+pm/4KiqLWIoLkHZJg== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-01-13T14:04:42Z" + mac: ENC[AES256_GCM,data:DH6yBuMHNfC5JBTN77w5sgWxEMroe6N6pn6I7UDGYfPuxSfWw2xb6KW/Afp6lSXSHa4uM/CheZmUIqRMtev1HL8wnBMi+cOaaqGdnkitPwR9l6yXgJKz0EVj301VvjToBbNpZ/V8V+IIXKyOTDwcJr6Ohe2vkZ+hVAfQgzgvE9o=,iv:7mg1zK2plJoceSoOd0VLcjgoWtPkkJhwEgy3BYB21ss=,tag:x5yvP6o3IjCOtiD7J78fHg==,type:str] + pgp: [] + encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ + version: 3.9.1 +--- +apiVersion: v1 +kind: Service +metadata: + name: miro-neoboard-exporter-service +spec: + selector: + app: miro-neoboard-exporter + ports: + - protocol: TCP + port: 80 + targetPort: 3000 +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TXJ1WGZ1dEZhSXkvdWFR + UUtFUXV5bnZpMUVxS1hhbVhOM1h3LzlnS2xvCjJJVmd1eW41UWVGMDljWUpRSzk4 + a0ZSSGlRaHhTU3pPZGdzYk9WMkNCZGcKLS0tIEJBMDd3VGJOVGdmVE9qNWFTdmZW + VkJGbXg2RzdhcXhhUWxWdG9tSFV3OTAKG3NE0vHeZXYAAGMAhcX7lsxKX0da6fcy + WICgsiu8BF7YLIziFwmseBdkAcfj2+bp/x5H+pm/4KiqLWIoLkHZJg== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-01-13T14:04:42Z" + mac: ENC[AES256_GCM,data:DH6yBuMHNfC5JBTN77w5sgWxEMroe6N6pn6I7UDGYfPuxSfWw2xb6KW/Afp6lSXSHa4uM/CheZmUIqRMtev1HL8wnBMi+cOaaqGdnkitPwR9l6yXgJKz0EVj301VvjToBbNpZ/V8V+IIXKyOTDwcJr6Ohe2vkZ+hVAfQgzgvE9o=,iv:7mg1zK2plJoceSoOd0VLcjgoWtPkkJhwEgy3BYB21ss=,tag:x5yvP6o3IjCOtiD7J78fHg==,type:str] + pgp: [] + encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ + version: 3.9.1 +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: miro-neoboard-exporter-ingress + annotations: + cert-manager.io/cluster-issuer: letsencrypt-dns + external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space +spec: + rules: + - host: miro-export.neoboard.midnightthoughts.space + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: miro-neoboard-exporter-service + port: + number: 80 + tls: + - hosts: + - miro-export.neoboard.midnightthoughts.space + secretName: miro-export-neoboard-ingress-tls +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TXJ1WGZ1dEZhSXkvdWFR + UUtFUXV5bnZpMUVxS1hhbVhOM1h3LzlnS2xvCjJJVmd1eW41UWVGMDljWUpRSzk4 + a0ZSSGlRaHhTU3pPZGdzYk9WMkNCZGcKLS0tIEJBMDd3VGJOVGdmVE9qNWFTdmZW + VkJGbXg2RzdhcXhhUWxWdG9tSFV3OTAKG3NE0vHeZXYAAGMAhcX7lsxKX0da6fcy + WICgsiu8BF7YLIziFwmseBdkAcfj2+bp/x5H+pm/4KiqLWIoLkHZJg== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-01-13T14:04:42Z" + mac: ENC[AES256_GCM,data:DH6yBuMHNfC5JBTN77w5sgWxEMroe6N6pn6I7UDGYfPuxSfWw2xb6KW/Afp6lSXSHa4uM/CheZmUIqRMtev1HL8wnBMi+cOaaqGdnkitPwR9l6yXgJKz0EVj301VvjToBbNpZ/V8V+IIXKyOTDwcJr6Ohe2vkZ+hVAfQgzgvE9o=,iv:7mg1zK2plJoceSoOd0VLcjgoWtPkkJhwEgy3BYB21ss=,tag:x5yvP6o3IjCOtiD7J78fHg==,type:str] + pgp: [] + encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ + version: 3.9.1 diff --git a/apps/base/traefik/release.yaml b/apps/base/traefik/release.yaml @@ -147,8 +147,8 @@ spec: instanceLabelOverride: traefik topologySpreadConstraints: - labelSelector: - matchLabels: - app.kubernetes.io/name: '{{ template "traefik.name" . }}' + matchLabels: + app.kubernetes.io/name: '{{ template "traefik.name" . }}' maxSkew: 1 topologyKey: kubernetes.io/hostname whenUnsatisfiable: ScheduleAnyway diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml @@ -10,13 +10,13 @@ sops: age: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW - djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP - SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z - VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA - 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== - -----END AGE ENCRYPTED FILE----- + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW + djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP + SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z + VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA + 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== + -----END AGE ENCRYPTED FILE----- lastmodified: "2025-01-10T12:47:54Z" mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str] pgp: [] @@ -40,13 +40,13 @@ sops: age: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW - djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP - SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z - VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA - 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== - -----END AGE ENCRYPTED FILE----- + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW + djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP + SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z + VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA + 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== + -----END AGE ENCRYPTED FILE----- lastmodified: "2025-01-10T12:47:54Z" mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str] pgp: [] @@ -79,13 +79,13 @@ sops: age: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW - djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP - SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z - VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA - 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== - -----END AGE ENCRYPTED FILE----- + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW + djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP + SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z + VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA + 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== + -----END AGE ENCRYPTED FILE----- lastmodified: "2025-01-10T12:47:54Z" mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str] pgp: [] @@ -113,7 +113,7 @@ spec: plugins: - name: barman-cloud.cloudnative-pg.io parameters: - barmanObjectName: hetzner-store + barmanObjectName: hetzner-store managed: roles: - name: synapse @@ -121,79 +121,79 @@ spec: login: true superuser: false passwordSecret: - name: synapse + name: synapse - name: draupnir_synapse ensure: present login: true superuser: false passwordSecret: - name: draupnir-synapse + name: draupnir-synapse - name: authentik ensure: present login: true superuser: false passwordSecret: - name: authentik + name: authentik - name: ejabberd ensure: present login: true superuser: false passwordSecret: - name: ejabberd + name: ejabberd - name: vaultwarden ensure: present login: true superuser: false passwordSecret: - name: vaultwarden + name: vaultwarden - name: mastodon ensure: present login: true superuser: false passwordSecret: - name: mastodon + name: mastodon - name: openproject ensure: present login: true superuser: false passwordSecret: - name: openproject + name: openproject - name: plausible ensure: present login: true superuser: false passwordSecret: - name: plausible + name: plausible - name: coder ensure: present login: true superuser: false passwordSecret: - name: coder + name: coder - name: matrix_auth ensure: present login: true superuser: false passwordSecret: - name: matrix-auth + name: matrix-auth - name: cachet ensure: present login: true superuser: false passwordSecret: - name: cachet + name: cachet - name: docuseal ensure: present login: true superuser: false passwordSecret: - name: docuseal + name: docuseal - name: bugzilla ensure: present login: true superuser: false passwordSecret: - name: bugzilla + name: bugzilla #bootstrap: # initdb: # import: @@ -253,13 +253,13 @@ sops: age: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW - djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP - SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z - VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA - 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== - -----END AGE ENCRYPTED FILE----- + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW + djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP + SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z + VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA + 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== + -----END AGE ENCRYPTED FILE----- lastmodified: "2025-01-10T12:47:54Z" mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str] pgp: [] @@ -285,13 +285,13 @@ sops: age: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW - djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP - SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z - VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA - 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== - -----END AGE ENCRYPTED FILE----- + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW + djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP + SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z + VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA + 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== + -----END AGE ENCRYPTED FILE----- lastmodified: "2025-01-10T12:47:54Z" mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str] pgp: [] @@ -321,13 +321,13 @@ sops: age: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW - djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP - SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z - VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA - 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== - -----END AGE ENCRYPTED FILE----- + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW + djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP + SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z + VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA + 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ== + -----END AGE ENCRYPTED FILE----- lastmodified: "2025-01-10T12:47:54Z" mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str] pgp: []