cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 6428a9242ba28405044a9935f68f1d35fd9bd1ca
parent 5648bbd26f60235c5bebd2792cda8c4a45242f44
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Tue,  3 Mar 2026 22:27:33 +0100

meow

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
Mapps/talos_cluster/plausible/release.yaml | 34++++++++++++++++++++++------------
1 file changed, 22 insertions(+), 12 deletions(-)

diff --git a/apps/talos_cluster/plausible/release.yaml b/apps/talos_cluster/plausible/release.yaml @@ -19,9 +19,9 @@ spec: values: baseURL: https://plausible.midnightthoughts.space disableRegistration: true - totpVaultKey: ENC[AES256_GCM,data:ldeCce7QoNy/+0RxWAORXPE0YKVoNvFOZqm11HwYCmiEyDVRM5KlyC9POUs=,iv:VpaO569FIicLXtML7wfwijmX9JZkYxE2i/dzHsGzPI0=,tag:8cPs9h+UJLZCSdB2dWfuQQ==,type:str] - clickhouseDatabaseURL: ENC[AES256_GCM,data:AwbsUpvmXx2qX7ayH3ZPV8c+FNhykmiVp/4TA0ehp3w+n4mU+gQF4l1YSeZgkW5lgds0GR5ypjD7VQ5QVHGC2syf5RKgEyjt6CIPTyYaoPUXBVEwSVHuCU9EjTWEoZSE1vM4P2e2eXOBlWV74s6IiEqvTMDdBve/Sceqry7Aog1OnZ5qoKDHW1y388D7kv3aBfAX02LwBQ==,iv:AgKEzrl0yLF0tf66V2xrKRpOHUGrpJSvdRQmCdsVbmA=,tag:25eCAxrHRJrEAvb438a/Jg==,type:str] - databaseURL: ENC[AES256_GCM,data:RtLJFoWpYhLJ9idi/4UHcTFbyMdnd/naRQGaSx42xouMSWZrP4b/Q+d8EjD6s3B/Sc0nr+dz7stzvmCXGaYKLhOh+kNEHPGWUxqRfy7Xw9HjvRdSpnGIypwBSqOlvCEyzQ8gaZSk77P7nf4DQ/uvONn8fVMCTo8Db3XBpRJK9EyG4kU+xV3NukNermSUeu+EQQdgyEMRycE=,iv:t8sB8N1Sv4iNmMaG9x5IpWw+7a5V3UBofa/Wt1qECow=,tag:9G4HNBXx76kHGOmGMmqc+A==,type:str] + totpVaultKey: ENC[AES256_GCM,data:0PcuaYhczJyJAxvZcJXHvZAgnKLZNZNGNRmVmCi9h7TkQNvrjI8yr+JjsHI=,iv:PBIE1X9B+z5A3mizMlXL4M1ineuvv10evgQaAFY8KUo=,tag:R7wCmWaxFp5MNdX01T8JYw==,type:str] + clickhouseDatabaseURL: ENC[AES256_GCM,data:xTzShgQanxjFtvkMG0Gnbf5Pn3IPg4Tq24AoXWkVj+W/Hg1sJ5PXEDfhCJJMOo7Ixw0sJa3731YPGmNLxoacNGI1jMVMq4SMA8x3QDt9iyCqJMN9sa8/lq0RpgvF+nSzj2vgRXjbTBC2CcsQ1kjACOA/BLbiUz/fcHGdFykv190ASise8zeXc6m3OlZEcJ96LlihJT4Avg==,iv:6I9AIrxRG/theSVakohoIWxGMYEOARo5zN5s/pQ5vWM=,tag:ds6Ev+SJsgh6mHotOfEPAQ==,type:str] + databaseURL: ENC[AES256_GCM,data:IzJjN6AJtuPmdqo4x8DYObK7MAW7X7D2LaPWgYO4HBICeJxVHQRjJYHmMSXbv5dygTXU8yD7YO0uMRKvr/SGqaK0LdTxIfjDe1CnLGoIDfAMLVyLtSCJfcHh/q6DHStwmOZu8rDnxdEFeG/BwSDlRAophF18qH+DwrNLWw+3wAotfRBN5zeAF16w5B77Ynula22dIYUav8s=,iv:Z7Ej3xV+bA26yz1fhytCogb/iukCeZgG8EB77soAvhA=,tag:7lqlE8fyo069LmuoJJ2pfA==,type:str] mailer: enabled: true adapter: Bamboo.Mua @@ -31,18 +31,28 @@ spec: port: 465 auth: true username: support@midnightthoughts.space - password: ENC[AES256_GCM,data:tOcLnFEtAFYnzEX021p6fiIngYdJ+LV1D0+25vg7gpMDn6L3VRHSAlfZJ6t1Cm4JYtVXVzHSjre26Mrzg5raLA==,iv:ECNpBgrbUZiyfghxyQAI+YxNZw8GChts2IFBu57rUz0=,tag:KnlEMJYn0jq1WHDfWbnRHA==,type:str] + password: ENC[AES256_GCM,data:uu1jdlSas2b3SyazKfT1ivWruhkoY6DJqaioB8d4eo5WdfOJWuX8AnondfgM/f9qEC0B/2+1vhPdMFlOTzyq6A==,iv:ItnnDfoTtwgLO17Mzcuq3HibyAYFDcRXJ77FLPbYtbg=,tag:ZAWIhQo5OSE22VY9+vX4MQ==,type:str] ssl: true postgresql: enabled: false clickhouse: resourcesPreset: xlarge auth: - password: ENC[AES256_GCM,data:Req2rtxHw3X+SO5OY7DCn+KmQLaHbWi7H9qXi0SZa87FrCSsL+ifsMNNNDQGvwnTHYT2pxtmw07KPzog84GIJQ==,iv:SXz6fB2ryliT4brJ/aqu105vbc51Bn+FoO8pb620e9s=,tag:8Myks0ErvFV/u2ANXd6N/Q==,type:str] + password: ENC[AES256_GCM,data:D/0ZKFv5LiMOTCZxImrEPdbb5LKXoev0yvu5i+0QTwsn3/KhpEEYJ0zt1SNeu4wZgpxNaujLWYU2orxQIcA+ig==,iv:DtZHSWpBe6aU7NwgqJAUWatcBBGuVrTWH34pDU2R26Q=,tag:GhCZMML0claDDpmR6XhBJw==,type:str] persistence: storageClass: longhorn enabled: true size: 256Mi + livenessProbe: + initialDelaySeconds: 60 + periodSeconds: 10 + timeoutSeconds: 5 + failureThreshold: 30 + readinessProbe: + initialDelaySeconds: 60 + periodSeconds: 10 + timeoutSeconds: 5 + failureThreshold: 30 extraEnvVarsSecret: clickhouse-s3-credentials extraVolumes: - name: s3-config @@ -72,14 +82,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQR251UUhSU2ZqVm1pUVN4 - RnREUmJNcEpLNXBQcnF3WHBUSWVLNmpHL0cwCjdlaXYwS3dRN2FaL3R0eVBmekVk - YURoc2xhS0xjTDYzRmQ3TzY4Rkhja0kKLS0tIFlvUkhjemNiSGVpTmk1TDJLbEtF - NERGS1FzcTRzVTRJd3JJc25HYlFVZmMKBAEkQScgubc7gfzYN3n24CcCuG0CmRkx - ce5adx6anV5hvMV91fimc3qlnRjh48kGXhp/dSqF+gNKtGDBs5wKRw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHWi9rT0FnNTVCZjZPZnhB + UFNkNHN2Wk45cWVGZXpFZ1hHRnJvY29nUFRBClJRYzhJbmQ0YTRTZkc2dlR2WUho + Vy8rQm5FbHFXcTRlMkFIQUtzNUZSUlUKLS0tIFJRVU52cVdFYytTWklsa1pJRVJq + NllsMlVWczNacHRkNmwwODREZzQ5dTgK36DeQj9/sozVJg9avP1hBAowngSziBwA + 8IIwsm/stQfmFULJCqdLrIfSUZv9UZc5MvAZS6ua70KIgB+FFCkNGw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-03-03T20:55:58Z" - mac: ENC[AES256_GCM,data:rEuFtr98S2Og0MCYTR2G8yv0MILypcf8T9eXX9N4I+jBZ7s4f1MHCLxwOba8ME79XzX/yzS7zmvhVwyUYRu4pjcMhi2et229XjmggKWuMeYO3buaUPQtFUE3l77hk6N22KhbEbu9o7vtulnIUmeNfOldw1b6x3fhV4i6t4KuBIM=,iv:E52xnbqoqrpcfaFbFGa+Fh+eMl1FBlmgCmw0UKruEbw=,tag:T4KUkot3E2lp/4xwn3Humw==,type:str] + lastmodified: "2026-03-03T21:27:26Z" + mac: ENC[AES256_GCM,data:1ZhtCz8Y6zLyp6MK0PjJo16PBJfyulh+HAD0ML3HYA6ai1JZ+I5veEDWfQ7tdY8EdO9PV+lEykcLED9vpGypmKYEZme2iXFfzMBXGte7UsnY1hVDhauqpHbLU85DxeR2aa0bOjVIxtZYQWvoIbQJRLuI7f9KVK2sQ2gcV36rikw=,iv:O/Xz0gP0fNS0shYkzq4imGBzZ5oylE+iAKkjsjFb09E=,tag:ZZ171Ay9m1qWtm74IGiXCA==,type:str] pgp: [] encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ version: 3.9.1