cluster

commit 769679e5414a97a49ec1746ef228f7667eb7f65b
parent 042e3e66b3416b1f8b8eecb27aca786a91fba098
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Thu, 16 Oct 2025 22:31:23 +0200

meow

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/plausible/kustomization.yaml
 | 
1
+
M
apps/talos_cluster/plausible/release.yaml
 | 
22
+++++++++++-----------
A
apps/talos_cluster/plausible/route.yaml
 | 
16
++++++++++++++++

3 files changed, 28 insertions(+), 11 deletions(-)
diff --git a/apps/talos_cluster/plausible/kustomization.yaml b/apps/talos_cluster/plausible/kustomization.yaml
@@ -4,3 +4,4 @@ namespace: blog
 resources:
     - repository.yaml
     - release.yaml
+    - route.yaml
diff --git a/apps/talos_cluster/plausible/release.yaml b/apps/talos_cluster/plausible/release.yaml
@@ -19,9 +19,9 @@ spec:
     values:
         baseURL: https://plausible.midnightthoughts.space
         disableRegistration: true
-        totpVaultKey: ENC[AES256_GCM,data:fdKmtI+7v7NjU+JhVdj+8FoL4htB0PDVwtpVbX4/gSXR4whU3NUV2I+EjCI=,iv:fE3spv2f3IfTviH41+0mlx1nQ5fUQoU73BB+bggGpqA=,tag:9XK4SY/DrdkWpzevVm+Rqg==,type:str]
-        clickhouseDatabaseURL: ENC[AES256_GCM,data:L/MbZwzB5jMn/3Y3P9TPDr8Rez3QffCoCyra7G9D9dZw5U45tKJUi8QgfPMga2Nm/JsOtPXTKrjLwIwqDt0s3gJOVJkODfdHEPcbM33yIAVXVR2yjH7HKeSkkUGsI6o09sOZA35IQQ163jUPThm5ldY/kpAiL/WvYT8R9umnmDODpWyoi33XILT8Vnz8fHhlbXkm7Kpik5xoXqSR,iv:2Eo+LbkD9PyzBkeV/dDHxk6ADnnDJ+WXmNDa58NZ1vo=,tag:+Omq7CSPvm5tNKdOfqq5BQ==,type:str]
-        databaseURL: ENC[AES256_GCM,data:1kzECfP0A8nMWE2/VtanqlMSHbgMolDK4yC7I2fnP/mYTN2sFuWfvEOsDTdJsAo5yloPsyfYa/xF5bnYmEKBtW8Biosb1m6hXXnnu5nPieOXID8M7rbeZv7Cw6tIk8iki1YgxXBk3MZxx8BqfGW2vGFnG4qvjoTyB3/Q8SjGCMNyuJ4YV7Cd0QnfEtmXqPB0U2MOC8YGVjs=,iv:7qNMpaubvQSFxkiS2bdSZrzu3GjddIeuegAgHXtrgAw=,tag:Bw+xkJm56HTrdYhUZ6ziPQ==,type:str]
+        totpVaultKey: ENC[AES256_GCM,data:rdtRMp5Kax9plEAW0pbd+hsxNmk4NjRT2ljMlz22h8RYShJZkmzaV+sCC8s=,iv:do/+dTGXs65dKuj6cYiDzmErEzWGDvE6NGxBCJ2g6Yg=,tag:1BtwCKkKRUzlulGRfpf9Gg==,type:str]
+        clickhouseDatabaseURL: ENC[AES256_GCM,data:VNVLLO1NLylc+XXnsLzU268cq9uQjjXpcroxB6uKoBrHi0krfhrkn3yXMdEU4A4m5w9TI8JkdFEeVyD5u9r9eqfa//RKGVYINLdGbbFaQDj+Ctkq68j8kGwlMspffspP3sF+Bjb0LMgUC32b15m1Hd8Ccc2Hy4DQc40371I/sOjCF/pTNiml6iB5EjyipIMnwJxSWAO9Gg==,iv:BpWucD4yczLbgRZkeZCxybK1gNfNAN7s9E2xRcYX6oc=,tag:4PYNRFOR63grZG2P/MIGkQ==,type:str]
+        databaseURL: ENC[AES256_GCM,data:bOO7J8PRjO5wNQSJcbEbWvpn1TnRz+Pn3nzmHIXqJdvUb7vEZ0JPU2r09h1bxv/scm++xTLZpw1hxHrI/41xahz1sI1jhlPbqnaPiU5uoHJ1CcaHHV7R0mKCPyz87uyq/aFtlqzMX9HKEUKNZVw5YkRxKXreR39an/fhuA/SJ5T6N3ZsoXWgUD02tgHQKOxXxEdOcXKLmD8=,iv:1Zo5WKdvM1Epq5kVP8xsVBN7yvQowSbni4FmHnuhZPo=,tag:wJeoOTB1gamE+8GS83OxWQ==,type:str]
         mailer:
             # TODO: Set up mailer
             enabled: false
@@ -29,7 +29,7 @@ spec:
             enabled: false
         clickhouse:
             auth:
-                password: ENC[AES256_GCM,data:qJLz7paIbYzCsscvTUp0TlcLJufsAMiLykyCmF4gvTLxFuL7D6beLHw5hf5L2+pXfx4AeYyRLCRQW9v5xFIB4A==,iv:Ytn85bq5aXppfavvgjx1qVIm522Io1LK9rXDd+8BQ7M=,tag:E/eNSfJ0EqUOwQatNvHr3g==,type:str]
+                password: ENC[AES256_GCM,data:CgyjAblaS5JfAD2HMuGRguGgvu1W7Qn72+2Ye+Q4mURGL58mkguwvicovSPaF3G+TP5/0TE+onnY4x+I3EaPzw==,iv:54oYzwlbRycDMDQY9bizatc85Ib0HBa5OOQgyMNWLJ4=,tag:OzkAgCnZIGDF4ltg0710OQ==,type:str]
             persistence:
                 storageClass: longhorn
                 enabled: true
@@ -54,14 +54,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1UHhIVlFkaTdxSjB0eUVF
-            cmlBSjVPYWJoc2g4ODUyUTR5ZXpFbjVjZ0RRCk1LcDR1ZlBiNStPcU1wWndYR0J4
-            ckF0eklIenJqUEpGMERpM2c3ZUJqU1UKLS0tIEQ0eEo2YlFXbkF6RmZydmRxbzhX
-            SHFnZHhnQ3M5Yk44TE0xL1BXcE8vZGsKOgn5ADTYyfGXx2Ecg/mxBLtyetPylbz6
-            vXCh/shcIF8tma5bOpYLDigbgYRkGWYmgPA7uZAKV1hezw0TpOyOYw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDUU52eUU0dXExY0t0MW1h
+            dTNWOGNWVkFpQ296VE00UXlsZEFIdXVCclNrCncwL0FJRjBXa3VvYjhRajdUdUgy
+            Zk45NEg0VmZsU2RmeTBNTHE3YWVpWUkKLS0tIElPZ0dxNTFDb0Yzb21iNjFBalRB
+            elZhcElrRWxzT1hmQjdQTTNxdXNtUGMK6K2S6nKyEbre0XzWvPzjGA5uq6HQGnka
+            oXs60HkVQsqNpdJziMB2LJ2qZQB9Tq7cemxauUCNMvimft2N78Mu4A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-16T20:21:33Z"
-    mac: ENC[AES256_GCM,data:B3wh9jBOGkuCHY1xuZ88o0xpY2N3ZSeJFxWkS2XEwmuKD6MFi412euxe0k39ouN4GG8AcUyAP66jMkL+O+cTBJmnZYSdc6yKDL58Pvk1xfiPac1QJgrSspf7+vKp2lBNVUQY0d+QPGn+CE2QpZPfxGx4pUl+oeE48w/8KG0CbkQ=,iv:P8FZQmow4+MGyAPSPI3cw1zwOHjmvLmObvzZv38Qv/s=,tag:0UipqPUpEPGx3KL3RYeXFQ==,type:str]
+    lastmodified: "2025-10-16T20:30:17Z"
+    mac: ENC[AES256_GCM,data:HgYHFzl23CaWt/AOhc578AkXxh9XIC2SEei0Y0UHmBjBDykMUJXZ3pJoZVYhWSSbSFcpP3aBuWkvaGdBRXfKlkKYS9YYzUwdgqKkPu7C/OHzoSZ+LCUlONkHWIol7X2CWm6EHxjEuoynv898GseEAaxUC+ukDgrSqGxcdV4iFco=,iv:s/xOgjdoQH4GiJKHEu8u6uH/xyoXPvUoTRZtRiUju0s=,tag:pN5bwKeVZdrRUCNRir7tLg==,type:str]
     pgp: []
     encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
diff --git a/apps/talos_cluster/plausible/route.yaml b/apps/talos_cluster/plausible/route.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+    name: plausible
+    namespace: blog
+spec:
+    parentRefs:
+        - name: envoy-gateway
+          namespace: envoy-gateway
+    hostnames:
+        - plausible.midnightthoughts.space
+    rules:
+        - backendRefs:
+              - name: plausible-plausible-analytics
+                port: 80