commit 8bdae2ebd29c9f57681b64ae91bf6b832b33787b
parent 057c06ee296050e2d392a725896fb8404a90eb01
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Sat, 20 Dec 2025 23:23:30 +0100
yet another try
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
3 files changed, 22 insertions(+), 21 deletions(-)
diff --git a/apps/talos_cluster/immich/.env.database-credentials b/apps/talos_cluster/immich/.env.database-credentials
@@ -1,20 +0,0 @@
-{
- "data": "ENC[AES256_GCM,data:FXf6xNgDTYsNOa7WNXU4PM0Gge/hIqIIaMGMPnIVJCet9JBvmXuDPeAYnCPRxhUIplVtMmBA3hdGrdvrmU7c6CsYzgdgh6vqu6VggwIFUHo5apN4DDgvIehaFsIzRxQL6n4HogwqxMe3NdFWJNInHl+4ikmwDPBKPxrhuRKpNliUM/TvbOv2ECaXeq1KIZdb69ssisUjdLVJLFilKTmf3xE=,iv:C/6Psl+vHiQLIKjDjf82d0Hqbe2K/niJa4epJX0DQ4g=,tag:x2bD1j7+LOp6E/x8zh8T7Q==,type:str]",
- "sops": {
- "kms": null,
- "gcp_kms": null,
- "azure_kv": null,
- "hc_vault": null,
- "age": [
- {
- "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh",
- "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxbWRDV21IaXB2ajllUG9s\naVZFOWM2b1JsaWE4SHIwY1FjSlhPZUZGMHdnCjFwTDZWU2NMbEpLOTNwYSswemYy\ndlFBUkN2ejRyaWdqQWprRUk0RUZkbUUKLS0tIEtUeGhyWEtPMXdHd2xvU2ZtdnNt\nV1ZVRU1Sem4yTnVSaC96WFNNUmpXSU0Kv4ukqqwGY9zNNPefuKlby2gS/wfcCI1W\nmPfYD9fZ5C2ElQNtVCjwOi/tIPtp21pFEGcPHkP4/HwPy32DniJiVA==\n-----END AGE ENCRYPTED FILE-----\n"
- }
- ],
- "lastmodified": "2025-12-20T22:20:30Z",
- "mac": "ENC[AES256_GCM,data:Cm1dSm5GOhDfbk1GRGvvZFt9Slm/Citn45lDxc5zehvefkGoAJiM5NH/W5BS5+Dw1ie5qVezwlOmQeuVuPVVs7hLbPHutfpUEag+oMej5BI7pH+fVh6usCqAAiGaAtGtdeZTsdhiefrJSSRji5xSdgQW2fIwwjgOvjlmCk9XtBs=,iv:F87XMoSPvMYuN5sYYEj71SAHUMWettN/G7F1lmsupH0=,tag:FpALzOhfDelNBmfl3ujlsw==,type:str]",
- "pgp": null,
- "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$",
- "version": "3.9.1"
- }
-}
diff --git a/apps/talos_cluster/immich/database-credentials.properties b/apps/talos_cluster/immich/database-credentials.properties
@@ -0,0 +1,20 @@
+{
+ "data": "ENC[AES256_GCM,data:/w6z8Xa32itz+FJhYB9rYNDd/lxjdz3pXuoaf2VRnXgVt9dXdX/ooi22bND4ZAM9Rg6t/hnfexH0RLnXGV8z461UwxR/EB7owUw52cPKqcMDZm9bNcWT40w14e8QZnphu3+/AfhcrX8L2RkT0lyJM803R/mmuXqXypM7BCeauUlj672fAMOXr+u79B3Jh5Ae4nJRZ/ElcM+0WXiqnWcc+fk=,iv:6DWTgPE35qETgM7wKZitBrhCzHuwZT3gLColRoDyYoM=,tag:yR3S2KTaqJBCZSlus/4dKQ==,type:str]",
+ "sops": {
+ "kms": null,
+ "gcp_kms": null,
+ "azure_kv": null,
+ "hc_vault": null,
+ "age": [
+ {
+ "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh",
+ "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpZWlOV0dFWTA2M29maHVq\nZTFyaGtqdTNFTExmMWd0ZklVWGRnVjMyQUhZCm40ZXV6N3ZZb1ZRbmNWNkYrUGh2\nZjV2Q0ZRb3VKakNDakRPNVluaHBPTzQKLS0tIEdZcDlNUEVqM2ZHRytwL2x0NVd4\nT2FGMUZUWFFIUDhsUTVPM2FzS1gzQkUKxEBcF0ovelrOQF1Q+AI3/TkWzpMLHJP9\nHqQieF2otG5kOiG+6pjXS2aOekwf4hsPTxtiZxQkAH0YaK7cXSrIgg==\n-----END AGE ENCRYPTED FILE-----\n"
+ }
+ ],
+ "lastmodified": "2025-12-20T22:23:21Z",
+ "mac": "ENC[AES256_GCM,data:8Uoxl877mSHE6c8fIms2aVzGqmwO7rIV4zsYYgXvuw0ew1c9Mb9dnMkvhJVm3VGCABSaago+eQgEs2aGqwjV34c/Kzf+5s3LxdI/2IaVfoB03HEGsqwlFnamrwSORu69/YdzN0z2hOJqugbgE4KIQlc6cPPUZDW71M72C9+T2e4=,iv:Z32eA5f+axaBnO0p+qXcOaOjKjDblZ6tDL5DlFtl6V0=,tag:cB1sSrC3gopbCShKpKdn2Q==,type:str]",
+ "pgp": null,
+ "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$",
+ "version": "3.9.1"
+ }
+}
+\ No newline at end of file
diff --git a/apps/talos_cluster/immich/kustomization.yaml b/apps/talos_cluster/immich/kustomization.yaml
@@ -11,4 +11,4 @@ secretGenerator:
options:
disableNameSuffixHash: true
files:
- - .env.database-credentials
+ - database-credentials.properties
