cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 94000200d5924fa103aeddaf8d634cc7daa642de
parent d79a9239558761f58d0a0e39b477436ee13b2496
Author: MTRNord <mtrnord1@gmail.com>
Date:   Mon, 10 Mar 2025 21:20:14 +0100

Perf update hubzilla

Diffstat:
Mapps/2024_cluster/secrets/hubzilla.yaml | 18+++++++++---------
Mapps/base/hubzilla/deployment.yaml | 4++--
Mapps/base/mailserver/release.yaml | 2+-
3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/apps/2024_cluster/secrets/hubzilla.yaml b/apps/2024_cluster/secrets/hubzilla.yaml @@ -1,7 +1,7 @@ apiVersion: v1 stringData: - mariadb-password: ENC[AES256_GCM,data:O2lEVMvV3MybAVVMbZsBvlS7TYzLXyym7XRvs2dzxzyUWJ++oK8yi8dAH5D81k713bT+GHOWSuyLPK/Sm1FGZA==,iv:hIGrhdhLMgZBSrfIWw0vRab+NPfTE4xl9zBkKGkdedg=,tag:paFYkmc/EYJlnrylWcEtpw==,type:str] - email-password: ENC[AES256_GCM,data:G0YzZF7Of+0Q,iv:I1Phjqa5VIOjGMXK4kSIu7OKjofYg/mGxBW47KKx0Nk=,tag:F+0OYzRlMyVRwN3aiNGDrQ==,type:str] + mariadb-password: ENC[AES256_GCM,data:jCxy+QvzStCHjuORnyTdPY+zd0DFEUBH0eT1XwMns0mhP4CPlZ0uEKFOepEExS4Jn6S8E84sepTlqvhHRKmfgQ==,iv:mzEqY/86fyXv4+8xn7pGlSu33EoARexBC6+QNEDFlko=,tag:z1unJqQUiSxO886EST6y4g==,type:str] + email-password: ENC[AES256_GCM,data:sxDljXJxKNay51J06AEPLLf18kM5Z9KiILDvZa7Sj5KhQiIRVqNNob5nZ56H4afqyDVL/I6XQ4kgIT699VqTZA==,iv:PJpRu6EZe/W8jI2qYxBsKebLqnArPMurR9oYbVth1wM=,tag:ii85v7hNl4ze6Mo56rEHiQ==,type:str] kind: Secret metadata: name: hubzilla-env @@ -15,14 +15,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRUM1Ti9RZUY0L3BCQzRu - SXZvbG1YWk1KMGR5d1VBUVAySHE2elg4eFNjCkRmWHhjQ3hlWHE4TE5CSUZtZzNC - cmdnN1lkUzd2MmFOYnAxazBZcjl2MmMKLS0tIFhBenNsdURNc0ZsbFNid3BpSmdR - YzcvaDhCb3E3ZU1Ic0p0dm9Ba0NCZzQKxF6vXmYKK8+Q0UIK9OcHDULTVNenypQX - 56rV7vHpLBSmyxNNpr2EOKpB9Fwph0/ppSui2dadFFSSn3BzXLDhrg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnSlB2UVpqVDFveGxIclBw + aTFrRyt6OXVDSWV0VnJQWVh3cDVXcEluWjN3CjBJSVlXV01UOWsrNnpxeDdiWlhJ + SWo0MzRERGZnZ0IrZUFVc054TUkzWDAKLS0tIDBrWllvaEFrTVQzU3RSbFZaVStN + bm1XZzA5N3ByZkxlVExkWHV0S3BWT0UKUJACnNGJKEerZv+LRDmVHdRlQYxZYVww + 4q6OnSKJoWvYcUhAitInbisKRmQLCHNMc/Ut6oQfNrk8KuPJka7eeQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-10T10:04:42Z" - mac: ENC[AES256_GCM,data:8+RtQ8y1l83m02TGQONlh00KOWXjBXZBmup5ExPraUYt0xJAJDoGMOYaFSFMPytEGiDxLAVvKpC1T8IhnMIIygX0k7f0mtkVl7wO25oZ3Md57v5BtDP8N5lm7se1jlkYoLs6ZNWXktGA/vzUXi4cxwbqVsg8zyTV0/vVyqJLGwY=,iv:oZmMxFZemERdImF5aVsOby6omQiMKffSNvAfvCM3PwY=,tag:4vROVVQhr58dF95Vgg/Q8Q==,type:str] + lastmodified: "2025-03-10T11:05:35Z" + mac: ENC[AES256_GCM,data:c1vf+FYmFv72ZcIXxgiri078CUq7gj99+3DtWvcqny6Iuamk8izOeEVfgcXitvpjQLF50X5sgyYmMDeslD/zbrJ51f4pSuJnlAbHfGJRVcw2RQX64yQA5rB/xv44rJ+XudfiJAgxP5ou9r0Q3yzAXRmSgA5akAKKs5ad9r2pkSE=,iv:5cj/5w6J0xTFEeP19ief2q9wxgTVu0rlIEQkjARbb/w=,tag:83E1wT0lm1az+O5kInyflQ==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 diff --git a/apps/base/hubzilla/deployment.yaml b/apps/base/hubzilla/deployment.yaml @@ -32,7 +32,7 @@ spec: app: hubzilla spec: containers: - - image: ghcr.io/saiwal/hubzilla-docker:latest + - image: ghcr.io/mtrnord/hubzilla-docker:latest imagePullPolicy: Always name: hubzilla env: @@ -61,7 +61,7 @@ spec: - name: SSMTP_USESTARTTLS value: "Yes" - name: SSMTP_FROMLINEOVERRIDE - value: "No" + value: "Yes" - name: REVALIASES_ROOT value: support@midnightthoughts.space:mail.midnightthoughts.space:587 - name: REVALIASES_WWWDATA diff --git a/apps/base/mailserver/release.yaml b/apps/base/mailserver/release.yaml @@ -52,7 +52,7 @@ spec: ENABLE_AMAVIS: 0 AMAVIS_LOGLEVEL: 0 ENABLE_DNSBL: 0 - ENABLE_FAIL2BAN: 0 + ENABLE_FAIL2BAN: 1 FAIL2BAN_BLOCKTYPE: drop ENABLE_MANAGESIEVE: POSTSCREEN_ACTION: enforce