commit 9539367afa2522b8215e77e4d531d868c9e40969 parent 6522940ec9d64e567f2a43178253fc00302bd2d7 Author: MTRNord <mtrnord1@gmail.com> Date: Thu, 10 Oct 2024 19:27:01 +0200 Cleanup Diffstat:
68 files changed, 0 insertions(+), 1956 deletions(-)
diff --git a/apps/production/cosign-values.yaml b/apps/production/cosign-values.yaml @@ -1,9 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: cosign - namespace: cosign-system -spec: - chart: - spec: - version: "0.6.x" diff --git a/apps/production/kustomization.yaml b/apps/production/kustomization.yaml @@ -1,51 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: - #- ../base/cosign - #- ../base/woodpecker - #- ../base/kube-prometheus-stack - #- ../base/victoria-metrics-k8s-stack - #- ../base/loki-stack - - ../base/postgres-operator - - ../base/matrix - #- ../base/postgres-exporter - #- ../base/redmine - #- ../base/mailu - #- ../base/tempo - - ../base/zammad - - ../base/forgejo - #- ../base/tetragon - #- ../base/vector - #- ../base/parseable - #- ../base/zuul-operator - #- ../base/zuul - #- ../base/piwigo - - sliding-proxy-ingress.yaml - - pvcs-mjolnir.yaml - - nfs-server.yaml - - nfs-csi.yaml - - ../base/traefik-sso - - ../base/umami - - ../base/keycloak - #- ../base/authentik - #- ../base/chaosmesh - - ../base/calendar - #- ../base/matrix/element-call - #- ../base/matrix/element-call-synapse - #- ../base/openldap - #- ../base/n8n - #- ../base/workadventure -patchesStrategicMerge: - #- cosign-values.yaml - #- woodpecker-values.yaml - #- loki-stack-values.yaml - - postgres-operator-values.yaml - #- media-repo-values.yaml - - sliding-proxy-values.yaml - #- synapse-midnightthoughts.yaml - #- postgres-exporter-values.yaml - #- redmine-values.yaml - #- mailu-values.yaml - - forgejo.yaml - #- vector-values.yaml - #- synapse-element-call.yaml diff --git a/apps/production/loki-stack-values.yaml b/apps/production/loki-stack-values.yaml @@ -1,33 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: loki-stack - namespace: monitoring -spec: - values: - loki: - config: - storage_config: - aws: - s3: http://loki:gae9vohtaiyohchaexaephooh7fah4coo1jeeNookiPob3phahzeexadeechuxei@loki-hl.monitoring.svc.cluster.local.:9000/loki - s3forcepathstyle: true -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArU3dKK0YzOGF3Qkd5UHM5 - dzV4UG12THFzY2pUdjdmam81T1V2dnlFRXcwCk5SR0V2cjIrU2tNdFh5Y2NSRTZP - bVVGMzNpOUM0L21mZ091VTUxUmhwWGMKLS0tIExzRmVWYXN2SURrd3Fxdm1uOHpX - R05BUk5takMwSGx3L3BHOHh6blVicVkK2G4gcxBV2VBTv9QDhj9JuBSz0BDmNEXN - 2sO1/t7M2hAQ9sLi+7UZfwjC0vX+rV6W7Td8eJH2uhcVXowOBWJeNg== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-06T13:19:48Z" - mac: ENC[AES256_GCM,data:0Aqu2d3G9/+A/bXdRVWMaGKBB/KgvxCVBdQ/F4TQFEdCyipKzuUzr2SpeaO50SFQs7YABnBjUsD98zIAcCreGNHlz57NPy3He1RTELr8Dfkx+8V7lo5ASHhKYr5IqAiE6uoHN8JSdOe0nWM4KfM0tWdqa8ONA6j/fGptKu4sEPg=,iv:zZ7fe0axSjDGW+dVsPvWIiPiVCDIrPRnAEvvepgHjW0=,tag:DACwNylVJhTS8x6fRk84/g==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$ - version: 3.7.3 diff --git a/apps/production/mailu-values.yaml b/apps/production/mailu-values.yaml @@ -1,43 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: mailu - namespace: mailu -spec: - chart: - spec: - version: 1.2.x - values: - global: - database: - roundcube: - password: ENC[AES256_GCM,data:xJQBDyvACMS7L899/3Qdf10E5sYdyUo0EqJnZGeP+xHssOL/7Y2pJzKeWAeaSg7fSkPtP23n7dG7PRw69XQixQ==,iv:4FKz0yu9UAe+cH7tbx38t/JCZlCPtDE14rkNr89/Gys=,tag:V6r80eHpB62jcXQYbjQeDA==,type:str] - initialAccount: - enabled: true - username: mtrnord - domain: nordgedanken.dev - password: ENC[AES256_GCM,data:0KXp6MjmNzMQ,iv:BxrBgGO3MbjkTNI1iF1fgxrGwzodsQrDM2dh+ooOVEY=,tag:j7jQegmS//njht34NYeK5Q==,type:str] - mode: update - auth: - postgresPassword: ENC[AES256_GCM,data:hDazYMdBrC/jp/YWx74hIUTQSupO2YIAUMlCsqy8+TOar/RORdSskrsNI5/XsM4ceHpvDcEc41pVaiWdK7o3uw==,iv:BYuQziB/QCCrPoU4RwQl48Qu86L5tYTNL22fRF+2VqE=,tag:HP3gxu/qGqtdSJ1LJ6B/JQ==,type:str] - password: ENC[AES256_GCM,data:uy5pHIi5xAtzuzmE5mpx4h+OwJ2AjDR/Qjq/lpyumH0bN6HZ+VNxq15bJFNSILDnEUkWUHdBzvpLx/JLfDJGCQ==,iv:RZvOA0KMXgVxNS3OWKdBcSpxXpgOepjIPxSvq8v7CIQ=,tag:ueegb2Dft7KuZX/SR4O+kw==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtYW53dlE1WXNidVdyUHJm - U0s4dUNNbERMaldlc1JYSVNRREp5ZmRKaHk4Cm9JdFM2RVZldHZEbUU1aEpwQnVj - TDdtK3BoVUZDVW5nVjFLVy9OTW10alkKLS0tIHJ4WDZKSTVyT3ppK2hpTTBTcHhQ - ejMxb0VNdWtaWVZHY1hrOC9WWEczRlkK6YKiwUFXW+QC4hn9FHd4g+yxChBJGlb5 - agEwAku4+amMCTzEbRqAv4RrzxbckM5+5PS8gAQGwOtTQOl4bfaldQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-19T13:48:17Z" - mac: ENC[AES256_GCM,data:OQ9RsWDGAbUz12HUi25Wr7qGmx9HI+3fzgG6MmhSfztfrf1U1JFDhIwQUu587eefJ5+DSvgzC0ipm9gK2MHyEGeBK84cmnGiHy/ObUrXYt7ZCXZnqILy7BgiKHGBLtVkpPIlDzn8OU0hK5zZX0lUPYHEEFsf+3jmUu/WcQKusug=,iv:bMaCpVGQ9wVyECvM7Cn4IPQKIoYL4TmCIyYVESx0J5E=,tag:DICQyjzwJZc+oaKVuDPYBg==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|postgresPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.7.3 diff --git a/apps/production/media-repo-values.yaml b/apps/production/media-repo-values.yaml @@ -1,88 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: matrix-media-repo - namespace: matrix -spec: - chart: - spec: - version: 2.1.x - values: - config: - admins: - - '@lexi:midnightthoughts.space' - ## Per-domain configuration. - ## Ref: https://github.com/turt2live/matrix-media-repo/blob/master/docs/config.md - ## - homeservers: - midnightthoughts.space: - csApi: https://matrix.midnightthoughts.space - backoffAt: 10 - adminApiKind: synapse - identicons: - enabled: true - art.midnightthoughts.space: - csApi: https://matrix.art.midnightthoughts.space - backoffAt: 10 - adminApiKind: synapse - identicons: - enabled: true - ## Ingress configuration. - ## - ingress: - enabled: false - className: traefik - annotations: - # traefik.ingress.kubernetes.io/router.tls: "true" - # traefik.ingress.kubernetes.io/router.middlewares: default-hsts@kubernetescrd,default-redirect-https@kubernetescrd - traefik.ingress.kubernetes.io/router.middlewares: redirect-media@kubernetescrd - cert-manager.io/cluster-issuer: letsencrypt-http - hosts: - - host: matrix.midnightthoughts.space - paths: - - /_matrix/media - tls: - - secretName: midnightthoughts-tls-secret - hosts: - - matrix.midnightthoughts.space - - midnightthoughts.space - postgresql: - enabled: false - auth: - existingSecret: matrix-media-repo-postgresql - username: matrix_media_repo - database: matrix_media_repo - primary: - persistence: - existingClaim: local-data-matrix-media-repo-postgresql-1 - externalPostgresql: - host: matrix-postgres-cluster.matrix-postgres-cluster.svc.cluster.local - port: 5432 - username: matrix_media_repo - password: ENC[AES256_GCM,data:jIL7w09cV50OU1lB4y97cPzL3Im0ficSRS66WgGwK+j+jCfn/pE4CZCfpNkKGFYhPgRCVik3TrkY5L4w59YDKQ==,iv:hfzpxlGmNPJRroPiJTx3UfQZclxUNqxwqsH/fPtnmQg=,tag:jjwMYspnLiH6f8UCFKEF3Q==,type:str] - database: matrix_media_repo - sslMode: require - persistence: - existingClaim: local-matrix-media-repo - redis: - enabled: true -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3YXBwZjlXVk5HUWNsWHBx - MG80OTRSeHhicTBieFpHQnNtMEg4Wkw4RVFjCjB5UlhvUTRidjhEdTBHWHF5UC9k - RHRxMElLYkx4bEs3Q2d3RnEyZW5hNUkKLS0tIHV0UEdvajV6aVZyVDIxRFZ4UlNo - alhlT3lZR3pFZmRPSTdUeFlOWCt4bkUKQljK17JOBA+Evv0WHf2mE+msklIQJ09E - B3Hk6tlZSC9/lyyTIW3UaQOQQotd6DcbmrITl5kGSNz70SupCbzahA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-04-02T17:03:03Z" - mac: ENC[AES256_GCM,data:lWUhKDJ1EO7gqlmMpcjbFd0lXX8MWASjOn8wvLesBzlxfRr81vJPx47rCES0WIg/Pt2ugVl/BbRpDdvXRlG2hcCSSf2Gui3fmUEBoGY+O7t/3X6M0qmdjKzXDZld6eUyzQk/HqKvdqksjujhpo3goq3x8dJivQF7frtnOm2z29A=,iv:sVUYjtWa3W2nbSmADiMvFZYaa1taRzGjCzxq88cNxSk=,tag:L07VzbaxH1wStDxdDfEfgA==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password)$ - version: 3.7.3 diff --git a/apps/production/namespaces/authentik.yaml b/apps/production/namespaces/authentik.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: authentik diff --git a/apps/production/namespaces/calendar.yaml b/apps/production/namespaces/calendar.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: calendar diff --git a/apps/production/namespaces/chaosmesh.yaml b/apps/production/namespaces/chaosmesh.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: chaosmesh diff --git a/apps/production/namespaces/cosign.yaml b/apps/production/namespaces/cosign.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: cosign-system diff --git a/apps/production/namespaces/element-call.yaml b/apps/production/namespaces/element-call.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: element-call diff --git a/apps/production/namespaces/forgejo.yaml b/apps/production/namespaces/forgejo.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: forgejo diff --git a/apps/production/namespaces/keycloak.yaml b/apps/production/namespaces/keycloak.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: keycloak diff --git a/apps/production/namespaces/kube-prometheus-stack.yaml b/apps/production/namespaces/kube-prometheus-stack.yaml @@ -1,6 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: monitoring - labels: - app.kubernetes.io/component: monitoring diff --git a/apps/production/namespaces/kustomization.yaml b/apps/production/namespaces/kustomization.yaml @@ -1,33 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: - - cosign.yaml - - kube-prometheus-stack.yaml - - matrix.yaml - - postgres-exporter.yaml - - postgres-operator.yaml - - rook.yaml - - vaultwarden.yaml - - woodpecker.yaml - - redmine.yaml - - mailu.yaml - - zammad.yaml - - nfs-server.yaml - - forgejo.yaml - - tetragon.yaml - - vector.yaml - - parseable.yaml - - zuul-system.yaml - - zuul.yaml - - piwigo.yaml - - umami.yaml - - keycloak.yaml - - authentik.yaml - - chaosmesh.yaml - - xandikos.yaml - - calendar.yaml - - element-call.yaml - - openldap.yaml - - n8n.yaml - - workadventure.yaml - - traefik-ingress.yaml diff --git a/apps/production/namespaces/mailu.yaml b/apps/production/namespaces/mailu.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: mailu diff --git a/apps/production/namespaces/matrix.yaml b/apps/production/namespaces/matrix.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: matrix diff --git a/apps/production/namespaces/n8n.yaml b/apps/production/namespaces/n8n.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: n8n diff --git a/apps/production/namespaces/nfs-server.yaml b/apps/production/namespaces/nfs-server.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: nfs-server diff --git a/apps/production/namespaces/openldap.yaml b/apps/production/namespaces/openldap.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: openldap diff --git a/apps/production/namespaces/openproject.yaml b/apps/production/namespaces/openproject.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: openproject diff --git a/apps/production/namespaces/parseable.yaml b/apps/production/namespaces/parseable.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: parseable diff --git a/apps/production/namespaces/piwigo.yaml b/apps/production/namespaces/piwigo.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: piwigo diff --git a/apps/production/namespaces/postgres-exporter.yaml b/apps/production/namespaces/postgres-exporter.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: postgres-exporter diff --git a/apps/production/namespaces/postgres-operator.yaml b/apps/production/namespaces/postgres-operator.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: postgres-operator diff --git a/apps/production/namespaces/redmine.yaml b/apps/production/namespaces/redmine.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: redmine diff --git a/apps/production/namespaces/rook.yaml b/apps/production/namespaces/rook.yaml @@ -1,6 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: rook-ceph - labels: - app.kubernetes.io/component: rook-ceph diff --git a/apps/production/namespaces/tetragon.yaml b/apps/production/namespaces/tetragon.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: tetragon diff --git a/apps/production/namespaces/traefik-ingress.yaml b/apps/production/namespaces/traefik-ingress.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: traefik-ingress diff --git a/apps/production/namespaces/umami.yaml b/apps/production/namespaces/umami.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: umami diff --git a/apps/production/namespaces/vaultwarden.yaml b/apps/production/namespaces/vaultwarden.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: k8s-at-home diff --git a/apps/production/namespaces/vector.yaml b/apps/production/namespaces/vector.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: vector diff --git a/apps/production/namespaces/woodpecker.yaml b/apps/production/namespaces/woodpecker.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: woodpecker diff --git a/apps/production/namespaces/workadventure.yaml b/apps/production/namespaces/workadventure.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: workadventure diff --git a/apps/production/namespaces/xandikos.yaml b/apps/production/namespaces/xandikos.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: xandikos diff --git a/apps/production/namespaces/zammad.yaml b/apps/production/namespaces/zammad.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: zammad diff --git a/apps/production/namespaces/zuul-system.yaml b/apps/production/namespaces/zuul-system.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: zuul-system diff --git a/apps/production/namespaces/zuul.yaml b/apps/production/namespaces/zuul.yaml @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: zuul diff --git a/apps/production/nfs-csi.yaml b/apps/production/nfs-csi.yaml @@ -1,371 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: csi-nfs-controller-sa - namespace: kube-system ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: csi-nfs-node-sa - namespace: kube-system ---- -kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: nfs-external-provisioner-role -rules: - - apiGroups: [""] - resources: ["persistentvolumes"] - verbs: ["get", "list", "watch", "create", "delete"] - - apiGroups: [""] - resources: ["persistentvolumeclaims"] - verbs: ["get", "list", "watch", "update"] - - apiGroups: ["storage.k8s.io"] - resources: ["storageclasses"] - verbs: ["get", "list", "watch"] - - apiGroups: ["snapshot.storage.k8s.io"] - resources: ["volumesnapshotclasses", "volumesnapshots"] - verbs: ["get", "list", "watch"] - - apiGroups: ["snapshot.storage.k8s.io"] - resources: ["volumesnapshotcontents"] - verbs: ["get", "list", "watch", "update", "patch"] - - apiGroups: ["snapshot.storage.k8s.io"] - resources: ["volumesnapshotcontents/status"] - verbs: ["get", "update", "patch"] - - apiGroups: [""] - resources: ["events"] - verbs: ["get", "list", "watch", "create", "update", "patch"] - - apiGroups: ["storage.k8s.io"] - resources: ["csinodes"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["nodes"] - verbs: ["get", "list", "watch"] - - apiGroups: ["coordination.k8s.io"] - resources: ["leases"] - verbs: ["get", "list", "watch", "create", "update", "patch"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] ---- -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: nfs-csi-provisioner-binding -subjects: - - kind: ServiceAccount - name: csi-nfs-controller-sa - namespace: kube-system -roleRef: - kind: ClusterRole - name: nfs-external-provisioner-role - apiGroup: rbac.authorization.k8s.io ---- -apiVersion: storage.k8s.io/v1 -kind: CSIDriver -metadata: - name: nfs.csi.k8s.io -spec: - attachRequired: false - volumeLifecycleModes: - - Persistent - fsGroupPolicy: File ---- -kind: Deployment -apiVersion: apps/v1 -metadata: - name: csi-nfs-controller - namespace: kube-system -spec: - replicas: 1 - selector: - matchLabels: - app: csi-nfs-controller - template: - metadata: - labels: - app: csi-nfs-controller - spec: - #hostNetwork: true # controller also needs to mount nfs to create dir - #dnsPolicy: ClusterFirstWithHostNet # available values: Default, ClusterFirstWithHostNet, ClusterFirst - serviceAccountName: csi-nfs-controller-sa - nodeSelector: - kubernetes.io/os: linux # add "kubernetes.io/role: master" to run controller on master node - priorityClassName: system-cluster-critical - securityContext: - seccompProfile: - type: RuntimeDefault - tolerations: - - key: "node-role.kubernetes.io/master" - operator: "Exists" - effect: "NoSchedule" - - key: "node-role.kubernetes.io/controlplane" - operator: "Exists" - effect: "NoSchedule" - - key: "node-role.kubernetes.io/control-plane" - operator: "Exists" - effect: "NoSchedule" - containers: - - name: csi-provisioner - image: registry.k8s.io/sig-storage/csi-provisioner:v3.5.0 - args: - - "-v=2" - - "--csi-address=$(ADDRESS)" - - "--leader-election" - - "--leader-election-namespace=kube-system" - - "--extra-create-metadata=true" - env: - - name: ADDRESS - value: /csi/csi.sock - volumeMounts: - - mountPath: /csi - name: socket-dir - resources: - limits: - memory: 400Mi - requests: - cpu: 10m - memory: 20Mi - - name: csi-snapshotter - image: registry.k8s.io/sig-storage/csi-snapshotter:v6.2.2 - args: - - "--v=2" - - "--csi-address=$(ADDRESS)" - - "--leader-election-namespace=kube-system" - - "--leader-election" - env: - - name: ADDRESS - value: /csi/csi.sock - imagePullPolicy: IfNotPresent - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: - limits: - memory: 200Mi - requests: - cpu: 10m - memory: 20Mi - - name: liveness-probe - image: registry.k8s.io/sig-storage/livenessprobe:v2.10.0 - args: - - --csi-address=/csi/csi.sock - - --probe-timeout=3s - - --health-port=29652 - - --v=2 - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: - limits: - memory: 100Mi - requests: - cpu: 10m - memory: 20Mi - - name: nfs - image: registry.k8s.io/sig-storage/nfsplugin:v4.4.0 - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] - allowPrivilegeEscalation: true - imagePullPolicy: IfNotPresent - args: - - "-v=5" - - "--nodeid=$(NODE_ID)" - - "--endpoint=$(CSI_ENDPOINT)" - env: - - name: NODE_ID - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: CSI_ENDPOINT - value: unix:///csi/csi.sock - ports: - - containerPort: 29652 - name: healthz - protocol: TCP - livenessProbe: - failureThreshold: 5 - httpGet: - path: /healthz - port: healthz - initialDelaySeconds: 30 - timeoutSeconds: 10 - periodSeconds: 30 - volumeMounts: - - name: pods-mount-dir - mountPath: /var/lib/kubelet/pods - mountPropagation: "Bidirectional" - - mountPath: /csi - name: socket-dir - resources: - limits: - memory: 200Mi - requests: - cpu: 10m - memory: 20Mi - volumes: - - name: pods-mount-dir - hostPath: - path: /var/lib/kubelet/pods - type: Directory - - name: socket-dir - emptyDir: {} ---- -kind: DaemonSet -apiVersion: apps/v1 -metadata: - name: csi-nfs-node - namespace: kube-system -spec: - updateStrategy: - rollingUpdate: - maxUnavailable: 1 - type: RollingUpdate - selector: - matchLabels: - app: csi-nfs-node - template: - metadata: - labels: - app: csi-nfs-node - spec: - #hostNetwork: true # original nfs connection would be broken without hostNetwork setting - #dnsPolicy: ClusterFirstWithHostNet # available values: Default, ClusterFirstWithHostNet, ClusterFirst - serviceAccountName: csi-nfs-node-sa - priorityClassName: system-node-critical - securityContext: - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - tolerations: - - operator: "Exists" - containers: - - name: liveness-probe - image: registry.k8s.io/sig-storage/livenessprobe:v2.10.0 - args: - - --csi-address=/csi/csi.sock - - --probe-timeout=3s - - --health-port=29653 - - --v=2 - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: - limits: - memory: 100Mi - requests: - cpu: 10m - memory: 20Mi - - name: node-driver-registrar - image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0 - args: - - --v=2 - - --csi-address=/csi/csi.sock - - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH) - livenessProbe: - exec: - command: - - /csi-node-driver-registrar - - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH) - - --mode=kubelet-registration-probe - initialDelaySeconds: 30 - timeoutSeconds: 15 - env: - - name: DRIVER_REG_SOCK_PATH - value: /var/lib/kubelet/plugins/csi-nfsplugin/csi.sock - - name: KUBE_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - volumeMounts: - - name: socket-dir - mountPath: /csi - - name: registration-dir - mountPath: /registration - resources: - limits: - memory: 100Mi - requests: - cpu: 10m - memory: 20Mi - - name: nfs - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] - allowPrivilegeEscalation: true - image: registry.k8s.io/sig-storage/nfsplugin:v4.4.0 - args: - - "-v=5" - - "--nodeid=$(NODE_ID)" - - "--endpoint=$(CSI_ENDPOINT)" - env: - - name: NODE_ID - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: CSI_ENDPOINT - value: unix:///csi/csi.sock - ports: - - containerPort: 29653 - name: healthz - protocol: TCP - livenessProbe: - failureThreshold: 5 - httpGet: - path: /healthz - port: healthz - initialDelaySeconds: 30 - timeoutSeconds: 10 - periodSeconds: 30 - imagePullPolicy: "IfNotPresent" - volumeMounts: - - name: socket-dir - mountPath: /csi - - name: pods-mount-dir - mountPath: /var/lib/kubelet/pods - mountPropagation: "Bidirectional" - resources: - limits: - memory: 300Mi - requests: - cpu: 10m - memory: 20Mi - volumes: - - name: socket-dir - hostPath: - path: /var/lib/kubelet/plugins/csi-nfsplugin - type: DirectoryOrCreate - - name: pods-mount-dir - hostPath: - path: /var/lib/kubelet/pods - type: Directory - - hostPath: - path: /var/lib/kubelet/plugins_registry - type: Directory - name: registration-dir ---- -apiVersion: storage.k8s.io/v1 -kind: StorageClass -metadata: - name: nfs-csi - annotations: - storageclass.kubernetes.io/is-default-class: "true" -provisioner: nfs.csi.k8s.io -parameters: - server: nfs-server.nfs-server.svc.cluster.local - share: / - subDir: ${pvc.metadata.namespace}-${pvc.metadata.name} - # csi.storage.k8s.io/provisioner-secret is only needed for providing mountOptions in DeleteVolume - # csi.storage.k8s.io/provisioner-secret-name: "mount-options" - # csi.storage.k8s.io/provisioner-secret-namespace: "default" -reclaimPolicy: Delete -volumeBindingMode: Immediate -mountOptions: - - nfsvers=4.1 -# - nfsvers=4 -# - nolock diff --git a/apps/production/nfs-server.yaml b/apps/production/nfs-server.yaml @@ -1,69 +0,0 @@ -kind: Service -apiVersion: v1 -metadata: - name: nfs-server - namespace: nfs-server - labels: - app: nfs-server -spec: - type: ClusterIP # use "LoadBalancer" to get a public ip - selector: - app: nfs-server - ports: - - name: tcp-2049 - port: 2049 - protocol: TCP - - name: udp-111 - port: 111 - protocol: UDP ---- -kind: Deployment -apiVersion: apps/v1 -metadata: - name: nfs-server - namespace: nfs-server -spec: - replicas: 1 - selector: - matchLabels: - app: nfs-server - template: - metadata: - name: nfs-server - namespace: nfs-server - labels: - app: nfs-server - spec: - nodeSelector: - "kubernetes.io/hostname": "nordgedanken.dev" - priorityClassName: system-cluster-critical - containers: - - name: nfs-server - image: ghcr.io/mtrnord/cluster/nfs-server-alpine:latest - securityContext: - capabilities: - add: ["SYS_ADMIN", "SETPCAP"] - env: - - name: SHARED_DIRECTORY - value: "/exports" - volumeMounts: - - mountPath: /exports - name: nfs-vol - ports: - - name: tcp-2049 - containerPort: 2049 - protocol: TCP - - name: udp-2049 - containerPort: 2049 - protocol: UDP - - name: udp-111 - containerPort: 111 - protocol: UDP - - name: tcp-111 - containerPort: 111 - protocol: TCP - volumes: - - name: nfs-vol - hostPath: - path: /kubernetes # modify this to specify another path to store nfs share data - type: DirectoryOrCreate diff --git a/apps/production/openproject-values.yaml b/apps/production/openproject-values.yaml @@ -1,56 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: openproject - namespace: openproject -spec: - chart: - spec: - version: 1.7.x - values: - ingress: - host: openproject.midnightthoughts.space - annotations: - cert-manager.io/cluster-issuer: letsencrypt-http - tls: - secretName: openproject.midnightthoughts.space-tls - memcached: - auth: - user: memcached - password: ENC[AES256_GCM,data:9NC0PgvjB7F7es/9Ip1Biu3zXjItd9zt5YFLeD3MgmoCG8eAmt7vvJbzDpLpK+aJ3j8YwM0Y3rrqnkRYVHYW4g==,iv:oD85QF5zp255Gc99Ys8Ea5SMcc/6X7JP14iNPH3ax/8=,tag:fWKXGqpJCxzS2g24bRBLyw==,type:str] - openproject: - oidc: - enabled: true - provider: Keycloak - host: keycloak.midnightthoughts.space - identifier: https://openproject.midnightthoughts.space - secret: ENC[AES256_GCM,data:sPoC/f6FPiz9vc0xPJq+PlYWSQ4OLNSrxf9a5RKiJtg=,iv:bm59IZ9GLAMWiWRHAt+MZlHdnMnBS7H6azRrUkBk0os=,tag:dKmviFvZpMWhju1stfC/MA==,type:str] - authorizationEndpoint: /auth/realms/Gitea/protocol/openid-connect/auth - tokenEndpoint: /auth/realms/Gitea/protocol/openid-connect/token - userinfoEndpoint: /auth/realms/Gitea/protocol/openid-connect/userinfo - endSessionEndpoint: https://keycloak.midnightthoughts.space/realms/Gitea/protocol/openid-connect/logout - #scope: "[openid]" - postgresql: - auth: - password: ENC[AES256_GCM,data:n07qbSz0Z7EbfiauhswAhFkF1vbojd/64s9ygwNUXaPlVTsRDmhtc/s6XbQoa7FG60pvaIQQHGfDEDDZH8qdlw==,iv:S4wDwPWL048U2+MKC/3BU19nxPoYfO/tKLUEfCgD/6c=,tag:ixELboebCI251G3Ep4H7FA==,type:str] - postgresPassword: ENC[AES256_GCM,data:yjVjCuRU/ap8nPQxWrwyNkJy7TXX1dWN1/doioLejNhx+Ii+/+/9ICulzJHJZvaNWrjNBVMR0NkOEm6UsDhVjw==,iv:g2BHRaFtmXuKr3IDJaMijI787E9QRGdyJv7GT/wK7sM=,tag:o13vdomm/WCAJfptFWbAbQ==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGR1BwUCtqalhWUmZxbDJV - Z1h1ZVczOG85WnJkREc4Z1dhU0RNekd4UDBNCnk5OENBaTJvZ2wyZS8vOFV6M2k3 - a1oxZm5pZTl2ZEkvQlNQNk1zT2twNzgKLS0tIG53VlJuVUdTYytrRDdPaGxBV0hq - cnRJbUkwOGtUWUo5NkVQaTFWaVFhY3cKKlnz3sWFPTRIEKCrCI0mm/z27T9nFx7I - eeL7yk+FvBbPIix8AQMfS0co2sJz2VQSmBM1AgiO1oEss5hOi/KY+Q== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-14T17:51:48Z" - mac: ENC[AES256_GCM,data:vcX533xi94FO5HyltUi3y8XGhheDhjoNJv9twYjHXLtk8Hfr1LtsgHZOEDlf7wQJRhXBoX7mIl0q9jh3hNg7OLeZb1odto+JMCERFUEAySnfK5qJci/WzJTtCvNC72ykOFHYArhNF4ov0+j4mGatS1MtpyL96+wHl12l17g72mE=,iv:H3zWwSAP516PM0jle3xfNJXwIBLZrIsqK1FSwD12d5g=,tag:JKlzCEdWc16XKnVJ+aQiyQ==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|postgresPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.7.3 diff --git a/apps/production/postgres-exporter-values.yaml b/apps/production/postgres-exporter-values.yaml @@ -1,9 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: postgres-exporter - namespace: postgres-exporter -spec: - chart: - spec: - version: "6.0.x" diff --git a/apps/production/postgres-operator-values.yaml b/apps/production/postgres-operator-values.yaml @@ -1,50 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: postgres-operator - namespace: postgres-operator -spec: - chart: - spec: - version: "1.11.x" - values: - configKubernetes: - cluster_name_label: "midnightthoughts" - enable_readiness_probe: true ---- -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: postgres-operator-ui - namespace: postgres-operator -spec: - chart: - spec: - version: "1.11.x" - values: - envs: - teams: - - "midnightthoughts" - - "matrix" - superuser_team: "midnightthoughts" - targetNamespace: "*" - operatorClusterNameLabel: "midnightthoughts" - ingress: - enabled: true - annotations: - traefik.ingress.kubernetes.io/router.middlewares: traefik-ingress-sso@kubernetescrd - cert-manager.io/cluster-issuer: letsencrypt-http - hosts: - - host: postgres-ui.midnightthoughts.space - paths: ["/"] - tls: - - secretName: postgres-ui.midnightthoughts.space-tls - hosts: - - postgres-ui.midnightthoughts.space - configKubernetes: - enable_pod_antiaffinity: true - # tolerations: - # - key: "arch" - # operator: "Equal" - # value: "arm64" - # effect: "NoSchedule" diff --git a/apps/production/pvcs-mjolnir.yaml b/apps/production/pvcs-mjolnir.yaml @@ -1,51 +0,0 @@ -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: mjolnir-fluffy - namespace: matrix -spec: - storageClassName: "nfs-client" - accessModes: - - ReadWriteMany - resources: - requests: - storage: 1Gi ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: mjolnir-freifunk - namespace: matrix -spec: - storageClassName: "nfs-client" - accessModes: - - ReadWriteMany - resources: - requests: - storage: 1Gi ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: pantalaimon-freifunk - namespace: matrix -spec: - storageClassName: "nfs-client" - accessModes: - - ReadWriteMany - resources: - requests: - storage: 1Gi ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: mjolnir-private-v2 - namespace: matrix -spec: - storageClassName: nfs-csi - accessModes: - - ReadWriteMany - resources: - requests: - storage: 1Gi diff --git a/apps/production/redmine-values.yaml b/apps/production/redmine-values.yaml @@ -1,43 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: redmine - namespace: redmine -spec: - chart: - spec: - version: 22.1.x - values: - redmineUsername: mtrnord - redminePassword: ENC[AES256_GCM,data:cPDz2u06HWrt,iv:6BuwJ/4K+IjC186rIbnIpJ/U4ILYq9NXP5eOId5gexQ=,tag:LXtENPhmju/4J+9AuakOKg==,type:str] - redmineEmail: mtrnord@nordgedanken.dev - smtpHost: mail.nordgedanken.dev - smtpPort: 465 - smtpUser: redmine@nordgedanken.dev - smtpPassword: ENC[AES256_GCM,data:Sgl1tlFkkpZ3,iv:Gce6JL115PKhvWUYxwbUtrKmeM05w5ZN+oD6ABpNgZM=,tag:PY54+3Zr/EAps6pe6KKqOA==,type:str] - smtpProtocol: tls - ingress: - hostname: redmine.midnightthoughts.space - postgresql: - auth: - password: ENC[AES256_GCM,data:YQqg35/OO23UmBibAIw+AQZ7upiIsO2Y4ZOdU6HCfQIzaEgB4Akv8KnEsxgbjpcLNLn5BlowQvlfmo11STkZRw==,iv:8mVcqygks09LUBm98MO0NtiaFUe6ZnmrCnQDboYowIA=,tag:JKFPCLvKldRsZd+oKsoYNQ==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1STVKUmRrYUdLMVR2TEhD - ak1NYW95MDJMSmVXeHF6THk5dkdQS1NkYVRZCnpqaE51VnlQUzVWc2JJWkh0Z2Z5 - WmcvVHRtUkU1aElQSnVraWZXaUVLVFEKLS0tIERQS1pSK01kVDhsTUMxU2RCTTgx - eCtheEx5eVBvbHM5cFJCNVEzWjJIVVEKpgGUnPIx7iYNtgtjnpBazqvYXcYjd9qQ - BqomrN+KNBh1Qo9HLOCW3hwPZeqY9ZIukeJGi+Omqhef9/Bij4OHfw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-14T18:56:04Z" - mac: ENC[AES256_GCM,data:MioGyY0qHXwLX1C1An6TyfTRnc3Z2fcSM1IpD+z+jDB6y5/GORb7x/xw0JGLNdXyOLI0RMEL1VDkYG0oipibHk+/Y1t9G6+yEMVyYhCvhvNV54/VS/uSZVuHBJaq7pnm4sTU0lhPelPta+TX5bR4SWmE4KPHVuo4bxIDuwSdsJo=,iv:zJiaOlytj2eV3OdYDHmZ0sE56BtUrKSl2ofH1uQf3e0=,tag:vRGiiBuX/ID5JM9ORFIh6Q==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|postgresPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/alertmanager-secret.yaml b/apps/production/secrets/alertmanager-secret.yaml @@ -1,27 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: kube-prometheus-kube-prome-alertmanager - namespace: monitoring -stringData: - alertmanager.yaml: ENC[AES256_GCM,data:FzUhS3CMiUNzr2wmIPCVFRApgBr1WUXXu/tOS412WsIhxug6Y0Kgg+YixbOYA+73xY6RszFKcBRILnTAOeX/M1/sm2HTwk7Pc8rl48OYnrzzq16i46wWxPguqMNtMBJg+SczCPzIw+6kzHfzJilQGDGQDLOUwp2m9BydH4Hz9kkVpuMN7Jjlmdp400RcIqO7SUYrkZGFFKSeuS3yahBTuQzPEd6JkXl4Jl+wjNvAOEHIDIMILYCifcDrUDsyT7YtWHl5d4wt/LxDA+7BHLh/VQeuBo3AZ5DYStPuXAOmy7+hDQQnpA8/EhqbrTmzWJCadOcewDHvgdA9iJOhDVtnD+y9kk+f1KEAPoK+4cSfOZltO3hTu1fksCTMVhCshZLxCQHoWMBcAocWWRrFFEUbF/lDsZlVHwFUbfUrIPN5CvwLrXgYefe59GI=,iv:/xEXBvEWYBCyhC9qSOY2CosruGbKXKU0kljRvmQ9aiU=,tag:Okr8MfJ9+KaFFErJtZ99Ww==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydXRjeHZOMm90bEVCbTF1 - Y1pHb0VMMmVBc3pHamkwNDkyNVE5a0pwTGpJCmlsQy9PdDZ1S09UdkdQYklDS2RF - bFlNYnFCN1ZPcUx5aFRrcDVMWkYvbUEKLS0tICtGUXFlZDRvQzIyRlppd0JwVkdu - UWpPL3VOeHkwVUdudVFGaWR4N2dXcGMKnBhDy2HdQmZYLH7/JJN+ycV7tSPnF/y6 - KgQjDv7k6afjYvBUmeWezZR4LtBGfB8hDG11JQkMBiMEYc3rfc2wQg== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-06T15:33:32Z" - mac: ENC[AES256_GCM,data:kzaqZa+XffdwSb33J3/8/oN+TxYtA8BIt+uW+ho6UmLHDa6pLtH+M5sWmkqRURd8jmM8a37l2Bk3aQfBTMbYMnMCxPeaPE1KuKR+lpjr3ah84tx9U102Rj3y8xgO73MgiM0iAZuDFVde1kTyWqOEDFwZParhSFKW7PBUyjSC1lI=,iv:CDtzU1QO+Y0AuQT2FaLdbLLguBeKyMxeI8TSPpcU2VQ=,tag:K+IOHTqDsVcNHbdPTNyKAA==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/cosign-secret.yaml b/apps/production/secrets/cosign-secret.yaml @@ -1,57 +0,0 @@ -apiVersion: v1 -kind: Secret -type: Opaque -metadata: - name: cosign-secret - namespace: cosign-system -data: - cosign.pub: ENC[AES256_GCM,data:JeUbctR7hCUzTn0d49DM7ee5+s0kJ39Gs80YiBREJlbKIUGtXlMG0hjGbC6huUWiDFk8aKNZGgUd0oS0El+EJaKMSlI4CvmwLHQ20wu8RbkhuwVFB0F/e2dWfeOxKK6JmccHgiVolWyqwYqFRAwXd0os4soDkTjJYcDw30jppJUtmPW2OiXzgsbBYjnHGcqqTRnT0JhdlNFx7WKY8FdsOl5ynGs1XRa3TxuEa9hMwONFDYrBxrNrib+P7C1SjoDdpqlo+UaTfeMqg2jFUWneFnSsbQxoP+w3LQCQL7USNQtOUMD/GVAM+ZZHwVMLTMbq,iv:YrIOtwjYtZsVyqsRekAbA2rB3DrbkiQEtyluz+Ldsig=,tag:0IVsCEAuVkUyni3K7WZeTw==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4T000U0RLOHJLVjI5S2hG - dGNIM01Hc2V6NjZFYjFmVXlkZk5kMUptOVNRCnVRNUlzMzVIbFlVclpSZG5ML3hv - aWozc0VpaVBVQmFLRVpHdkM1Y3gxdEEKLS0tICtWdzZMaUZ4RDJ1Y2lnc3R2Q0pM - R1QybkxGUlp2NWJIc0xzSit5V2xzVGsKErK2JJgfMlAZ0ha0V/SgQtBWhNz2rrUv - C8GSuu1BBt02cBkrwc8HmiHW32vgDByBguwhOkQ2OxR6R0WZuhygKA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-03-19T15:23:53Z" - mac: ENC[AES256_GCM,data:kVYtErlLMxQauWcmESRj4GeEnwaRLXeauHCBeYxi8qJzPFmCH3jAK6JM0z4jPpf7m+G45+ReDhTdYoM3LA4rXmmv17S5EjGsg059DG9pzdWoai7p+9NSjhowRjsFuJlBh7ulgjV8aJMhVAG02abTkpQWgtpgCES1zsV/Wsu6dH8=,iv:EaAQIbuxaFmp96e+Nr4elMuTxaCdo0uzN5gRT3J7thE=,tag:1ANRxn8DvrJMooC8GWOVqQ==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData)$ - version: 3.7.3 ---- -apiVersion: v1 -kind: Secret -type: kubernetes.io/dockerconfigjson -metadata: - name: docker - namespace: cosign-system -data: - .dockerconfigjson: ENC[AES256_GCM,data:slVkDhOxW4iKSb4EXUmAMhrkKZC2kLzya/GIDt1VDrUmN9LHbHt2kHyKYEZq59QvuQIBk4BoabHcCNJY3g1N6hS8/EZ19q0thyLkSC+V6D93PWdoCbTKaxFEHBenCR9YD8y3UGxUaZST26x9mDP6ot11io8aCap/NLqGKm79WymgRjQxe4WEH/fxcnAjMwWJskxCJT3D+1spK65matfvNQ/NDgfpWRgcjRWhFMstQGGr80Qk3+Fz9uraYXpjCVdUBrCAHpEl35+d9K3aXVhe/hEogB2CmTsekDJ0OZnEySRpDwvV/Z/tq8rCWLAIcTd7JAkl8SgS+vE=,iv:/hTSepa4svxmU5xmjmEvEsXbefuTrSWLPOH9Tr28Z0A=,tag:5hqxUiTG1M9ptx4vNLt55w==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4T000U0RLOHJLVjI5S2hG - dGNIM01Hc2V6NjZFYjFmVXlkZk5kMUptOVNRCnVRNUlzMzVIbFlVclpSZG5ML3hv - aWozc0VpaVBVQmFLRVpHdkM1Y3gxdEEKLS0tICtWdzZMaUZ4RDJ1Y2lnc3R2Q0pM - R1QybkxGUlp2NWJIc0xzSit5V2xzVGsKErK2JJgfMlAZ0ha0V/SgQtBWhNz2rrUv - C8GSuu1BBt02cBkrwc8HmiHW32vgDByBguwhOkQ2OxR6R0WZuhygKA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-03-19T15:23:53Z" - mac: ENC[AES256_GCM,data:kVYtErlLMxQauWcmESRj4GeEnwaRLXeauHCBeYxi8qJzPFmCH3jAK6JM0z4jPpf7m+G45+ReDhTdYoM3LA4rXmmv17S5EjGsg059DG9pzdWoai7p+9NSjhowRjsFuJlBh7ulgjV8aJMhVAG02abTkpQWgtpgCES1zsV/Wsu6dH8=,iv:EaAQIbuxaFmp96e+Nr4elMuTxaCdo0uzN5gRT3J7thE=,tag:1ANRxn8DvrJMooC8GWOVqQ==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData)$ - version: 3.7.3 diff --git a/apps/production/secrets/draupnir-appservice-secret.yaml b/apps/production/secrets/draupnir-appservice-secret.yaml @@ -1,30 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: draupnir-appservice - namespace: matrix -type: Opaque -stringData: - config.appservice.yaml: ENC[AES256_GCM,data:Wq3BrWhaHDkX++wHgKLWadVlM3n8OOCTIlVbh0JgpAaSCiWuHv5DrphwbBZLI0bLfbhM6tmOaoxXEUAZlQxjgHq3CDah5JF8if2Iy93lQSvD4t/2CYS1afHSlaSYmWeOD2JwO/mcuKiZk5xTz/0oyVFQSvCrMMz1ludhQfZ2hOJ+qVMRKm42TLkj6csJetgb27IVOTKrcwRgZu5PLOsCCkfrbjGeoAyo6kE7/wXMmOfaFz5mDryUthP+AoFWmPp8xfIdRmVz6O+eg3P9kMnDzK2uXX8x0e6ohOLlGb8DXVBjAqjdNpDYj6b0UP5oEJSKxpW76ICig5BJuEHibulz6TQpbBSkeLwLuDxXcZfShfyMLHW/HBY5Q3aA3h4/4dOnxvqkKvW5zKrbFq8Igr+LKQ2WvujSMZxyX83HNBx3WfWKjAY9cp9YUFhMPo5pd/KEePbCh9GyRmLTG/VPiWQr/vgbItmgt3S5yhQ6p5PiBkdHCKgOoOW2iP2PqkyWQQxlLkis9gzcq/XOld6KEOetKK/GP6DPTDUcuDuiQETxEB/HH4dII3BKenc+NWMT00+y0apTax9o8mM++52orCgDrwG/kBZcItnLe+NBQKlkTxIfWwHl6yww4lKWETgtH6jFlh+4Wdheio4O0gbrnNsbApWexIrFpJSumQJxwysrUw1NySomoha6eylSKOe6nNk0mjSAtYD7MHYo6EOnvYZFPODlCSDEyvepS4X4r+o4TxlMX8x2V4BkP+OmAvNHR4illUrf+rpC96cm2Q67uRoTStX5BrWe8g7O7TO/TqrAC3tH4jwCv8K0GoBDCZM0usu0ModwGXvVhtgjgTepXBAQxqB9i950Rf9C9VMPIcBBm0Hbq/jcdTaD/5z4S6NUUf/YehXluWT0eiwQVrWG31wXANsNuIxmTrxxwo1NhdVTMGZWQuR31LL397nQ+IkmLUFiB1Y/OZKKbbdGW2ry919nqZRAy/gvzyBS7VkFGGEPtZ5TduZMRpWA18S3/CAHV5GHG0d0iyUTEk9fRp58HX1Gpfen8bmhrxwPvJS/Gxrn1/E=,iv:9ds9Dn3qpMaBVCDlq3R2gyb7TmZePWEGxuha48dGJpA=,tag:zOvEH2dXNIZmZfde0NlxMg==,type:str] - draupnir-registration.yaml: ENC[AES256_GCM,data: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,iv:Y4RYiqRfN095HUydGMpHaT4TEJ+opklyaBbvxwThyso=,tag:spRL6w+RK6NFeQ53rFlqYQ==,type:str] - draupnir-config.yaml: ENC[AES256_GCM,data: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,iv:Zh0qc0vBZsRn8BnoJbCIQ3flKK1gLvX7kfyxRpuvJoo=,tag:6mKnv7CP/cMQILDRk5q/VQ==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiV04yY3lOaU9EVGF4d0FY - azU5c21hdzd5bHJYU2JJY2FnVFJSdDl1ZUdRCmcyZWpqWk1yRE14bzdjM1Mwa2U3 - NVZ5LzlTajNTZzhza3hlc1V3eWF4MHcKLS0tIFdXWTRCa0pZNHhJM1R4OTE4S295 - Q3B2TzFJUWFSUG4rZkYyZnZ5d2duQkkK2UlDv1JZTiWNLrQqde0sP25JUiWqecAG - H5kZU2IHLl/EiX2WLqZzB+zdu5totcN/m0jv6YGtV3sP04ZqtAdXxQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-01-28T20:49:54Z" - mac: ENC[AES256_GCM,data:idq7Zcm8HxdOKyp/csr2m15GUh/YRl0FIDqZHue0g4cRx1q/N67VQPOy2Jfn5WV09dd5C9lTRa/0/06Dy1veCnjCxg4/oVW5VqOn2JC5oFA7NemSZnVQgGhdiQKvc2xtsL4UGeJdXPz1Xo00/GNIIXdcDk1G2KLhwIZ/dkcOdJY=,iv:xKxWl4Xh22pBiOEYTqUgBJS2qB4ozelfhYzF4UqmTNw=,tag:ajVrBQ5n89j9JF6N68K0lQ==,type:str] - pgp: [] - encrypted_regex: ^(secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 diff --git a/apps/production/secrets/draupnir-fluffy-config.yaml b/apps/production/secrets/draupnir-fluffy-config.yaml @@ -1,27 +0,0 @@ -apiVersion: v1 -data: - production.yaml: ENC[AES256_GCM,data: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,iv:aUQ/dymVjRspwX2ic9SJU8QLL+r8369FW+Korp4AEhM=,tag:xP5XtLiSXNetZT0XUJl+Cg==,type:str] -kind: ConfigMap -metadata: - name: mjolnir-fluffy-config - namespace: matrix -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAra0dnQ2IyMGhrOUkwNG05 - Q1kyMHVvSHpSZXorUDZyL25YZ3M0dUFaVVVjCjNHSUhEcFIyRlFSOHFKTU1SdWFZ - UFlCSUZuYUh3U004ZmZMWFNaY3BVTzgKLS0tIHJCZEpSSjNsWXVRc2ExZzJ5WVN5 - R2Jia0lRVk5pMUw1dE43dDN2YitQckEKXyYKZnYWovJ4VDQK9PAc/5lRvNtxqVJE - 0jATVIUOb0L8w5LxT7yJLK1iO8UUOJXFhHptmyBPmepTxLeZzik1yQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-12-12T09:44:32Z" - mac: ENC[AES256_GCM,data:/BSlLzfDk3d1zr7tBybl/0GBarX1HNS2RxxT6AK7kqxObiJ+9cqG4JwK0KMRvEcFlR8zaUGdxhocW12WWlBT8zMn6dUcUJkbPRnh+vy0NpiPJhmgvhd8GUlMFbAVbSTVJLnF3vC2YOyLTz+2uMIaH0bWxK/b2HUHrQrtNE0yLqg=,iv:jgTavkrUw4jtRWNLY1DLcX8xr30mO9vU2YStlbBGDb8=,tag:cLGs9CgTGtQxyXW50B6UNw==,type:str] - pgp: [] - encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 diff --git a/apps/production/secrets/draupnir-midnightthoughts-secret.yaml b/apps/production/secrets/draupnir-midnightthoughts-secret.yaml @@ -1,28 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: draupnir-midnightthoughts-postgresql - namespace: matrix -type: Opaque -stringData: - password: ENC[AES256_GCM,data:DPAGSrnwubIhJ9ltRsGedhoO5jkhkMQBb2b1C0PtiqdLLYuCCN/U6cvjl+JPuLrbS9h8w9s4mV9PfuTb7Rb5bA==,iv:w51h3Umx6MX1H2naMcpLi5HT7e+qP2Hc6eu1qQE3qs0=,tag:MbGIFOsO3J4gx4RYuTdnqw==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDL0FJcjBBS3lTZ2RoRUpa - NkRJb1VSRFpudVFOeU8rVnpkbkVtRFJYb3hFCmsza005WDlUNFUzQ3Ixcm84Slhn - M1AzOGJBYXBEWHkyTVFEajJHWkovTFkKLS0tIHBsaVhiRndNR3F6c1FxTDhTMW1k - UjJQZmhxVStrZWhReFl6R3IyUWpiVjQKJLcTOqIacHo6Xg6chc7vELwdfnmCsLHa - eHO+eHVSafUXfM4GL+Gobp9wFK03t+GlgcGTKryiDEoJdkK1zS9u6A== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-03-06T11:33:38Z" - mac: ENC[AES256_GCM,data:0cPRXB1ySWeq6v15m/8DnouRuSuelDaVs863rZQ2cJDzm637xLjzsKVrxeKecReU0WjFwNRVlwuNExz509d+StDP++haELZYZMp2BapmYAldoCi+TJklvqU408sSdAWNZwE20Ens3RzPS3n+ToCjUhfz0RJ6JxQLZPAPpydwnkE=,iv:Ow9/ndKQ3Z2abOCkpl9kNMZ4g14eFDGhQ9+PebILess=,tag:cuRtNM53ouiApdidUqkvyg==,type:str] - pgp: [] - encrypted_regex: ^(api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 diff --git a/apps/production/secrets/element-call-synapse-secret.yaml b/apps/production/secrets/element-call-synapse-secret.yaml @@ -1,28 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: element-call-postgresql - namespace: element-call -type: Opaque -stringData: - password: ENC[AES256_GCM,data:moBwWfk8BLo5S+6QxQ+CfQ0nB2/3YZyw2x9HBc6+5d16xh7n7BceS8yBpNBkevvWqEoVaP0ylUwChoqbDT5HDQ==,iv:kWOMDHX+K5Bk8/BmtLBAT6maL9c2S5Rt6X31G1H5c2I=,tag:/pi1b1CRiFVyiy+V1Qyl0A==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyRlhyeEd0azhaaXhwblAw - NGlxeGVrVGV2WFJCZ04wU2NkM3l5RHJ0TUg0Ci9RV3UrNlk3aDN1RVZmMzhUUnYr - UC9sVmVGdFB4ZHVaL3VXS29yNkozSkUKLS0tIC8xMlFkdFpDUlh0ZW1UZks2cS9z - Uk5OZFdzSm9sdVpVUVJlTEdyTTQxTUkKLsAV3C9Xnh0FHLPIX3Hm/7/fbIiraoaT - 1R1RzAE8xT+n1pwwq/Y7uhsLoi5IEc6IanqKo/kKjYBT74ZuQQpRkQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-03-06T11:39:35Z" - mac: ENC[AES256_GCM,data:dwQyHPqscXLZdELXswQfOCdfMTocYi2ofoRSbyIWAgSgLi06t4vhsggkEPoQIw+4x4/LLGqTXX7VjfcaMU59HPw8usIPIdAsyx+DbbEqr8RpdmvZDFHE1zx6Fuj3CeHcUdqTLujfKa2FEsn7z84agHpnIbk6MHjXybfz5un39Mk=,iv:eYgy6G3pVHnerPYtkdOHjWKarKDcK8SKxbteOgo5b80=,tag:zhia8By8ZqfgYCBzUtM/lw==,type:str] - pgp: [] - encrypted_regex: ^(api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 diff --git a/apps/production/secrets/grafana-secret.yaml b/apps/production/secrets/grafana-secret.yaml @@ -1,59 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: auth-generic-oauth-secret - namespace: monitoring -type: Opaque -stringData: - client_id: ENC[AES256_GCM,data:EyQ67IpnmA==,iv:3QxEinlI1nTk8uEh5Z3sw1IpIoaHmtzocRpUAjM7hnU=,tag:JhYcixWveTJ6FYxlX0N4HA==,type:str] - client_secret: ENC[AES256_GCM,data:w5lWs9gkUP3b8IRuZPf278vTjrmNhYPPu4+q7otk27k=,iv:3NWbmhe2QsRnoxSk/n1EJRKFgVQE9236o98JHb41VAM=,tag:Fmo8yGKA3AnmBL/k38RnKQ==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByVG9rSFlrOU84RmFzcXox - UkIyVllKVUMxYjB0cTJpR3pKZUQzMDh6YWlZCkRabDlTdHRlVzNqbkR1WnA5YTRS - Z0wrRitLc0xFbkFLYmRablJpb010MVkKLS0tIHRYb1FHZVBwQ2w0eVFNTVhvanRk - aDdZMFJOTXhiSkIvZUU2dnpoTm9WblkKrfpQkHFd4nLRfjb7WLu3sTBWliFw7uz+ - lQbLZUPTeA0L5/8++VfV727amwGC/9x6IfQ+X2Ij9rAam9a69DCoIw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-06T17:38:36Z" - mac: ENC[AES256_GCM,data:fopWSWdfsKi+GI+3q8mGqqmhZ2Qw3Ng4N0TFvSd3QcgeIeACPAbKbe8yjD1GKSV2dgelvKTJKhm5Pww3D/84gYaACtjHD33l0RiPMiYhmdOaRRc62FvCCEDpE3PwTnBnOYCD+WspHLAZxteCsDWVKPKX0kvXqcGy3wzTmNV39B4=,iv:Uj33IAzJFN/q2sav5hwkrHTNRco153AM4XQdgUKRIlw=,tag:aaXkcz0fm4G6+0wKV3ooRQ==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$ - version: 3.7.3 ---- -apiVersion: v1 -kind: Secret -metadata: - name: smtp-auth-secret - namespace: monitoring -type: Opaque -stringData: - user: ENC[AES256_GCM,data:VT9tWLxsn8Oven8OJ1wEY4goO28=,iv:Xe+BDgf9lWgnyHTdMgJA8ZNJNsdu6f9+oth5apt+9YE=,tag:3wOHwDFfyG862jCTP7PD5w==,type:str] - password: ENC[AES256_GCM,data:V9aXdrpdbu4D,iv:OQrAwZly1rKN16qDG7YZoAlIo6TKt0c+FImYGTFJTp0=,tag:SoOQAtcdz+b9o4RZ3axJkA==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByVG9rSFlrOU84RmFzcXox - UkIyVllKVUMxYjB0cTJpR3pKZUQzMDh6YWlZCkRabDlTdHRlVzNqbkR1WnA5YTRS - Z0wrRitLc0xFbkFLYmRablJpb010MVkKLS0tIHRYb1FHZVBwQ2w0eVFNTVhvanRk - aDdZMFJOTXhiSkIvZUU2dnpoTm9WblkKrfpQkHFd4nLRfjb7WLu3sTBWliFw7uz+ - lQbLZUPTeA0L5/8++VfV727amwGC/9x6IfQ+X2Ij9rAam9a69DCoIw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-06T17:38:36Z" - mac: ENC[AES256_GCM,data:fopWSWdfsKi+GI+3q8mGqqmhZ2Qw3Ng4N0TFvSd3QcgeIeACPAbKbe8yjD1GKSV2dgelvKTJKhm5Pww3D/84gYaACtjHD33l0RiPMiYhmdOaRRc62FvCCEDpE3PwTnBnOYCD+WspHLAZxteCsDWVKPKX0kvXqcGy3wzTmNV39B4=,iv:Uj33IAzJFN/q2sav5hwkrHTNRco153AM4XQdgUKRIlw=,tag:aaXkcz0fm4G6+0wKV3ooRQ==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/kustomization.yaml b/apps/production/secrets/kustomization.yaml @@ -1,22 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: - - vaultwarden-secret.yaml - - cosign-secret.yaml - - woodpecker-secret.yaml - - alertmanager-secret.yaml - - grafana-secret.yaml - - matrix-media-repo-postgresql-secret.yaml - - sliding-proxy-secret.yaml - - synapse-midnightthoughts-secret.yaml - - postgres-export-secret.yaml - - draupnir-midnightthoughts-secret.yaml - - draupnir-appservice-secret.yaml - - zammad-postgres-secret.yaml - - prometheus_asterisk_secret.yaml - - parseable-secret.yaml - - zuul-secrets.yaml - - draupnir-fluffy-config.yaml - - umami.yaml - - element-call-synapse-secret.yaml - - openldap.yaml diff --git a/apps/production/secrets/matrix-media-repo-postgresql-secret.yaml b/apps/production/secrets/matrix-media-repo-postgresql-secret.yaml @@ -1,29 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: matrix-media-repo-postgresql - namespace: matrix -type: Opaque -stringData: - password: ENC[AES256_GCM,data:3iqTi1u8oatr2vBy25fHshGgUd1Whc1c6w8iUny7F06d1TvZgwVfdbMgKFo6DVcLh5foaL15wlbYDuLapxgoNw==,iv:Hjh0Mqqj8umosionVy6hcmnjkquUY3Ywp3HBGxeOEmM=,tag:r1p5S7HLMM5mt+YSFAiH6A==,type:str] - postgres-password: ENC[AES256_GCM,data:PQodVy44S1uelc3ZFAF6Q5V5nXqdgGGuPwU7pHOwV6hkv8PLoxSc99v+zdYoEFh27R4UD+JdBj6qEHLKBWMILg==,iv:uuAHmhnFT/C4YVijPuxgpzcRICs/cUh5b7Cw/y9ldLQ=,tag:Y8CmrHbaN/34a+ln8fusMQ==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxVUlWOEtWa1gycVh4WWZI - U3dxcnIvanI5R0VOeVNNNTkyL24ralp4R2pnClJ6bDlMYU4zQm1rMGlyRGpidCtv - UEZDZVNrSUhtT1YzbzNiNjdGMGFpSkEKLS0tICtJdkoyaDZrNFJldWViRCtiZUdy - VE93UlF5eVgwRmFFQUxKU0NFSkN1bncKiBXvVRsXSSxo9HlgbIe+OThYhveC6pLn - A3VcN7JcGovcJiOifFsIfyYffK/z5HaZorahxJKmzaY87adbI0RS1g== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-04-03T18:30:22Z" - mac: ENC[AES256_GCM,data:IeNZ02AZJ/jnPBr2USK7L9xNNXBMARXejscZ1O8Y2n8+kgv0nBVPknlKBin/OmLhH2SmZY2aH4kfIyXlKDwzO/Q371S2B9//b/wFRMM7eaxqLhIkvDdOB68280m/DNyfZU0c8xjRYIoqkCETZSPwHM9chsOgwOoJVOJ+qswPwzc=,iv:cHg85UlOK0mXplDaxvOktS3El3J1sLQOVj3BWd7OUgc=,tag:Hz0hxMmHNuA4XSFptvDyjw==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/openldap.yaml b/apps/production/secrets/openldap.yaml @@ -1,30 +0,0 @@ -apiVersion: v1 -kind: Secret -type: kubernetes.io/tls -metadata: - name: openldap-certs - namespace: openldap -data: - tls.crt: ENC[AES256_GCM,data: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,iv:cEV5F14q9hYfTBZ5PtZZRl4McANajy1P/8HPiQdeXbk=,tag:e4YvD3yJxMwntzrkg3/4zg==,type:str] - tls.key: ENC[AES256_GCM,data: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,iv:adZCkg7PJ6cBFot3l6jmqq/rO0K1lSwHiKez8WdyzGI=,tag:x3I9L/PKOfFw1oDzUhOKlA==,type:str] - ca.crt: ENC[AES256_GCM,data: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,iv:RumAwIr2bFCzmgoNMN4J5Cgcwus1Jwnj38FkBXiMFRM=,tag:Lbu02D9qbY3R+vHBM/CljA==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvT2NpOXFDZUVrUTlVYndm - eDlFdG4wcGIxWmtrME9xUmo5YTNXNTUzZWdrCjg1VkxwSHZxWTBRWU15WUpXb1Qv - UnRyM0tOSDBTTmNnZURCMWFhNW9YUmMKLS0tIGhOamNJK1pIb2d2QytjeTkzK1Rm - VlNwOEMrdVJsdGxxTlRIMEZKSFdHdjAKB/G6TS4k0E716LtBpWvhnQEnU/dlfQh1 - +C1+DQw68ZKCLDuncBtQ2g7F3zYX9/fy3LesYWeXMLzRPb944MkL3w== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-03-20T10:08:24Z" - mac: ENC[AES256_GCM,data:QEixTRjuXMsYV6wz5ufCAOGgKZ6P4WTEme9h78wQNrwf8TSPAJhXuEmEwvip0dTLpoEXaxel9s9zfeR4prIc2IM1NXaveDlsFvkOYNnJRR2A4UckkKMVo4/RX5e23KnFyMLFFzWqSt7uF1zfVDwW7wn133cq8zTtEuA1wiib+gc=,iv:N1M1WuBbG57dqa/41t2KIWR+tNSPsDV7t4sLht/4qU8=,tag:ROAgFVZpUSSo44GknVFLsA==,type:str] - pgp: [] - encrypted_regex: ^(adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 diff --git a/apps/production/secrets/parseable-secret.yaml b/apps/production/secrets/parseable-secret.yaml @@ -1,66 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: parseable-env-secret - namespace: parseable -type: Opaque -stringData: - addr: ENC[AES256_GCM,data:AQcPgO6fvY2GEdxJ,iv:MxQOj9M0abHXCv3RDaCWsz+oQUecVZBkksRX86q6kMw=,tag:nAXTWcUOZ7eTYGLvwA5kOw==,type:str] - staging.dir: ENC[AES256_GCM,data:gzm1XsWzta5l,iv:EPK9/ENdAuK76AK5bmzzCda6Lm/aspC3cQHRiJdJEbQ=,tag:KhOpZHUUjCpRIxUZsXCsaQ==,type:str] - fs.dir: ENC[AES256_GCM,data:1JSkZRNp,iv:l05W5x3t/aht0QyQ6LqmaXXlt8EOqqsAfVbdo7PtiK4=,tag:a8bgqrmveqOFgO7YVwGiZA==,type:str] - username: ENC[AES256_GCM,data:CZq83/TZOQ==,iv:eNhU9Y9hudIaZoUJ10KRfxMoxwd+eMgPetAu1hJfOp0=,tag:75VFIgmS1YgNaYC21x2lUg==,type:str] - password: ENC[AES256_GCM,data:RuSl+U/dsDqCBQRoMszb3vlwtB0UkkE9j7kCvwRutEvAIZeHowYDMACquj7EX3gCKA3I2PijCNO5TVpbMZJndA==,iv:8VFAZAMupw+qK9OGyCbCXb8JcEuGlFOqPjnkGX+M04M=,tag:CwP9YVNAdRgetdX/+ybRuw==,type:str] - oidc.client.id: ENC[AES256_GCM,data:hcwpyVhUmFbL,iv:EMpFd+dGVch9MgOWI8RyDNKxj/GK5Jg/PErC8L/0awk=,tag:NwG0yRxXP8IQJT7uk22r2g==,type:str] - oidc.client.secret: ENC[AES256_GCM,data:I3x2bxGoO/sH6fjiiryVixVHC8DUrXSAKyhhaNHN1VU=,iv:N3OYHGeUyQ3M72MpVhfllfbFCQreG6CL4Q2WBuygYNk=,tag:Kj5JnX6ErMmcc15bJP5X3A==,type:str] - oidc.issuer: ENC[AES256_GCM,data:y5hGd5qZr50tArXPxAHNbS8NUyCbSAhj19pNcnM/WKhfpkSSFDW92J8NBJUSIgtuv1ZmXEs=,iv:ZUYAbTeKuoUNGehmgkXManh4emHFo2X7x/uRxdm2d9E=,tag:dQMXn0eC3GtpcbXNGl2zAw==,type:str] - origin.uri: ENC[AES256_GCM,data:JeuTgNyUrnMPSCfjI3c019uNz74V/wbVzPnEgIoD0iiqAiim+aHi7A==,iv:lFteMDbxjHM7XUX1zLujd65r/xRSMSgzXV1s/G5UDik=,tag:KXnVTfNu/hgmJrT7TU4Vbw==,type:str] - send.anonymous.usage.data: ENC[AES256_GCM,data:1eh7HJ4=,iv:3AuLaTeJ35o4s0WVlN212b+eP69erueqB5GsEBavoRM=,tag:5Wd47IWNkZFd0Wks3tbYzw==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTUkxtZEpiNjQ2QzZidGVl - cEFKa2xuS1NoRFkvZEowYUJVd2NISWJWb25VCkFHYis1RTNMNHJraEkzWlp0Vk9E - Y3p0UlRsN2lPbkYvZjIvR0dDMTd6eTAKLS0tIE04QzJ1VVZXMTNSdkRPSk9uelZu - eDR3WVRkSGg2STcrOVM4cEdSZEx5SmcKknMK3hE4j8pWlHVLP/xFUeu//6YlWsQ9 - LiMzm8jbiDfxIHSVTcUatxVoP+Im4ZIQTGSMH3fCRSmoXHajiLB7vA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-12-11T19:02:44Z" - mac: ENC[AES256_GCM,data:FA2oSzHsuziR7jvGU82ZaeAZekpyTmL+vGwhjIeNjbAcpWsLFnKBDsuD09xH7dPrgOm14bfu+Uu31Tz3z6ojo9qmaC4hpg0o7r7kWuT//XRdS3UA+knWQzDMTh4tgZDxm2aKC8Xr4BOD7hDCYXmpOsdaG6iHnEW8rIQAZD5NdMo=,iv:lJojFmVzgYY0raE/Z76ZRqRhpsE940BXI1Gx0ZII51Q=,tag:kJI+gqnr+vDngy2gk6WEmA==,type:str] - pgp: [] - encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 ---- -apiVersion: v1 -kind: Secret -metadata: - name: parseable-secret - namespace: monitoring -type: Opaque -stringData: - password: ENC[AES256_GCM,data:3LJO9gRFy33hK4l8NJLUMxpXGbLHuaMk124dxfVciCP25Larp0VktcRdZw5LGstjLjoj/4xOiImstDdYMrrsfg==,iv:o96KiN1WtE+V2oHk6mspErPJcXNAvyE6LyHwm/M9iLc=,tag:YtIJ8wqpG90NsC7q1n6NwQ==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTUkxtZEpiNjQ2QzZidGVl - cEFKa2xuS1NoRFkvZEowYUJVd2NISWJWb25VCkFHYis1RTNMNHJraEkzWlp0Vk9E - Y3p0UlRsN2lPbkYvZjIvR0dDMTd6eTAKLS0tIE04QzJ1VVZXMTNSdkRPSk9uelZu - eDR3WVRkSGg2STcrOVM4cEdSZEx5SmcKknMK3hE4j8pWlHVLP/xFUeu//6YlWsQ9 - LiMzm8jbiDfxIHSVTcUatxVoP+Im4ZIQTGSMH3fCRSmoXHajiLB7vA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-12-11T19:02:44Z" - mac: ENC[AES256_GCM,data:FA2oSzHsuziR7jvGU82ZaeAZekpyTmL+vGwhjIeNjbAcpWsLFnKBDsuD09xH7dPrgOm14bfu+Uu31Tz3z6ojo9qmaC4hpg0o7r7kWuT//XRdS3UA+knWQzDMTh4tgZDxm2aKC8Xr4BOD7hDCYXmpOsdaG6iHnEW8rIQAZD5NdMo=,iv:lJojFmVzgYY0raE/Z76ZRqRhpsE940BXI1Gx0ZII51Q=,tag:kJI+gqnr+vDngy2gk6WEmA==,type:str] - pgp: [] - encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 diff --git a/apps/production/secrets/postgres-export-secret.yaml b/apps/production/secrets/postgres-export-secret.yaml @@ -1,28 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: postgres-secret - namespace: postgres-exporter -type: Opaque -stringData: - password: ENC[AES256_GCM,data:kSRJI6DuLY33l7p0jguQqZdWHsTfCB+7RnVNEHKo7IiO79ZRPqEaY6OoEIo3s9+hOSnFupJGONm29d9/Gz0uJw==,iv:AySH+6N8zimx7ie202g6Fva/Q0v/Y3urALnxR7Hm8v0=,tag:FkLq+pAPFE3uwTBFJ/p42A==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjRnVrMDlaSGdvYlJDLy9i - VUlFMFRsczMxWGR5a0FReXhhVGs4RUtmM2o0Ck00blJBWW5iTS9rT0ZybHBsYit5 - dEQzZ2czb1E3bG5JWGZEODNqYitPQWcKLS0tIG11NGRTY255dzdmTjl6S2VOTE9s - SlMrOHRiTzI3bjRmVVZjWXV6dENUUTgKwqfQAmI/CEed1j+UVkHiy4frwZRICw3X - 6AJGeZVmQy2QCTyINLPc5OFSH+xqIY9BwWAuF0sY+Z2hTNaDtzsjlw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-04-06T21:48:57Z" - mac: ENC[AES256_GCM,data:j1EDwtoCiYZIHongq6zAnzeorIXQsXmFMUdOYvL/i/ek78sFdar8frEFz6ok5fl8P1qRJw/dWSLR5X1BQqlJZm8cYSPFCWMxYHdQnX3aalAWXjhYhvJPfkDnEbV5NpAX+OrTCxN+M0ohYCOBT58CHCW2YFSxk5ROEK3OvnKhFcU=,iv:j4MLNjyK5l6UTkxRarDcPE3cMBbBY75H+H5d+1V8ERU=,tag:VLDy6PWRZpGGXEw6Ubv0wQ==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/prometheus_asterisk_secret.yaml b/apps/production/secrets/prometheus_asterisk_secret.yaml @@ -1,28 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: prometheus-asterisk-secret - namespace: monitoring -type: Opaque -stringData: - asterisk-secret: ENC[AES256_GCM,data:RylMtZKrC5HwLO1HnrVUBrHCdelYjfoaIZ9Ezw28ta0IeVsF5h8Y9YTT9aT6tdhFklXE884c+OJMidmmaEyhvw==,iv:UJ1/lBkMCB+eqajITdDTOZzgtJhSOnwBXNDJwABJrWI=,tag:Ol+ONUaFUFHrxiQ7EPftcg==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxUExoOXpsdFJkS2Mwekg5 - S2xIbFhDOThPeXVBUFM1aTVJMk5uUFU5YUZBCjh2bHpmbHFGd2c4cC9FU2RCeG0y - ZEhBQTNhZXFQZzlZQnhHMTZyT3cyWUEKLS0tIFZwa3FqeWRZR2ovaXN6eE44aDlV - ZnFwcmdGWlFXN0VZUDRsRG9NMFBSUTAKFF70/uICY58fxbfdtj31cfUdfi65Jwer - zXU6nkusiDVUG0z6/jNhDHEGibfe1lf8sUWPTrgCk3ZCeMfECqsecA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-08-21T11:20:18Z" - mac: ENC[AES256_GCM,data:uqefa1D+uB7DA43g3ykEeDFKH60zDyDAm6qNqeSxP9cqnOEpRI1oeuJPYDSyYOU73VVwfve+4OoMMTyhmb4foMrI5+qIMk0KpeH5mr32hnZl2vl46qq+SauJmbAxejj9T76T0Oraa66+vqitNM6qcavdmmNNclkSLOeq9HI9/Co=,iv:iVGpWCmE0isQoEY6Lz9rak7E5+LVDnkyeXzSlbziO2Q=,tag:wBu2QZsVFqLMwObI0A/5Ww==,type:str] - pgp: [] - encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/sliding-proxy-secret.yaml b/apps/production/secrets/sliding-proxy-secret.yaml @@ -1,29 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: sliding-proxy-env - namespace: matrix -type: Opaque -stringData: - SYNCV3_SECRET: ENC[AES256_GCM,data:rfGdmTeNppolJJculidV7DjBUNs1AfMCbW/KjO0Q82B1SJKlgPyExjPByUbnr9Ud4oBd7MOw3PSQc8dON7K1Sg==,iv:7fL9Mw52eMWe1/FiE3/WmEf3EjZQ2NQF0BzIA7h2CXY=,tag:YzEWIg/7XyCL3kmrwS4qRQ==,type:str] - SYNCV3_DB: ENC[AES256_GCM,data:TL00JQjq00QcYLokcq/79WbytPo6/haDHGkSlqHU4Q+Ivfg/FaIvQXMpc+DCyB1RGNp+9m3LVDJvjZwPmZjiIZ/CKN6h8UeuGEuMYJ8OmLApKfh2F3jnUVMyx0kfLNTVH7SiHkzLlpgXmpU5NTTv4SHBEJDJfRkirlT2frYDcclvpuqaqxnVTS5G84o3ws9tQyrDt+n1InlCg6Ffo6V2Pqjqlml8NKVJ0v6pnkhHjouhZXhBphvqd7aU,iv:QuOXWrfk8kVdYQnZEeEKIoC2FI3x5ofvNaRfsCNXeFY=,tag:ukZvnQk3IuRx9zLU5Z2UFQ==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvemE4SnNFalNEREkrMFdO - c1lMTnFrditMNW9KdVhXVUR4Q3JmTUx2OHhZCitDUFRmdGN0eEdiRDE2amVtcG5z - ZVE3cTRUY3lxOVdMaVF2VjF3L2IreGMKLS0tIE5UQ3c0UDhON2c5S1lRb3AwcXBQ - UitQcjFyVXNJWDI4cStnSzRSZGdiYk0K8rYQlSATbFomOnOY8ZW6FE10+UoWy4TR - muFmwo6FobRorsil2drLK+Jd5f7irnyPRKtnIJZycH5ROev5+SqQbA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-04-06T21:47:44Z" - mac: ENC[AES256_GCM,data:57B5CicKHekJGC0MlTlFDIdlJ6KXUAvREsI06VpfxKmCy/z7zymYYlxFMYnN/26NcUk2pry+rjz8bQuRw6/wrtdbTnWFCCt9mhon1BP/eCWmmWmWtTU5m3gws+sl29hmhx72YaZolpFBXE1LKi9xH+UECHCtFeiFQ9pemomkpsU=,iv:qrJZn+4e097/eN3Kp5ulREssgNB61mj+OodbnP89UQA=,tag:v08sWBNcFXWY33VVSOB/0Q==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/synapse-midnightthoughts-secret.yaml b/apps/production/secrets/synapse-midnightthoughts-secret.yaml @@ -1,28 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: synapse-midnightthoughts-postgresql - namespace: matrix -type: Opaque -stringData: - password: ENC[AES256_GCM,data:SH6wSgrQhwzpYuHCsCO7aj643gzY7YnHCwGF66x2pW37REBLTcSxE0k++AvIhvFFPDe5mJMjYT7yvIblthQXvw==,iv:0oRbaULXfcSxJ5XMODbYljOyD3yoOsj199l8b14F00o=,tag:azShxE/b5Ja+H5naWS9yHA==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ0E2bi9tbElSeEtNV1Zo - V2FpTVQxVWpFbWJSWWNNb2xyUXgzck4rVWhBClY3RkZWU3dsTm5zT0dRTGhoa3Q3 - RlE2RTdvQ1NabUlNSVhCZUtmeldjd1kKLS0tIEpmV2V6d1NqQWJBbzlmWHU4YVlG - dmhFbTVJdE9LQW9OalIxeURObmJXNUkK3VLESks1E5F1siT85BQHW1YzVlNN1MRn - CM5KMsUnfAL+gNTfol28exdXMT69daTdyjdKwQ1/krwWKfVivS9BBg== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-21T11:32:09Z" - mac: ENC[AES256_GCM,data:3AjGxTdGchNHXUVFwJdEbdDSiR/gh4FT0lKkn98L7C/Dg2psmq7SCJW15edJQP41mihvuB483fawVRiw6/6BNpC8VkRatL9xO27Mvi0PG0zmFrYgMIzq6D8h0A+dK4PD++V68OMPnd5m7NBCpMxNG0NIaJOPHc1A1To+3mMh52g=,iv:ZxQJHHynoNbywJEORA86Zl/fgqWnWVd7Ex5/KuElh/E=,tag:QLLhRawQ3lvr468xA/N8Ag==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|postgresPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/umami.yaml b/apps/production/secrets/umami.yaml @@ -1,32 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: umami-config - namespace: umami -type: Opaque -stringData: - #ENC[AES256_GCM,data:Sh5Ux9f0oefJPZzHai1F/od+3YMeu2Betdml36qwc62AvmxXcRHGRFmp9m33jO/vTPwie7NIYHwDruqc,iv:HLrgZwFO0aQd6uXDEOLMNxDFwqgJ8jOTjza01RZWVGE=,tag:4fe6kobEpBV/zoO2tLWE5w==,type:comment] - pg-password: ENC[AES256_GCM,data:gQbK7K1fyEbGq6OgPvEs+73wxDdlNOFombbCJnUJRzYMqR0+k2V78sSbR6Ww3J+eKqLdEZeepp2PVuvvNciDHg==,iv:UvqwrlCplku5bs6k1M1MReAA5H384bmtsXPtYS4gEGk=,tag:5RajrclQ6BODWi8a8c+gWg==,type:str] - database-url: ENC[AES256_GCM,data:SS2glkdPf5xaShVcoSpwDT0uu4lAOGidJ4dmuOxO5eUDtDebBPlGuVVIgvQoN8Fh2VtWG4Xrpx8mMWXNF2I95B5x9ulhtsUaGcuK93KHogDnWRBIxdVgRTPECGkbkDPIhxoiliIT3ZSz6DBslxFFluApjY46BGVFsgsDnF7mpks+14ztEWY9PlT76cOX78kf5DNiN/yXQC5Z4QpmPgTKAdN5xjuOnIPxs7XvFkyvWvs=,iv:IhFUxcRODVP/FERLAwIa5ngxaYYR0+opz1BTOMHwA0U=,tag:ps9pM9X9K8rvGP7v6VZ//A==,type:str] - #ENC[AES256_GCM,data:57RxfjSUKlQ13bJ5jvFyTmcybBeYH77WdXBAa+t2sJikUvpAKlIfuv/kpk0Jwnsal7k=,iv:0eZoIb7/uhrsFzZJWDz9SYkp5fI7xUWGpT+jt7DghVk=,tag:BY+RILJ32qc9rS+F8WDrYQ==,type:comment] - hash-salt: ENC[AES256_GCM,data:weDnS9D6cMX8z+fPxkotGkkG4UkTeoifcH5Hq0PLHRjxm57W2F4cpTAC8r8=,iv:bxFFTF37Bj/0gJ1SFfepPsan6+PguozHnpHz108+0M8=,tag:K1pvfLUoy00tCgbN1JnCfA==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDM1pZYUpVUkZZYnFOMWNX - dCtwc2tXSy93ZlVjQkY3YXNuZzRFQVQwRmx3CnlGVzBEandodElCUnJhYldkbXB2 - clJ2aEpUcXlJRjNuaDhQTXJ1Wjd2MjgKLS0tIGJMajR6aG9xSnJIblZlZEF3TTUx - SHpKNk5nUUVjNDB3ZW02VnB1VDlBeWcKI/LWJL/S0W4L4aheLmzmorwk4aryAT3S - TbnWWBSlVwIlDB/ZOt2zpTrlr8yMQ+dWRi3vrMIDc7o+WfTgOn11Og== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-01-04T17:09:43Z" - mac: ENC[AES256_GCM,data:mzQ7fIAEBnYPI2KLaPMoxSl7YwqnPxd3k/F7PEKQwCvQUbOmUhHSU+FGbKiFrxnHWVKVjVVDORAykrvJnp/Tl3/wl+pHBwYA6Mrzx6caMywCtyCiFYpvw+Qz670zAB8wWta9qV5i/MOnD7w0Vg2uNMA1qEmcCq/8hajsLPTn0h4=,iv:Mn1R8hgPdVHRDlTMqTGMlJSUYulOtX1FXLPyeZxA9J8=,tag:tBmkX0YAeXeiXxpSYqdetQ==,type:str] - pgp: [] - encrypted_regex: ^(admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 diff --git a/apps/production/secrets/vaultwarden-secret.yaml b/apps/production/secrets/vaultwarden-secret.yaml @@ -1,63 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: vaultwarden-postgresql - namespace: k8s-at-home -type: Opaque -data: - postgresql-password: ENC[AES256_GCM,data:h3gXx8ZUR6mtyU++eOK0+lsNTKZGdJrmQx7TKxeySHpw2zcRElKq9maHtPOCKVXG5Tf0t9mLCL1Jf99ruyUoJVMg6ufyVO3pyZUGWGa+4BTIxQP3Fe2NzA==,iv:4XUj7NWmr5ogFHPJCkaktXjAmm0C04ZLFb4xz9e+UEQ=,tag:iyX7n7L5ZpERxiJXGFp+IA==,type:str] - postgresql-postgres-password: ENC[AES256_GCM,data:OG+tLnZrJ+R9FbXx2NOREw==,iv:JGvpSvk25JQYCxIxygInRusj2FGtmkCLzAX+ZbCTmok=,tag:RLsF+KO6nPqX/F0M6R4zow==,type:str] - password: ENC[AES256_GCM,data:cIvw4gC4s94bECR5V5vFZsyyQlk86kg+JmIcQr4fLb75/T2AcTAm9JOAtOa4yvCk789tOc7Tncw1vufcVoKQSuDS0oi2oEvQGCPdMeg01fHIJnQ5/xISMA==,iv:dItSer1bPtVb9mNoG4GTerRV2NN9AeLh+fiLBylayd4=,tag:YHgKtuQQNsIiTuuXzPqh6w==,type:str] - postgres-password: ENC[AES256_GCM,data:08Mh7/ogJjOu2E+m9Ln+4A==,iv:siHg00e+9xE/A8HvIqL8+YUkvqTYY77eI8aC0iSYOwQ=,tag:QTdMVCDBx6hVeO633gS+1Q==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxYjlJWndmOVNDWjc0dU9r - eG14bmd3dVZqZmxTRUkvZk5tbm95RzNFK1F3ClpoOTBpWlJMUXhaM0kxaUE5OUdw - c1NVZG9yOFZEOUxUSnVKclpBczVuVlEKLS0tIDNBUnJUaHhPZ3R5TzNqZXl1QjJ4 - SkE1L2tkQXphSlNmU2lVNldrNjU5Qk0KnUm93N3G7ZYU4UKWerKkJBCkpYh7oAmk - RNxWx6IGruh1XibBQnOzYvu8RrhqIg6QEgj9WSO4fUalPd0sHByofw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-03-19T13:48:40Z" - mac: ENC[AES256_GCM,data:ypOqCj9iYS5rrP0mq2TLArE64INur8hTnU973JHK5BOL1Zedpd0NMT2m9gyx/EjyeEzL51gK7tWHVNMgIm7ZkQOGTV3QulTA3bzN3hr6jNeVajJlL3KiUCk7SWbAoK7NsAOh+dIvBCHy/iFDZiyUcgBYM5oPO4mas8iDyWJhywE=,iv:70UFCZpbCECccUzPQ4AvwPAzZ7/AcCSdcORAkMxHv/M=,tag:Ma2Q0fSmyoyydyCcQ/9Cpg==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData)$ - version: 3.7.3 ---- -apiVersion: v1 -kind: Secret -metadata: - name: vaultwarden-envs - namespace: k8s-at-home -type: Opaque -stringData: - admin-token: ENC[AES256_GCM,data:EPL9v8s2yd7LwNymfGFE6wIKCTbZ/NMTgwH7ndRE6DwoYuj0+r6uQZZnbjSd2U+HX707eTxGh4pV0ntAA2IgQA==,iv:kjvn5CLjOW1/R9UmbepR/OFyPD1fKQvLiHQFvuDAuRA=,tag:1H7b67XZXyS1912C7Md8jA==,type:str] - smtp-user: ENC[AES256_GCM,data:C+ZLN9yZLX5UjkExmxfgkGEDoqU=,iv:gXFmGlXMoCwVyZ2JUUnkmFLHsPBRn7/hFyJQWvn+9Kc=,tag:VDnd2XGCyTvIbeE1Pz857A==,type:str] - smtp-password: ENC[AES256_GCM,data:N9su+bHa5VRu,iv:rPTS1hqPxvb3v8RW9gTu8bIoxipKKL7ytpkPd07zcVE=,tag:bj71sBrsxNHf0SUAe0PJ1w==,type:str] - database-url: ENC[AES256_GCM,data:voI0418K5y9cwL6hx233wQoQQsHokL9AnhXhOc1Iq/vw2D3USw3IomoccS5hQrySKZAPTzmCtSVen/W6SnqQ/BmUet1hDRgmerluwOqp9tgXzyuZduASkLrU9u90zeh/mVTAFTUbC74XCBdV/F2s5Z50uWcgizUvibud7LJh57k6Hh/T6HS9JloEyC95rqa8wDSQwhb2M5BgcQ==,iv:8TjB//F6HAli/EfvALxYZC5Rcf+5OTrwkM2aA3tnbSI=,tag:5rx8OKVGJzYZZ25wmlXNCA==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxYjlJWndmOVNDWjc0dU9r - eG14bmd3dVZqZmxTRUkvZk5tbm95RzNFK1F3ClpoOTBpWlJMUXhaM0kxaUE5OUdw - c1NVZG9yOFZEOUxUSnVKclpBczVuVlEKLS0tIDNBUnJUaHhPZ3R5TzNqZXl1QjJ4 - SkE1L2tkQXphSlNmU2lVNldrNjU5Qk0KnUm93N3G7ZYU4UKWerKkJBCkpYh7oAmk - RNxWx6IGruh1XibBQnOzYvu8RrhqIg6QEgj9WSO4fUalPd0sHByofw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-03-19T13:48:40Z" - mac: ENC[AES256_GCM,data:ypOqCj9iYS5rrP0mq2TLArE64INur8hTnU973JHK5BOL1Zedpd0NMT2m9gyx/EjyeEzL51gK7tWHVNMgIm7ZkQOGTV3QulTA3bzN3hr6jNeVajJlL3KiUCk7SWbAoK7NsAOh+dIvBCHy/iFDZiyUcgBYM5oPO4mas8iDyWJhywE=,iv:70UFCZpbCECccUzPQ4AvwPAzZ7/AcCSdcORAkMxHv/M=,tag:Ma2Q0fSmyoyydyCcQ/9Cpg==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData)$ - version: 3.7.3 diff --git a/apps/production/secrets/woodpecker-secret.yaml b/apps/production/secrets/woodpecker-secret.yaml @@ -1,28 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: woodpecker-secret - namespace: woodpecker -type: Opaque -stringData: - WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:0uzbxKPDdHcZrWVWAnI7lFTvBbBQyGvgsU4RhlzDg/SwHn8umjzZPDlFw6ZW0OnDJ4fXktYYYOZyzPyaUbD1zA==,iv:OyVwjPf+DGbmitTdQTbqgzjwIDT3Ln+8qygSo1gA4nY=,tag:JXdULurqyVuPer3P+gneWw==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQzJEdHpFK3UzdGF6RkZq - YTRsSnMwN2dQamEwVjJuOHVqbEdiR1JjQWh3ClpnYW1UVlFkVEhPSko0RkxhMEpF - WE9tLzRROGFpU3lacEZrNHJGa2lnL3MKLS0tIGFtbld3UFRPVkhISy9OTnRsc2tB - dC9SNENzM053eHhOckFhYWltRHRxWWcKT4nPu3NcLmxNm2lSjJvSYYtMXnBXI7KP - XKO4DxdIHnDA9dHivDevlEyVu0HNXuVnXdCIPf0s4hp33rxjWJBmsQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-03-19T17:12:51Z" - mac: ENC[AES256_GCM,data:cDIlX2ATGUhMnRgRcrkNE94gofmJQ0cLZR85v8NjT8xlIYwAbN4cZGYZSaLlm0MFJbiL5j2a2Ywn1q16aeYPxxKj+LQw5f8Mc4V6CwkPc0oKvvx8ZQ1wa24Y4QbzLbb3VX4S3nVO7ywtb8TYga7g/r+06TX37ielDMbBndauruQ=,iv:fAm4p+BXjZiPL2adTVlX0nm1z2O5dqduUmz8o1RXtqc=,tag:CvPd+dXmIZg4ZkZYa7XAmQ==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData)$ - version: 3.7.3 diff --git a/apps/production/secrets/zammad-postgres-secret.yaml b/apps/production/secrets/zammad-postgres-secret.yaml @@ -1,28 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: zammad-postgres - namespace: zammad -type: Opaque -stringData: - postgresql-pass: ENC[AES256_GCM,data:7zo2aOyV76Zmwdf8wMbcKD/SjqRY34rWpJQ5scIcEvxXaJwcdXr0vEIlqSyDwvIYspQIQwt1XB67lYIcrwXabA==,iv:c+t90DELjJg9ne1RiJdJdBc0ioDH6tBaPbm0rmfj+4Y=,tag:yXxvcZK1Fl4KexbGc2jFVA==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UDlhM29aa1N5cFNPWS93 - RXoyQ0p5VTRIeS85UlVZOFIzNHllV2hLTUI0Ck9yTEFNY1o2SWtuOWIyZ3VTVVZl - VWd5UHh4MEZNMTlzeDloZGJ4c2JPaW8KLS0tIHNYMG1EYW0vREYxTVZUL0l1VEw3 - U0h6UjJNd1BiM24wV0p6bDVQNHNMS28KYkifWhw1e686duL6suttdnxPXmuTenlR - dpNbAR955SdzgSa4yQgffNaRaRv2OkIMH50oRf4IwGGol6TAWSk9zw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-25T10:46:05Z" - mac: ENC[AES256_GCM,data:Z7yKoKtv7Ynwu/yNVxZ+PNp3OJDQvm/pQB4O7rRgeU4RFVzomtqHsdcF+selCLC9Y/mY06WOQCoGsM8iOQRRluXSjp6faxQr6hgc5lo9gECwdf9ZUNAps4YZBcRFALS2DTjSVeuo+cupKU0f6gcxzAtXNjZHRiODiyoWHynkHEI=,iv:p5TAgGgR63s3igSrVXJX1wbinkKIRi7Nv41ePF/+AxQ=,tag:jlhnMcKIdl6OXPAZGWu4JA==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData|password|postgresPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.7.3 diff --git a/apps/production/secrets/zuul-secrets.yaml b/apps/production/secrets/zuul-secrets.yaml @@ -1,87 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: zuul-nodepool-config - namespace: zuul-system -type: Opaque -stringData: - nodepool.yaml: ENC[AES256_GCM,data:1I+cWiO2XXGXADuEI5oSbHopDUyJv5WdPnkRSHYQx4arPoxQBAzl517ZjFfMn0MOPxVgB4Ynpqyc5q1mY3p3PXei8GHGDHBrSAfGojJ11kpT3kPaACwYCxg68Z0gENVADzzFVUbw9UA7x3bDx/M+Rda/HSJUpaGDRNJ/inhXwA4VZW/8rYi3OSiBzb0WCok+Hyj5O7l03mrRIZA4X04/k2m/6+kW+irPV9+Nz+oZiSA3k/t54U+JLmkpKsrzVGcnlVPdBQ/7tuKVscEGaBE4e815HpB94ieeIWxoeBUOxjYIFtJ3vLNrETTpthcvl4DEQGcukN7JgZ6lgMXrqaSzy5IVmxrPDJWI4XwpiPLr0SA/hqNIBuS+DR0rdj6g1xYkQBwkMQJYSA1ckW8Awto1,iv:b1FOj6gFwdIpnZ0HqCUelm+xOBsHQRsDKsswrxuH6Ak=,tag:GTSsaJNlGLlgwJBXGfKMqw==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmQ1A1dGx0dEtCQThIdUxC - dGlTaGxIc29EcHpyQW9mQVVxMWhSOW5JOFR3CjVEQWZFZ2NkVEpEY2c5QitRZnEz - L1lMUUJXYXJZSkI5aC9NM05OMndIOVUKLS0tIEVrZ1NINmp5ZVJuUW1MTERja1NF - Y3BLdkVKc3I4dmRSMDc2OVFHcHRsTVkKSRBm7Iy5baZWPNLb7QVQSwl/UNv2LwwL - 48FL0m0f+s4K6ui6tEkCWeDro5/X74kdhfUZcf2lRcv7xVB8d1I6NQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-12-11T22:50:32Z" - mac: ENC[AES256_GCM,data:OKwA0W8OA73hC+iS31IKlyJm4+tuWfX2sRcghVtPRs0tsi9/Jh01okOIGjApA0vzs9UAV+cdzBrOJvH/bVOdXuIfAi+7HLwJ0zNsiMtCmM+Bvyd+U9eMIbJYePbmbmFuc+pgpR+VQejcxHxFw6q1uaD1bzN14SQiew7525DrPEg=,iv:DlTBZVceEZDKzMsscDiTYO4o+VXbPQ12nag04/cosAY=,tag:byXhf+h9mT4xlbGv+NYxIQ==,type:str] - pgp: [] - encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 ---- -apiVersion: v1 -kind: Secret -metadata: - name: zuul-tenant-config - namespace: zuul-system -type: Opaque -stringData: - main.yaml: ENC[AES256_GCM,data:8873enJJledGMLXJkaXI82GiM1z7TcV6ksgYG/HV2vp2tYmHFz6z3es5OFOx2LggDd2qY5rpTSLaJ5xppzDSXKfHiIUn7CzJ9RRW52sZl9LDwURcMF1MCspbyH5lAK2GovwbaRN+TCWIZqmgc9UMPEtzq3ACsOf1HaPEvAJczY+Qdkd9eM/BqRiNyOURkG3GnptFeam6YNDZ3nG4cEDbQNzj2JaszcPcYF6yfAxWbiHR59n9kEvgzODA8pXw9d8bMf1kefBBpWqbqLXKMmdxC0W669ifumQzHV775F/bRFJQtR30Rvc6Ez/ED5pmIAYrv5tY/gZVq8NNDLkm9XnvO8CIDTI+wExnU/mm9P8ZvAo5Knz7X+kwvpbvheErFu8zzlMpypEfEgnd/XE8XqmnpnCOwYdT4BYNlPpq8ehhB1C94hvgKfwzH5t1SKVuf4U03dRwm5oWWTQ3ziLsG6GK7pqBSQcnnHb1CMwxtV7btjwsEv4peqEhpPtW6p6+N1FSksMF8nybkp3rXrWFvEz3juBuiFW6D0Z4ZddEOZbkZrJrexEAIWFYsHPJcTF0OvyXadUizmt2pTo4gbpc2jvGdMSg/IA29io+mz0QmI/uufbQOe7ihmjZifc3Hc2BSfr0tVAap+WGlE8cYiutta3U9ouBvrWouJ/vDgu/WWUgAXHCSinBd9ZWgbP97I5ue0lZ0uAoSIj09xLDbH0sXYqyXyJjGJaGVI22G0MQ8q+VVbFjfnsvynAmVs2uEYRWVBnUzx2201KnrVxvTsI7J0AiZDCRjNAIyPHP0UOLZ+yxwNbQkHYIDKpBQt9kVt/nP3+9+4wnhfeMYoPe23UJ+RUiixCuSfy/WbjM/kKOQY6TGde38iQqdJJeLWT9YGE1YnqPpzEl20Wdgvx/Uq+SIwP1ZOb95iOK3tdVY0QiuZrAEEcMzJ/6JSMZv37rlGHxw535/W4ZvASouMaBsibg/i1MPu24PeDGJX8raZuGvcCr35imCV3ip0doh6lBeGW2R/XNr/b+0cr73U9TLpdDAFGHunSLl+/6Zg5ZB5QDUZUxTE6UiEk9gPMP7t6zBiX39R5I2WpPIGABLBnwBrdo0+GlO40mijT03Hxf5BhGVFwJilDuCGSXcuXuYDDzs1JO9EnQyS/82QeLkqMwVksKFq+cAr+vFH+eiT9DJP6ePJiq4raFXEcFYx0mkFA1GCf08G345xxIQ4XxO2gYKemGsUox0oHJy6INCjqjCW+Ynu3AsAnnj8yXwhs3xxKFKj8Hbi5X6gBgtgWlzB80hbcUa3SFP5GzII1mNOLO9KDnsietzyXXAcasG2kBDi40wKhPwU4doqTFwpPgG2vIyWKpu6Lt1F12NPi3lq5fyqPFjzL5ws3kCp5ByZS4A0gub5GwlsxVY/FHv1KuhvulTUqR6IKrCqfEA4N7GV9QDoBnAOuONFAsoRqdCyW/M+w1AA5hNdolwO9NMLsPMK+KbzsYFMtK4kL2g9jJ/udyCBz0Z5VBMThJ9u9lpOTmDqGA4yvTH8Cm77xMRD8AHgavAca4ECzKGHGtliRH2lKLRyckfQSZh356iE/skZZi063EHlSiT4Nq5gdK8X43LP0R1ZzEMdcA20q/+3KJW4QJIhncrU42CjADvywdzBNi9jRZ+pVD51ndlRvki8qFTPbk7s5MRkDQE5E6R/zNARvGaF/9sQrhnRGS3XZRQRS0/OCkR+QisAN/ShpyWpTcJCLc0/ba8gyGHVEKqTamxiFdoE72sCzQbBqgi4CjwBVpok+64kZRxbkVJ507H5U2p2p4uDuAFLboYHQ3BK71YF1UQkXoTNvkUvtiqqDGSP3Xg+6GYvavE7h6s/gnJ+Vfyik42Op/pcyGv/In3tGEwnhCWRQT+ohOv8dKtoqVHBBS9zakFOQB7nOQ1LyInFRke8S1l7SgWcTKa9ogweupMzZD3YZY2M7Udq0Skiq8eQCDbekWfufBQ1fg1g==,iv:1geAZIHgL8iCDPSds4vDNRI+1qql53smJnWSQ5nz6TU=,tag:+Qo+i38mm9G3haS4crOz+g==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmQ1A1dGx0dEtCQThIdUxC - dGlTaGxIc29EcHpyQW9mQVVxMWhSOW5JOFR3CjVEQWZFZ2NkVEpEY2c5QitRZnEz - L1lMUUJXYXJZSkI5aC9NM05OMndIOVUKLS0tIEVrZ1NINmp5ZVJuUW1MTERja1NF - Y3BLdkVKc3I4dmRSMDc2OVFHcHRsTVkKSRBm7Iy5baZWPNLb7QVQSwl/UNv2LwwL - 48FL0m0f+s4K6ui6tEkCWeDro5/X74kdhfUZcf2lRcv7xVB8d1I6NQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-12-11T22:50:32Z" - mac: ENC[AES256_GCM,data:OKwA0W8OA73hC+iS31IKlyJm4+tuWfX2sRcghVtPRs0tsi9/Jh01okOIGjApA0vzs9UAV+cdzBrOJvH/bVOdXuIfAi+7HLwJ0zNsiMtCmM+Bvyd+U9eMIbJYePbmbmFuc+pgpR+VQejcxHxFw6q1uaD1bzN14SQiew7525DrPEg=,iv:DlTBZVceEZDKzMsscDiTYO4o+VXbPQ12nag04/cosAY=,tag:byXhf+h9mT4xlbGv+NYxIQ==,type:str] - pgp: [] - encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 ---- -apiVersion: v1 -kind: Secret -metadata: - name: zuul-github-config - namespace: zuul-system -type: Opaque -stringData: - webhook_token: ENC[AES256_GCM,data:cRpHSVfD9CfOe/NYNMArWMoIvh70ur1hp1iE90QrA+uSc7dxWSF0GGuvMgkPczF+8HqbO485Fn/HjiA9LvvK2w==,iv:7FN46wPScY/pTCgOyqACEIY3qpLbD617KXwjeOQSqQk=,tag:E7uJOtFfU84sKn58O4k+bg==,type:str] - app_key: ENC[AES256_GCM,data:it/8maD+cHh0yqS1yagA1r8SdEFVQDwx1w3hRBJMgkVU9Y7O8bRL5bfRsZ6jkxbaKDFB6+MPKRFJ6oNbLWR1kGuhG7Umk689MqaZ3Fqc1UIUTvxaImKdv25vwl3bKOwEypj892GM8FOvfzbEFdDHNGzETRXmlAKEWFNKUo10XLd1LpshwUM5SR8t2603U99dzygnfjvAsrt/LJuGZrWYIUHpwueaIMjmFHxxOVNwJdR6K90+bQV/OnAjBnRbUJ3Ll8ia9l3vWpbNQFkqOXxhC7hL6WbcK846nMv7lSNsdT1XkM9K6vVTs7rgm8a7g4eS/te20QdDEEJfmOgDrgThKQn35KBtclofGavWPsp+0R80yh0XKaXQLpVW941MfNu/xuaTSlggn5TRfAs1RogCK26xIITIEAZDI4yLfPtUPPhMIFPHwOvByWcg6ivTZh2ZJsdRfIxwNLO47XDrztDLy2lz0afpkzBLKaNZ0hpeY+/n3CBf2hyL9icZSRPStEy9xMwt87Pj6oGelmripxZ/ZyB8tHxpOqg5MRA6tfyIiaklWBftfzxdmzWxg7vgg4uYXJ9VulOTodKDhSVYFFUI1UQaVXveu4H/Faf5+84dv5kRqXSESDWkdsBjnu3E0WjiXgHdHQwAF4jBQNwBY48lLmFVPMwbElrnQ0mdYMUEAjOxVzWf76c2rXjRBaST/ROSFOeNYudhTlZa1+h44RDw3UOCI6a6QWBfWD+HmDcZDT2dme1WJAQI40tnfL5KSu0hJD0EkPrjSe/XC8c/xv4lBINTcd+pIu9kIj1x4upYAIrd6Q5wGnh1UMh/fBfQTD7GAPT8nwWXVzJpsSKyywrJtnGsaONXNUE7Jr5zhfI4sm3pqxVx09XyEK0HuFYfC731IXmM4rY/ieuPvh3Ouq+JLDyweSSh5kcKybbnU8CiIkmpTMcxZIGju4ezZWYeGE1hOpS3E9DLX5Ta0TEDngn0Y8dcKCjMDJYRzsHknTrgjyzFcCoJfuhTgRvD7CaQ3rRAK5YFei9CMzsdGrDzeSPbvS51G2O+1IqYMO1jI1Mt8cW6aT6myDy/Zw86cvND3jBNyoroIbFETBcWGnb43VsCEgKuZ3gJgq7qRP92ZEatg2t4bJaq+obsQ05nVQMQfO6iQXiSR6ez/gxwMHk68hD51qx7itVzSzzBxECZ3IYBbImpDmcczClLFSyyVUhInqRtCfexssjtw6aK1yTyf33uyuEynZO2oH8mqDZwEw/RnzBW8sLSZqY474jTwbIO1surOvDp6rwb6UmXYE8Ev4Tu3dawSEI8t2ItzrXnBy4Sfd1YDtDbP2AIWiieu0rKZ8ve8nCq/GVCfWpxPieqgNqP/9ZO6Zt9cC0eL15Fokvjr9xAyVms0OpgTDNueSBbPc7Hn+bYbOtXO0XN39pkExI9FwvmaHkBQ9ssyQi26sNL3S2l1hu8youYYxFnRGxA8d1sBA3sldI9mX8UiMV0RQv2r3v+gQvQPPIMTTDOEX//CUEcxZWfrQy1RevBsdcQRr/L/vi7KZYtDXaP0peZYJ0hMwN54Fb0XQB4uIQW1sw/APVM4R2t5OpkVEaGQ1o4XU0esb9qZett/SQQHVbFfY/ZVsPTqsbbUrRoJ8DtWzjMJAmy2lSobhXJGRVj933eWmEokVhzE2Sf93TCYih37loGAxw0aDfIn87Na0zztMHZoyxNwg9XckGyvorDaoq0IoBys6OCZwo9R+e8f4XlK7lDKsKMkDYnH7Z55KRq7ht2Vb4ZjMMiceMumRu/Lwqg7oepvTWgaLZRBnuJhz/tPLd6WzsyzN8FLn5VQFgFIwOJ2YuR//FxnjeJN1aHdINWlI76AYQi04iY3j8CRLKFTmJiUz0gEhvEnVxFr1qmCwKFKjZYQEjuozqL3Tv1uwMQWYagI3QtUaRXmXtTcxfsp6cDP+8EteApIJ6sHUk1RUgWFNOKlkpZ9EkHw6TCcvq55HaIUIksyUNX1v79EiELV44kKlVPB/jnMTbH+MiWoXLcHq9KgVloOlzI6pxK1iAmOBBKGBFy2QcGXaIiJPgdSt2ra44TZxuoJcPOKSUIPYQ+HXbrjgAHns6fn0Ayo8dp62cRmvHCjlSRcH4D6CrsKlAdGrwQazOz4fczYn9Us3NEpiF3fOh35aaYFM3os7xYvmqJMQg4c5IKkEYtOgS43lk6cgxfisGPVhozHxB5JJDcXi21maFk4+5gG8hifdijN6g=,iv:4TgEeDRmEKKZN722LoVFKASntKm9kDymFbfO6cYeubY=,tag:/z3xCjHB4whDSQDjo4nPFw==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmQ1A1dGx0dEtCQThIdUxC - dGlTaGxIc29EcHpyQW9mQVVxMWhSOW5JOFR3CjVEQWZFZ2NkVEpEY2c5QitRZnEz - L1lMUUJXYXJZSkI5aC9NM05OMndIOVUKLS0tIEVrZ1NINmp5ZVJuUW1MTERja1NF - Y3BLdkVKc3I4dmRSMDc2OVFHcHRsTVkKSRBm7Iy5baZWPNLb7QVQSwl/UNv2LwwL - 48FL0m0f+s4K6ui6tEkCWeDro5/X74kdhfUZcf2lRcv7xVB8d1I6NQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-12-11T22:50:32Z" - mac: ENC[AES256_GCM,data:OKwA0W8OA73hC+iS31IKlyJm4+tuWfX2sRcghVtPRs0tsi9/Jh01okOIGjApA0vzs9UAV+cdzBrOJvH/bVOdXuIfAi+7HLwJ0zNsiMtCmM+Bvyd+U9eMIbJYePbmbmFuc+pgpR+VQejcxHxFw6q1uaD1bzN14SQiew7525DrPEg=,iv:DlTBZVceEZDKzMsscDiTYO4o+VXbPQ12nag04/cosAY=,tag:byXhf+h9mT4xlbGv+NYxIQ==,type:str] - pgp: [] - encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.8.1 diff --git a/apps/production/sliding-proxy-ingress.yaml b/apps/production/sliding-proxy-ingress.yaml @@ -1,37 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - labels: - app: sliding-proxy-midnightthoughts - name: sliding-proxy-midnightthoughts-srv - namespace: matrix -spec: - ports: - - port: 8888 - selector: - app: sliding-proxy-midnightthoughts ---- -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - annotations: - cert-manager.io/cluster-issuer: letsencrypt-http - name: sliding-proxy-midnightthoughts - namespace: matrix -spec: - ingressClassName: traefik - rules: - - host: sliding.matrix.midnightthoughts.space - http: - paths: - - backend: - service: - name: sliding-proxy-midnightthoughts-srv - port: - number: 8888 - path: / - pathType: Prefix - tls: - - hosts: - - sliding.matrix.midnightthoughts.space - secretName: sliding-proxy-midnightthoughts-tls-secret diff --git a/apps/production/sliding-proxy-values.yaml b/apps/production/sliding-proxy-values.yaml @@ -1,13 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: sliding-proxy-midnightthoughts - namespace: matrix -spec: - template: - spec: - containers: - - name: sliding-proxy-midnightthoughts-container - env: - - name: SYNCV3_SERVER - value: "https://matrix.midnightthoughts.space" diff --git a/apps/production/synapse-element-call.yaml b/apps/production/synapse-element-call.yaml @@ -1,42 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: element-call-synapse - namespace: element-call -spec: - chart: - spec: - version: 3.9.x - values: - signingkey: - job: - enabled: false - serverName: matrix-call.midnightthoughts.space - publicServerName: matrix-call.midnightthoughts.space - wellknown: - client: - m.homeserver: - base_url: https://matrix-call.midnightthoughts.space - config: - reportStats: true - enableRegistration: true - extraConfig: - use_presence: false - registration_requires_token: true - ingress: - traefikPaths: true - hosts: - - matrix-call.midnightthoughts.space - tls: - - hosts: - - matrix-call.midnightthoughts.space - secretName: matrix-call-midnightthoughts-synapse-tls-secret - annotations: - cert-manager.io/cluster-issuer: letsencrypt-http - traefik.ingress.kubernetes.io/router.tls: "true" - traefik.ingress.kubernetes.io/router.middlewares: default-hsts@kubernetescrd,default-compress@kubernetescrd,default-redirect-https@kubernetescrd - externalPostgresql: - username: element_call_synapse - ## The name of an existing secret with postgresql credentials - existingSecret: element-call-postgresql - database: element_call_synapse diff --git a/apps/production/vector-values.yaml b/apps/production/vector-values.yaml @@ -1,76 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta2 -kind: HelmRelease -metadata: - name: vector - namespace: vector -spec: - chart: - spec: - version: 0.29.0 - values: - # customConfig -- Override Vector's default configs, if used **all** options need to be specified. This section supports - # using helm templates to populate dynamic values. See Vector's [configuration documentation](https://vector.dev/docs/reference/configuration/) - # for all options. - customConfig: - transforms: - modify: - type: remap - inputs: - - kubernetes_logs - source: | - . = parse_json!(.message) - data_dir: /vector-data-dir - api: - enabled: true - address: 127.0.0.1:8686 - playground: false - sources: - kubernetes_logs: - type: file - include: - - /var/run/cilium/tetragon/tetragon.log - sinks: - parseable: - type: http - method: post - batch: - max_bytes: 10485760 - max_events: 1000 - timeout_secs: 10 - compression: gzip - inputs: - - modify - encoding: - codec: json - uri: http://parseable.parseable.svc.cluster.local/api/v1/ingest - auth: - strategy: basic - user: MTRNord - password: ENC[AES256_GCM,data:ErE9OBUngFMWk8CmwV8xRQZi59masyLVJhs2CSuEHPUWD7CZcK6ykS8rkBN1qgNzKqJepbiiKDJVWc1f2gpP2g==,iv:OdlBNGY3XTWbrNFqkIoMa+BPS0IzHa/dDGqffgIgkDI=,tag:t9aE/2W/AGxtb+JGg0LmBw==,type:str] - request: - headers: - X-P-Stream: tetragon - healthcheck: - enabled: true - path: http://parseable.parseable.svc.cluster.local/api/v1/liveness - port: 80 -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbUFmYVJtRDQ4R1UvU2hD - dFhJVEVDdkQ3Z3dHcVE4MHRIVWdDd1d4VlNjCm5yMTdQMzFYWStTaUdGSzhBaHcv - ekh3SkRYR3VnZ05vd1NpczdzdVBzSkEKLS0tIDFWMFByZXFuYVY3Zmg2MzdYMnFS - SjVqenlCTnJIa1FTSzB2eWVEaHVTUlEKdsGMuOJLYEaApA2UGHfJu+b9D9GBlE5b - G8J9gYTTXVsBnQCod9rEJbcjLxJaP9YMWo0ZLzAhjNdHi1gd2I7cyQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-11-18T22:07:45Z" - mac: ENC[AES256_GCM,data:c6nFNSOfE/0GmFiAlumSEaCvuE4QcBZG7hss5h03OvD2P6+xbLAuURMfWmZWYqKHMo273nSTyQUTlMttV+L41TlFCCw7PS7pKZSVJwWOKtjIdV/5YEKw9xQeLKhXHzFzC+I28WTzEvDPI7aJC9ij+ymA8k+GMjc6EtrnT5tMLeg=,iv:oZ11nGoFG4eDibh5ESrGwD9rBDAX52QZBMluz3XhVFg=,tag:6ySCxh/IuIwV+z/XmNX5Uw==,type:str] - pgp: [] - encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ - version: 3.7.3