commit 96881b43011a3c023d6748937f2c19a498cc2111
parent 0220d071b125bc9a82f9b11f83857b55c96a7746
Author: MTRNord <mtrnord1@gmail.com>
Date: Tue, 14 Jan 2025 18:59:25 +0100
Meow
Diffstat:
4 files changed, 103 insertions(+), 139 deletions(-)
diff --git a/apps/base/mailserver/release.yaml b/apps/base/mailserver/release.yaml
@@ -219,8 +219,7 @@ spec:
dovecot.cf:
create: true
path: dovecot.cf
- data:
- "{{- if .Values.proxyProtocol.enabled }}\n haproxy_trusted_networks = {{ .Values.proxyProtocol.trustedNetworks
+ data: "{{- if .Values.proxyProtocol.enabled }}\n haproxy_trusted_networks = {{ .Values.proxyProtocol.trustedNetworks
}}\n\n {{- if and (.Values.deployment.env.ENABLE_IMAP) (not .Values.deployment.env.SMTP_ONLY) }}\n service
imap-login {\n inet_listener imap {\n port = 143\n }\n\n inet_listener imaps {\n
\ port = 993\n ssl = yes\n }\n\n inet_listener imap_proxy {\n haproxy
@@ -269,8 +268,7 @@ spec:
user-patches.sh:
create: true
path: user-patches.sh
- data:
- "#!/bin/bash\n\n{{- if .Values.proxyProtocol.enabled }}\n# Make sure to keep this file in sync with
+ data: "#!/bin/bash\n\n{{- if .Values.proxyProtocol.enabled }}\n# Make sure to keep this file in sync with
https://github.com/docker-mailserver/docker-mailserver/blob/master/target/postfix/master.cf!\ncat <<EOS
>> /etc/postfix/master.cf\n\n# Submission with proxy\n10587 inet n - n - -
\ smtpd\n -o syslog_name=postfix/submission\n -o smtpd_tls_security_level=encrypt\n -o smtpd_sasl_auth_enable=yes\n
diff --git a/apps/base/matrix/synapse/release.yaml b/apps/base/matrix/synapse/release.yaml
@@ -88,11 +88,11 @@ spec:
modules:
- module: matrix_invitee_server_blocker.InviteeServerBlocker
config:
- broken_servers:
- #- matrix.org
- - matrix.im
- - funami.tech
- - suicideserver.net
+ broken_servers:
+ #- matrix.org
+ - matrix.im
+ - funami.tech
+ - suicideserver.net
persistence:
enabled: true
size: 20Gi
@@ -129,11 +129,11 @@ spec:
modules:
- module: matrix_invitee_server_blocker.InviteeServerBlocker
config:
- broken_servers:
- #- matrix.org
- - matrix.im
- - funami.tech
- - suicideserver.net
+ broken_servers:
+ #- matrix.org
+ - matrix.im
+ - funami.tech
+ - suicideserver.net
federation_reader:
resources:
requests:
@@ -308,8 +308,8 @@ spec:
- matrix.midnightthoughts.space
tls:
- hosts:
- - midnightthoughts.space
- - matrix.midnightthoughts.space
+ - midnightthoughts.space
+ - matrix.midnightthoughts.space
secretName: midnightthoughts-synapse-tls-secret
annotations:
cert-manager.io/cluster-issuer: letsencrypt-dns
@@ -319,10 +319,10 @@ spec:
- path: /_matrix/client/.*/(login|logout|refresh)
pathType: ImplementationSpecific
backend:
- service:
- name: mas
- port:
- number: 8080
+ service:
+ name: mas
+ port:
+ number: 8080
sops:
kms: []
gcp_kms: []
@@ -331,13 +331,13 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRWlOWnhXaXlBRzZsQkNE
- Mnp0SldiWE5rN3YrVldLdlJYeEpkcExHdUdFCkEvbE56dmcvKzU2V0FmOU45Um14
- cXJXSWdyMFVNVEpDTU4wVTNSUnh4dEkKLS0tIDM5VTRHdlNFRGc0dTdZOHAvaHZh
- aXAvZzFmbmtKWnRla01YdU12YlhjdFEKhKpqgLU6uM8XqJ0rpe9g0cY5KtD0n0t+
- dTsMGEhbTY2fBJXw+JQkKJFl9EFloYtp0fx/1jcF6pa/BUYmNICtiQ==
- -----END AGE ENCRYPTED FILE-----
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRWlOWnhXaXlBRzZsQkNE
+ Mnp0SldiWE5rN3YrVldLdlJYeEpkcExHdUdFCkEvbE56dmcvKzU2V0FmOU45Um14
+ cXJXSWdyMFVNVEpDTU4wVTNSUnh4dEkKLS0tIDM5VTRHdlNFRGc0dTdZOHAvaHZh
+ aXAvZzFmbmtKWnRla01YdU12YlhjdFEKhKpqgLU6uM8XqJ0rpe9g0cY5KtD0n0t+
+ dTsMGEhbTY2fBJXw+JQkKJFl9EFloYtp0fx/1jcF6pa/BUYmNICtiQ==
+ -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-09-25T16:01:47Z"
mac: ENC[AES256_GCM,data:A70zcY2uBFZqrJgEY7hefYSdd2n8JTEoozqjlrSb/hGE1A2a89DpWF193GG+E2iDaD92HRG8ZEPU+5m+SMLfVVa+mW47KCb1Ush8rfkW94qmu/5jSuwJ/NHDW5xErx6Mobv3wrJEXl3m2LMsZu455t1hldzBtGDKCKZtSwJAP1c=,iv:GCIogDOgp/QI44f5SB9TM1X9yE4Z8V2CUTBt5173LDs=,tag:HxNrcAVgGMu9MoDKvhtnUQ==,type:str]
pgp: []
diff --git a/apps/base/victoria-metrics-k8s-stack/release.yaml b/apps/base/victoria-metrics-k8s-stack/release.yaml
@@ -197,7 +197,8 @@ spec:
execErrState: Error
for: 5m
annotations:
- description: Depending on the rate limit, cert-manager may be unable to generate certificates for up to a week.
+ description: Depending on the rate limit, cert-manager may be unable to generate certificates
+ for up to a week.
summary: Cert manager hitting LetsEncrypt rate limits.
labels: {}
isPaused: false
@@ -1399,7 +1400,8 @@ spec:
auth_url: https://auth.midnightthoughts.space/application/o/authorize/
token_url: https://auth.midnightthoughts.space/application/o/token/
api_url: https://auth.midnightthoughts.space/application/o/userinfo/
- role_attribute_path: contains(groups, 'Grafana Admins') && 'Admin' || contains(groups, 'Grafana Editors') && 'Editor' || 'Viewer'
+ role_attribute_path: contains(groups, 'Grafana Admins') && 'Admin' || contains(groups, 'Grafana Editors')
+ && 'Editor' || 'Viewer'
imageRenderer:
enabled: true
kubeProxy:
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -10,15 +10,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
- b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
- VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
- OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
- mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T17:44:07Z"
- mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQlZaL254TjVSZDVoTlE1
+ QjI0Z2I4MG1adTRiU3dvNUF1VGJPVTlubHg4CjdrUmdOZ1FzSHVybU0xSnJiOGUz
+ MGY0dlRmTTQzdHRxRlpJSmhnajJqS1kKLS0tIGxPMERtZktYSFpWdmt1ZlZZSko4
+ STc1aVg2RU9Zak4xVDIzUVNwbkIyNjgKOp0kfyqk3RAvuPILnDYSnhacoKBE8iR9
+ S65tGiDCTp2kEz2Gcba32Rl25L7WUnN5efZC9WIG4NVdV9y/Og+kSQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-01-14T17:59:19Z"
+ mac: ENC[AES256_GCM,data:tO9mf0RjrqqySMvK4BsVdjSGAR7810Q+528VG2JKwDzkUxZnJfKKE6NllXn5xY1VQTAwZD3aAVSxfFGwhevN7yzXShHmBgloMQxG2G4s9M/GUnIAMJ9zZa4sCKEyTyGKTh0TyLxnTaNPrhSKpmSULjqI5Ycy8Y8MmZnNKavnOe0=,iv:i4yW24sHftZ8HuAZlcT3FO8E9JH9+87QrAs93EIitiA=,tag:6DSatrqghbdv/Ivji2jPdA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -30,8 +30,8 @@ metadata:
namespace: postgres-cluster
type: Opaque
stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:DiQKTQKX2WIF8NCMMTBsmtrq8Yg=,iv:Jq7e4iyqjGgd4PoWZD/4VNJgb4sXUQT6s6U7B9gBvEw=,tag:N7N6vrpSfvt7/mWubKmTYA==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:ZRp21nYOLo0UMfp1KFNohV5UN5V/USjedfaLjjdK5eX1d/37TcoILw==,iv:yA99Yfqvyd0Stb7iN/gD4H/4sdj//ucI4TUg2x9PTp0=,tag:DsP2sBRgbBwECsO/tkLNUQ==,type:str]
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:Y5X2tQhgxdv9i9KSWCma4tZ4F6U=,iv:sJGoo3N6oOqGUKFTuPE7XFTg4IDS5i2dWphfcGSnK80=,tag:W0/F3QRUWwVEjwigXtlI4A==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:IKaYzauF7F7EuyPT2RfWdLkmnqGAD/vXUv1shq21h/dzRCqx+IBx4g==,iv:SsjFBOxN4wlA9vk7u2sSok2nKoWnbbM5kztta9StCk8=,tag:cQAKYx+xjv2PAXVp5MdidQ==,type:str]
sops:
kms: []
gcp_kms: []
@@ -40,15 +40,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
- b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
- VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
- OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
- mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T17:44:07Z"
- mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQlZaL254TjVSZDVoTlE1
+ QjI0Z2I4MG1adTRiU3dvNUF1VGJPVTlubHg4CjdrUmdOZ1FzSHVybU0xSnJiOGUz
+ MGY0dlRmTTQzdHRxRlpJSmhnajJqS1kKLS0tIGxPMERtZktYSFpWdmt1ZlZZSko4
+ STc1aVg2RU9Zak4xVDIzUVNwbkIyNjgKOp0kfyqk3RAvuPILnDYSnhacoKBE8iR9
+ S65tGiDCTp2kEz2Gcba32Rl25L7WUnN5efZC9WIG4NVdV9y/Og+kSQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-01-14T17:59:19Z"
+ mac: ENC[AES256_GCM,data:tO9mf0RjrqqySMvK4BsVdjSGAR7810Q+528VG2JKwDzkUxZnJfKKE6NllXn5xY1VQTAwZD3aAVSxfFGwhevN7yzXShHmBgloMQxG2G4s9M/GUnIAMJ9zZa4sCKEyTyGKTh0TyLxnTaNPrhSKpmSULjqI5Ycy8Y8MmZnNKavnOe0=,iv:i4yW24sHftZ8HuAZlcT3FO8E9JH9+87QrAs93EIitiA=,tag:6DSatrqghbdv/Ivji2jPdA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -65,10 +65,10 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:2DGugzminFEkLm51kg==,iv:Om08ppFVER68t6T4xo8o+kc8HJcRoqwVYGyTsHHP0YI=,tag:5z69MCNcxNUnS/qVh0HqZg==,type:str]
+ key: ENC[AES256_GCM,data:8F/S3YWOb6uNHsvkgg==,iv:MqUFm4ayMVIgzTsGqcyxON/ER3cwrNOPAtDrvozEtpw=,tag:tzh/eQoIl/o9y7VuXmoG6g==,type:str]
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:LBMYMk8sdTPVfJ8LXLLXBuo=,iv:8sOrxG9ixWBpY8oiYcrlKU3I9thuRBEcWnr3A+g9SrQ=,tag:yKxGt0iON5QD/6LqjNeiew==,type:str]
+ key: ENC[AES256_GCM,data:bkFDyPlMMjFOXauwJo/rwOc=,iv:wRqHHXpqO9a2PDd8tVozO2se97aN/CgOb0/rfn2FBjQ=,tag:mP7EFeAcG2mMexaRDX0bSg==,type:str]
wal:
compression: gzip
sops:
@@ -79,15 +79,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
- b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
- VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
- OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
- mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T17:44:07Z"
- mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQlZaL254TjVSZDVoTlE1
+ QjI0Z2I4MG1adTRiU3dvNUF1VGJPVTlubHg4CjdrUmdOZ1FzSHVybU0xSnJiOGUz
+ MGY0dlRmTTQzdHRxRlpJSmhnajJqS1kKLS0tIGxPMERtZktYSFpWdmt1ZlZZSko4
+ STc1aVg2RU9Zak4xVDIzUVNwbkIyNjgKOp0kfyqk3RAvuPILnDYSnhacoKBE8iR9
+ S65tGiDCTp2kEz2Gcba32Rl25L7WUnN5efZC9WIG4NVdV9y/Og+kSQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-01-14T17:59:19Z"
+ mac: ENC[AES256_GCM,data:tO9mf0RjrqqySMvK4BsVdjSGAR7810Q+528VG2JKwDzkUxZnJfKKE6NllXn5xY1VQTAwZD3aAVSxfFGwhevN7yzXShHmBgloMQxG2G4s9M/GUnIAMJ9zZa4sCKEyTyGKTh0TyLxnTaNPrhSKpmSULjqI5Ycy8Y8MmZnNKavnOe0=,iv:i4yW24sHftZ8HuAZlcT3FO8E9JH9+87QrAs93EIitiA=,tag:6DSatrqghbdv/Ivji2jPdA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -113,7 +113,7 @@ spec:
plugins:
- name: barman-cloud.cloudnative-pg.io
parameters:
- barmanObjectName: hetzner-store
+ barmanObjectName: hetzner-store
backup:
barmanObjectStore:
destinationPath: s3://midnightthoughts-pg-backup/pg-base-backup
@@ -121,10 +121,10 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:RFnCqpEe8QJtKTLCSg==,iv:cUuAyBbEjnN5j5nGLJfHaN2g9IycCOQ0WD14+Ta9kQg=,tag:9KI4QFbHZNAMVCoPyueV/g==,type:str]
+ key: ENC[AES256_GCM,data:5ftMZeXasl3S7G2d0w==,iv:3kqOWp2pSlAFhLxO41PiuzHZlgvlYibemQv9HHxMLgo=,tag:w3UDN/J0jvaj7DEnX0t90Q==,type:str]
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:ExMDyRaTLLGePUKQsBFN104=,iv:cPAV7nDSMUogt0GncAiClHl63CnnEo1auujJbGvUTws=,tag:Pa7O5Zzd5y8lVK2O6a4CQQ==,type:str]
+ key: ENC[AES256_GCM,data:iD4sXdZVKlXQFbPkBtnfiRY=,iv:TVMFUgEuNztbt4v4FZ3BkhZRP1NLBBEO7XvqA/1Ilcc=,tag:ArEJJZZA7oLJyB03ywoHRg==,type:str]
wal:
compression: gzip
retentionPolicy: 60d
@@ -135,79 +135,79 @@ spec:
login: true
superuser: false
passwordSecret:
- name: synapse
+ name: synapse
- name: draupnir_synapse
ensure: present
login: true
superuser: false
passwordSecret:
- name: draupnir-synapse
+ name: draupnir-synapse
- name: authentik
ensure: present
login: true
superuser: false
passwordSecret:
- name: authentik
+ name: authentik
- name: ejabberd
ensure: present
login: true
superuser: false
passwordSecret:
- name: ejabberd
+ name: ejabberd
- name: vaultwarden
ensure: present
login: true
superuser: false
passwordSecret:
- name: vaultwarden
+ name: vaultwarden
- name: mastodon
ensure: present
login: true
superuser: false
passwordSecret:
- name: mastodon
+ name: mastodon
- name: openproject
ensure: present
login: true
superuser: false
passwordSecret:
- name: openproject
+ name: openproject
- name: plausible
ensure: present
login: true
superuser: false
passwordSecret:
- name: plausible
+ name: plausible
- name: coder
ensure: present
login: true
superuser: false
passwordSecret:
- name: coder
+ name: coder
- name: matrix_auth
ensure: present
login: true
superuser: false
passwordSecret:
- name: matrix-auth
+ name: matrix-auth
- name: cachet
ensure: present
login: true
superuser: false
passwordSecret:
- name: cachet
+ name: cachet
- name: docuseal
ensure: present
login: true
superuser: false
passwordSecret:
- name: docuseal
+ name: docuseal
- name: bugzilla
ensure: present
login: true
superuser: false
passwordSecret:
- name: bugzilla
+ name: bugzilla
#bootstrap:
# initdb:
# import:
@@ -267,15 +267,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
- b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
- VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
- OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
- mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T17:44:07Z"
- mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQlZaL254TjVSZDVoTlE1
+ QjI0Z2I4MG1adTRiU3dvNUF1VGJPVTlubHg4CjdrUmdOZ1FzSHVybU0xSnJiOGUz
+ MGY0dlRmTTQzdHRxRlpJSmhnajJqS1kKLS0tIGxPMERtZktYSFpWdmt1ZlZZSko4
+ STc1aVg2RU9Zak4xVDIzUVNwbkIyNjgKOp0kfyqk3RAvuPILnDYSnhacoKBE8iR9
+ S65tGiDCTp2kEz2Gcba32Rl25L7WUnN5efZC9WIG4NVdV9y/Og+kSQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-01-14T17:59:19Z"
+ mac: ENC[AES256_GCM,data:tO9mf0RjrqqySMvK4BsVdjSGAR7810Q+528VG2JKwDzkUxZnJfKKE6NllXn5xY1VQTAwZD3aAVSxfFGwhevN7yzXShHmBgloMQxG2G4s9M/GUnIAMJ9zZa4sCKEyTyGKTh0TyLxnTaNPrhSKpmSULjqI5Ycy8Y8MmZnNKavnOe0=,iv:i4yW24sHftZ8HuAZlcT3FO8E9JH9+87QrAs93EIitiA=,tag:6DSatrqghbdv/Ivji2jPdA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -299,51 +299,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
- b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
- VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
- OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
- mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T17:44:07Z"
- mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
- pgp: []
- encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
----
-apiVersion: postgresql.cnpg.io/v1
-kind: ScheduledBackup
-metadata:
- name: hetzner-backup
- namespace: postgres-cluster
-spec:
- schedule: 5 4 * * 1
- backupOwnerReference: self
- method: plugin
- target: prefer-standby
- immediate: true
- cluster:
- name: pg-cluster-v2
- pluginConfiguration:
- name: barman-cloud.cloudnative-pg.io
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
- b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
- VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
- OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
- mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T17:44:07Z"
- mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQlZaL254TjVSZDVoTlE1
+ QjI0Z2I4MG1adTRiU3dvNUF1VGJPVTlubHg4CjdrUmdOZ1FzSHVybU0xSnJiOGUz
+ MGY0dlRmTTQzdHRxRlpJSmhnajJqS1kKLS0tIGxPMERtZktYSFpWdmt1ZlZZSko4
+ STc1aVg2RU9Zak4xVDIzUVNwbkIyNjgKOp0kfyqk3RAvuPILnDYSnhacoKBE8iR9
+ S65tGiDCTp2kEz2Gcba32Rl25L7WUnN5efZC9WIG4NVdV9y/Og+kSQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-01-14T17:59:19Z"
+ mac: ENC[AES256_GCM,data:tO9mf0RjrqqySMvK4BsVdjSGAR7810Q+528VG2JKwDzkUxZnJfKKE6NllXn5xY1VQTAwZD3aAVSxfFGwhevN7yzXShHmBgloMQxG2G4s9M/GUnIAMJ9zZa4sCKEyTyGKTh0TyLxnTaNPrhSKpmSULjqI5Ycy8Y8MmZnNKavnOe0=,iv:i4yW24sHftZ8HuAZlcT3FO8E9JH9+87QrAs93EIitiA=,tag:6DSatrqghbdv/Ivji2jPdA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -368,15 +332,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZ0JSKzB5Q29rYVJBbGdS
- b1Y2TFp2N3llUm40RzFUQXdhMGxvN0lGbzNZCjdXbXVjajJmUDUramY3TnVOSCtM
- VlVva25Qdk1wTThCRzNDRXdseG95LzgKLS0tIDJKT1BEaTlyQXQ1a0tGckV4Z1Uy
- OUxRei9waytIMDRsK2JuZlFwUGZyNHMKeMhryEnFUXmRILjJKMDwV7lEZtH0Wm2c
- mJj96/zXZ/jReCgE6ZBWJAfMA1cO5gHOEsGeGxIszVscKjJ/Rr1Mhg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T17:44:07Z"
- mac: ENC[AES256_GCM,data:5Co7jyKjOqOKu+MDzYIEROPrMvdQkb/G4j+NBKrG6YTXg2qfeIwZV6BqDqU6UhAzJdOuEPYkeKnAK7p1Qs9GUMGAoDuFoKr2CvvuVHqSewxXJAcr9f3SO1idAkskSpuIb82m6dSgl4XMuEavdY6tbo+wmjtd9yuGynGE7Xt+P5I=,iv:LjPiD0ht7/eR6VFNwwCSDUgu6lMlT+kQCyVNtFh33Gs=,tag:Z9Fy1Xh3IAwJTHmprxlC1Q==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQlZaL254TjVSZDVoTlE1
+ QjI0Z2I4MG1adTRiU3dvNUF1VGJPVTlubHg4CjdrUmdOZ1FzSHVybU0xSnJiOGUz
+ MGY0dlRmTTQzdHRxRlpJSmhnajJqS1kKLS0tIGxPMERtZktYSFpWdmt1ZlZZSko4
+ STc1aVg2RU9Zak4xVDIzUVNwbkIyNjgKOp0kfyqk3RAvuPILnDYSnhacoKBE8iR9
+ S65tGiDCTp2kEz2Gcba32Rl25L7WUnN5efZC9WIG4NVdV9y/Og+kSQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-01-14T17:59:19Z"
+ mac: ENC[AES256_GCM,data:tO9mf0RjrqqySMvK4BsVdjSGAR7810Q+528VG2JKwDzkUxZnJfKKE6NllXn5xY1VQTAwZD3aAVSxfFGwhevN7yzXShHmBgloMQxG2G4s9M/GUnIAMJ9zZa4sCKEyTyGKTh0TyLxnTaNPrhSKpmSULjqI5Ycy8Y8MmZnNKavnOe0=,iv:i4yW24sHftZ8HuAZlcT3FO8E9JH9+87QrAs93EIitiA=,tag:6DSatrqghbdv/Ivji2jPdA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
