commit 9a125e766e22f5aced7e2fb30a3cc2fa28837eb3
parent 40a6c25bbc43d022e6ac2ebb9eac6b8b2c94b1e8
Author: MTRNord <mtrnord1@gmail.com>
Date: Fri, 4 Apr 2025 15:54:03 +0200
Enable plane
Diffstat:
2 files changed, 60 insertions(+), 60 deletions(-)
diff --git a/apps/base/plane/release.yaml b/apps/base/plane/release.yaml
@@ -20,7 +20,7 @@ spec:
storageClass: ceph-filesystem
minio:
storageClass: ceph-filesystem
- root_password: ENC[AES256_GCM,data:1G8VnLQNA4DCTsSjAGMR0fBDF3xuU97QEwfBPoNq+ih5hVy1QsdBttQyBipJJ7DccsBwe0bXAMRgu5qrLUOfxQ==,iv:vvkg6LyQh6IapCiX7rDCCL/MuqWxV2UviZf6oE+W9/4=,tag:c3ojEJ+m5hR9IaLXUJp8wA==,type:str]
+ root_password: ENC[AES256_GCM,data:A4eFAiWD8aje714UmWbwtlXktMAnhUCqRldA4iK+JTLMrBnTLSJdrzKtDldVBWxaAAGYDtctWR+1zhfwJiaWQg==,iv:plRCByOuvdbo+rSafzxCg7cU2+9oO6WU86v8nYa+u5c=,tag:8ML7ZBoV0Z7Qz7zcGOOBQQ==,type:str]
redis:
storageClass: ceph-filesystem
postgres:
@@ -28,10 +28,10 @@ spec:
env:
storageClass: ceph-filesystem
pgdb_username: plane
- pgdb_password: ENC[AES256_GCM,data:u0E/TSP6lI5NrsBt6qif9ZfkqhkZ2EMIQ7fjYbtTrqgykDPIMFYSg4iWfTAchKFyIyszlR+2zGhsqNAXtEoZ5A==,iv:qJJMQwwwgOXaMMUCrqlFSmKEORjuYBVXkPu1WbWrSkY=,tag:seSh38tUf0tXMBRM3BxZIQ==,type:str]
+ pgdb_password: ENC[AES256_GCM,data:3T0QbTsA+yrugBV9Xshhrdq6h4flMoYp4h/1URnrjZQahd4qm3MUhZOKg4SC4kszp9TR+DachUZW6iKjfIz70w==,iv:ZuArXaMeFYRxTAYIx2FLEJdj3tLWUjObSzUzYgDtPLw=,tag:gcwJ1QRxs93XX+7RD10CTw==,type:str]
pgdb_name: plane
- pgdb_remote_url: pg-cluster-v2-rw.postgres-cluster.svc.cluster.local
- secret_key: ENC[AES256_GCM,data:6+XNDXzmelRJOzUUI07l+/AyznihVI4ZqxBdZ06Jo5IfzDKW09vpgCQhhwbBWKVg4YDuxKL2w8vZ4xnFb5+Kxw==,iv:cB8EiE15wMJVhFpIBWGXoz5G77XLaCIsJ+Lrv3MmXnI=,tag:roz3D+U1gP1+5wLs5ndInQ==,type:str]
+ pgdb_remote_url: ENC[AES256_GCM,data:tt9+M2EK7aYXwZ3IV0DG4CiJbm0hRVbNsWqTnDMiyftxICG9p2BfXopPqznFjytn6SBA4X8nNTM8ZmLgYgjYXUGh9mAyBTRFyW6VywrxT//WDgSVd+2y2plsSZdEiJd3Am1JVUmmr8gWEmEmBmDUfPVApyyx9sziO/rkCPBa2rWpQ4UYpYwGFk3qq20S,iv:P3rt75mQNVDEGmjyeAOEz6dcxcHl6Lj7xFnYxS6HgHU=,tag:N6EaVvBSAlhTT9W5QPprPA==,type:str]
+ secret_key: ENC[AES256_GCM,data:hEQ0Z3DsDXpFJqZ1fAsDRP+lWnamQeC+r4rJbkZaxPx0Kc6L9tZpjXEMdYAaRufA0Gppp9gLKn/6aqSbXmNLhw==,iv:qQJhJIO13Vm2Cfh3mUOHaq9WNnJf4XMi6uw4hAOW2hU=,tag:ZUHKsVYOu2mbz2OdmhcHhA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -40,17 +40,17 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TnZrRnlrb2RqeHlLN00x
- VU1JbFIrR01YenlFazZGWWVxdk1XRUJPWDJFClcxZWt3SFEzSkQ5WklrUU9qanpV
- NW5PT2dkZkNzMGd0Y290M3AvKytiOW8KLS0tIDJFS25PWjVGMFdLWnRzMVc3a0Fy
- WWQ5MEpTTDBGRWtlYzR2SXlQdHVkckEKU17q5eGjyXugzRTau+nMP8X9QL+1IxIz
- JjhpF2hKVaY3+eVUM3xzmpRC559KCC5kbM7lBBAwUy5Nmk6hbUmM6g==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-04-04T13:29:28Z"
- mac: ENC[AES256_GCM,data:KZSxf6FvGRxJcfoWzX/2MyYmFyZCa53B2jTQ0Druvf/3TOp3/q9FlY9MISIuULd12Xf3pyF8u7OnxzhadeW0MY79FJWlZdhFDWFxo2d4/aj/GDZ8GYb0Gnj/4lOqQGAfIBd+vEr+W71nNIutgKqxsws/ZG1y2X35wX/N6aYN2z0=,iv:Hc8wkPGvrkkFqkUM0Fuu7zWHIODBPyshjskdiHKyAhg=,tag:l4+fUW02RPENkBJ5qJ1PIA==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5T1lWWjVjb1c0VWp1WUxI
+ Vi9WVkhwa3MwQmdIeFdRVDRTSzZGOFZVNEFvCm5Na0ZBcHJqUXpKeDlJUGJEMUhZ
+ cUdDVlo5K2p5QTdyMmRwTEhOSXphT1kKLS0tIDBNRlg3Y0IxT2p4ZlVhQVoxZXMz
+ OFU1Rll4WmFBM1RlYlFZWkdsQWEza28KHsw4xjAOY/CnlRnsen2V8zvwAFicp4jp
+ Znp2qpWmBT1zBNqPnDE27Tu494zM/TeJH7PjDHathLdnuFtwfdK7jw==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-04-04T13:54:00Z"
+ mac: ENC[AES256_GCM,data:uCb4TPEvZBuonsiyGwFWiaquabNFEpveaAHsh/SD+Egvcud1Iy9jBXGYO9OZr/vDdaOmZ71hoS17otiXJDLqxyozKLi8Eulp84ebYzAJ+hTlOdqdSPXudHcZZXkRu3qoKfHt5LHH0Bx8cPaQ06dYYakMQ7u/jAr8Kh6Mtw4UBvc=,iv:Qls3ruVwMzpU1sLaO4taGvKuP7lBakBXRC8Y4AOCF54=,tag:sPeLtr2NVdUHY3EhJXG8Qw==,type:str]
pgp: []
- encrypted_regex: ^(root_password|pgdb_password|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(root_password|pgdb_password|pgdb_remote_url|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
---
apiVersion: gateway.networking.k8s.io/v1
@@ -66,54 +66,54 @@ spec:
- plane.midnightthoughts.space
rules:
- backendRefs:
- - name: plane-web
- port: 3000
+ - name: plane-web
+ port: 3000
matches:
- - path:
- type: PathPrefix
- value: /
+ - path:
+ type: PathPrefix
+ value: /
- backendRefs:
- - name: plane-api
- port: 8000
+ - name: plane-api
+ port: 8000
matches:
- - path:
- type: PathPrefix
- value: /api
+ - path:
+ type: PathPrefix
+ value: /api
- backendRefs:
- - name: plane-api
- port: 8000
+ - name: plane-api
+ port: 8000
matches:
- - path:
- type: PathPrefix
- value: /auth
+ - path:
+ type: PathPrefix
+ value: /auth
- backendRefs:
- - name: plane-live
- port: 3000
+ - name: plane-live
+ port: 3000
matches:
- - path:
- type: PathPrefix
- value: /live
+ - path:
+ type: PathPrefix
+ value: /live
- backendRefs:
- - name: plane-space
- port: 3000
+ - name: plane-space
+ port: 3000
matches:
- - path:
- type: PathPrefix
- value: /spaces
+ - path:
+ type: PathPrefix
+ value: /spaces
- backendRefs:
- - name: plane-admin
- port: 3000
+ - name: plane-admin
+ port: 3000
matches:
- - path:
- type: PathPrefix
- value: /god-mode
+ - path:
+ type: PathPrefix
+ value: /god-mode
- backendRefs:
- - name: plane-minio
- port: 9000
+ - name: plane-minio
+ port: 9000
matches:
- - path:
- type: PathPrefix
- value: /uploads
+ - path:
+ type: PathPrefix
+ value: /uploads
sops:
kms: []
gcp_kms: []
@@ -122,15 +122,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TnZrRnlrb2RqeHlLN00x
- VU1JbFIrR01YenlFazZGWWVxdk1XRUJPWDJFClcxZWt3SFEzSkQ5WklrUU9qanpV
- NW5PT2dkZkNzMGd0Y290M3AvKytiOW8KLS0tIDJFS25PWjVGMFdLWnRzMVc3a0Fy
- WWQ5MEpTTDBGRWtlYzR2SXlQdHVkckEKU17q5eGjyXugzRTau+nMP8X9QL+1IxIz
- JjhpF2hKVaY3+eVUM3xzmpRC559KCC5kbM7lBBAwUy5Nmk6hbUmM6g==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-04-04T13:29:28Z"
- mac: ENC[AES256_GCM,data:KZSxf6FvGRxJcfoWzX/2MyYmFyZCa53B2jTQ0Druvf/3TOp3/q9FlY9MISIuULd12Xf3pyF8u7OnxzhadeW0MY79FJWlZdhFDWFxo2d4/aj/GDZ8GYb0Gnj/4lOqQGAfIBd+vEr+W71nNIutgKqxsws/ZG1y2X35wX/N6aYN2z0=,iv:Hc8wkPGvrkkFqkUM0Fuu7zWHIODBPyshjskdiHKyAhg=,tag:l4+fUW02RPENkBJ5qJ1PIA==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5T1lWWjVjb1c0VWp1WUxI
+ Vi9WVkhwa3MwQmdIeFdRVDRTSzZGOFZVNEFvCm5Na0ZBcHJqUXpKeDlJUGJEMUhZ
+ cUdDVlo5K2p5QTdyMmRwTEhOSXphT1kKLS0tIDBNRlg3Y0IxT2p4ZlVhQVoxZXMz
+ OFU1Rll4WmFBM1RlYlFZWkdsQWEza28KHsw4xjAOY/CnlRnsen2V8zvwAFicp4jp
+ Znp2qpWmBT1zBNqPnDE27Tu494zM/TeJH7PjDHathLdnuFtwfdK7jw==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-04-04T13:54:00Z"
+ mac: ENC[AES256_GCM,data:uCb4TPEvZBuonsiyGwFWiaquabNFEpveaAHsh/SD+Egvcud1Iy9jBXGYO9OZr/vDdaOmZ71hoS17otiXJDLqxyozKLi8Eulp84ebYzAJ+hTlOdqdSPXudHcZZXkRu3qoKfHt5LHH0Bx8cPaQ06dYYakMQ7u/jAr8Kh6Mtw4UBvc=,iv:Qls3ruVwMzpU1sLaO4taGvKuP7lBakBXRC8Y4AOCF54=,tag:sPeLtr2NVdUHY3EhJXG8Qw==,type:str]
pgp: []
- encrypted_regex: ^(root_password|pgdb_password|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(root_password|pgdb_password|pgdb_remote_url|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/encrypt.sh b/encrypt.sh
@@ -2,5 +2,5 @@
sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh \
--encrypt \
- --encrypted-regex '^(root_password|pgdb_password|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$' \
+ --encrypted-regex '^(root_password|pgdb_password|pgdb_remote_url|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$' \
--in-place "$1"
