commit bb26aa126dcbb606662b1c286907c2113fb25cf7
parent 7a3903d8fb902482528ae0860746151673b97654
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Mon, 4 Aug 2025 18:02:16 +0200
Migrate plane
Diffstat:
6 files changed, 249 insertions(+), 251 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -52,6 +52,7 @@ spec:
kind: EnvoyProxy
name: custom-proxy-config
namespace: envoy-gateway
+
# ---
# apiVersion: gateway.networking.k8s.io/v1
# kind: Gateway
@@ -159,25 +160,25 @@ spec:
hostname: "docuseal.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: docuseal.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: docuseal.midnightthoughts.space-tls
- name: https-midnightthoughts-neoboard
protocol: HTTPS
hostname: "miro-export.neoboard.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: miro-export.neoboard.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: miro-export.neoboard.midnightthoughts.space-tls
# - name: https-midnightthoughts-certs
# protocol: HTTPS
# hostname: "certs.midnightthoughts.space"
@@ -255,13 +256,13 @@ spec:
hostname: "bugzilla.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: bugzilla.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: bugzilla.midnightthoughts.space-tls
# - name: https-midnightthoughts-root
# protocol: HTTPS
# hostname: "midnightthoughts.space"
@@ -303,13 +304,13 @@ spec:
hostname: "rspamd.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rspamd.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rspamd.midnightthoughts.space-tls
# - name: https-midnightthoughts-grafana
# protocol: HTTPS
# hostname: "grafana.midnightthoughts.space"
@@ -327,13 +328,13 @@ spec:
hostname: "osticket.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: osticket.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: osticket.midnightthoughts.space-tls
# - name: https-midnightthoughts-vault
# protocol: HTTPS
# hostname: "vault.midnightthoughts.space"
@@ -351,13 +352,13 @@ spec:
hostname: "rook.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rook.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rook.midnightthoughts.space-tls
# - name: https-midnightthoughts-jenkins
# protocol: HTTPS
# hostname: "jenkins.midnightthoughts.space"
@@ -423,13 +424,13 @@ spec:
hostname: "plane.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: plane.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: plane.midnightthoughts.space
# - name: https-midnightthoughts-irc
# protocol: HTTPS
# hostname: "irc.midnightthoughts.space"
@@ -531,13 +532,13 @@ spec:
hostname: "mastodon.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: mastodon.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: mastodon.mtrnord.blog-tls
# - name: https-api-connectivity-tester-mtrnord-blog
# protocol: HTTPS
# hostname: "api.connectivity-tester.mtrnord.blog"
@@ -591,55 +592,55 @@ spec:
hostname: "notify.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: notify.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: notify.mtrnord.blog-tls
- name: https-rss-mtrnord-blog
protocol: HTTPS
hostname: "rss.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rss.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rss.mtrnord.blog-tls
- name: http
protocol: HTTP
port: 80
allowedRoutes:
- namespaces:
- from: "All"
- # - name: ldap
- # protocol: TCP
- # port: 389
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
- # - name: gerrit-ssh
- # protocol: TCP
- # port: 29418
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
- # - name: ircs
- # protocol: TCP
- # port: 6697
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
+ namespaces:
+ from: "All"
+ # - name: ldap
+ # protocol: TCP
+ # port: 389
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
+ # - name: gerrit-ssh
+ # protocol: TCP
+ # port: 29418
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
+ # - name: ircs
+ # protocol: TCP
+ # port: 6697
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: ClientTrafficPolicy
diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml
@@ -48,42 +48,42 @@ spec:
protocol: TCP
port: 25
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: submissions
protocol: TCP
port: 465
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: submission
protocol: TCP
port: 587
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: imap
protocol: TCP
port: 143
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: imaps
protocol: TCP
port: 993
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
@@ -108,249 +108,249 @@ spec:
hostname: "talos.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: talos.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: talos.midnightthoughts.space-tls
- name: https-midnightthoughts-auth
protocol: HTTPS
hostname: "auth.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: auth.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: auth.midnightthoughts.space-tls
- name: https-midnightthoughts-grafana
protocol: HTTPS
hostname: "grafana.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: grafana.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: grafana.midnightthoughts.space-tls
- name: https-draupnir-midnightthoughts
protocol: HTTPS
hostname: "draupnir.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: draupnir.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: draupnir.midnightthoughts.space-tls
- name: https-matrix-draupnir-midnightthoughts
protocol: HTTPS
hostname: "matrix.draupnir.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: matrix.draupnir.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: matrix.draupnir.midnightthoughts.space-tls
- name: https-midnightthoughts-vault
protocol: HTTPS
hostname: "vault.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: vault.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: vault.midnightthoughts.space-tls
- name: https-midnightthoughts-budget
protocol: HTTPS
hostname: "budget.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: budget.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: budget.midnightthoughts.space-tls
- name: https-midnightthoughts-ldap
protocol: HTTPS
hostname: "ldap.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: ldap.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: ldap.midnightthoughts.space-tls
- name: ldap
protocol: TCP
port: 389
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: https-mtrnord-blog-gts
protocol: HTTPS
hostname: "gts.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: gts.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: gts.mtrnord.blog-tls
- name: https-midnightthoughts-collabora
protocol: HTTPS
hostname: "collabora.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: collabora.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: collabora.midnightthoughts.space
- name: https-midnightthoughts-webhook-kubernetes
protocol: HTTPS
hostname: "webhook.kubernetes.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: webhook.kubernetes.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: webhook.kubernetes.midnightthoughts.space-tls
- name: https-api-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "api.connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: api.connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: api.connectivity-tester.mtrnord.blog-tls
- name: https-stage-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "stage.connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: stage.connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: stage.connectivity-tester.mtrnord.blog-tls
- name: https-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: connectivity-tester.mtrnord.blog-tls
- name: https-federationtester-mtrnord-blog
protocol: HTTPS
hostname: "federationtester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: federationtester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: federationtester.mtrnord.blog-tls
- name: https-mtrnord-blog-root
protocol: HTTPS
hostname: "mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: mtrnord.blog-tls
- name: https-mtrnord-blog-matrix
protocol: HTTPS
hostname: "matrix.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: matrix.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: matrix.mtrnord.blog-tls
- name: https-rss-mtrnord-blog
protocol: HTTPS
hostname: "rss.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rss.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rss.mtrnord.blog-tls
- name: https-notify-mtrnord-blog
protocol: HTTPS
hostname: "notify.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: notify.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: notify.mtrnord.blog-tls
- name: https-midnightthoughts-rspamd
protocol: HTTPS
hostname: "rspamd.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rspamd.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rspamd.midnightthoughts.space-tls
# - name: https-midnightthoughts-capacitor
# protocol: HTTPS
# hostname: "ui.k8s.midnightthoughts.space"
diff --git a/apps/talos_cluster/mailserver/pvc.yaml b/apps/talos_cluster/mailserver/pvc.yaml
@@ -1,4 +1,3 @@
----
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
diff --git a/apps/talos_cluster/mailserver/release.yaml b/apps/talos_cluster/mailserver/release.yaml
@@ -224,8 +224,7 @@ spec:
dovecot.cf:
create: true
path: dovecot.cf
- data:
- "{{- if .Values.proxyProtocol.enabled }}\n haproxy_trusted_networks = {{ .Values.proxyProtocol.trustedNetworks
+ data: "{{- if .Values.proxyProtocol.enabled }}\n haproxy_trusted_networks = {{ .Values.proxyProtocol.trustedNetworks
}}\n\n {{- if and (.Values.deployment.env.ENABLE_IMAP) (not .Values.deployment.env.SMTP_ONLY) }}\n service
imap-login {\n inet_listener imap {\n port = 143\n }\n\n inet_listener imaps {\n
\ port = 993\n ssl = yes\n }\n\n inet_listener imap_proxy {\n haproxy
@@ -274,8 +273,7 @@ spec:
user-patches.sh:
create: true
path: user-patches.sh
- data:
- "#!/bin/bash\n\n{{- if .Values.proxyProtocol.enabled }}\n# Make sure to keep this file in sync with
+ data: "#!/bin/bash\n\n{{- if .Values.proxyProtocol.enabled }}\n# Make sure to keep this file in sync with
https://github.com/docker-mailserver/docker-mailserver/blob/master/target/postfix/master.cf!\ncat <<EOS
>> /etc/postfix/master.cf\n\n# Submission with proxy\n10587 inet n - n - -
\ smtpd\n -o syslog_name=postfix/submission\n -o smtpd_tls_security_level=encrypt\n -o smtpd_sasl_auth_enable=yes\n
@@ -306,8 +304,8 @@ spec:
sectionName: smtp
rules:
- backendRefs:
- - name: mailserver-docker-mailserver
- port: 25
+ - name: mailserver-docker-mailserver
+ port: 25
---
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: TCPRoute
@@ -323,8 +321,8 @@ spec:
sectionName: submissions
rules:
- backendRefs:
- - name: mailserver-docker-mailserver
- port: 465
+ - name: mailserver-docker-mailserver
+ port: 465
---
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: TCPRoute
@@ -340,8 +338,8 @@ spec:
sectionName: submission
rules:
- backendRefs:
- - name: mailserver-docker-mailserver
- port: 587
+ - name: mailserver-docker-mailserver
+ port: 587
---
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: TCPRoute
@@ -357,8 +355,8 @@ spec:
sectionName: imap
rules:
- backendRefs:
- - name: mailserver-docker-mailserver
- port: 143
+ - name: mailserver-docker-mailserver
+ port: 143
---
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: TCPRoute
@@ -374,8 +372,8 @@ spec:
sectionName: imaps
rules:
- backendRefs:
- - name: mailserver-docker-mailserver
- port: 993
+ - name: mailserver-docker-mailserver
+ port: 993
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
@@ -390,8 +388,8 @@ spec:
- rspamd.midnightthoughts.space
rules:
- backendRefs:
- - name: mailserver-docker-mailserver
- port: 11334
+ - name: mailserver-docker-mailserver
+ port: 11334
timeouts:
- request: 240s
- backendRequest: 0s
+ request: 240s
+ backendRequest: 0s
diff --git a/apps/talos_cluster/ntfy/kustomization.yaml b/apps/talos_cluster/ntfy/kustomization.yaml
@@ -7,4 +7,4 @@ resources:
configMapGenerator:
- name: ntfy-config
files:
- - ntfy.yml
+ - ntfy.yml
diff --git a/apps/talos_cluster/plane/release.yaml b/apps/talos_cluster/plane/release.yaml
@@ -37,7 +37,7 @@ spec:
app_id: "1242151"
private_key: ENC[AES256_GCM,data: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,iv:iV1LutJ6Q7Xza6WwlZhR3KiGSb9IGG3F0eRHq0VS3TA=,tag:u0koCEwMSk+ssmi1ucQskA==,type:str]
env:
- storageClass: ceph-filesystem
+ storageClass: longhorn
pgdb_username: plane
pgdb_password: ENC[AES256_GCM,data:ryfTytnx5j2aJgkFTZ0BWEph5Fnsp7cfob7bsYQsfh/TTb4YfuHq2QE7l5NcINEHMMMyqGTn7tksbHpFu/Bsog==,iv:u3N8PkQjc+eGjfj76mB3a4wJtqX8X0mdsDMiFK1a+TA=,tag:g8bQYqXh4C0NBIIxUSMSCg==,type:str]
pgdb_name: plane
