commit bca9ad3b4b389935141e6c5a090ea988646723db
parent 34b245a0ce9695f52df672f82dc6ec9f7314c626
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Fri, 17 Apr 2026 19:30:19 +0200
email
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
3 files changed, 36 insertions(+), 19 deletions(-)
diff --git a/apps/talos_cluster/mediawiki/configmap.yaml b/apps/talos_cluster/mediawiki/configmap.yaml
@@ -35,12 +35,23 @@ data:
# Logo / favicon (update after initial setup)
$wgLogo = "$wgResourceBasePath/resources/assets/wiki.png";
- # Email (optional — configure SMTP if you want email notifications)
- $wgEnableEmail = false;
- $wgEnableUserEmail = false;
- $wgEnotifUserTalk = false;
- $wgEnotifWatchlist = false;
- $wgEmailAuthentication = false;
+ # Email
+ $wgEnableEmail = true;
+ $wgEnableUserEmail = true;
+ $wgEnotifUserTalk = true;
+ $wgEnotifWatchlist = true;
+ $wgEmailAuthentication = true;
+ $wgEmergencyContact = 'support@midnightthoughts.space';
+ $wgPasswordSender = 'support@midnightthoughts.space';
+
+ $wgSMTP = [
+ 'host' => 'ssl://mail.midnightthoughts.space',
+ 'IDHost' => 'wiki.mtrnord.blog',
+ 'port' => 465,
+ 'auth' => true,
+ 'username' => 'support@midnightthoughts.space',
+ 'password' => getenv('MW_SMTP_PASSWORD') ?: '',
+ ];
# Caching
$wgMainCacheType = CACHE_NONE;
diff --git a/apps/talos_cluster/mediawiki/deployment.yaml b/apps/talos_cluster/mediawiki/deployment.yaml
@@ -51,6 +51,11 @@ spec:
secretKeyRef:
name: mediawiki-cred
key: wg-upgrade-key
+ - name: MW_SMTP_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: mediawiki-cred
+ key: smtp-password
volumeMounts:
- name: mediawiki-config
mountPath: /var/www/html/LocalSettings.php
diff --git a/apps/talos_cluster/mediawiki/secret.yaml b/apps/talos_cluster/mediawiki/secret.yaml
@@ -5,12 +5,13 @@ metadata:
namespace: mediawiki
type: Opaque
stringData:
- admin-password: ENC[AES256_GCM,data:jsSsW9NdIiI+kM4ADVfQ7efvSroVIjr2TnzzPA5wp7b7oZxF1wIYVC1KaNSXSKgD0MbGRFXBUoFoGoAGwakO,iv:fizRdIFYigznvaQx2PKrrlkur9xeBVM9c4hHcYaXm40=,tag:f/xaw0oCbwbT24JLbGn2VA==,type:str]
- username: ENC[AES256_GCM,data:aa2PhIgWskbN,iv:8G7gXW50kVJLSSZ6xU4UVYfDlFuTgDBQ/igGhtUII98=,tag:cPficJMzybn8D00UIguuRQ==,type:str]
- password: ENC[AES256_GCM,data:wEC6WOgM7c8guLNaT8YoWcnhg9Zftsjkb+nQ7Sj4kiCfke00XLtWS0HyUVWsslfqLzQGMI/M0pwS7wrgiGJQ,iv:X+NSDlh6+m8oUbNZUuFB4liDLzIvJWmFE5YIVpqOHO4=,tag:9ZJ45S8v3iwr65YWjEMfJQ==,type:str]
- db-name: ENC[AES256_GCM,data:RQmXW7fjWHmv,iv:YVs4cBxiqCnvEbTjeuRln4+f83FW0gAIVyKKAoWZDy8=,tag:ZAL90n0XTOpZb43FpSO4FA==,type:str]
- wg-secret-key: ENC[AES256_GCM,data:6G1TYtL+lGkS7upUmXt0kQ8HSJatvURdSXeBv0pGgs30nyof7InMhgRzTVd7Z04pxsK+ToEPhX4/lnC91XwTOQ==,iv:Woo1gQqyYnpsQ7qCS/nSj2z92mLHsxpi5kUMvsTsuzk=,tag:AVfdKROYOgAM0ASqLERaow==,type:str]
- wg-upgrade-key: ENC[AES256_GCM,data:mqtfeKlp2F3SCWEh3nwVS+ZSQcsXOIFy0allk+zEUdLMUtMCzXSj+JZbWon+3YQtMJcJY3JfX4aX80c8Na7f4A==,iv:OdWpLVBakHjHtM/zYYN0uCEgiMLH72oY1ycp/iihY1k=,tag:OkTrj1jUHhtl12Foerthcg==,type:str]
+ admin-password: ENC[AES256_GCM,data:4iccnOkYuNOOlF2j3RFYrrd1XxfckHquK70ocAD++SZ/3GdP1a4ToGqftU9Qz/i/87sHJE6h4CbW6GKvGqS+,iv:UAwdGnn9qCqOIwQG0OHuyjo8Btz4agbix4s4nt/jc7w=,tag:TRUzkYCUdmIwMX9j28TkFg==,type:str]
+ username: ENC[AES256_GCM,data:dzbJDZo9eEIl,iv:liPkf1b9UBbuRZK5ua6i8yzI1KE2tzREgJ7Jp/DBfRc=,tag:VqMx+lwigml1ip3nB0WpMw==,type:str]
+ password: ENC[AES256_GCM,data:ppNDnhRQ5qma2vBB2E7Fel7LTHlLY1fbNySj0sG0SB32fgHj6CkaNGk/FADhJI3+4FMQfg/WZnzWtR703VCx,iv:T6P5/AeLGzLPblDxoI6voD6KXmC47FoqMROB/Bkj02g=,tag:FTgFotah7awSLZfHRBCu9Q==,type:str]
+ db-name: ENC[AES256_GCM,data:uZvbZxC77udL,iv:P/FQiUTsNIp4+2N61EtfVUwYchTSzw8sEbAGEzgOc4M=,tag:8IpWoLyS5JGGVplLMBPuyQ==,type:str]
+ wg-secret-key: ENC[AES256_GCM,data:87EyhMcbM02Bgyrv0LF8DhyaTaM1x2wkYPipz5NsfQQrxr69h9FYe7dq64CBagiSX3Otf9dPSy1Iy0ffrXx/Zw==,iv:pPgrTzsANqihkxRL5l4fQ2SSdOHRNcrarGQMY4+Jbe0=,tag:AcR9uEPTXIxOP9fQzbq9vg==,type:str]
+ wg-upgrade-key: ENC[AES256_GCM,data:dAxQB5CEwckztCbJg/TsK4nroL39hg47ITBvkzic7hsApty6ql2+SbDSODDOCr2k5THCOy1p477ligrKpkTF7A==,iv:DUV/yOp02yy/J4pQAwJewIH3gYitp5xAsrSF28ejI/c=,tag:l/sKkCIqZ6Fhc50sV+/kTQ==,type:str]
+ smtp-password: ENC[AES256_GCM,data:x83ePJ3rCeYxaBajd+8l0Y8RRIMpnwchqlyvMFu1OEoHQqdICd1ueXRLle9REw7q2MYRJQBYEUW/qb6S7yGVkQ==,iv:8+C1nQHm2F1/Jkl87Vi385uo+rRWAkGD4npcjFP6YT4=,tag:3J72OEk16fGRB//rA4Eyug==,type:str]
sops:
kms: []
gcp_kms: []
@@ -20,14 +21,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhRnltRUphOEh2WGZXVzZF
- L3hkcjVEdTkxK21rR1NQTDAyQ2UrMFVORWdvCkFUNjBYNDkyZ1ZCc2JZbDNSaEht
- ZXJGOENmdmRSa293K2lYTmgxemNoVm8KLS0tIDNrUVh1dFVmSFdxYlBudXh3VHRB
- SWJwY2djTFVvR0YxdWlaL2UrbzVxOUEKIA610Ni152yvC6Lhcmf4XwtzBPv2z2Mk
- ve7xkqt5l4jRNf3Bgwl7vdF/SLGOa5tkKlPHbPcxvn22WN4fDVa7Wg==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1WFU1a3V6c0JObE5QQnRL
+ eWxMaHZJSGZOaGJJQUpCb2J0Z0M0ZmdrZ3hrCjJyMC9XMUF1R0VWZ2NRdFplcUZX
+ NTVPM1hYaW9GN3FSUGtPUmp5bXA1aWMKLS0tIDgxRVhXbGRrMWFqTzZ1VUxhVmpo
+ RUhtR2Fodm1qZkxySW1wTWQ0TjhjemMKqcwFTSUeP60BDJh3Q9afAdsGmzYf2A3Y
+ UP8dXy0zjirgwaWJgrBRFgiI5fKY2q3RBGBT0wBkJ60Uydg+3H9Trg==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-04-17T14:57:29Z"
- mac: ENC[AES256_GCM,data:v7Okh91u92n866eEasiAUGQV/EQ0a+/Eh9f2aiMkpYWILTx9U6c4W7OoqUqoKQv6OlaeJm5mqm+Pdioa1Ip60PZtChcDWgbFHX/HHQ8DPU1iG1/g48GUy6zFr5PXaT+sJyjtiNfhZple2JzuoXrFe0weTc1mbEpfK4n8+VexQZc=,iv:cr0iS4FIxyTaJPzg8OQbcVcDVPjhafltfyklV4iAZJI=,tag:gjdeUtFypvjJY8ziwND6uQ==,type:str]
+ lastmodified: "2026-04-17T17:30:09Z"
+ mac: ENC[AES256_GCM,data:MObb5ckUVaYhhnXchihZSFN4DdfLCbNxgrCsBGnrE+HiSoKektP9D7Fk0q74o03nhpZGBeLb3m1a3zXuoPRepfx/4ys+/ya2dtuFsCg5Flh758gYDeeyiFigqcFY3v5b3ZNg1iO/ZUv4+c2EJTSufchUFbjwb2xrNQM7ZXXC3MQ=,iv:0LR5/rU/3/LugwyOSN6Zt6DriKGdFiXInGfYrUSvM/M=,tag:/AumxnfLB2m3aaMLwwoTmQ==,type:str]
pgp: []
encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret|content)$
version: 3.9.1
