commit c00806a42d24bd66a5b6b9bdf7fea3bdf77d3637
parent 1cf80ef89ef9b6fb9742a5324b7d47bc6e9599e7
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Thu, 24 Jul 2025 19:13:03 +0200
Drop synapse db
Diffstat:
3 files changed, 431 insertions(+), 400 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -75,42 +75,42 @@ spec:
protocol: TCP
port: 25
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: submissions
protocol: TCP
port: 465
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: submission
protocol: TCP
port: 587
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: imap
protocol: TCP
port: 143
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: imaps
protocol: TCP
port: 993
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
@@ -135,535 +135,535 @@ spec:
hostname: "mas.matrix.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: mas.matrix.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: mas.matrix.midnightthoughts.space-tls
- name: https-matrix-midnightthoughts
protocol: HTTPS
hostname: "matrix.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: matrix.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: matrix.midnightthoughts.space-tls
- name: https-draupnir-midnightthoughts
protocol: HTTPS
hostname: "draupnir.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: draupnir.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: draupnir.midnightthoughts.space-tls
- name: https-matrix-draupnir-midnightthoughts
protocol: HTTPS
hostname: "matrix.draupnir.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: matrix.draupnir.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: matrix.draupnir.midnightthoughts.space-tls
- name: https-docuseal-midnightthoughts
protocol: HTTPS
hostname: "docuseal.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: docuseal.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: docuseal.midnightthoughts.space-tls
- name: https-midnightthoughts-neoboard
protocol: HTTPS
hostname: "miro-export.neoboard.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: miro-export.neoboard.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: miro-export.neoboard.midnightthoughts.space-tls
- name: https-midnightthoughts-certs
protocol: HTTPS
hostname: "certs.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: certs.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: certs.midnightthoughts.space-tls
- name: https-midnightthoughts-capacitor
protocol: HTTPS
hostname: "ui.k8s.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: ui.k8s.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: ui.k8s.midnightthoughts.space-tls
- name: https-midnightthoughts-auth
protocol: HTTPS
hostname: "auth.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: auth.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: auth.midnightthoughts.space-tls
- name: https-midnightthoughts-ldap
protocol: HTTPS
hostname: "ldap.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: ldap.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: ldap.midnightthoughts.space-tls
- name: https-midnightthoughts-status-webhook
protocol: HTTPS
hostname: "webhook.status.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: webhook.status.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: webhook.status.midnightthoughts.space-tls
- name: https-midnightthoughts-budget
protocol: HTTPS
hostname: "budget.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: budget.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: budget.midnightthoughts.space-tls
- name: https-midnightthoughts-bugzilla
protocol: HTTPS
hostname: "bugzilla.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: bugzilla.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: bugzilla.midnightthoughts.space-tls
- name: https-midnightthoughts-root
protocol: HTTPS
hostname: "midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: midnightthoughts.space-tls
- name: https-midnightthoughts-status
protocol: HTTPS
hostname: "status.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: status.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: status.midnightthoughts.space-tls
- name: https-midnightthoughts-webhook-kubernetes
protocol: HTTPS
hostname: "webhook.kubernetes.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: webhook.kubernetes.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: webhook.kubernetes.midnightthoughts.space-tls
- name: https-midnightthoughts-rspamd
protocol: HTTPS
hostname: "rspamd.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rspamd.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rspamd.midnightthoughts.space-tls
- name: https-midnightthoughts-grafana
protocol: HTTPS
hostname: "grafana.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: grafana.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: grafana.midnightthoughts.space-tls
- name: https-midnightthoughts-osticket
protocol: HTTPS
hostname: "osticket.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: osticket.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: osticket.midnightthoughts.space-tls
- name: https-midnightthoughts-vault
protocol: HTTPS
hostname: "vault.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: vault.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: vault.midnightthoughts.space-tls
- name: https-midnightthoughts-rook
protocol: HTTPS
hostname: "rook.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rook.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rook.midnightthoughts.space-tls
- name: https-midnightthoughts-jenkins
protocol: HTTPS
hostname: "jenkins.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: jenkins.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: jenkins.midnightthoughts.space-tls
- name: https-midnightthoughts-gerrit
protocol: HTTPS
hostname: "gerrit.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: gerrit.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: gerrit.midnightthoughts.space-tls
- name: https-midnightthoughts-uptime
protocol: HTTPS
hostname: "uptime.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: uptime.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: uptime.midnightthoughts.space-tls
- name: https-midnightthoughts-element-changes
protocol: HTTPS
hostname: "element-changes.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: element-changes.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: element-changes.midnightthoughts.space
- name: https-midnightthoughts-dav
protocol: HTTPS
hostname: "dav.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: dav.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: dav.midnightthoughts.space
- name: https-midnightthoughts-plane
protocol: HTTPS
hostname: "plane.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: plane.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: plane.midnightthoughts.space
- name: https-midnightthoughts-irc
protocol: HTTPS
hostname: "irc.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: irc.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: irc.midnightthoughts.space
- name: https-midnightthoughts-rspamd-matrix
protocol: HTTPS
hostname: "rspamd.matrix.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rspamd.matrix.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rspamd.matrix.midnightthoughts.space
- name: https-midnightthoughts-collabora
protocol: HTTPS
hostname: "collabora.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: collabora.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: collabora.midnightthoughts.space
- name: https-nordgedanken-root
protocol: HTTPS
hostname: "nordgedanken.dev"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: nordgedanken.dev-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: nordgedanken.dev-tls
- name: https-nordgedanken
protocol: HTTPS
hostname: "*.nordgedanken.dev"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: nordgedanken.dev-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: nordgedanken.dev-tls
- name: https-mtrnord-blog-root
protocol: HTTPS
hostname: "mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: mtrnord.blog-tls
- name: https-mtrnord-blog-matrix
protocol: HTTPS
hostname: "matrix.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: matrix.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: matrix.mtrnord.blog-tls
- name: https-mtrnord-blog-hubzilla
protocol: HTTPS
hostname: "hub.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: hub.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: hub.mtrnord.blog-tls
- name: https-mtrnord-blog-mastodon
protocol: HTTPS
hostname: "mastodon.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: mastodon.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: mastodon.mtrnord.blog-tls
- name: https-api-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "api.connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: api.connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: api.connectivity-tester.mtrnord.blog-tls
- name: https-stage-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "stage.connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: stage.connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: stage.connectivity-tester.mtrnord.blog-tls
- name: https-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: connectivity-tester.mtrnord.blog-tls
- name: https-federationtester-mtrnord-blog
protocol: HTTPS
hostname: "federationtester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: federationtester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: federationtester.mtrnord.blog-tls
- name: https-notify-mtrnord-blog
protocol: HTTPS
hostname: "notify.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: notify.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: notify.mtrnord.blog-tls
- name: https-rss-mtrnord-blog
protocol: HTTPS
hostname: "rss.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rss.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rss.mtrnord.blog-tls
- name: http
protocol: HTTP
port: 80
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
- name: ldap
protocol: TCP
port: 389
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: gerrit-ssh
protocol: TCP
port: 29418
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: ircs
protocol: TCP
port: 6697
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: ClientTrafficPolicy
diff --git a/apps/base/freshrss/deployment.yaml b/apps/base/freshrss/deployment.yaml
@@ -1,4 +1,3 @@
----
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
@@ -36,49 +35,49 @@ spec:
- name: freshrss
image: freshrss/freshrss:latest
env:
- - name: TZ
- value: "Europe/Berlin"
- - name: CRON_MIN
- value: "1,31"
- - name: TRUSTED_PROXY_IP
- value: 100.64.0.0/10
- - name: LISTEN
- value: "0.0.0.0:8080"
+ - name: TZ
+ value: "Europe/Berlin"
+ - name: CRON_MIN
+ value: "1,31"
+ - name: TRUSTED_PROXY_IP
+ value: 100.64.0.0/10
+ - name: LISTEN
+ value: "0.0.0.0:8080"
resources:
- limits: {}
- requests:
- memory: "344Mi"
- cpu: "252m"
+ limits: {}
+ requests:
+ memory: "344Mi"
+ cpu: "252m"
ports:
- - containerPort: 8080
- name: web
- protocol: TCP
+ - containerPort: 8080
+ name: web
+ protocol: TCP
volumeMounts:
- - name: data
- mountPath: "/var/www/FreshRSS/data"
- - mountPath: /tmp
- name: tmp
+ - name: data
+ mountPath: "/var/www/FreshRSS/data"
+ - mountPath: /tmp
+ name: tmp
livenessProbe:
- httpGet:
- path: /
- port: web
- scheme: HTTP
+ httpGet:
+ path: /
+ port: web
+ scheme: HTTP
readinessProbe:
- httpGet:
- path: /
- port: web
- scheme: HTTP
+ httpGet:
+ path: /
+ port: web
+ scheme: HTTP
startupProbe:
- httpGet:
- path: /
- port: web
+ httpGet:
+ path: /
+ port: web
volumes:
- name: tmp
emptyDir:
- sizeLimit: 2048Mi
+ sizeLimit: 2048Mi
- name: data
persistentVolumeClaim:
- claimName: freshrss-data
+ claimName: freshrss-data
---
apiVersion: v1
kind: Service
@@ -105,8 +104,8 @@ spec:
- rss.mtrnord.blog
rules:
- backendRefs:
- - name: freshrss
- port: 8080
+ - name: freshrss
+ port: 8080
timeouts:
- request: 240s
- backendRequest: 0s
+ request: 240s
+ backendRequest: 0s
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -11,14 +11,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -30,8 +30,8 @@ metadata:
namespace: postgres-cluster
type: Opaque
stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:YEoqXhRLoGry91HSPRLigJfS4Cc=,iv:/WHc5w86VSDRQ28O5cIzNb+zD8s5enci+RE5N/Bk0E0=,tag:V1mai2RaB7wCrotMR8MNgg==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:BG1whP/s+vc4hEvllmjxhMm/emFlpoqXgMibZRqPw3/Ygl59ZDR4yA==,iv:U5IbVVwWtuewmD1k4e8qjlQPg0i+2CpG3r0hqiXqb8I=,tag:xl12RJvt8QZNBuX33BVCPg==,type:str]
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:996biKqQ2r13VHkR5rMhm+FN1LA=,iv:m4XV/C+l8H1YdbaBmoZyIKzlKBFB3gagRTmClKsIiMI=,tag:XqVEe8DPsGGIe4W6fxBqhw==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:gHs0tDi5mHH+YvWwXdBF2c5Dl8DGvrbBag04aOU8mG7Y3nuH92bFqw==,iv:Dkl6bk9708VZoIXsSRAU+PPDrNvOT0euPWBpkQ4TVyI=,tag:kJklyZ25u/+fg1PxTSRNww==,type:str]
sops:
kms: []
gcp_kms: []
@@ -41,14 +41,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -127,17 +127,17 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:mR03Y4KpmQw9bVq75Q==,iv:OnT8K4pgZQw/aWI6lVt9nSvI41zZUQl8VkzG/IPIKt8=,tag:B7hSluMdIN0CA8CLdWJzog==,type:str]
+ key: ENC[AES256_GCM,data:kwwdRdXh0DU11WxCiA==,iv:5ZUPmeZ6783VMzR78hagz2NiW2KwAk6IAb9iBCOMfbI=,tag:SCt5wo+sGEJJm9sWMHXb9g==,type:str]
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:yfHOlfnnE3pS+cNfSxYSbew=,iv:bvMV3JYXUKJYNot+AXYia1PUJuJVTZbVXpLx5LN6VI8=,tag:lZhNFPhu/er0SU+a3NC3Rg==,type:str]
+ key: ENC[AES256_GCM,data:Ea+2nHCNVFWjrokEb1S00z8=,iv:JNF7gL3nu+c4KC2zndRgRfeANLIelL1KuGxJZqdNu7A=,tag:pdHbAxm3VhtYiJquvV6AEw==,type:str]
wal:
compression: gzip
maxParallel: 2
data:
- compression: ENC[AES256_GCM,data:8UoZGw==,iv:hFCjGBSqZ+9AUD6gJLCHlPgDy6/+PQwLjFCs6l2/SoE=,tag:wwRLb4bzgY6ycLpJhQanGw==,type:str]
- immediateCheckpoint: ENC[AES256_GCM,data:qj8d0w==,iv:cX2vwSH6URYD80i1/AlraQc9dG46d782bJx+BNDFcqo=,tag:45f18/svkomUXj/ND0RBsw==,type:bool]
- jobs: ENC[AES256_GCM,data:wQ==,iv:BHMCRhsD9pboqCUbM60ohOsSeipiQp6/MHZ9hqRT9QA=,tag:zmaKuexthYEe3Sq4FEGsfw==,type:int]
+ compression: ENC[AES256_GCM,data:S+U4eQ==,iv:fidyKgUB/xNhWSPIxN3EUi08n8yyFYLjbFlKZxpTOOw=,tag:EmbMbimdKXwfvB+MRDQFgg==,type:str]
+ immediateCheckpoint: ENC[AES256_GCM,data:KBwTwQ==,iv:G+wP3CjxF64dT6Z7NVS656HYVBWWxaq9WpaShnyHm/M=,tag:5ZmzJYDS8XojCVOIHBa6Ug==,type:bool]
+ jobs: ENC[AES256_GCM,data:cQ==,iv:kbpW2fRFUA3y+11dNpvmDMZX4BrOsO6UByG3UpziUfI=,tag:q7Kk96hUFYp+HmGIDiBt0Q==,type:int]
managed:
roles:
- name: freshrss
@@ -304,14 +304,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -336,14 +336,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -369,14 +369,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -400,14 +400,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -431,14 +431,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -462,14 +462,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -493,14 +493,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -524,14 +524,46 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVlYvcXlSQ3V1RE1FQk5a
- Rkk3azlHcHFwQmUwcXoybnd3L0cycWpzV2tVCk93Vy9NMThkTDZSSG9Odlh6T213
- MWhxUlJtUWVKWEVocTE3Vy9tRy9WK1kKLS0tIC8zV2l1c3BXVElwcWJmYjVJTUVN
- RUUzdjZZNEExRVRoQTRLQXRpaW0wQ1EKyqtm6+KBTPByoUgmVDPPTh2qzMs9EOZO
- o8hQde00Msi+7bAjWlxeOELJ7ahQP9Dg0kDEDCZRIK6Miha/AqqJsw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-07-24T08:10:23Z"
- mac: ENC[AES256_GCM,data:ocsBCMR1oRaExYVVvoOL6bxhCZ8ZvNc72lsldS/fgJbSZditj+uNO6Bulz+1sL+JWCgP/ToWNX6FOkdguQj5EBIysnnhgT9CtMoU7qKbV6jbrFyXpXs7uBGzXfu334lRZWaRjJlHAES518QtxDD1um2prncGkbKjkyYrHaxyOwM=,iv:ZUtFKe+cDSQC5smj3w+9WdOAjfzE60GXMHEqfaJhLuo=,tag:3vDJxKsgCzWDHmgjCxi8WQ==,type:str]
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
+ pgp: []
+ encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+ name: synase
+ namespace: postgres-cluster
+spec:
+ name: synase
+ owner: synase
+ ensure: absent
+ cluster:
+ name: pg-cluster-v2
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBNjNVTEpBL3J5MUpCUHpN
+ ZThGWmlXdVI5QytXcVJ3TSthWmxGM3hmYlNBCjBnZ2RxMFNpTC93c3FlWEtsTTJC
+ OXhkTFlBOXRhMHh4Rm5wWUtlR01BMWcKLS0tIFVEWmNOeThRSmU0aXEraERZMHhC
+ QWZYNEZ6Z1pvS2h5UjBlYU5ld0RNaVkKjxVXQVvoXTxRMBxXljpZio9cA0ld7FZY
+ +bLotffyk0OLpcYx5ZiE3rswxC/5DCbY8CCBX59KnzZ1FBmV+2fIyQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-07-24T17:12:47Z"
+ mac: ENC[AES256_GCM,data:eieJIe2aBeHa1LreeKSPfR280GfeAWMDORq1nLGn9EavF4LbtWk8lpAcSBaPI7g3OOR1Ti1yTq/LmkcQ/QNuGLSleWcTexwHkRbC1N3gU4R7HXpfaK/GZVZ2QK4DDGvwSKYoABmYUdHFQFTEUqgs81wABOc6DoLNDXIriP8TMHY=,iv:jDckCV4CHyqOpihwWLnDpoNr2k8m5Ff0UP6GevvqaU4=,tag:5Z5A/Qwpcv6P+1AZrZBW1w==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
