cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit c078fb5022063364b4a1abc6352ca02bbf6bc8b3
parent 7f3b93a0cddd1ed0bdcb8012de082f40cd83868f
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun,  7 Jul 2024 20:59:16 +0200

Initial minecraft

Diffstat:
Mapps/2024_cluster/kustomization.yaml | 1+
Mapps/2024_cluster/namespaces/kustomization.yaml | 1+
Aapps/2024_cluster/namespaces/minecraft.yaml | 4++++
Aapps/base/minecraft/kustomization.yaml | 6++++++
Aapps/base/minecraft/release.yaml | 61+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Aapps/base/minecraft/repository.yaml | 9+++++++++
Mdecrypt.sh | 2+-
Mencrypt.sh | 2+-
8 files changed, 84 insertions(+), 2 deletions(-)

diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml @@ -19,5 +19,6 @@ resources: - ../base/plausible # https://gitlab.com/mb-saces/synatainer/-/merge_requests/7 #- ../base/matrix/syntainer_main_synapse + - ../base/minecraft patchesStrategicMerge: - postgres-operator-values.yaml diff --git a/apps/2024_cluster/namespaces/kustomization.yaml b/apps/2024_cluster/namespaces/kustomization.yaml @@ -12,3 +12,4 @@ resources: - ejabberd.yaml - openproject.yaml - plausible.yaml + - minecraft.yaml diff --git a/apps/2024_cluster/namespaces/minecraft.yaml b/apps/2024_cluster/namespaces/minecraft.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: minecraft diff --git a/apps/base/minecraft/kustomization.yaml b/apps/base/minecraft/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: minecraft +resources: + - repository.yaml + - release.yaml diff --git a/apps/base/minecraft/release.yaml b/apps/base/minecraft/release.yaml @@ -0,0 +1,61 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta2 +kind: HelmRelease +metadata: + name: minecraft + namespace: minecraft +spec: + releaseName: minecraft + interval: 60m + chart: + spec: + chart: minecraft + sourceRef: + kind: HelmRepository + name: minecraft + values: + image: + tag: java17 + tolerations: + - key: ENC[AES256_GCM,data:3CcC,iv:MiL+RuLvNsmQ6/yznY4jsyaOf0G2K+1MzrLvltJF3Gk=,tag:aCnWYKqN+EzTuKCzvHWqFw==,type:str] + operator: Equal + value: minecraft + effect: NoSchedule + nodeSelector: + role: minecraft + minecraftServer: + # This must be overridden, since we can't accept this for the user. + eula: "TRUE" + version: 1.19.2 + type: AUTO_CURSEFORGE + memory: 2048M + motd: Welcome to Minecraft for daguerreo! + ops: MTRNord + whitelist: MTRNord + autoCurseForge: + apiKey: + key: ENC[AES256_GCM,data:ykOPD8hkntuxZ+PQN0LyAGE34e30DhQcxDZj2b0EMHDJYe1g0Y7wndOrFEjBmFy7TNoA6DfScVcdz1GZ,iv:zqCMcEet3jeO1787GPBbW4J/Ks8mt8Dva2SeEtc42WM=,tag:IzJkgr+AbLGN6V1oeM2zsw==,type:str] + pageUrl: https://www.curseforge.com/minecraft/modpacks/statech-industry + persistence: + dataDir: + enabled: true + Size: 5Gi +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvb2pRbElmdlRPM2NwQnc1 + Y3M3NG5weVI1THdBZWYyWjQ3SW5meVhSeUdNCkpaUWN0L3pTa2Nya2puQjQ2SkhE + TSszQmFDVE5rSWUwVjQ0a1NONGJUcmMKLS0tIEU2QXRSSlVCY0xuWENrMi9tUG1w + eG1aQ2h1cXdDSG1pRnVBUzh6dWgxWE0KzF1KQWFHwRnLDo0gsuLeWfT47SYKQEJN + RSnYn+Jxk5/n+UUtYkg4/RMeFUS5W25vdHaJdlNhszqo0V87diI/3w== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-07-07T18:59:07Z" + mac: ENC[AES256_GCM,data:q3WtBS6jyMFVs8FXjUDCInGbm1r6fgvsN1C6Gt2mlen3a6jsmTv4/k312jfXV8L9Tjhbq6KR7vR2A/EQVZ4nZXroI5szVpVY0lM0UgyepBNyxdW4bF3rkNFXSsebYXVMXsKyIFgkcpZXejcwTL36vz4bh6Sg8luqgMTUlSkIFQQ=,iv:6/Rr3ewhv1lmqV5NMa93Xnq0pm6W+RcdZQH2vJ4EKik=,tag:dG4oqPHx7RZCVLeXkH7UcQ==,type:str] + pgp: [] + encrypted_regex: ^(key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ + version: 3.8.1 diff --git a/apps/base/minecraft/repository.yaml b/apps/base/minecraft/repository.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: source.toolkit.fluxcd.io/v1beta2 +kind: HelmRepository +metadata: + name: minecraft + namespace: minecraft +spec: + interval: 5m + url: https://itzg.github.io/minecraft-server-charts/ diff --git a/decrypt.sh b/decrypt.sh @@ -1,4 +1,4 @@ #!/bin/bash export SOPS_AGE_KEY_FILE="$(pwd)/age.agekey" -sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1" +sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1" diff --git a/encrypt.sh b/encrypt.sh @@ -1,3 +1,3 @@ #!/bin/bash -sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1" +sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"