cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit ca2dcc93b541ebf706cd8e24edbda56860d119f5
parent 3e0de55364f3652922aba86a34f47c60c99441fe
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Thu,  8 Jan 2026 01:42:30 +0100

meow

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
Mapps/talos_cluster/clickstack/release.yaml | 118+++++++++++++++++++++++++++++++++++++++++++++----------------------------------
1 file changed, 68 insertions(+), 50 deletions(-)

diff --git a/apps/talos_cluster/clickstack/release.yaml b/apps/talos_cluster/clickstack/release.yaml @@ -1,55 +1,73 @@ apiVersion: helm.toolkit.fluxcd.io/v2 kind: HelmRelease metadata: - name: clickstack - namespace: clickstack + name: clickstack + namespace: clickstack spec: - releaseName: clickstack - chart: - spec: - chart: clickstack - sourceRef: - kind: HelmRepository - name: clickstack - interval: 60m - values: - global: - storageClassName: longhorn - hyperdx: - apiKey: ENC[AES256_GCM,data:8kskExN3VStHrMmbw1NTiCBwh6hrEv87EyAyAPR02+z28k25,iv:0QTlYvEYwypMLwicnVAKLFt84bwdUPQouPwFTrX+v0M=,tag:0h063JeXW7uvXgYFokQY/g==,type:str] - appUrl: https://clickstack.midnightthoughts.space - frontendUrl: https://clickstack.midnightthoughts.space - mongodb: - persistence: - enabled: true - size: 10Gi - clickhouse: - persistence: - enabled: true - dataSize: 10Gi - logSize: 5Gi - config: - users: - appUserPassword: ENC[AES256_GCM,data:UZQQ9Yg8yDlC2Hm5z/YYj2xw3fCdbV+2Brnn/UEB0B+wMiyGH9s4GupK0Q4/uvqIGkCjRvZH4DqG+higPyaJ,iv:kipnRldYvL/NaQTDwQuus1Skt2pV8TLXIGoiLrm0iFM=,tag:u+tv9dGEWVPmrnhfOWuStA==,type:str] - otelUserPassword: ENC[AES256_GCM,data:s0QRS+ZMfLg/eLJoqxpkiYxgNheTpj4hZwqdUynRSysSzL5dxVMwSZq/lRhJQ8FqmHP5miGETJNF11Y0kEUb,iv:VCXLiq961D/LJMl0X9/ccFisNXJbE+9RxvlqBcxCAeg=,tag:V7UxUW46qQlrVShZpKiEOw==,type:str] - otelUserName: otelcollector + releaseName: clickstack + chart: + spec: + chart: clickstack + sourceRef: + kind: HelmRepository + name: clickstack + interval: 60m + values: + global: + storageClassName: longhorn + hyperdx: + apiKey: ENC[AES256_GCM,data:8kskExN3VStHrMmbw1NTiCBwh6hrEv87EyAyAPR02+z28k25,iv:0QTlYvEYwypMLwicnVAKLFt84bwdUPQouPwFTrX+v0M=,tag:0h063JeXW7uvXgYFokQY/g==,type:str] + appUrl: https://clickstack.midnightthoughts.space + frontendUrl: https://clickstack.midnightthoughts.space + mongodb: + persistence: + enabled: true + size: 10Gi + clickhouse: + persistence: + enabled: true + dataSize: 10Gi + logSize: 5Gi + config: + users: + appUserPassword: ENC[AES256_GCM,data:UZQQ9Yg8yDlC2Hm5z/YYj2xw3fCdbV+2Brnn/UEB0B+wMiyGH9s4GupK0Q4/uvqIGkCjRvZH4DqG+higPyaJ,iv:kipnRldYvL/NaQTDwQuus1Skt2pV8TLXIGoiLrm0iFM=,tag:u+tv9dGEWVPmrnhfOWuStA==,type:str] + otelUserPassword: ENC[AES256_GCM,data:s0QRS+ZMfLg/eLJoqxpkiYxgNheTpj4hZwqdUynRSysSzL5dxVMwSZq/lRhJQ8FqmHP5miGETJNF11Y0kEUb,iv:VCXLiq961D/LJMl0X9/ccFisNXJbE+9RxvlqBcxCAeg=,tag:V7UxUW46qQlrVShZpKiEOw==,type:str] + otelUserName: otelcollector + otel: + customConfig: | + processors: + batch: + tail_sampling: + decission_wait: 30s + num_traces: 20000 + expected_new_traces_per_sec: 50 + policies: + - name: always_on_error + type: error + - name: slow_traces + type: latency + latency_threshold: 250ms + - name: probabilistic_fallback + type: probabilistic + sampling_percentage: 5.0 + # TODO: Unclear how to configure the pipelines as its hardcoded over at https://github.com/hyperdxio/hyperdx/blob/af3bbcf1a0f3d31a0a74b4f4fe3073af229a8df7/packages/api/src/opamp/controllers/opampController.ts#L4 possibly? sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtbXJpK0Q0cjdXNFhwRWpP - Zzl5NmNGZzE5Sk5zeC9lVk9mMEdVUmQxNkRFCld6MVN3VEtLWlM4RW1Va3VocWpU - Ly9Ld2Q3Q0I1NGx2bEdHRkgvMXF4UEEKLS0tIGhmR2IwV0I3Z1lsRFZGek4vdzZC - RlNWRVQ1aDlCTmFDNkhHNlRJVEFZeGcKx+4o4lJK1ttkMTqf9WphCyp+454FEvcH - KMoTJYzYDFr3Ol/jwvOX3J+rwyn3of0GPNW+T6si9iBLd0dXegkWOQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-01-05T18:20:57Z" - mac: ENC[AES256_GCM,data:ijOmWUKboiCUFSKY1KfctWWyfS39bCGg06RwVrWU+ndO0AHV2Fgc++73/iVhQf+kcmAv+Bpp46aAVwVpcEWAiiGI1Bglu8aUWaehwPcE9ZDWJwqN+NIyXjT1PFOcQ4e8P+qihaPbbXkGafo31FbHJlKgaig8PsjwhqAKlD50MW8=,iv:QrmnkqoHdJRGwDOvYYukGI2vjid47J36q+MTR7RrJk0=,tag:lduLOK+lo/naVVHI266RaQ==,type:str] - pgp: [] - encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ - version: 3.9.1 + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtbXJpK0Q0cjdXNFhwRWpP + Zzl5NmNGZzE5Sk5zeC9lVk9mMEdVUmQxNkRFCld6MVN3VEtLWlM4RW1Va3VocWpU + Ly9Ld2Q3Q0I1NGx2bEdHRkgvMXF4UEEKLS0tIGhmR2IwV0I3Z1lsRFZGek4vdzZC + RlNWRVQ1aDlCTmFDNkhHNlRJVEFZeGcKx+4o4lJK1ttkMTqf9WphCyp+454FEvcH + KMoTJYzYDFr3Ol/jwvOX3J+rwyn3of0GPNW+T6si9iBLd0dXegkWOQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-01-05T18:20:57Z" + mac: ENC[AES256_GCM,data:ijOmWUKboiCUFSKY1KfctWWyfS39bCGg06RwVrWU+ndO0AHV2Fgc++73/iVhQf+kcmAv+Bpp46aAVwVpcEWAiiGI1Bglu8aUWaehwPcE9ZDWJwqN+NIyXjT1PFOcQ4e8P+qihaPbbXkGafo31FbHJlKgaig8PsjwhqAKlD50MW8=,iv:QrmnkqoHdJRGwDOvYYukGI2vjid47J36q+MTR7RrJk0=,tag:lduLOK+lo/naVVHI266RaQ==,type:str] + pgp: [] + encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ + version: 3.9.1