commit cd0c7a8a7407e285bf277f9687b0d6a76867dc3c
parent f8930522cfdf2acecb6998074c122c905c0fc506
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Mon, 23 Jun 2025 18:06:44 +0200
Setup connectivity tester
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
6 files changed, 234 insertions(+), 62 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -562,6 +562,18 @@ spec:
certificateRefs:
- kind: Secret
name: mastodon.mtrnord.blog-tls
+ - name: https-connectivity-tester-mtrnord-blog
+ protocol: HTTPS
+ hostname: "connectivity-tester.mtrnord.blog"
+ port: 443
+ allowedRoutes:
+ namespaces:
+ from: "All"
+ tls:
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: connectivity-tester.mtrnord.blog-tls
- name: http
protocol: HTTP
port: 80
diff --git a/apps/base/matrix/connectivity-tester/config.json b/apps/base/matrix/connectivity-tester/config.json
@@ -0,0 +1,3 @@
+{
+ "api_server_url": "https://connectivity-tester.mtrnord.blog"
+}
+\ No newline at end of file
diff --git a/apps/base/matrix/connectivity-tester/deployment.yaml b/apps/base/matrix/connectivity-tester/deployment.yaml
@@ -0,0 +1,97 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: connectivity-tester
+ namespace: matrix
+spec:
+ strategy:
+ rollingUpdate:
+ maxSurge: 25%
+ maxUnavailable: 25%
+ type: RollingUpdate
+ selector:
+ matchLabels:
+ app: connectivity-tester
+ template:
+ metadata:
+ labels:
+ app: connectivity-tester
+ spec:
+ imagePullSecrets:
+ - name: ghcr-pull
+ containers:
+ - name: federation-tester-api
+ image: ghcr.io/mtrnord/rust-federation-tester:main
+ imagePullPolicy: Always
+ resources:
+ limits: {}
+ requests:
+ memory: "344Mi"
+ cpu: "252m"
+ securityContext:
+ runAsUser: 1000
+ runAsGroup: 1000
+ readOnlyRootFilesystem: true
+ ports:
+ - containerPort: 8080
+ name: api
+ protocol: TCP
+ volumeMounts:
+ - name: configs
+ mountPath: "/usr/share/nginx/html/config.json"
+ subPath: config.json
+ readOnly: true
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: appservice
+ scheme: HTTP
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ startupProbe:
+ httpGet:
+ path: /healthz
+ port: appservice
+ initialDelaySeconds: 15
+ failureThreshold: 30
+ periodSeconds: 10
+ - name: connection-checker-ui
+ image: ghcr.io/mtrnord/matrix-connection-tester-ui:main
+ imagePullPolicy: Always
+ resources:
+ limits: {}
+ requests:
+ memory: "344Mi"
+ cpu: "252m"
+ securityContext:
+ runAsUser: 1000
+ runAsGroup: 1000
+ readOnlyRootFilesystem: true
+ ports:
+ - containerPort: 3000
+ name: web
+ protocol: TCP
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp
+ livenessProbe:
+ httpGet:
+ path: /
+ port: web
+ scheme: HTTP
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ startupProbe:
+ httpGet:
+ path: /
+ port: web
+ initialDelaySeconds: 15
+ failureThreshold: 30
+ periodSeconds: 10
+ volumes:
+ - name: configs
+ configMap:
+ name: connectivity-tester-config
+ - name: tmp
+ emptyDir:
+ sizeLimit: 2048Mi
diff --git a/apps/base/matrix/connectivity-tester/kustomization.yaml b/apps/base/matrix/connectivity-tester/kustomization.yaml
@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: matrix
+resources:
+ - deployment.yaml
+ - service.yaml
+configMapGenerator:
+ - name: connectivity-tester-config
+ namespace: matrix
+ files:
+ - config.json=config.json
diff --git a/apps/base/matrix/connectivity-tester/service.yaml b/apps/base/matrix/connectivity-tester/service.yaml
@@ -0,0 +1,48 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: connectivity-tester
+ namespace: matrix
+ labels:
+ app: connectivity-tester
+spec:
+ selector:
+ app: connectivity-tester
+ ports:
+ - port: 8080
+ targetPort: api
+ protocol: TCP
+ name: api
+ - port: 3000
+ targetPort: web
+ protocol: TCP
+ name: web
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+ name: connectivity-tester
+ namespace: matrix
+spec:
+ parentRefs:
+ - name: envoy-gateway
+ namespace: envoy-gateway
+ hostnames:
+ - connectivity-tester.mtrnord.blog
+ rules:
+ - matches:
+ - path:
+ value: /api
+ type: PathPrefix
+ backendRefs:
+ - name: connectivity-tester
+ port: 8080
+ timeouts:
+ request: 240s
+ backendRequest: 0s
+ - backendRefs:
+ - name: connectivity-tester
+ port: 3000
+ timeouts:
+ request: 240s
+ backendRequest: 0s
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -11,14 +11,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VSs1V29pMUFYZDk1Q201
- SUZaMWFOcEtkZ1FCRGV4aWJUTUlqZk5GWDJNCllqdkcwS2hwdVBLa1EvWVVFY2NF
- bmRCdjJqMVYwSVJTcWFWcVhNYmFDWncKLS0tIEU0RS8yWW5XamR4MFZIUStPNUpi
- K1RYVzg3WTlQTU5BUW1KUE5OSC9oZ1kKP203VGIhrlgSc3Vjr9rGdTcMh0vK0YMq
- 5zw4Q2rSgQEH6oSYFnhEDMDMzoVCQ9L1/3oTWNnDXZiC3K7OloVAEw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
+ SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
+ d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
+ VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
+ VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-14T00:01:07Z"
- mac: ENC[AES256_GCM,data:fFoOifwOUwmVMnbqw1tPWDmkg9UHFMSXWP73uT+8j46Q5FLVXTwZbRWSOlPm36Mzp8axkVaHZ1BdUGnlVrfW3AMEUzxsCk5a+URDxirTIQp5v7qKGC4S9ZewsiKHIXnHjmBPt+wzUk+Xkiq8vwPzaEL/N0AfUc6KU6LEHU1xl4c=,iv:5vzhlPsH3p8+tKo5FuLs4vLg+JhcF3MwrtkpXisKwCQ=,tag:o17Z/svs4DIvRECx5fz4/Q==,type:str]
+ lastmodified: "2025-06-14T18:57:27Z"
+ mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -30,8 +30,8 @@ metadata:
namespace: postgres-cluster
type: Opaque
stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:VnRJHYlCnRAtE+n54du7f6bzC40=,iv:8BzCCdZMhHbkT2fzgzOawjWPtm6nL/U1a2TInWJy20I=,tag:S+z6RQ6EhBlU7+gtEY5a2Q==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:WcdyYVBJpqz/szscgpnuoKpsymbixLSSkcHuQOo6OF8a5bT3yyT38Q==,iv:rSbLHeCAUJV1Ga5/OXXQgOXctwP52Vok5K4pycNSXU0=,tag:BiiDOgQwt3ybFQr2QEQT7w==,type:str]
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:Re+xbPgwECJz7kSHljGQPlB+PoM=,iv:1AeNb5gpbeK62IRYC6htHcircZGDFGebE5zkg3RLZ6A=,tag:PurgvywIb1dnLpzvqYh3YQ==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:kdQJDs+IQviMjIB1fbgd4ofowjH0Yf5J+LesXRsuje07PfFQPjyyFQ==,iv:gh7tdf7rySU6kT4DUKWdobLTY3hIii8ecMAJyD9Gc8Q=,tag:pOOtqcFOJmYgFw9xfCiKFQ==,type:str]
sops:
kms: []
gcp_kms: []
@@ -41,14 +41,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VSs1V29pMUFYZDk1Q201
- SUZaMWFOcEtkZ1FCRGV4aWJUTUlqZk5GWDJNCllqdkcwS2hwdVBLa1EvWVVFY2NF
- bmRCdjJqMVYwSVJTcWFWcVhNYmFDWncKLS0tIEU0RS8yWW5XamR4MFZIUStPNUpi
- K1RYVzg3WTlQTU5BUW1KUE5OSC9oZ1kKP203VGIhrlgSc3Vjr9rGdTcMh0vK0YMq
- 5zw4Q2rSgQEH6oSYFnhEDMDMzoVCQ9L1/3oTWNnDXZiC3K7OloVAEw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
+ SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
+ d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
+ VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
+ VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-14T00:01:07Z"
- mac: ENC[AES256_GCM,data:fFoOifwOUwmVMnbqw1tPWDmkg9UHFMSXWP73uT+8j46Q5FLVXTwZbRWSOlPm36Mzp8axkVaHZ1BdUGnlVrfW3AMEUzxsCk5a+URDxirTIQp5v7qKGC4S9ZewsiKHIXnHjmBPt+wzUk+Xkiq8vwPzaEL/N0AfUc6KU6LEHU1xl4c=,iv:5vzhlPsH3p8+tKo5FuLs4vLg+JhcF3MwrtkpXisKwCQ=,tag:o17Z/svs4DIvRECx5fz4/Q==,type:str]
+ lastmodified: "2025-06-14T18:57:27Z"
+ mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -126,16 +126,16 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:IePi0Y1NYzTGAm+yBA==,iv:FVao3CRnzIxPjE4+eR2zYtCjlTQS1fGdMBtPCwv7DCQ=,tag:D1XLDLwNjpxbq22PtqTm+g==,type:str]
+ key: ENC[AES256_GCM,data:zYpbPgI0R38USnWqWQ==,iv:LyfNegRSNyQ7qbj5XRIDUgLPvn94/fBiqJFlDfC/56g=,tag:qTuImCl9AjfwZiCOacKxIQ==,type:str]
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:uqfWDAgFJfrCBbQCKav3ndE=,iv:rr9aHz1wsOd3XH0fPR0Uj9t4+SV2NSRiHyR6FC/HxKs=,tag:o8CwnIUm8QIb6HcOzT4EzQ==,type:str]
+ key: ENC[AES256_GCM,data:vokHpFRoweR3yTXjP3M1yNo=,iv:pNCYebwWKFH09wEr6VzWjxtpPzlkscdADRVtRK4lKMI=,tag:zCJS4x9AMtLz6HOV2LWXQQ==,type:str]
wal:
compression: gzip
maxParallel: 8
data:
- compression: ENC[AES256_GCM,data:zeGGIg==,iv:T+Iy67QUttXcn9DNozoybBpWJUOKQkdmUoJ33psBRvk=,tag:/D9m3Fa1uG2Li38EqqnmUg==,type:str]
- immediateCheckpoint: ENC[AES256_GCM,data:knHm0Q==,iv:wvp/O/fh6dmiAYcUpf0s3JJ7QC7srkWrbQXmBjzTb5U=,tag:mp+TVPeiVWZyyiHrfonlDA==,type:bool]
+ compression: ENC[AES256_GCM,data:jnpYVA==,iv:TYjYMTVzXvbg3GpYGvmRSrmtXnZeMXCuzW3z8p0XoAc=,tag:FPrGd69ET7C4zKO8SxguIA==,type:str]
+ immediateCheckpoint: ENC[AES256_GCM,data:oybt4A==,iv:f8Wa9702eqx5n/6afMu3tuiudCL+oDtTI+0q3FTMFuQ=,tag:S7TfX77bmOjtWjNRsgvtRQ==,type:bool]
managed:
roles:
- name: synapse
@@ -295,14 +295,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VSs1V29pMUFYZDk1Q201
- SUZaMWFOcEtkZ1FCRGV4aWJUTUlqZk5GWDJNCllqdkcwS2hwdVBLa1EvWVVFY2NF
- bmRCdjJqMVYwSVJTcWFWcVhNYmFDWncKLS0tIEU0RS8yWW5XamR4MFZIUStPNUpi
- K1RYVzg3WTlQTU5BUW1KUE5OSC9oZ1kKP203VGIhrlgSc3Vjr9rGdTcMh0vK0YMq
- 5zw4Q2rSgQEH6oSYFnhEDMDMzoVCQ9L1/3oTWNnDXZiC3K7OloVAEw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
+ SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
+ d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
+ VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
+ VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-14T00:01:07Z"
- mac: ENC[AES256_GCM,data:fFoOifwOUwmVMnbqw1tPWDmkg9UHFMSXWP73uT+8j46Q5FLVXTwZbRWSOlPm36Mzp8axkVaHZ1BdUGnlVrfW3AMEUzxsCk5a+URDxirTIQp5v7qKGC4S9ZewsiKHIXnHjmBPt+wzUk+Xkiq8vwPzaEL/N0AfUc6KU6LEHU1xl4c=,iv:5vzhlPsH3p8+tKo5FuLs4vLg+JhcF3MwrtkpXisKwCQ=,tag:o17Z/svs4DIvRECx5fz4/Q==,type:str]
+ lastmodified: "2025-06-14T18:57:27Z"
+ mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -327,14 +327,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VSs1V29pMUFYZDk1Q201
- SUZaMWFOcEtkZ1FCRGV4aWJUTUlqZk5GWDJNCllqdkcwS2hwdVBLa1EvWVVFY2NF
- bmRCdjJqMVYwSVJTcWFWcVhNYmFDWncKLS0tIEU0RS8yWW5XamR4MFZIUStPNUpi
- K1RYVzg3WTlQTU5BUW1KUE5OSC9oZ1kKP203VGIhrlgSc3Vjr9rGdTcMh0vK0YMq
- 5zw4Q2rSgQEH6oSYFnhEDMDMzoVCQ9L1/3oTWNnDXZiC3K7OloVAEw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
+ SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
+ d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
+ VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
+ VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-14T00:01:07Z"
- mac: ENC[AES256_GCM,data:fFoOifwOUwmVMnbqw1tPWDmkg9UHFMSXWP73uT+8j46Q5FLVXTwZbRWSOlPm36Mzp8axkVaHZ1BdUGnlVrfW3AMEUzxsCk5a+URDxirTIQp5v7qKGC4S9ZewsiKHIXnHjmBPt+wzUk+Xkiq8vwPzaEL/N0AfUc6KU6LEHU1xl4c=,iv:5vzhlPsH3p8+tKo5FuLs4vLg+JhcF3MwrtkpXisKwCQ=,tag:o17Z/svs4DIvRECx5fz4/Q==,type:str]
+ lastmodified: "2025-06-14T18:57:27Z"
+ mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -360,14 +360,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VSs1V29pMUFYZDk1Q201
- SUZaMWFOcEtkZ1FCRGV4aWJUTUlqZk5GWDJNCllqdkcwS2hwdVBLa1EvWVVFY2NF
- bmRCdjJqMVYwSVJTcWFWcVhNYmFDWncKLS0tIEU0RS8yWW5XamR4MFZIUStPNUpi
- K1RYVzg3WTlQTU5BUW1KUE5OSC9oZ1kKP203VGIhrlgSc3Vjr9rGdTcMh0vK0YMq
- 5zw4Q2rSgQEH6oSYFnhEDMDMzoVCQ9L1/3oTWNnDXZiC3K7OloVAEw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
+ SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
+ d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
+ VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
+ VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-14T00:01:07Z"
- mac: ENC[AES256_GCM,data:fFoOifwOUwmVMnbqw1tPWDmkg9UHFMSXWP73uT+8j46Q5FLVXTwZbRWSOlPm36Mzp8axkVaHZ1BdUGnlVrfW3AMEUzxsCk5a+URDxirTIQp5v7qKGC4S9ZewsiKHIXnHjmBPt+wzUk+Xkiq8vwPzaEL/N0AfUc6KU6LEHU1xl4c=,iv:5vzhlPsH3p8+tKo5FuLs4vLg+JhcF3MwrtkpXisKwCQ=,tag:o17Z/svs4DIvRECx5fz4/Q==,type:str]
+ lastmodified: "2025-06-14T18:57:27Z"
+ mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -391,14 +391,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VSs1V29pMUFYZDk1Q201
- SUZaMWFOcEtkZ1FCRGV4aWJUTUlqZk5GWDJNCllqdkcwS2hwdVBLa1EvWVVFY2NF
- bmRCdjJqMVYwSVJTcWFWcVhNYmFDWncKLS0tIEU0RS8yWW5XamR4MFZIUStPNUpi
- K1RYVzg3WTlQTU5BUW1KUE5OSC9oZ1kKP203VGIhrlgSc3Vjr9rGdTcMh0vK0YMq
- 5zw4Q2rSgQEH6oSYFnhEDMDMzoVCQ9L1/3oTWNnDXZiC3K7OloVAEw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
+ SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
+ d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
+ VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
+ VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-14T00:01:07Z"
- mac: ENC[AES256_GCM,data:fFoOifwOUwmVMnbqw1tPWDmkg9UHFMSXWP73uT+8j46Q5FLVXTwZbRWSOlPm36Mzp8axkVaHZ1BdUGnlVrfW3AMEUzxsCk5a+URDxirTIQp5v7qKGC4S9ZewsiKHIXnHjmBPt+wzUk+Xkiq8vwPzaEL/N0AfUc6KU6LEHU1xl4c=,iv:5vzhlPsH3p8+tKo5FuLs4vLg+JhcF3MwrtkpXisKwCQ=,tag:o17Z/svs4DIvRECx5fz4/Q==,type:str]
+ lastmodified: "2025-06-14T18:57:27Z"
+ mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -422,14 +422,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VSs1V29pMUFYZDk1Q201
- SUZaMWFOcEtkZ1FCRGV4aWJUTUlqZk5GWDJNCllqdkcwS2hwdVBLa1EvWVVFY2NF
- bmRCdjJqMVYwSVJTcWFWcVhNYmFDWncKLS0tIEU0RS8yWW5XamR4MFZIUStPNUpi
- K1RYVzg3WTlQTU5BUW1KUE5OSC9oZ1kKP203VGIhrlgSc3Vjr9rGdTcMh0vK0YMq
- 5zw4Q2rSgQEH6oSYFnhEDMDMzoVCQ9L1/3oTWNnDXZiC3K7OloVAEw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
+ SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
+ d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
+ VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
+ VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-14T00:01:07Z"
- mac: ENC[AES256_GCM,data:fFoOifwOUwmVMnbqw1tPWDmkg9UHFMSXWP73uT+8j46Q5FLVXTwZbRWSOlPm36Mzp8axkVaHZ1BdUGnlVrfW3AMEUzxsCk5a+URDxirTIQp5v7qKGC4S9ZewsiKHIXnHjmBPt+wzUk+Xkiq8vwPzaEL/N0AfUc6KU6LEHU1xl4c=,iv:5vzhlPsH3p8+tKo5FuLs4vLg+JhcF3MwrtkpXisKwCQ=,tag:o17Z/svs4DIvRECx5fz4/Q==,type:str]
+ lastmodified: "2025-06-14T18:57:27Z"
+ mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -453,14 +453,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VSs1V29pMUFYZDk1Q201
- SUZaMWFOcEtkZ1FCRGV4aWJUTUlqZk5GWDJNCllqdkcwS2hwdVBLa1EvWVVFY2NF
- bmRCdjJqMVYwSVJTcWFWcVhNYmFDWncKLS0tIEU0RS8yWW5XamR4MFZIUStPNUpi
- K1RYVzg3WTlQTU5BUW1KUE5OSC9oZ1kKP203VGIhrlgSc3Vjr9rGdTcMh0vK0YMq
- 5zw4Q2rSgQEH6oSYFnhEDMDMzoVCQ9L1/3oTWNnDXZiC3K7OloVAEw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
+ SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
+ d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
+ VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
+ VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-14T00:01:07Z"
- mac: ENC[AES256_GCM,data:fFoOifwOUwmVMnbqw1tPWDmkg9UHFMSXWP73uT+8j46Q5FLVXTwZbRWSOlPm36Mzp8axkVaHZ1BdUGnlVrfW3AMEUzxsCk5a+URDxirTIQp5v7qKGC4S9ZewsiKHIXnHjmBPt+wzUk+Xkiq8vwPzaEL/N0AfUc6KU6LEHU1xl4c=,iv:5vzhlPsH3p8+tKo5FuLs4vLg+JhcF3MwrtkpXisKwCQ=,tag:o17Z/svs4DIvRECx5fz4/Q==,type:str]
+ lastmodified: "2025-06-14T18:57:27Z"
+ mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
