commit d01a206ec449315c00c3de74575b2651648d5c3a
parent 677b0b80c010d5a463d5a5b23f072b52d677635d
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 19 Mar 2025 12:08:13 +0100
Migrate cachet to httproute
Diffstat:
2 files changed, 66 insertions(+), 15 deletions(-)
diff --git a/apps/base/cachet/release.yaml b/apps/base/cachet/release.yaml
@@ -16,14 +16,14 @@ spec:
resources:
limits: {}
requests:
- cpu: "41m"
- memory: "100Mi"
+ cpu: 41m
+ memory: 100Mi
image:
repository: ghcr.io/mtrnord/cachet_docker
tag: "2.4"
pullPolicy: Always
ingress:
- enabled: true
+ enabled: false
annotations:
cert-manager.io/cluster-issuer: letsencrypt-dns
external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
@@ -39,7 +39,7 @@ spec:
port: 5432
name: cachet
username: cachet
- password: ENC[AES256_GCM,data:Mv4VIrn6VwALZqcRRg4s5yu691O3Hx26D9wT2stHfJTiezlus3jc6Y9FJEV2iu3A2viJILvkJGBG6ZGtFB7Ak8z6NEVlKYjORrsKQbe6jhyjkAMBHQKn9Q==,iv:alOOJWEcqvk3P06LHU5nU1iBHMWcqn2Qvuu3gp61trk=,tag:T6S8O8wUExUnxzZQo+AtBQ==,type:str]
+ password: ENC[AES256_GCM,data:14z62hvPZZvsuBOsuHYgqv1toAHKp9RY/KH0+pJQziegnfZjWAVImKHwvvCic4SxEASBkwNJmqQYjlhEi0hI9K3bd8kZn5JvX8nq5cDP3Hh+r7RwHzHS0g==,iv:PkZzoTFyugQRvFni6ih59iULjZGt7mcJhigitKvpEAY=,tag:OpCEfHI8NZ1rYZ6o9Yezyw==,type:str]
env:
public:
# Application environments
@@ -60,9 +60,48 @@ spec:
MAIL_NAME: Midnightthoughts Status Page
MAIL_ENCRYPTION: tls
private:
- APP_KEY: ENC[AES256_GCM,data:ijnn2L7BEgCzRs7tuQNTND/qJB+fl2ETX2AdQ6V4wfKRVwgu3mbNX7busGxVQEpvBM8a,iv:+r8e0WwFWct4Z7oIy9buRqodWfYPQl2EqRw9ytXoHtA=,tag:PkZVpuMBVY7HwCCqS3okag==,type:str]
+ APP_KEY: ENC[AES256_GCM,data:aDiw4vJtHn4cicl1vXaup4tb8v5vjb3k8dJrbynXArcoopYl78D39W/n/VnrfRfoJQ8m,iv:nn2ZNopZXcHcahV1dIVji72c6Qnz5fYOnV5hceHPtGg=,tag:3BA24E18Sd1k8tKsF47v0w==,type:str]
MAIL_USERNAME: mtrnord@nordgedanken.dev
- MAIL_PASSWORD: ENC[AES256_GCM,data:xNCQ45LrGW0v7DSAH/WT2A==,iv:8KwRkXdtPp2Itti6vTBQxb+3yFJUEjZ1TdUc5m+YF5U=,tag:6OnWNTLDdS6qO8cYrXN/Hg==,type:str]
+ MAIL_PASSWORD: ENC[AES256_GCM,data:+Qm6PYaaiVu/P74SMIoFXw==,iv:JnN5Omywf0EqFdAvyJIwxbHpGli7U1cfHdcAY1am7eY=,tag:C7xQTReGlTIs4czULPv+DA==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnVE9ZYm5ZT0tIRUFWeGJL
+ YmpRUTdaY0ZrMm80WUhvUnMyMlpkam1NNVhNClVCa2N4VlVTWDdSMzc2SnZ6aFRp
+ TzlQK25hK1RXQ2V2NWVCN1lLdm5jVlkKLS0tIE5MYkVXVFdQN0hqUkdHc3h5NTNS
+ TWZRTEpERlVwMXh3V0xKN3I5TTZXcmcKUaVzAi37kDrSOmA0Py81pbFiwL5GdUge
+ Ee6wovuBvndz1OEmi8W9rpamT+CEdmXHZTxFMoM4pMOMQayCfQIyYw==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-03-19T11:07:00Z"
+ mac: ENC[AES256_GCM,data:PzQLmfSOrgNIok67C7FuSBhZ8hMVQumFXvlVIuB+oAD4R7BJ8SDfXY4SCjVLnhQXFineSYdgE1oKURuWDfIo4EjnQh0HQJavUaolOs3TlQrzv1VLXJDbrTm3E1yr+D+pw2yNYhoX7OopjDq+z/QjOMJ2M4XLqmvL1nFOQZC06rE=,iv:VDWtReujwXKyVwc/fuzWFLNBPL8edNzBYJpCmhCDTRs=,tag:jwnzwquRrKqLEEcqkLYV5Q==,type:str]
+ pgp: []
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+ name: cachet
+ namespace: cachet
+spec:
+ parentRefs:
+ - name: envoy-gateway
+ namespace: envoy-gateway
+ hostnames:
+ - status.midnightthoughts.space
+ rules:
+ - backendRefs:
+ - name: cachet
+ port: 80
+ timeouts:
+ request: 240s
+ backendRequest: 0s
sops:
kms: []
gcp_kms: []
@@ -72,14 +111,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Ly9kSVdwV251U3dGVVp4
- V1pjU3FSUWpyMTErVDROZEdnWDU3bTJ6Y2s4CjMyQnhpOTBRU2JLWHA4MVQvMUNu
- TGdVT0pzcjluQW4wbWhSelBtRkZ6d3cKLS0tIHZMbnQ1Q3hpcWQxaEoyUXJxUXhh
- ZytBKyttMWNEbW5CMUV3eWwwTDZTTnMKguNYo2e5ZqY0flYvAqqzTzC4UJi+6sc9
- xMS4sdavWHS1VfOhtErrCkuRr53UgZsHkP1qj+wPiGPpKZWCcME/cw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnVE9ZYm5ZT0tIRUFWeGJL
+ YmpRUTdaY0ZrMm80WUhvUnMyMlpkam1NNVhNClVCa2N4VlVTWDdSMzc2SnZ6aFRp
+ TzlQK25hK1RXQ2V2NWVCN1lLdm5jVlkKLS0tIE5MYkVXVFdQN0hqUkdHc3h5NTNS
+ TWZRTEpERlVwMXh3V0xKN3I5TTZXcmcKUaVzAi37kDrSOmA0Py81pbFiwL5GdUge
+ Ee6wovuBvndz1OEmi8W9rpamT+CEdmXHZTxFMoM4pMOMQayCfQIyYw==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-10-06T16:37:21Z"
- mac: ENC[AES256_GCM,data:Zo152dcNGrYXW/Wh4vm6YGKcoL9xXNCuyh5p68QNcfI1h8l/smS+CoWwRnn56y1Kwfi56AclQIBIaI7LBtwmVfnpGz1U8ZZwxh74IApG346+dcPHrbjnpdRxDvXllBVpcszz6fbt17Hzx8wt4n0fDPxnX7lO+L0pKMI4lQyVdUU=,iv:LIWgTCjePL2qlbnWVqPk1XAIrb7HW9nCznZ3yvd63ls=,tag:DZ7GBaTYFmYZREoHTqfNjA==,type:str]
+ lastmodified: "2025-03-19T11:07:00Z"
+ mac: ENC[AES256_GCM,data:PzQLmfSOrgNIok67C7FuSBhZ8hMVQumFXvlVIuB+oAD4R7BJ8SDfXY4SCjVLnhQXFineSYdgE1oKURuWDfIo4EjnQh0HQJavUaolOs3TlQrzv1VLXJDbrTm3E1yr+D+pw2yNYhoX7OopjDq+z/QjOMJ2M4XLqmvL1nFOQZC06rE=,iv:VDWtReujwXKyVwc/fuzWFLNBPL8edNzBYJpCmhCDTRs=,tag:jwnzwquRrKqLEEcqkLYV5Q==,type:str]
pgp: []
- encrypted_regex: ^(admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.8.1
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -298,6 +298,18 @@ spec:
certificateRefs:
- kind: Secret
name: midnightthoughts.space-tls
+ - name: https-midnightthoughts-status
+ protocol: HTTPS
+ hostname: "status.midnightthoughts.space"
+ port: 443
+ allowedRoutes:
+ namespaces:
+ from: "All"
+ tls:
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: status.midnightthoughts.space-tls
- name: https-nordgedanken-root
protocol: HTTPS
hostname: "nordgedanken.dev"
