cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit d7497cc7074eb8c3832021496ca23b3595089bf4
parent f9804057fe377ac33031938261c4863ea10c13aa
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 11 May 2025 21:15:38 +0200

Meow

Diffstat:
Minfrastructure/configs/cnpg-cluster.yaml | 159++++++++++++++++++++++++++++++++++++++++++++++++++++---------------------------
1 file changed, 104 insertions(+), 55 deletions(-)

diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml @@ -11,14 +11,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI - dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3 - TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx - aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts - O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT + eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm + RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ + VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4 + A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-11T19:04:39Z" - mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str] + lastmodified: "2025-05-11T19:15:36Z" + mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str] pgp: [] encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -30,8 +30,8 @@ metadata: namespace: postgres-cluster type: Opaque stringData: - ACCESS_KEY_ID: ENC[AES256_GCM,data:2BFeG63Z8SKFEW707tKhZsKDye8=,iv:6Ej8iwK+gEMFxj+V+zQgy7i7/MqNeY+B1/2a9Herzp0=,tag:WYXfFDD+RiNY42664a6YNQ==,type:str] - ACCESS_SECRET_KEY: ENC[AES256_GCM,data:khzD6wrICpnEikY1h7uw3Jt/WDzBFc8wvQ2P7YJvQO25QfJYHieOhg==,iv:2RjpXjH5akLflKZR7KFCsKgEcH4HmEPbfDJEtsPE6sc=,tag:u/HnzEygHufgaPD6PHndcw==,type:str] + ACCESS_KEY_ID: ENC[AES256_GCM,data:iKgRGDo6ZabYYEH3818ENpoBAlk=,iv:ZB2DS4+tK2xjC3uXIkkzbZqcOZbBhKpRMfVCgh8zGcI=,tag:ykYNupDzSF8t+CJJx9YzWw==,type:str] + ACCESS_SECRET_KEY: ENC[AES256_GCM,data:KVY+UmLIBCtne+YpIG+H4uUpl39W8KJfj3hIZhWjVoCqmVmHnzNChg==,iv:KJhXaAjS3aGxAVJd/9EwE9DKootZxCjXsD8dT6ptFL8=,tag:+wnDeFrMCIqK1vbsS3xAYw==,type:str] sops: kms: [] gcp_kms: [] @@ -41,14 +41,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI - dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3 - TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx - aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts - O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT + eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm + RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ + VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4 + A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-11T19:04:39Z" - mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str] + lastmodified: "2025-05-11T19:15:36Z" + mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str] pgp: [] encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -68,7 +68,56 @@ spec: temporaryData: 250Mi postgresql: parameters: + # Tuned by https://pgconfigurator.cybertec-postgresql.com/ + # Connectivity max_connections: "220" + superuser_reserved_connections: "3" + # Memory Settings + shared_buffers: 2048 MB + work_mem: 32 MB + maintenance_work_mem: 320 MB + huge_pages: "off" + effective_cache_size: 6 GB + effective_io_concurrency: "150" + random_page_cost: "1.5" + # Monitoring + # per statement resource usage stats + shared_preload_libraries: pg_stat_statements + track_io_timing: "on" + # track execution times of pl-language procedures if any + track_functions: pl + # Replication + max_wal_senders: "10" + # Checkpointing + checkpoint_timeout: 15 min + checkpoint_completion_target: "0.9" + max_wal_size: 1024 MB + min_wal_size: 512 MB + # WAL writing + wal_compression: "on" + wal_buffers: "-1" + wal_writer_delay: 200ms + wal_writer_flush_after: 1MB + wal_keep_size: 3650 MB + # Background writer + bgwriter_delay: 200ms + bgwriter_lru_maxpages: "100" + bgwriter_lru_multiplier: "2.0" + bgwriter_flush_after: "0" + # Parallel queries: + max_worker_processes: "5" + max_parallel_workers_per_gather: "3" + max_parallel_maintenance_workers: "3" + max_parallel_workers: "5" + parallel_leader_participation: "on" + # Advanced features + enable_partitionwise_join: "on" + enable_partitionwise_aggregate: "on" + jit: "on" + max_slot_wal_keep_size: 1000 MB + track_wal_io_timing: "on" + maintenance_io_concurrency: "150" + wal_recycle: "on" #pg_hba: # - host all bugzilla all md5 backup: @@ -79,16 +128,16 @@ spec: s3Credentials: accessKeyId: name: pg-s3-credentials - key: ENC[AES256_GCM,data:Q5HxesLPrgkCxrL+mg==,iv:c8CE1YMNWPeqRHdHglTgRPRCqDMONdAqWfsYGWYPjEM=,tag:97yikZw/N9mdcYn4qIJXWg==,type:str] + key: ENC[AES256_GCM,data:zcKEv+i3Gkt6zbFveA==,iv:xkt5FHigqETjrXli/J5S2pXBCML4uv+umn91R42tRyU=,tag:ysbSO/esv63MQuWNpenfvw==,type:str] secretAccessKey: name: pg-s3-credentials - key: ENC[AES256_GCM,data:rL+A1JdCdFMSTIElrLHTM4o=,iv:Zx/v5ZOUQSDYDfnkPa/AqdOF9jRJGnI6reh3REtBfk0=,tag:AhnqbEDEnm3AVFlrBmOCuQ==,type:str] + key: ENC[AES256_GCM,data:GYCEHrQAvd4JZt7G2bJghn0=,iv:JYqPdosI/k833ZfKgBz4QJRdojU0goyo4uN0OUKrIqo=,tag:XylFgelUPxIvYwyKKf2TCQ==,type:str] wal: compression: gzip maxParallel: 8 data: - compression: ENC[AES256_GCM,data:dzakGg==,iv:m4YqvG8UamOwG+j6zIwOzo+NBOXgjVVPHvjAXzN+aeo=,tag:EGz+Uwc0teHC6wyiApMSnQ==,type:str] - immediateCheckpoint: ENC[AES256_GCM,data:KsgnZQ==,iv:DpgunaxA2rKtwV7/wHI+0HJOgAwyK+inTOr2sWxYQmY=,tag:h4PduZrXojaLc36doUcLHA==,type:bool] + compression: ENC[AES256_GCM,data:sEt63g==,iv:uFyTG7wXWdxrmdv429o98ZH6fLRgoi6p8ekDaDIII9A=,tag:uNci61vbADXm5XE5ozPE1g==,type:str] + immediateCheckpoint: ENC[AES256_GCM,data:61LM/Q==,iv:mB+QXIyfukNh2s4S1jgvqZdqc8RFGp7x8RtVrq3hFPs=,tag:YVMTbEBW5iIaM2/BoehCQg==,type:bool] managed: roles: - name: synapse @@ -241,14 +290,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI - dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3 - TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx - aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts - O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT + eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm + RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ + VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4 + A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-11T19:04:39Z" - mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str] + lastmodified: "2025-05-11T19:15:36Z" + mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str] pgp: [] encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -273,14 +322,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI - dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3 - TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx - aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts - O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT + eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm + RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ + VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4 + A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-11T19:04:39Z" - mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str] + lastmodified: "2025-05-11T19:15:36Z" + mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str] pgp: [] encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -306,14 +355,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI - dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3 - TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx - aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts - O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT + eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm + RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ + VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4 + A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-11T19:04:39Z" - mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str] + lastmodified: "2025-05-11T19:15:36Z" + mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str] pgp: [] encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -337,14 +386,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI - dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3 - TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx - aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts - O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT + eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm + RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ + VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4 + A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-11T19:04:39Z" - mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str] + lastmodified: "2025-05-11T19:15:36Z" + mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str] pgp: [] encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -368,14 +417,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI - dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3 - TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx - aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts - O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT + eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm + RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ + VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4 + A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-11T19:04:39Z" - mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str] + lastmodified: "2025-05-11T19:15:36Z" + mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str] pgp: [] encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1