commit d7497cc7074eb8c3832021496ca23b3595089bf4
parent f9804057fe377ac33031938261c4863ea10c13aa
Author: MTRNord <mtrnord1@gmail.com>
Date: Sun, 11 May 2025 21:15:38 +0200
Meow
Diffstat:
1 file changed, 104 insertions(+), 55 deletions(-)
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -11,14 +11,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI
- dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3
- TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx
- aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts
- O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+ eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+ RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+ VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+ A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-11T19:04:39Z"
- mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str]
+ lastmodified: "2025-05-11T19:15:36Z"
+ mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -30,8 +30,8 @@ metadata:
namespace: postgres-cluster
type: Opaque
stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:2BFeG63Z8SKFEW707tKhZsKDye8=,iv:6Ej8iwK+gEMFxj+V+zQgy7i7/MqNeY+B1/2a9Herzp0=,tag:WYXfFDD+RiNY42664a6YNQ==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:khzD6wrICpnEikY1h7uw3Jt/WDzBFc8wvQ2P7YJvQO25QfJYHieOhg==,iv:2RjpXjH5akLflKZR7KFCsKgEcH4HmEPbfDJEtsPE6sc=,tag:u/HnzEygHufgaPD6PHndcw==,type:str]
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:iKgRGDo6ZabYYEH3818ENpoBAlk=,iv:ZB2DS4+tK2xjC3uXIkkzbZqcOZbBhKpRMfVCgh8zGcI=,tag:ykYNupDzSF8t+CJJx9YzWw==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:KVY+UmLIBCtne+YpIG+H4uUpl39W8KJfj3hIZhWjVoCqmVmHnzNChg==,iv:KJhXaAjS3aGxAVJd/9EwE9DKootZxCjXsD8dT6ptFL8=,tag:+wnDeFrMCIqK1vbsS3xAYw==,type:str]
sops:
kms: []
gcp_kms: []
@@ -41,14 +41,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI
- dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3
- TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx
- aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts
- O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+ eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+ RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+ VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+ A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-11T19:04:39Z"
- mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str]
+ lastmodified: "2025-05-11T19:15:36Z"
+ mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -68,7 +68,56 @@ spec:
temporaryData: 250Mi
postgresql:
parameters:
+ # Tuned by https://pgconfigurator.cybertec-postgresql.com/
+ # Connectivity
max_connections: "220"
+ superuser_reserved_connections: "3"
+ # Memory Settings
+ shared_buffers: 2048 MB
+ work_mem: 32 MB
+ maintenance_work_mem: 320 MB
+ huge_pages: "off"
+ effective_cache_size: 6 GB
+ effective_io_concurrency: "150"
+ random_page_cost: "1.5"
+ # Monitoring
+ # per statement resource usage stats
+ shared_preload_libraries: pg_stat_statements
+ track_io_timing: "on"
+ # track execution times of pl-language procedures if any
+ track_functions: pl
+ # Replication
+ max_wal_senders: "10"
+ # Checkpointing
+ checkpoint_timeout: 15 min
+ checkpoint_completion_target: "0.9"
+ max_wal_size: 1024 MB
+ min_wal_size: 512 MB
+ # WAL writing
+ wal_compression: "on"
+ wal_buffers: "-1"
+ wal_writer_delay: 200ms
+ wal_writer_flush_after: 1MB
+ wal_keep_size: 3650 MB
+ # Background writer
+ bgwriter_delay: 200ms
+ bgwriter_lru_maxpages: "100"
+ bgwriter_lru_multiplier: "2.0"
+ bgwriter_flush_after: "0"
+ # Parallel queries:
+ max_worker_processes: "5"
+ max_parallel_workers_per_gather: "3"
+ max_parallel_maintenance_workers: "3"
+ max_parallel_workers: "5"
+ parallel_leader_participation: "on"
+ # Advanced features
+ enable_partitionwise_join: "on"
+ enable_partitionwise_aggregate: "on"
+ jit: "on"
+ max_slot_wal_keep_size: 1000 MB
+ track_wal_io_timing: "on"
+ maintenance_io_concurrency: "150"
+ wal_recycle: "on"
#pg_hba:
# - host all bugzilla all md5
backup:
@@ -79,16 +128,16 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:Q5HxesLPrgkCxrL+mg==,iv:c8CE1YMNWPeqRHdHglTgRPRCqDMONdAqWfsYGWYPjEM=,tag:97yikZw/N9mdcYn4qIJXWg==,type:str]
+ key: ENC[AES256_GCM,data:zcKEv+i3Gkt6zbFveA==,iv:xkt5FHigqETjrXli/J5S2pXBCML4uv+umn91R42tRyU=,tag:ysbSO/esv63MQuWNpenfvw==,type:str]
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:rL+A1JdCdFMSTIElrLHTM4o=,iv:Zx/v5ZOUQSDYDfnkPa/AqdOF9jRJGnI6reh3REtBfk0=,tag:AhnqbEDEnm3AVFlrBmOCuQ==,type:str]
+ key: ENC[AES256_GCM,data:GYCEHrQAvd4JZt7G2bJghn0=,iv:JYqPdosI/k833ZfKgBz4QJRdojU0goyo4uN0OUKrIqo=,tag:XylFgelUPxIvYwyKKf2TCQ==,type:str]
wal:
compression: gzip
maxParallel: 8
data:
- compression: ENC[AES256_GCM,data:dzakGg==,iv:m4YqvG8UamOwG+j6zIwOzo+NBOXgjVVPHvjAXzN+aeo=,tag:EGz+Uwc0teHC6wyiApMSnQ==,type:str]
- immediateCheckpoint: ENC[AES256_GCM,data:KsgnZQ==,iv:DpgunaxA2rKtwV7/wHI+0HJOgAwyK+inTOr2sWxYQmY=,tag:h4PduZrXojaLc36doUcLHA==,type:bool]
+ compression: ENC[AES256_GCM,data:sEt63g==,iv:uFyTG7wXWdxrmdv429o98ZH6fLRgoi6p8ekDaDIII9A=,tag:uNci61vbADXm5XE5ozPE1g==,type:str]
+ immediateCheckpoint: ENC[AES256_GCM,data:61LM/Q==,iv:mB+QXIyfukNh2s4S1jgvqZdqc8RFGp7x8RtVrq3hFPs=,tag:YVMTbEBW5iIaM2/BoehCQg==,type:bool]
managed:
roles:
- name: synapse
@@ -241,14 +290,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI
- dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3
- TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx
- aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts
- O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+ eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+ RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+ VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+ A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-11T19:04:39Z"
- mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str]
+ lastmodified: "2025-05-11T19:15:36Z"
+ mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -273,14 +322,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI
- dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3
- TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx
- aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts
- O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+ eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+ RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+ VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+ A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-11T19:04:39Z"
- mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str]
+ lastmodified: "2025-05-11T19:15:36Z"
+ mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -306,14 +355,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI
- dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3
- TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx
- aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts
- O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+ eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+ RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+ VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+ A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-11T19:04:39Z"
- mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str]
+ lastmodified: "2025-05-11T19:15:36Z"
+ mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -337,14 +386,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI
- dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3
- TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx
- aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts
- O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+ eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+ RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+ VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+ A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-11T19:04:39Z"
- mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str]
+ lastmodified: "2025-05-11T19:15:36Z"
+ mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -368,14 +417,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSHpORFAzL0dTL3hYeExI
- dVpQL1VsVDlaK0tCVmV4Z0F1Zk5NRTFzbFE4CkxvbC9jUllhbXlCQ1NIUWI0YlI3
- TGMvTklyeTNrOWxzMmdyVXNzUDVIM1UKLS0tIHBBS2lVS0VrWGJ1RFd4SWNMU2lx
- aGt0WUxGQnhLV0IrVVhMZGhBM1FEMFkKD9tBQS14BeXqLwWLJJYFtdcQdYluDZts
- O0BvqJYPQ8S+qFV+Ruezj1tnZiS08vJVyLEn8yIsIS1vAbauDsB15w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRXZyQWo0cWc3K2FiRUtT
+ eDh0anBwWndua29yTndYVExtRlVsQ0x5WEdzCklHYm1GSkpibmVYd0UzNUtXS0Jm
+ RjBOaHJ4MUxTTGR0VWg2Q3BLZmhhYzgKLS0tIEg3VzdvbG5uMVp6SjNHVFBxc2hZ
+ VzhqL0lySUxMUURJTVN1bTYrWEZTR0UK1Ei/bOQT3zvuSKThL9ajaf6mDvzuR4C4
+ A0BWpx9oWzPfmzJlCk8ztgx8mShc/1sWu/0uCsaGsOmlIJL8f+bU4g==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-05-11T19:04:39Z"
- mac: ENC[AES256_GCM,data:jTEMSS2sNbhw/rRkQxuSqY27/iSHqKHkrdclRx7nZct9Wy2ZWFr0MKpQ8xhj2qf7tj1Nac15Fhg5BKVK4rqFXZP+o6A0M857WGh21dbEVYtrRDus3ExRv//H+/fYaqfFoi6itnvjhMUiTTMVLcEbUzvJzjzmQeRYcklWKcQgByk=,iv:lnMKzmbePrnHFWt7TGPNEaS/c7hRvcK0fRKNXfy+uIw=,tag:kHmqN0c8msjBqrECMm/2PQ==,type:str]
+ lastmodified: "2025-05-11T19:15:36Z"
+ mac: ENC[AES256_GCM,data:VOXtoaZzN8wg4BSSQF08gVWV5j1JgkiFZ1y3qFPV7PqCEzC6ChKWrZs6Nd3XXu1yfB6tSVefA42CBrklK4XF2iXAx43kVdgTGTAX+kHQSgf4GVNwUQUGajWe7VG1+PvBhSIwXBJzErS/GxYurkYgCnGIMdLTDgvof09UPtkT4h8=,iv:acrQNXgpQfCLR4x28UKuOe62Q8krNuzPWftynfPjJjA=,tag:7R5+quJn0B/WoS/Rbv7hDQ==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1