cluster

commit d8b3f7ce32bab61fa0045d172ede6222b999438d
parent 535809fcdac16fc52e7e957609a173e9e2d0423c
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 21 Apr 2024 15:24:13 +0200

Cleanup

Diffstat:
M
apps/base/forgejo/release.yaml
 | 
52
++++++++++++++++------------------------------------

1 file changed, 16 insertions(+), 36 deletions(-)
diff --git a/apps/base/forgejo/release.yaml b/apps/base/forgejo/release.yaml
@@ -35,7 +35,7 @@ spec:
                     - SYS_CHROOT
         signing:
             enabled: true
-            privateKey: ENC[AES256_GCM,data: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,iv:KBmnusb1FD2UzyGmjRalFxZAijDpvxt3KOvQiTeSJp0=,tag:oqlP1kUSQtT+FTX9lazd7A==,type:str]
+            privateKey: ENC[AES256_GCM,data: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,iv:SDi95tvmeMtKbxztu+4GzoPXftDh6FF5cVD3N4Pycv4=,tag:GRZHHP3JoWsSQ3mlXI97CQ==,type:str]
         persistence:
             enabled: true
             create: false
@@ -59,17 +59,21 @@ spec:
                 - name: keycloak
                   provider: openidConnect
                   key: gitea
-                  secret: ENC[AES256_GCM,data:xJlSKvZdun0jy+V+6Aii6LOvqVF0/y22GdUQ7NFa1no=,iv:Sm4tpp89LdnhNftb10Hy0jGlxFmt4Rp6bqfsdN0w5S8=,tag:6IpBsKS9KBe2GKxKeB9u/Q==,type:str]
+                  secret: ENC[AES256_GCM,data:2EzV0JrdQkfAWrteqkgnzHwzAC4Z5tB0T9Cp3Xr/9Jg=,iv:gKdEFfBbA/0xnqoIY5O7SWWarKTvZFTjv/86MCsaJx0=,tag:AKF529TrCfEtnCavlmB9AQ==,type:str]
                   autoDiscoverUrl: https://keycloak.midnightthoughts.space/realms/Gitea/.well-known/openid-configuration
             admin:
                 username: gitea_admin
-                password: ENC[AES256_GCM,data:cXzrmTFmyNh0KjPearBRkVx5VaodcgpoA+CETn1c+p+BO8CY+8CtuX2G1cysYmzP+BV31TYIIB60ru9f2oTflw==,iv:E36NkUzIoccKIXG83OvETSNk38lM+yddssDW5PotYtI=,tag:sdKyuYp0zuGKTlnseHY+qQ==,type:str]
+                password: ENC[AES256_GCM,data:5Y4Ux8kv7/9P1jh3rdO3QadnJeaTgYU/xaR9gVT9x85nhpKjcAi49ln1h5s/08VBUQnWRWh61o8knReqdt816g==,iv:M27y3zNX6goC6rdkojmY/YocaQYzm3fODKmVg7ojkYU=,tag:Ywn3YTY8yzM3gvLsMmwxiQ==,type:str]
                 email: ops@nordgedanken.dev
             metrics:
                 enabled: true
                 serviceMonitor:
                     enabled: true
             config:
+                time:
+                    DEFAULT_UI_LOCATION: Europe/Berlin
+                security:
+                    INSTALL_LOCK: true
                 metrics:
                     ENABLED: true
                     ENABLED_ISSUE_BY_REPOSITORY: true
@@ -103,7 +107,7 @@ spec:
                     SMTP_PORT: 465
                     PROTOCOL: smtps
                     USER: ops@nordgedanken.dev
-                    PASSWD: ENC[AES256_GCM,data:HnKkGw06eIyq,iv:OJwLNqfI90kYb+sIawBRq7A01vXaZHGR1bOnSrWGxRc=,tag:O/55TFCmDXQNM+FbmUg5VA==,type:str]
+                    PASSWD: ENC[AES256_GCM,data:6m3GRvlNGctk,iv:dM2bgyjzeRWMZqOcslZXQBYYGiKzATh90xKJZq8CErs=,tag:xjFGdeXbn4/Mx1RKNDpBxg==,type:str]
                 session:
                     #PROVIDER: redis-cluster
                     PROVIDER: redis
@@ -124,38 +128,14 @@ spec:
                     HOST: matrix-postgres-cluster.matrix-postgres-cluster.svc.cluster.local:5432
                     NAME: forgejo
                     USER: forgejo
-                    PASSWD: ENC[AES256_GCM,data:Ba4k7893dFIBZ77yzmsz+o6/YJERRtpL/vGTa4UsyNUo0tQrAbREzd1WxwoMJYvha78eaVTSKK53L9QLohaR+Q==,iv:wXZaqe9DOItmw0hP4BZp6jjMIgFah+p/ekpAE9EiEqY=,tag:ARYQ5IXa8yv0OORVFQ3RlQ==,type:str]
+                    PASSWD: ENC[AES256_GCM,data:0E4NT/jY+UcxJ25IO08dhgz/Y4QqWOLBY5GSVIOW3UgCfWS49StMROV79kzu+wG3S+xVRMU7+fbTr7j2GSxp2w==,iv:xVtsyZUxQhocVZyIg4YreS+AFs8mMqZUU+W1dJscNm0=,tag:QHaBEgG17e9RTbm0ZsTIiA==,type:str]
                     SSL_MODE: require
         redis-cluster:
             enabled: false
         postgresql-ha:
             enabled: false
         postgresql:
-            image:
-                registry: docker.io
-                repository: bitnami/postgresql
-                tag: 11.11.0-debian-10-r62
             enabled: false
-            global:
-                postgresql:
-                    service:
-                        ports:
-                            postgresql: 5432
-                    auth:
-                        password: ENC[AES256_GCM,data:YO6rRodCmcgVYofE8iy6fvaVLOh2vwRMZTZplvdC92JYlsUaGnU5XuBMZDs8r/UTFVk9QUPyVNDhfJ/kudeoJA==,iv:dHY7R+qOuUwdQrkrHsb8Cp9thIg/P1M2jGBJUt6yzEc=,tag:ZwKB+ihw+PyUkSi0r2iwKw==,type:str]
-                        database: gitea
-                        username: gitea
-            auth:
-                database: gitea
-                username: gitea
-                postgresPassword: ENC[AES256_GCM,data:1JZnYjLTRh+IdA==,iv:ZsbyafabYJHj4edLvZL8gQtBzFwO9T9Bx2mEviasUvk=,tag:JvL6s7UdS8rSNrUZn79UrA==,type:str]
-                password: ENC[AES256_GCM,data:UJRBYwXWihilXq2C3698qF4YOdOqo6BaEoZl6MebK1OMQ8VOugmoRSKbJ5+IAHRRLbdJyYzvrNYZHlJ9BnGyXQ==,iv:Mil9qK0BlvvmIkjPc/TYolcC7Tu0T+dWrMypOr95d6s=,tag:yJ1Aa/BrLeE/nwf0R9QcIQ==,type:str]
-            persistence:
-                enabled: true
-                size: 25Gi
-            primary:
-                networkPolicy:
-                    enabled: false
 sops:
     kms: []
     gcp_kms: []
@@ -165,14 +145,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRcnRlclZzQnh4dXhJZmlp
-            Tk95R2lTRTJPdTdlTmtXeDIzbFUyaGVNenlvCmRNem9XUzAvTUt0c21VWWVDWEhV
-            bVY4aEtVRmhYbzZHd0U3WGpSK3NoR28KLS0tIGp3aG9ZeDN4VGl4UExzc3RBZTNJ
-            cXZGNDJEQ2NVN3VvdysraWcrV0wrR0EK3xmV3CHBDNLvBlUuHJbYwsU+eJY9QUIk
-            aR9lY+YHO1nWb74CUCUB8yItyq9mS9udZUGrIZk5I6sWm6E3lM2CTA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoRzR6TjZzR0pXcC9GYTlR
+            SzlRSVpaNytvVnc4cEJxZHFrK1pnUkNWM0ZnCis1UFEvS21rU01SNndYelBlS1FD
+            eEM1aWpuYVhiaFY1RjBjTU5qN2MvQkUKLS0tIFVOR1F2MjFXWmN2MjVIUnFYYklv
+            TnBmQTVYY2FTM1NFNE1jaUx1S3RrL0kKYNECp/as/AeFWSXQ2fPFNASo7P9iVpXo
+            aShkQPsML/OZqzNZXeQXY8EoLwrcNDEKlXUYPbKykw8NvQLpNCevRw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-21T12:55:11Z"
-    mac: ENC[AES256_GCM,data:yNvWPuev7yvPxLZP/v/6nQ0hDzPnlQ3n+8gfKzexxEAcka34IE+pSr06zD9j+w3/8sVUG6HxzxGDUn3umTK3JjTfQByCEIsBPC6wwEQPDabpRycBSswByY5LP4bqdNinRTyBPZ7z56vlbHVSYcGXgYXIXiwF8S8qGjJn4aRc6Bw=,iv:9i0cu4GLrVVP16+UQhrUMmnACiuh9Z3TQiVsJYVrRD4=,tag:w+rCMZIuTE4ox/LYBxCnqA==,type:str]
+    lastmodified: "2024-04-21T13:24:07Z"
+    mac: ENC[AES256_GCM,data:orjdbynwyPnhVHbBqZI0lD0xS77cTYEsVxSNjOHMZvCIDiBMv99TQd6AkTjjd3/4F4RXefIGoBlGCouc3IXG9R6sO3pX3zn0vInnSKBcMdkwV0kK7SfBCBQhL2+PTjw+IaJfEU5EdKFM+4V5ORj7M7Tbagy/xa6RpVME9FJBtLc=,iv:QJf6Cmbyic80zE27l/bhgeDSZLrQHFsMAiaxaK3qyuQ=,tag:pMmNikXkp7+QpdYo+pHESg==,type:str]
     pgp: []
     encrypted_regex: ^(PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
     version: 3.8.1