cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit dc913e9608186e159163f53b7b074b5830e433c3
parent 5f1a043c02348b45970ebdba477862c8c96e4f95
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sat, 20 Dec 2025 23:16:57 +0100

fix format

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
Aapps/talos_cluster/immich/database-credentials.env | 10++++++++++
Dapps/talos_cluster/immich/database-credentials.yaml | 24------------------------
Mapps/talos_cluster/immich/kustomization.yaml | 2+-
3 files changed, 11 insertions(+), 25 deletions(-)

diff --git a/apps/talos_cluster/immich/database-credentials.env b/apps/talos_cluster/immich/database-credentials.env @@ -0,0 +1,10 @@ +host=pg-cluster-v2-rw.postgres-cluster.svc.cluster.local +username=immich +password=ENC[AES256_GCM,data:jVewisKykTl5N0MXsisR9TqJMgckeqbfBZWN1PQXZ5rH5dk0vNOgBDe6nEBdfb83qRUxfTmaEOhcT5C+hJBZKw==,iv:s+bHEgy8/EJx6OggvoXv/GnxWnNHvxXkGSiyp9aQ8Mo=,tag:/nqcs2QMGRtdDtH6j/XIHg==,type:str] +dbname=immich +sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjbWlxTWZGMzM1MHowcThJ\ndjg3S3ZPTEczOW43VHk1bHZBSkxReUt2d0JrCkl6RlpCTC9xMDBVMzgwUzlmaFVG\nYkpBam1UM2RWd0tNdDJGV3J6RGRqTUEKLS0tIFlkUEFyWE5aaW1NKzhoajVPejBO\nN04xeXJHSzNoT1JPR1BFaDdOSkhnc0EKsjFWDJ1GWBMQ0WE04SxL5oKoCVOSURMj\nYfAh7+prcD1yMkn/bCOlJuskq77E358efzNyoNqPTOVRDci5CvBQIQ==\n-----END AGE ENCRYPTED FILE-----\n +sops_age__list_0__map_recipient=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh +sops_encrypted_regex=^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ +sops_lastmodified=2025-12-20T22:16:35Z +sops_mac=ENC[AES256_GCM,data:khHdHOhDA0O7c3PrvOO2oDG2vcKVikhNznKTUgzSDmngyGa9rWD3XYn0V39qPfKWaE8GkT76aVBrSgaNMCr3nrwBMhYb+8S/v4ygla+BPsvuBlvB8UYmT/W9j/l7udtfvhPMeSqO+FtKURxRWJMp3rG3NIOTXgQgXAOMoz1MMts=,iv:znrxyKXh8V2aTYzluo2m0MnZQ09nGiftMMkPbxIHGF0=,tag:r1WrawsaMMmSbO87nXYVAA==,type:str] +sops_version=3.9.1 diff --git a/apps/talos_cluster/immich/database-credentials.yaml b/apps/talos_cluster/immich/database-credentials.yaml @@ -1,24 +0,0 @@ -host: pg-cluster-v2-rw.postgres-cluster.svc.cluster.local -username: immich -password: ENC[AES256_GCM,data:APqiJvrsqWccCfcCWB/RaOqarRsDA9pr8EiwX82BpIxCA5AbaNvJ7fdDybUoCLvzoCBWas/p7NLwlbmsSGKknQ==,iv:12CuKOXvPX8VaqNULDr7YNSdAkb247A6rK4tGEMIKa8=,tag:eGODqbv/IwHkh1Cnkbh4YA==,type:str] -dbname: immich -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrTzdBaFpPRUFYdkExaHND - S1FsMEtZQlpMT2hPQ1EweWRFcUMzUGQ5ZnhzCmlNRmExU1JabXM1V2Z6UXFhUU5a - N0ZMS1ZXOFc3YTlRdTZJWGxkSVFKcDgKLS0tIEtGSGtYOVh4aTJRWENmeG1sZFF3 - WXpsdGNhdDVZY0R5K0dhOVNDR1cwdDQKVkGzLfzw31VxPKJLkI0qUoH+I9Rb2pPU - A3R2o+9PGdfBUs7M2c6sepooDOrBcgAn4qDHA5LRGougIGnaO/0+dw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-12-20T20:28:32Z" - mac: ENC[AES256_GCM,data:xiT5EmCue4/Eip/A9fmjNUSjo6RmlPzhLB6aFfc9myBCPYgilEP5UZ4NHX2uU9xvv2KFHIzHPZeD+PaaJK3qAxGAG7kUpFOGm3kU0Ta6UsVaaxU8jpc3+1a6QJX9ysHAG6XBq+TR74LlenZn488jPyK0leAK1xAzpmjuRg5UsMY=,iv:+SWaGJNmHeSu5aBKbPY/0OFEE78KeIbq8iIV96bs7JE=,tag:G7PUHfoC9FbZEUSU0cZ7GA==,type:str] - pgp: [] - encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ - version: 3.9.1 diff --git a/apps/talos_cluster/immich/kustomization.yaml b/apps/talos_cluster/immich/kustomization.yaml @@ -11,4 +11,4 @@ secretGenerator: options: disableNameSuffixHash: true files: - - database-credentials.yaml + - database-credentials.env