cluster

commit dc9411ace8e3b2d6889b16ea6da15a6c3a990db5
parent d23250be9d0945e8fad469b45ca4bf93007d4f81
Author: MTRNord <mtrnord1@gmail.com>
Date:   Fri, 10 Jan 2025 14:07:36 +0100

Start backing it up

Diffstat:
M
infrastructure/configs/cnpg-cluster.yaml
 | 
116
++++++++++++++++++++++++++++++++++++++++----------------------------------------

1 file changed, 58 insertions(+), 58 deletions(-)
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -10,13 +10,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
-            djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
-            SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
-            VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
-            9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
+              djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
+              SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
+              VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
+              9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-10T12:47:54Z"
     mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
     pgp: []
@@ -40,13 +40,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
-            djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
-            SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
-            VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
-            9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
+              djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
+              SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
+              VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
+              9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-10T12:47:54Z"
     mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
     pgp: []
@@ -60,8 +60,8 @@ metadata:
     namespace: postgres-cluster
 spec:
     configuration:
-        destinationPath: s3://midnightthoughts-pg-backup/
-        endpointURL: http://hel1.your-objectstorage.com
+        destinationPath: s3://midnightthoughts-pg-backup/pg-backup
+        endpointURL: https://hel1.your-objectstorage.com
         s3Credentials:
             accessKeyId:
                 name: pg-s3-credentials
@@ -79,13 +79,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
-            djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
-            SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
-            VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
-            9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
+              djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
+              SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
+              VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
+              9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-10T12:47:54Z"
     mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
     pgp: []
@@ -113,7 +113,7 @@ spec:
     plugins:
         - name: barman-cloud.cloudnative-pg.io
           parameters:
-            barmanObjectName: hetzner-store
+              barmanObjectName: hetzner-store
     managed:
         roles:
             - name: synapse
@@ -121,79 +121,79 @@ spec:
               login: true
               superuser: false
               passwordSecret:
-                name: synapse
+                  name: synapse
             - name: draupnir_synapse
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: draupnir-synapse
+                  name: draupnir-synapse
             - name: authentik
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: authentik
+                  name: authentik
             - name: ejabberd
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: ejabberd
+                  name: ejabberd
             - name: vaultwarden
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: vaultwarden
+                  name: vaultwarden
             - name: mastodon
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: mastodon
+                  name: mastodon
             - name: openproject
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: openproject
+                  name: openproject
             - name: plausible
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: plausible
+                  name: plausible
             - name: coder
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: coder
+                  name: coder
             - name: matrix_auth
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: matrix-auth
+                  name: matrix-auth
             - name: cachet
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: cachet
+                  name: cachet
             - name: docuseal
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: docuseal
+                  name: docuseal
             - name: bugzilla
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: bugzilla
+                  name: bugzilla
     #bootstrap:
     #    initdb:
     #        import:
@@ -253,13 +253,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
-            djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
-            SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
-            VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
-            9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
+              djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
+              SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
+              VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
+              9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-10T12:47:54Z"
     mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
     pgp: []
@@ -285,13 +285,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
-            djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
-            SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
-            VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
-            9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
+              djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
+              SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
+              VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
+              9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-10T12:47:54Z"
     mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
     pgp: []
@@ -321,13 +321,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
-            djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
-            SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
-            VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
-            9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
+              djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
+              SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
+              VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
+              9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-10T12:47:54Z"
     mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
     pgp: []