cluster

commit e3a4a908e7f6c3b5a673655699f81bb25ea0aeec
parent 7ea3c5fbdee362130c19d8f9963e1851e8477359
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed, 14 Jun 2023 20:56:43 +0200

Add redmine

Diffstat:
A
apps/base/redmine/kustomization.yaml
 | 
6
++++++
A
apps/base/redmine/release.yaml
 | 
40
++++++++++++++++++++++++++++++++++++++++
A
apps/base/redmine/repository.yaml
 | 
9
+++++++++
M
apps/namespaces/kustomization.yaml
 | 
1
+
A
apps/namespaces/redmine.yaml
 | 
4
++++
M
apps/production/kustomization.yaml
 | 
2
++
A
apps/production/redmine-values.yaml
 | 
43
+++++++++++++++++++++++++++++++++++++++++++
M
decrypt.sh
 | 
2
+-
M
encrypt.sh
 | 
2
+-

9 files changed, 107 insertions(+), 2 deletions(-)
diff --git a/apps/base/redmine/kustomization.yaml b/apps/base/redmine/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: redmine
+resources:
+  - repository.yaml
+  - release.yaml
diff --git a/apps/base/redmine/release.yaml b/apps/base/redmine/release.yaml
@@ -0,0 +1,40 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: redmine
+  namespace: redmine
+spec:
+  releaseName: redmine
+  chart:
+    spec:
+      chart: redmine
+      sourceRef:
+        kind: HelmRepository
+        name: redmine
+  interval: 50m
+  timeout: 25m
+  install:
+    timeout: 25m
+    remediation:
+      retries: 3
+  values:
+    postgresql:
+      enabled: true
+      persistence:
+        storageClass: "rook-main-fs"
+        accessModes:
+          - ReadWriteMany
+    service:
+      type: ClusterIP
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-dns
+      tls: true
+    persistence:
+      storageClass: "rook-main-fs"
+      accessModes:
+        - ReadWriteMany
+    databaseType: postgresql
+    mariadb:
+      enabled: false
diff --git a/apps/base/redmine/repository.yaml b/apps/base/redmine/repository.yaml
@@ -0,0 +1,9 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: redmine
+  namespace: redmine
+spec:
+  interval: 5m
+  url: oci://registry-1.docker.io/bitnamicharts
+  type: "oci"
diff --git a/apps/namespaces/kustomization.yaml b/apps/namespaces/kustomization.yaml
@@ -9,3 +9,4 @@ resources:
   - rook.yaml
   - vaultwarden.yaml
   - woodpecker.yaml
+  - redmine.yaml
diff --git a/apps/namespaces/redmine.yaml b/apps/namespaces/redmine.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: redmine
diff --git a/apps/production/kustomization.yaml b/apps/production/kustomization.yaml
@@ -10,6 +10,7 @@ resources:
   - ../base/postgres-operator
   - ../base/matrix
   - ../base/postgres-exporter
+  - ../base/redmine
   - sliding-proxy-ingress.yaml
   - pvcs-mjolnir.yaml
 patchesStrategicMerge:
@@ -23,3 +24,4 @@ patchesStrategicMerge:
   - sliding-proxy-values.yaml
   - synapse-midnightthoughts.yaml
   - postgres-exporter-values.yaml
+  - redmine-values.yaml
diff --git a/apps/production/redmine-values.yaml b/apps/production/redmine-values.yaml
@@ -0,0 +1,43 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: redmine
+    namespace: redmine
+spec:
+    chart:
+        spec:
+            version: 22.1.x
+    values:
+        redmineUsername: mtrnord
+        redminePassword: ENC[AES256_GCM,data:cPDz2u06HWrt,iv:6BuwJ/4K+IjC186rIbnIpJ/U4ILYq9NXP5eOId5gexQ=,tag:LXtENPhmju/4J+9AuakOKg==,type:str]
+        redmineEmail: mtrnord@nordgedanken.dev
+        smtpHost: mail.nordgedanken.dev
+        smtpPort: 465
+        smtpUser: redmine@nordgedanken.dev
+        smtpPassword: ENC[AES256_GCM,data:Sgl1tlFkkpZ3,iv:Gce6JL115PKhvWUYxwbUtrKmeM05w5ZN+oD6ABpNgZM=,tag:PY54+3Zr/EAps6pe6KKqOA==,type:str]
+        smtpProtocol: tls
+        ingress:
+            hostname: redmine.midnightthoughts.space
+        postgresql:
+            auth:
+                password: ENC[AES256_GCM,data:YQqg35/OO23UmBibAIw+AQZ7upiIsO2Y4ZOdU6HCfQIzaEgB4Akv8KnEsxgbjpcLNLn5BlowQvlfmo11STkZRw==,iv:8mVcqygks09LUBm98MO0NtiaFUe6ZnmrCnQDboYowIA=,tag:JKFPCLvKldRsZd+oKsoYNQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1STVKUmRrYUdLMVR2TEhD
+            ak1NYW95MDJMSmVXeHF6THk5dkdQS1NkYVRZCnpqaE51VnlQUzVWc2JJWkh0Z2Z5
+            WmcvVHRtUkU1aElQSnVraWZXaUVLVFEKLS0tIERQS1pSK01kVDhsTUMxU2RCTTgx
+            eCtheEx5eVBvbHM5cFJCNVEzWjJIVVEKpgGUnPIx7iYNtgtjnpBazqvYXcYjd9qQ
+            BqomrN+KNBh1Qo9HLOCW3hwPZeqY9ZIukeJGi+Omqhef9/Bij4OHfw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-06-14T18:56:04Z"
+    mac: ENC[AES256_GCM,data:MioGyY0qHXwLX1C1An6TyfTRnc3Z2fcSM1IpD+z+jDB6y5/GORb7x/xw0JGLNdXyOLI0RMEL1VDkYG0oipibHk+/Y1t9G6+yEMVyYhCvhvNV54/VS/uSZVuHBJaq7pnm4sTU0lhPelPta+TX5bR4SWmE4KPHVuo4bxIDuwSdsJo=,iv:zJiaOlytj2eV3OdYDHmZ0sE56BtUrKSl2ofH1uQf3e0=,tag:vRGiiBuX/ID5JM9ORFIh6Q==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData|password|postgresPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+    version: 3.7.3
diff --git a/decrypt.sh b/decrypt.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 
 export SOPS_AGE_KEY_FILE="$(pwd)/age.agekey"
-sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(data|stringData|password|registration_shared_secret|shared_secret)$' --in-place "$1"
+sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(data|stringData|password|postgresPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
diff --git a/encrypt.sh b/encrypt.sh
@@ -1,3 +1,3 @@
 #!/bin/bash
 
-sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(data|stringData|password|postgresPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"
+sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --encrypted-regex '^(data|stringData|password|postgresPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$' --in-place "$1"