cluster

commit e6a720ef73bd23155a7bc0e84d1ea7845ba8bc29
parent 5be195ba516591ac177d01dbcbbbdf3feae0b546
Author: MTRNord <mtrnord1@gmail.com>
Date:   Thu, 10 Aug 2023 22:59:56 +0200

Meow

Diffstat:
M
apps/base/forgejo/release.yaml
 | 
33
+++++++++++++++++++--------------

1 file changed, 19 insertions(+), 14 deletions(-)
diff --git a/apps/base/forgejo/release.yaml b/apps/base/forgejo/release.yaml
@@ -32,7 +32,7 @@ spec:
                     - SYS_CHROOT
         signing:
             enabled: true
-            privateKey: ENC[AES256_GCM,data:GljAHipp3lJ0HSomyMYQ9/ckvUlWxiwz3HBSlrOEIoMnbGNAKzxuKW0Ju8kBZI8AWZabrQAKYvOxh7pzUemd773WNK8rz6e8uOJbhOJiN478lVjwqrJhXY3Z5+12b3zMhVR0yNLDHwjexbXFIcD6pVdShYh8nNb0DtX2ubqsCa0V9aVWg3EuCVyrjMe0L6lMuAnUEOePBuSf4U0zI7OONgKulNtVAZ5XoD2Mus9kG2XQW+PTAxgKrqIS8jXCbi7hjfVpGDNIokHfac9YjwseKUCJFa1X01HgxAE5XVZkpoI1VddVv14NC7UM9wuz4t37kg7Ja4PBEAyfP3jeJVC1lp4OgRr/apLV/R2m7ieUFkQqIKSEeXbLV8n1PHghXUXyR2i6bs4H3I90RIjSqUgmFhArDMasWv2dWX22R6fiLTvUWI/gx1FN/0CuANr12tzGVCDO5dS6XfC2m5nR+gWfsEN7KPYiyXdWxPnuzAcuUI+/P2dYCvS9n+PXXPLc2RGWGHZlPR3AaR8DnpyINyWQjKU+dcEyrb0hzC/0SthqnrgSvoylp1rGaK9tj36lk4B+60Pc0VU0nL+3oiGudTFeCUPejG1/FrAjucdHX3MjPM048BG8EPQiSukcSN035beL/2KoI4VLGOV7N+yHyhhBdg8EF907c6zsYfdgv1d/MrapyQTbkizt1RS2LUCPIyVMuhXQjKVpmmnnqVGL9b9CA+O4LI0dMe2lLn+ScDgWeVwvfMwTK4h1S5RalqgbaKlZsJ/8ZSm+4i1wY5xVFV7rMqqwLbsI1As4O7A3ONdd+tXel+fQNoCoIR7cIQNpY58zcRWfw7v7JSpVfXlMwEc9clr6BO1nOshh1p29lIODCtgQwThn/FiUX3ltPsfFUTkpsUudhXc8sP+6mInW9uwvzDLfSh8k8Nimv7WuTnDbgNSToL5wFiBVqsC29f04RAofeRZYawQKVMGnSPXH9igFQPCkDV6rCASvDPLn+pPSl9LKWVzEwFGKjg==,iv:RpR0+PgUKt7pSEZ7UV1NAw8z0R2ClU4ed4ZN/UlQkk4=,tag:V7BB66lkmw9ykRPXFfzp7g==,type:str]
+            privateKey: ENC[AES256_GCM,data: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,iv:RhrT7iX8qPpnhqkFYUHr7dBx2K+VBBf84Gv4PWZgBAg=,tag:052NwVS4DqcjXDa2TrPzhA==,type:str]
         memcached:
             enabled: true
         persistence:
@@ -56,11 +56,11 @@ spec:
                 - name: keycloak
                   provider: openidConnect
                   key: gitea
-                  secret: ENC[AES256_GCM,data:ppIyl4ZWwr1hfLMjsQEPBAXDe7t60CctATLa0h7LO18=,iv:jQwTJQ9rEltm9Vcou7G90SlysShUNNZpZlIvSwrtwz0=,tag:bIn9QA4DpizubqWF7V4HXA==,type:str]
+                  secret: ENC[AES256_GCM,data:FhVqVtYg9VUY1Sgslq9PixqJJEtZS3oe+CMhLskuqNQ=,iv:vmUojaEO33n689COuYGrozbV4KHer84FzG8gbYus5KU=,tag:iEvc8Ilb0+cWlMX0Eokx2Q==,type:str]
                   autoDiscoverUrl: https://keycloak.midnightthoughts.space/realms/Gitea/.well-known/openid-configuration
             admin:
                 username: gitea_admin
-                password: ENC[AES256_GCM,data:2GGPROxOtZnYKMs80SfRHg0Kxoq1kBnf8gH3YAUzs9xECjRcjTPKJa1LI8cwZ2Imi//keg1m1HRTM7HWC9+zaA==,iv:DgeZHI9BLzzfrJuhgiJ+dFrYBMGDuZJvosZPGBJeq9c=,tag:gqV/yTl4Atx06NriMovOWg==,type:str]
+                password: ENC[AES256_GCM,data:/ajVOvxyVGyVsUW9AF00PG7Q4puInj4hgDGwnTIYSKqTReggcKShLOvUT2D6epGeppad/nR0jJduT17G0Qs2Sg==,iv:qqfa+0dTJ2yzDBPBBNgE5QUHvT1eWjsCusTqaCv1M/o=,tag:W+KW9ZhRMyHh0bVr1G+MhQ==,type:str]
                 email: ops@nordgedanken.dev
             metrics:
                 enabled: true
@@ -96,19 +96,24 @@ spec:
                     SMTP_PORT: 465
                     PROTOCOL: smtps
                     USER: ops@nordgedanken.dev
-                    PASSWD: ENC[AES256_GCM,data:3j8TAX5lgWeC,iv:QSN/lAiuGr3How5Hsh8obuWgLXyb9kmzcRe1dOzK9wE=,tag:WzRZOYihRvWHzrEk/qr5VQ==,type:str]
+                    PASSWD: ENC[AES256_GCM,data:tBgM+Ykh/5ma,iv:thc/wggIbmgfC611gpfZkFGdv99klR7vUG0AzI67C/U=,tag:jf5bz/sxe3Boo0O20UHvIg==,type:str]
         postgresql:
             image:
                 registry: docker.io
                 repository: bitnami/postgresql
                 tag: 11.11.0-debian-10-r62
             enabled: true
+            global:
+                postgresql: null
+                auth:
+                    password: ENC[AES256_GCM,data:XLEmYEpvXVemkoKXtkZqvqf+Sq83FrmXCCo7zHFwv7OFR3rBxbCKDnEvM2LSz4WGScgASMlf7da2/EPKB4M8QQ==,iv:uV5Rv+9sBG+2WfNtmQwLZg//8viUJQWL/A4jmWJyJM4=,tag:bflOIJMeFx2I0ANWraKaFg==,type:str]
+                    database: gitea
+                    username: gitea
             auth:
                 database: gitea
                 username: gitea
-                postgresPassword: ENC[AES256_GCM,data:96FZrXVScb0DKGPevp8CnJcb7iB6l8VxuSsMjUTU9inOphyb9vvwiimJ06xT2Nw1bnHcXUNqXgO0Go1VzjZNOg==,iv:vFlNmf/9Ly4XwqCY1sjyLln0lvkojJPQdD7OZBKszNE=,tag:2sdVaF0xyiGwRyd9H9GwiQ==,type:str]
-                password: ENC[AES256_GCM,data:8w65t3acEinsxrByTrdkJPu1Y7/JWf2INyyN5DgbqlUaH4NZ/SAJLFoegoLwh7h0cydGBWTfSEJgXuAhhf7lKg==,iv:mKNt4wJOp/jvnGyHmqGYgevdy0cbz1KbEVSfep0GlgU=,tag:YTxaBXxoMaPoRw5QT5ffXQ==,type:str]
-                servicePort: 5432
+                postgresPassword: ENC[AES256_GCM,data:A+j0FnFnURubNA==,iv:OCzA3mIpEEf5vT6lpVoQvnsjG0UDl98yQAzb+PPN09s=,tag:fd9vNIXK80uRJfjwoAR4pg==,type:str]
+                password: ENC[AES256_GCM,data:13sscF446Fo3E7QLLAby7oTHhh3ki+uNgP2CH9wBDsBk6QDFfzoFb4m03E2jLMaIzVzASDJKHCTYDGgttpAMbw==,iv:/n+ulNeQQSEht25EgjoY+qWZ7tSJd0sfU54EbJYQNDE=,tag:WPcb0F31lOKBWjbAYVFEvw==,type:str]
             persistence:
                 enabled: true
                 size: 25Gi
@@ -121,14 +126,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuT3I5TTlKVGZZeURZRkxa
-            Qy9iRkFadWxTeUJIL3VEVEtmNkcrRkxpdkZJCko0UmYxUGFLTGNKSUkwRDNLS3JN
-            d3VvNzc5UHphREFSYVJMK2dQVlpFTGMKLS0tIDNhd0FUbUtEUktrMktUTVNiUkwz
-            SzA1K0hNYlJLaVZGNjRCb0pvVG1wREEKvfLynnidsI0IsoxRsbI7KudGjgtE3Vlx
-            HIoAdNaPKYF9cy4ptRt6qa6W93yfZKm9yIyAWq1KiGThCSnCpg64cg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dWZtcHJCTmdSNW1qRCsy
+            WkZqRWhIS3lhWVdQaGFYQ2VuNmQxWUV2VW13CmovSEFjSnJST01ET0ZQU0YvUFk0
+            VnNNVkJjaUlURENRekFhbTJ2SEMvN3MKLS0tIFlvdGhkNHJSNHNnY1VldDU0WXRy
+            TEtaYkxJaEhJNjZaalpUZFovc1VvQUUKhF2wTfcnFbKSOnidndD7DM8h8KzJmXYZ
+            WttbHV3To/mn6lvbaRBmzvjdt/UAQgqvJSVVV0CDCRFoCUzDQt2Xdg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-10T20:41:06Z"
-    mac: ENC[AES256_GCM,data:vjyV3g5xDtwxGyNy32DqmUQwm7GLXqXRKkEqdIs2veZrLC0+bIzEUpJfI+6sGo1EpPIVhtNT/P0uPX+m3WJ+AmBgwS26rjf2uV+LqIM6NO39Ci/cCWUnWP+OyNwjOrA8OV+7Je3q+ihBmiDv01ah9YLHDXiLP6CyeAhy+turzUQ=,iv:2lNb+ruk6M3S+WuBlD8dJ1elhtLmRo60VOnm8rkWpIU=,tag:aPrzxmi26jK8n9xPld/qHg==,type:str]
+    lastmodified: "2023-08-10T20:59:49Z"
+    mac: ENC[AES256_GCM,data:QYT6WPqp7L8JNZYtVMcYw5C5CFsAl2gkXRyRyedi3yV4PnBLs++Xr9nm8586JuttTTF3ytK7MZSB4Gve6F42+sgn1ms/YtNheteaBqZ8abehVOzobSSZbQEZq/XdBsCoZ8E8V3PazHp3lG9pzwH1J6dM4SD6GtirsWgGcTl91dM=,iv:7eQKX8KO9I/bhif1m7oQ9KqN4YLvuwJRo0zwa982IxA=,tag:mjaAFNIJo7pha8WjtBijiA==,type:str]
     pgp: []
     encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
     version: 3.7.3