commit eba20731d8d229e89acf8243407a6cab7a401d85
parent 74012ed53b60eb1a59953e833020addfbf529aa1
Author: MTRNord <mtrnord1@gmail.com>
Date: Sun, 21 Apr 2024 14:14:18 +0200
Meow
Diffstat:
1 file changed, 164 insertions(+), 166 deletions(-)
diff --git a/apps/base/forgejo/release.yaml b/apps/base/forgejo/release.yaml
@@ -1,173 +1,171 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
- name: forgejo
- namespace: forgejo
+ name: forgejo
+ namespace: forgejo
spec:
- releaseName: forgejo
- chart:
- spec:
- chart: forgejo
- sourceRef:
- kind: HelmRepository
- name: forgejo
- interval: 50m
- timeout: 25m
- install:
+ releaseName: forgejo
+ chart:
+ spec:
+ chart: forgejo
+ sourceRef:
+ kind: HelmRepository
+ name: forgejo
+ interval: 50m
timeout: 25m
- remediation:
- retries: 3
- values:
- # image:
- # # Codeberg.org was down.
- # registry: docker.io
- # repository: mtrnord/forgejo
- # # Overrides the image tag whose default is the chart appVersion.
- # tag: "1.20"
- tolerations:
- - key: arch
- operator: Equal
- value: arm64
- effect: NoSchedule
- containerSecurityContext:
- capabilities:
- add:
- - SYS_CHROOT
- signing:
- enabled: true
- privateKey: ENC[AES256_GCM,data:LqhqEYF/pKPTrZF8oS5nBzutCxMuOFYrODvHJHvTqYgAiAPRVf0OtLgzy02bxvfN3iX5h6d8Y5HEfJCVG0GzPqgphJfPcrxXpw+9RFXMswpGutsqzvgZPT5ly9RYMKI/u6zBwrGszigyELXO6uvFIi/VAErg9ubK8/bGRn9DXngyC9BR1XyLQz7jiR1zFafhb33hiLAmK05UpaZnW6WTToZpcyVbezPtq1WetwLiaf1rG/Bt5qXVVJjXcmLmI2VY4MjDfyNLK1hm3LET8jvA8ld+LvR4phVvutmsXAkEWGj0u22poxzXaFj0FmH0r+qzV/KxWez/p1E4w/Wrs0MIjxTT/acriVcuM9Y9FB6XYQErQUBt9MM7B6u6nJAvzqJ01BFjC26KGSSxtjWdXnWpfAhBYeC66Gd3HVEtCG/PLDL0xKD0YiFfYT78WNIYp89k0Sjq0nREEBuLQd2+3Q3GDOLzT4kdDp7oTBU5n662f5rahaPGbAFG0oTfFzSYIb8YWeqp38CUoZLIRili+FdWxNcrzGLOD77G8Xm0I71UgpcDRLHnZwxNsvJtffaaU0Q+BW2nzoVlk7T9tMXWCXXvLUtaj2s01lK4DUNglSEyOmN4vrO/OWi4D8vONtidG7Fi8RGewefW73rmEflN9lUGb9Rs+N0bXBr5zyKoOXRp7y9ubQKL//XNNSaNa8xc5pOt3tL8WV0afBZ4c0XN6FZLHKei8z90ehQL+rR0E1jQKuO0SJJZbtOunw5UNWxhjOOxKtcqFt3GVfS08b5alY4/Qx93kJS0lwYpvulY5gyqo7+2u25WOKuTQCC2zuEKjCE2MOM0yRJGV+ReH5vnUwc760xtQx3Vva0iJQBVYmcj9o7Cn62oQ4A7RDQ/FF4z5MZyiAgNVLBb5HqwjuFC7t7ZL6niPTuPeDEKCHc8As8ryr6ZD8oaG65PmVnu3kiKaphlzLiCxA5783GZrQoOUgV2XMdZ/01hFLtaNn09n4izSsBaek/SI5Pz7g==,iv:EMmDKJFcHA0V+wzCckGBviFYU6yZV6j2d+iRKaz0Yww=,tag:Gmr6ZlDIZ/tZjEfM66ckZA==,type:str]
- persistence:
- enabled: true
- create: false
- size: 50Gi
- claimName: data-forgejo-0
- ingress:
- enabled: true
- annotations:
- cert-manager.io/cluster-issuer: letsencrypt-http
- hosts:
- - host: git.nordgedanken.dev
- paths:
- - path: /
- pathType: Prefix
- tls:
- - secretName: git.nordgedanken.dev-tls
- hosts:
- - git.nordgedanken.dev
- gitea:
- oauth:
- - name: keycloak
- provider: openidConnect
- key: gitea
- secret: ENC[AES256_GCM,data:fQs+IXaqs3A01K/XEX5p4S7mMbWBq1G0pP9k3vbgHBc=,iv:SQY5NPCcqvvVjzlmLl9ct9YRga1JdekZ5j+UjERdUfU=,tag:tBlejTYSL1kughQAvvgVfQ==,type:str]
- autoDiscoverUrl: https://keycloak.midnightthoughts.space/realms/Gitea/.well-known/openid-configuration
- admin:
- username: gitea_admin
- password: ENC[AES256_GCM,data:rqw5msWg2RtYQIwTdSQmkmb2bvt6ecE5IlGOSZHO4PCSdEGXKRBdjQlpprdVvX+2D0LSLXlroo16IS1XWx1Pbg==,iv:EsIn7Cz+K2DC8dtJI2kKrLJTxIWQ7ZysOfIuUcfyOGU=,tag:2SDglBy+6GhowYSjUqXzEA==,type:str]
- email: ops@nordgedanken.dev
- metrics:
- enabled: true
- serviceMonitor:
- enabled: true
- config:
- metrics:
- ENABLED: true
- ENABLED_ISSUE_BY_REPOSITORY: true
- ENABLED_ISSUE_BY_LABEL: true
- actions:
- ENABLED: true
- DEFAULT_ACTIONS_URL: https://git.nordgedanken.dev
- indexer:
- ISSUE_INDEXER_TYPE: bleve
- REPO_INDEXER_ENABLED: true
- repository:
- MAX_CREATION_LIMIT: 0
- DISABLE_HTTP_GIT: false
- service:
- DISABLE_REGISTRATION: true
- ALLOW_ONLY_EXTERNAL_REGISTRATION: true
- DEFAULT_KEEP_EMAIL_PRIVATE: true
- oauth2_client:
- ENABLE_AUTO_REGISTRATION: true
- server:
- ROOT_URL: https://git.nordgedanken.dev
- SSH_PORT: 2222
- LFS_START_SERVER: true
- START_SSH_SERVER: true
- federation:
- ENABLED: true
- mailer:
- ENABLED: true
- FROM: ops@nordgedanken.dev
- SMTP_ADDR: mail.nordgedanken.dev
- SMTP_PORT: 465
- PROTOCOL: smtps
- USER: ops@nordgedanken.dev
- PASSWD: ENC[AES256_GCM,data:r91hn6p65iYL,iv:mL9SFDruo4b5QzTHj1X3tJcKJLOdKVW9M86Nf408JaA=,tag:y9lH8RG43QGRMVPcMO9cXw==,type:str]
- session:
- #PROVIDER: redis-cluster
- PROVIDER: redis
- PROVIDER_CONFIG: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- #PROVIDER_CONFIG: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- cache:
- ENABLED: true
- ADAPTER: redis
- #ADAPTER: redis-cluster
- #HOST: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- HOST: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- queue:
- TYPE: redis
- #CONN_STR: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- CONN_STR: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
- redis-cluster:
- enabled: false
- # networkPolicy:
- # enabled: false
- postgresql-ha:
- enabled: false
- postgresql:
- image:
- registry: docker.io
- repository: bitnami/postgresql
- tag: 11.11.0-debian-10-r62
- enabled: true
- global:
+ install:
+ timeout: 25m
+ remediation:
+ retries: 3
+ values:
+ # image:
+ # # Codeberg.org was down.
+ # registry: docker.io
+ # repository: mtrnord/forgejo
+ # # Overrides the image tag whose default is the chart appVersion.
+ # tag: "1.20"
+ tolerations:
+ - key: arch
+ operator: Equal
+ value: arm64
+ effect: NoSchedule
+ containerSecurityContext:
+ capabilities:
+ add:
+ - SYS_CHROOT
+ signing:
+ enabled: true
+ privateKey: ENC[AES256_GCM,data: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,iv:IJbmILZhSrsBpoqknl8B+zkAW292Ovl8/DBuUOEcWJU=,tag:wnh4UJ/Aru1TUXIsJu+12A==,type:str]
+ persistence:
+ enabled: true
+ create: false
+ size: 50Gi
+ claimName: data-forgejo-0
+ ingress:
+ enabled: true
+ annotations:
+ cert-manager.io/cluster-issuer: letsencrypt-http
+ hosts:
+ - host: git.nordgedanken.dev
+ paths:
+ - path: /
+ pathType: Prefix
+ tls:
+ - secretName: git.nordgedanken.dev-tls
+ hosts:
+ - git.nordgedanken.dev
+ gitea:
+ oauth:
+ - name: keycloak
+ provider: openidConnect
+ key: gitea
+ secret: ENC[AES256_GCM,data:CVIT5cGmGSfn4ejb05w0Kxr/olIpMeBx2zL4PjTPwns=,iv:6k4qdKp0nP9UyvRIBuHnHVp3yo5u+ZRgENLWoi3EqIY=,tag:5rLgXrlZWfpjP+5/kVqy3w==,type:str]
+ autoDiscoverUrl: https://keycloak.midnightthoughts.space/realms/Gitea/.well-known/openid-configuration
+ admin:
+ username: gitea_admin
+ password: ENC[AES256_GCM,data:/1Khn/RNpe1BuPLF4b2l8mmH0kJuNCd69QfUHE2uo5v6tJqbbk24w+uExghuM0aTpa/jaXhzsAvh2vMSU1EBbA==,iv:+of+SmL0utVqr7cY0fUInsqoElEOVj2IAiYZYscod80=,tag:5ROrBXvWf1VIh+TflU+WJA==,type:str]
+ email: ops@nordgedanken.dev
+ metrics:
+ enabled: true
+ serviceMonitor:
+ enabled: true
+ config:
+ metrics:
+ ENABLED: true
+ ENABLED_ISSUE_BY_REPOSITORY: true
+ ENABLED_ISSUE_BY_LABEL: true
+ actions:
+ ENABLED: true
+ DEFAULT_ACTIONS_URL: https://git.nordgedanken.dev
+ indexer:
+ ISSUE_INDEXER_TYPE: bleve
+ REPO_INDEXER_ENABLED: true
+ repository:
+ MAX_CREATION_LIMIT: 0
+ DISABLE_HTTP_GIT: false
+ service:
+ DISABLE_REGISTRATION: true
+ ALLOW_ONLY_EXTERNAL_REGISTRATION: true
+ DEFAULT_KEEP_EMAIL_PRIVATE: true
+ oauth2_client:
+ ENABLE_AUTO_REGISTRATION: true
+ server:
+ ROOT_URL: https://git.nordgedanken.dev
+ SSH_PORT: 2222
+ LFS_START_SERVER: true
+ START_SSH_SERVER: true
+ federation:
+ ENABLED: true
+ mailer:
+ ENABLED: true
+ FROM: ops@nordgedanken.dev
+ SMTP_ADDR: mail.nordgedanken.dev
+ SMTP_PORT: 465
+ PROTOCOL: smtps
+ USER: ops@nordgedanken.dev
+ PASSWD: ENC[AES256_GCM,data:O6r2uOsPE28A,iv:DIox5pYytIl2uEvlVqtSm8IWGmDeYe9upjvvPkC52Fw=,tag:DapIgcKLFHkeA2n1yDGdOA==,type:str]
+ session:
+ #PROVIDER: redis-cluster
+ PROVIDER: redis
+ PROVIDER_CONFIG: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0
+ #PROVIDER_CONFIG: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ cache:
+ ENABLED: true
+ ADAPTER: redis
+ #ADAPTER: redis-cluster
+ #HOST: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ HOST: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s
+ queue:
+ TYPE: redis
+ #CONN_STR: redis+cluster://:@forgejo-redis-cluster-headless.forgejo.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s&
+ CONN_STR: redis://:@forgejo-keydb.forgejo.svc.cluster.local:6379/0
+ redis-cluster:
+ enabled: false
+ postgresql-ha:
+ enabled: false
postgresql:
- service:
- ports:
- postgresql: 5432
- auth:
- password: ENC[AES256_GCM,data:+WUmzbe4q7Aa58WJW9xjf/gjTNwosK02daY59lc9xeO+ulAL9SiG8IMU+omUxC2ehXdWg3RcUrnlU7U7+uYn1Q==,iv:Q/djXoMbQmRpK2/gHc6IMlGE5dNpUlS03oRe2ZTz2Dg=,tag:TrxIxyT8F2fjB7j+b+Z1tw==,type:str]
- database: gitea
- username: gitea
- auth:
- database: gitea
- username: gitea
- postgresPassword: ENC[AES256_GCM,data:lo+0ocNtFtuW6w==,iv:Xfy04BMJnOoS6ai/3UwEyzHy2epdyuDN0uPaX1kzgQk=,tag:Rebxt9QhP61dkKaXjAsQ0g==,type:str]
- password: ENC[AES256_GCM,data:EmgBmUi9AZfqwGj0EXOfpKB9qS+XBhuQiE39jG5N211EBSaVY6UxFVGKwnpDt6dybfuEZCgwDMz90mAUtWNzYA==,iv:Twmz7YxPDWrbBkEy/xlmNSty34cd7LV2Tac3crxY71o=,tag:poZg4IeF3Yod96937oVWMQ==,type:str]
- persistence:
- enabled: true
- size: 25Gi
- primary:
- networkPolicy:
- enabled: false
+ image:
+ registry: docker.io
+ repository: bitnami/postgresql
+ tag: 11.11.0-debian-10-r62
+ enabled: true
+ global:
+ postgresql:
+ service:
+ ports:
+ postgresql: 5432
+ auth:
+ password: ENC[AES256_GCM,data:T4Z/E43GR9M4dsQIZtJkYQkWF7e2X3a0AUeleBsxTlmwRu598W2DmLyTgk/N2YwIQ/gPA583Wn/fJqhkMQRf0w==,iv:w1tu00eHvAzicJBUVtWxTk1YYZW1vo25ZByZEVSiqQ0=,tag:akBuNgyA+uFy3T1pp5apkA==,type:str]
+ database: gitea
+ username: gitea
+ auth:
+ database: gitea
+ username: gitea
+ postgresPassword: ENC[AES256_GCM,data:29uGZw3VawguUg==,iv:3EZkM/8hq/hHVEcKc2ZZm0+geZ9MOyyyQRu19O2qk4Q=,tag:zn9kcklLayUpo7s9Hd601A==,type:str]
+ password: ENC[AES256_GCM,data:brZSTTDILdVcuWdqt7qjHElV0pMzb0C2TXUXCxaslf3P48IPM+WC3y8CFlna829WhF8sK8yNs8OmrJKVqR0uSA==,iv:fXWfq0XNs/GQsADDBebPh/ExjEMPiBg1exj01F2dTKg=,tag:qaiHoTI7ZMyFBLh1Q7AJkQ==,type:str]
+ persistence:
+ enabled: true
+ size: 25Gi
+ primary:
+ networkPolicy:
+ enabled: false
sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArSVpTcjJheG5JMXJRejFK
- RHNxYnljZFZwYUZXWi9qOHowLzJBZUd6S3pRCmtLbEw5NG1SQjZaaXB3VVhmSC83
- alc2VGNOejZBMExtRmpoV2U2Z0orVFkKLS0tIFdsdjhZRUlkd2w4ME9aZThxY2Ez
- djA2MWN3ZWYzWEdhV09CWVNqOTh3V0UKNwLgmXiOeYiujjGdhTfowwXjSPdoc8Xu
- 2r8MxgG7QkWkeep1/2Sk3TQvc3A0Q/BcoGgPVuRgoN4f1dKcg58EsQ==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2023-08-17T21:34:01Z"
- mac: ENC[AES256_GCM,data:DruRjRVzmfuUwebTMAOCcFJl17v4y37RP3p/IycPTLhwUK+Lq/OVO7Ie0z0tmJVBj09B0ei8TqDlXfCyreu3qK69WZd65sINQJJ4QBVpIKlme2pmbvTAqZMRliQO+CQBIe05vRojgqH1sqcyu2TfWRLzAJi/r5xVs9AeFBaacpM=,iv:eRX15Zyy09A3E3i6cBSGyPiu+X9dghl8fVfu8z8WsHU=,tag:XWocAQENek6jz9KO8g086g==,type:str]
- pgp: []
- encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
- version: 3.7.3
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYaW44RHZFRzE4TzlmVkRN
+ cTRjeHV4SFllcjNuSjg2alFuSDVrZVJ0ZkZ3ClFSWE5Qa1I1OEM5WlRWSXNuN1ZP
+ WDN0T3ppSmpQajk5dVpXU2t2bEVtU3MKLS0tIDZtbldIT2MrQUw4dE85aWQvaGFy
+ d3k5Qkc4K3plUk80YTNYblBzdDdWLzQKJwxRFp0xM0M/YQt1UYO+gyiMX2Lsxwfw
+ dX6Va5dT9C8iGAkQ5wwdZ0GK153XoxcJjFvtsOFqPLFebxjay8YAig==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2024-04-21T12:14:11Z"
+ mac: ENC[AES256_GCM,data:+1FyXz33iTQaPb+HCpI0o5v9CFY7BgzLBwN0D/hX4cya85xKxCRGDoG6ePQm0SoZswghlszDv2EBRCb3ZjW6A4vzXJxLPqq8TMOnKVSXMd0GSSgaivkGX32GX+gR27hL97FZQ4CDnuBuhGhxT0NpCe4s9TA2uAA/eh8fQw4hBVc=,iv:k38WzExq+B4QDAmDguW2aD2fdPwzJAEu0YF/SlFXMuc=,tag:MNZbfGVgbWGIUzgl0dhxPw==,type:str]
+ pgp: []
+ encrypted_regex: ^(AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+ version: 3.8.1
