commit ecc416f687c8e2b1037521e999a2b7c9936860c0
parent 8dc44147a766c1699bc9b5fb4335acd995025079
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Sat, 29 Nov 2025 13:28:26 +0100
meow
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
2 files changed, 57 insertions(+), 10 deletions(-)
diff --git a/apps/talos_cluster/bookwyrm/deployment.yaml b/apps/talos_cluster/bookwyrm/deployment.yaml
@@ -175,3 +175,44 @@ spec:
- name: flower-http
containerPort: 5555
protocol: TCP
+---
+# Service for BookWyrm
+apiVersion: v1
+kind: Service
+metadata:
+ name: bookwyrm
+ labels:
+ app: bookwyrm
+spec:
+ selector:
+ app: bookwyrm
+ ports:
+ - name: http
+ protocol: TCP
+ port: 8080
+ targetPort: 8080
+---
+# HTTPRoute for BookWyrm
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+ name: bookwyrm
+ namespace: bookwyrm
+spec:
+ parentRefs:
+ - name: envoy-gateway
+ namespace: envoy-gateway
+ hostnames:
+ - books.mtrnord.blog
+ rules:
+ - name: bookwyrm-traffic
+ matches:
+ - path:
+ type: PathPrefix
+ value: /
+ backendRefs:
+ - name: bookwyrm
+ port: 8080
+ timeouts:
+ request: 240s
+ backendRequest: 0s
diff --git a/apps/talos_cluster/bookwyrm/secret.yaml b/apps/talos_cluster/bookwyrm/secret.yaml
@@ -5,9 +5,15 @@ metadata:
namespace: bookwyrm
type: Opaque
stringData:
- POSTGRES_PASSWORD: ENC[AES256_GCM,data:Uopo3d+Go6I25dz2Bt7fliF6O5ql0l/8weRivW7N0ML7sqdH5TOagkemXEGwjirLO68YIgIc5EWaAe7i2OnXiA==,iv:+Of22HpIF8iLHyovuBarF7fUMS5wSn3xO3Q44xVQLZk=,tag:KdyrvsE6UA+gTXgnf7Tp0A==,type:str]
- SECRET_KEY: ENC[AES256_GCM,data:Puyxvn0VjjMfbZm0UqLeC61eQoTyqWScsngd1rqXymI/D2PtylUp1CrKhSo11BwxNvWTe8XtxqA0jZEGSAlc5Q==,iv:v7tCTzOjuEQDI5EIeKB+LktvkfPxAJeTNJ79HmfTF38=,tag:ZzXcIlK9yPLn/aga9yGdsw==,type:str]
- FLOWER_PASSWORD: ENC[AES256_GCM,data:thAYzOkHtrh103cQcsUNiVF8iGqQI4E8oyF29/CRAPE70d2HyOf6Bz4nVMUsc8N6nBWoTvJJ9c1YHzRB8RVgxA==,iv:5wcQZaTHwEvb0LzatfuqqPaXTgQaYrQPBW91UgpSVMs=,tag:PY7g2s6GamzTgchTblbdhg==,type:str]
+ POSTGRES_PASSWORD: ENC[AES256_GCM,data:moDbDW7u5QB7GtT04Dqo9aiYuHFo0/lHeAzhG9cK3dlxZDQauofZhSMw5COBkA6j2GBZMzRTqh+dH/d5sc2neg==,iv:66vg0XweRaXR/p4Lx1u4nyrlssn5XS1T/B1pZUDIGN4=,tag:hyieKtrSqwytGQDIc8wcHw==,type:str]
+ SECRET_KEY: ENC[AES256_GCM,data:alngBMYS6CbBwz44paZDI61ajokbCjYNaVqX1gjcsm4PMpPgnF2+FN3kL3MU5jy9qtsh73KE71rx+TvxYq4FNQ==,iv:8Ek6g6jpMZoBMd+oBYqe8yhJaVPLci00hl5Lxd3y9DU=,tag:A3scfT7EXGXnMI/mLLzZyg==,type:str]
+ FLOWER_PASSWORD: ENC[AES256_GCM,data:yw//l5sR7ettJ1j4qTfmCt/fom81uu73wGE5wwWfgTeWy4BmqmkNlhwzM6iQijvU2UBw7ElHIzhq6k18kWl7lw==,iv:+BZQKb2e//ukINaWSpEZtIopSRn5MyA9eknpMKisoR8=,tag:xnFZ4PECDYOn5th+zGUBaQ==,type:str]
+ EMAIL_HOST_PASSWORD: ENC[AES256_GCM,data:PFtw0nfAav9CM4tAgvIEbGKRl9Qa5+T4W3Qmjan7Z1onrRSjbmHN832cKZNJ8RT7RsTrfuS61YhuR1cgxcSt9w==,iv:GeecxLdc6RDWg2MHqJ2Ufr7ea1sOPMsurQ5Mzsvumw4=,tag:LfqMxCPk5RO3g9YLAmQTDA==,type:str]
+ AWS_ACCESS_KEY_ID: ""
+ AWS_SECRET_ACCESS_KEY: ""
+ AWS_STORAGE_BUCKET_NAME: ""
+ AWS_S3_CUSTOM_DOMAIN: ""
+ AWS_S3_ENDPOINT_URL: ""
sops:
kms: []
gcp_kms: []
@@ -17,14 +23,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsYjVnNkI5N2J4M1hoS3dB
- N2QzK3JVZkRUZDI5UmdzSlVUU3BCRFRaVGlBCitPQ0VkYk90dlpQb2w5TERkWUdx
- NVQ2VXFYcW5tclFQalg4bm1LeHd6SEUKLS0tIHBVSzVCbmZleTlqdWh3R0x6ZHNC
- MWs2L2prd1huMWFVZ1lwOW04QWNrSncKqUEeEezOvm9evhY2feFN8bVdgcaglQH7
- mNEWLnM/GIQK0VgXCS5rEdBWwSC8rZTtKbRw4ZPQslqofG+49kAz/A==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsL003NlRGbFhWdHZ6ZTJu
+ cGhVMDU1bU1vZWU5b05mSDJPS3hXK0dBYlZZClBaZ0k5M00vNUxFUVp0UGRpTE5n
+ dE5oY3krKzV4QVlTbXREZEx3OGJ3cTQKLS0tIFBzL1dYcGVSMnJNVC9adUJGR0Jr
+ eGljVVYxaVl1WllDUGgrSnR4Vy9kUm8K2UvwD5lXmi+3kM9LHPVSHV2LT8E0Y8Dv
+ bT6bki9fJ8L+MbVkV8mzTYs9YENl560k6lmEzRGImcBh6U3UA7YIAQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-11-29T11:37:19Z"
- mac: ENC[AES256_GCM,data:cLl0hMH4uRLyAPW6gfS92qF7Rolccu6FWAMQgribPe0TntgaE1nCXXAlsub8Dh97uBT86HSoUbIVeDnrTErbtPVU4K0u8mik78fcRS9W3xTsVGXBdqFuEA51q1pSa0CTGX5wt8MagQswj3HjFV0080VVri5I5/i0M+c5Wo9sNhc=,iv:4XeGuwOJgrr1CiHouhje6Q7psDGvCk1gC2P7UnsoSGc=,tag:/3dJZq8uKFUt4keRi7HFEQ==,type:str]
+ lastmodified: "2025-11-29T12:28:22Z"
+ mac: ENC[AES256_GCM,data:Y5nAh0Z+CxZ/X4CLJypOx+8+Jigua2hhzVfsAtBXBbH85TsmTcmBxBp4yI2mw0HQXKc4PjmdWkhBNUECEvqywlZT+vjZC0hKvcai4jmTx4KB1QdEo5ivI4YKZZk8dRwo0bBq5yMLxuK/FRdrWNirobc88EVZIDi+LmZVDmh3wuU=,iv:/D6y4gmsmfEyvpnEFi3x3p5CiSMSGtjQhSPEDD/OTT4=,tag:na+kr9QjP3CDgibhFxlFeA==,type:str]
pgp: []
encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
