commit fe9e5bf5f3b91ff9b8f96e30064af73750709f52
parent 8cfb67fe9d05879815f9d93241a9693ed6be4996
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 15 Jan 2025 12:15:01 +0100
Try envoy
Diffstat:
1 file changed, 52 insertions(+), 16 deletions(-)
diff --git a/apps/base/docuseal/release.yaml b/apps/base/docuseal/release.yaml
@@ -15,7 +15,7 @@ spec:
values:
ingress:
main:
- enabled: true
+ enabled: false
annotations:
cert-manager.io/cluster-issuer: letsencrypt-dns
external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
@@ -34,19 +34,19 @@ spec:
- docuseal.midnightthoughts.space
persistence:
data:
- enabled: ENC[AES256_GCM,data:JCj8yg==,iv:v+ut0Rpj+sQwI4UUSR8duyKw3knSbldzp5EbVgWa7+4=,tag:Jp72CM1jezIzx0ab3bPMPQ==,type:bool]
- size: ENC[AES256_GCM,data:UhdP,iv:AW1JH50Ki+uuN4vqwGVY9jTqfSBRRKZvNr/earE6THU=,tag:OK62g/lYKuQbI1PtW2KV8w==,type:str]
- accessMode: ENC[AES256_GCM,data:N1mJZgQi0Cz6U3vATg==,iv:lgwLHhP5Y1NZ4odZvAxGZr0iZtgPTfouZYZEB5h9YXI=,tag:1guGXsJiRwqJhCQYtoPhXw==,type:str]
- existingClaim: ENC[AES256_GCM,data:8aB+VclotwS0L+7vveqTJA==,iv:BdWS6L4oNADMrzNeCW5bpLomT0vkRjA0YliU3mseFeo=,tag:xFms+QfLeoh1a5ETdGYr4A==,type:str]
+ enabled: ENC[AES256_GCM,data:hfnuEQ==,iv:WNTxnCjdiTRu4a1LParbk9H62A2mBD9ZN3QMOfMs/Y0=,tag:yh2fJrH+PxZG56mAIoepNA==,type:bool]
+ size: ENC[AES256_GCM,data:khmM,iv:EqL2H0uRIWTzy+ZCEOSgz+dBke3twJ5JU5TRJ3fwP7g=,tag:fDmua4pSGQsldnIwHq0+GA==,type:str]
+ accessMode: ENC[AES256_GCM,data:zJfM4tat/JvNim2ZAA==,iv:Knl5+KuIQ3NVoNfvdhNHhfngVvyyOTQcO4aam6n6dn8=,tag:3be2AWvxLg9EZHAWCqJcTQ==,type:str]
+ existingClaim: ENC[AES256_GCM,data:Ow59ciaGSxFt5yMRj7KrKA==,iv:XFc8KOc4q/qNSQEfjjBXRgsNn0qbNoaEqE/VUfPynqQ=,tag:j2TM6wRvaB4dA1kFxMb0gw==,type:str]
env:
- SECRET_KEY_BASE: ENC[AES256_GCM,data:gfjbngRcJvmBr1LCzZk5cQ6d5FHI0YGWQE1xNsy/vssuUkieJ4TdC4gpf3gYwFutnSfGx39yRrrD18OvNVBlodmOwOhJZv7Ydj9A1cMF3JsvNourlylgxp/KWCXflUaw3T3vVBdv644HQfNeuBsldNxk7nohfaobBVliY0LiGtU=,iv:0eiiJGAenNcy8bx7atnve0FzkovLODJWXHQ0FFEaSN0=,tag:bxC/DLc2HJ4UJCB/f/dsdA==,type:str]
+ SECRET_KEY_BASE: ENC[AES256_GCM,data:SVQdXS+re4JOwH3N+YnMMvJ9/R22seWxdeNofhFf4yM0YDiMObILsheFFUzuk6/tyFVqBasfrkLz9yBZcpQl/uIHNPT5fgsOCcu++yqBrdLgbjkq2NJrN+rk6TFANszuv80yWX2yGKKtVzEw832lqt/gbhnKeOsV2iJKg9lf5Cw=,iv:QbKVaFzblXmKHmpepXCgANs2F6SlpAI6AB8tlGw1YmQ=,tag:bLEs29TgZI8yuYbO+3n66Q==,type:str]
SMTP_USERNAME: mtrnord@nordgedanken.dev
SMTP_ADDRESS: smtp.fastmail.com
SMTP_PORT: 465
- SMTP_PASSWORD: ENC[AES256_GCM,data:2OYI1R57SjnbuTXCbbsRUA==,iv:aqjCOfFnf2hf1B+cVTXaniN+zF+uggAjopC1eU0WDiw=,tag:1mEd70S/o4xgKj+BFU5S4g==,type:str]
+ SMTP_PASSWORD: ENC[AES256_GCM,data:pChv/70nqehjOlLVQ93/CA==,iv:Iym4Aw2f95DPVwtn1H/VjDIIwXeolAmU5+h5k6ae9sg=,tag:PRwVPRT5rwW42OzPx8fq7w==,type:str]
SMTP_FROM: ops@nordgedanken.dev
HOST: docuseal.midnightthoughts.space
- DATABASE_URL: ENC[AES256_GCM,data:yqtWeCP3/DJSqque1HaXDR7/c+/Jgg1JGpvIP/m0kBDLbnltmWAFTH2mOiECRXuFw88QzPGbCpI7cUDW97xr4yqccvZWnGrni/QqSOPnB4+a4f6KXPDwW+8TTUUM7vHwu9aK/C74yzlXBbsrX3e7emXZDWOh+1nU4NukzWurwB3MTDaZQF/QRLzywis/y2ZH325ctx30k6qfUlzwu7cirgTw2uyVcbE=,iv:aYjOlNtYoVsCwIgCYOMXGMwGJ/ppyQEnN+mQPWFJj5w=,tag:FQp6z2uztgeqDZrXeYeLug==,type:str]
+ DATABASE_URL: ENC[AES256_GCM,data:uFpN7uxyOjwgPEXeT78N/ydPRP4lQl/WgGc8Kx87kN4RFEDcp/swOECrs0CewYBdI3rW0+F8hV5tLyDFfY0Qx55N4Tun3Q8nO2yoPH0Pb3ZMrFb/zwt77cNug7AbBFCxn9M/jMqxP6T2u7Dpo9E3v7mAHjHtGKSoFjlaz2uE4KAFcOjgPqE5Vz6wdgpa6RgukAGUmAjefCgfwL37DME89NQpyQurkkk=,iv:Qc3M33+Q+SpaDzrTI5ljYCLF2H+JIpjJndBcvzTTOmA=,tag:+zhmeRVSXREoJDG+xeCFjw==,type:str]
sops:
kms: []
gcp_kms: []
@@ -56,14 +56,50 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4NGpDKzBSYmRTeDhBOHk1
- SVowOHFzallWVFloNFgrTGwwdk54QldQTHgwCmhmdUxiL2FSMUsrd1VZTGt5SVI2
- VHhvYVFJZ3V2bGlZalovcENVOHFlWFUKLS0tIDdHS3lzSHR3UklDQVZubllJeWVv
- UDZWVEV5TENmNFg5N0sxREJvbmFCTG8KGpvpbs/mK8yuv7MNiRH9OEj9k3QZ1FzI
- 3g5cTAnsupjebTrl8h6AjC2mQPjdQnHn9PgLHXXfUQg9UEOEW3NLvA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsdXpBMDRTK0Iza0NlbEdR
+ bjNFb3B5MForM24vQ2FHd0tjMklpVXMzajJnClIvV2t3ZTl4bUJxTTBXYTY3Qkxp
+ clNnT2JyNEkvRWlRb2dacmhiOGlka2sKLS0tIHJ0RnhyV3RvVjEyUnRRU3Fyb2w1
+ SDJseENHUnY5RlZlZklYbVVCSk5ZUlEKRKa0dQTRqgrU8gpF3usecjJU06ZnLniV
+ J1BJq0BOlnwtvjc1AmE+rHb5hWyUd/GKJT0ygv0tnkeX6PvDACccvw==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-11-16T18:32:47Z"
- mac: ENC[AES256_GCM,data:tXSdEWnpMrHnTlhU2pXetBvZMXVvFPeq9fMoYXinMroHoKE35xtiJDjuhfYVaNKm4uwWbhfZ/XcOEsOklh3kyNv/YEeWkwwBL1ChfesZlwhXVXTTXpybcziFsCsL5tGcEn9vG8CljZUiPDK5OcGoDW1SkD3F4gnxbEbomJl7yKE=,iv:wdeEada4bfyxqUGtYwG2IRWBHCdh6+SGKi+l/ZXhX3k=,tag:5Yj1mwAuWNGGf16H+yZe0A==,type:str]
+ lastmodified: "2025-01-15T11:14:54Z"
+ mac: ENC[AES256_GCM,data:uSX+9XYR0V9vSnkT09KTS4rU0MzKm/e2UGZ3yAghj0x5D0Cn2JbuCVjtCNk7aIvUuANcuxjzt9iAOyTKZHk/P2ogACA1/WHT6s7uhreXPtD1p6ounPThYsN03A3pnAub4bP1jGp9XHrDmW4R0Wgh/swsBeOF9B+E8/wlnlCUD0U=,iv:WqfLiH08wfBAS2+elbNAGz0KHZ2ewxt0xURhNHAX8Qc=,tag:Yp/blElQXRbxgxLh0dmGZw==,type:str]
pgp: []
- encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+ name: docuseal-route
+ namespace: docuseal
+spec:
+ parentRefs:
+ - name: envoy-gateway
+ namespace: envoy-gateway
+ hostnames:
+ - docuseal.midnightthoughts.space
+ rules:
+ - backendRefs:
+ - name: docuseal
+ port: 3000
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsdXpBMDRTK0Iza0NlbEdR
+ bjNFb3B5MForM24vQ2FHd0tjMklpVXMzajJnClIvV2t3ZTl4bUJxTTBXYTY3Qkxp
+ clNnT2JyNEkvRWlRb2dacmhiOGlka2sKLS0tIHJ0RnhyV3RvVjEyUnRRU3Fyb2w1
+ SDJseENHUnY5RlZlZklYbVVCSk5ZUlEKRKa0dQTRqgrU8gpF3usecjJU06ZnLniV
+ J1BJq0BOlnwtvjc1AmE+rHb5hWyUd/GKJT0ygv0tnkeX6PvDACccvw==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-01-15T11:14:54Z"
+ mac: ENC[AES256_GCM,data:uSX+9XYR0V9vSnkT09KTS4rU0MzKm/e2UGZ3yAghj0x5D0Cn2JbuCVjtCNk7aIvUuANcuxjzt9iAOyTKZHk/P2ogACA1/WHT6s7uhreXPtD1p6ounPThYsN03A3pnAub4bP1jGp9XHrDmW4R0Wgh/swsBeOF9B+E8/wlnlCUD0U=,iv:WqfLiH08wfBAS2+elbNAGz0KHZ2ewxt0xURhNHAX8Qc=,tag:Yp/blElQXRbxgxLh0dmGZw==,type:str]
+ pgp: []
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
