commit ffe9a10f43e17a7c879ba8061023bf7a9447d38f
parent c58d7049f497930a90b81a93c27e8804c4cf5083
Author: MTRNord <mtrnord1@gmail.com>
Date: Tue, 14 Jan 2025 18:42:27 +0100
Meow
Diffstat:
1 file changed, 93 insertions(+), 46 deletions(-)
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -11,14 +11,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
- djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
- SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
- VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
- 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmZNWVY4TjNsWkt5bFJs
+ dWF0Wkppb0VEZVhoRnJPUjd6VklTaTVKVkJrCnRMdEgyS0hsQ0J1RWRZN3hQOEtH
+ Q3lZZVJJOEgyOEd6RmpoRStWcnZLeVkKLS0tIERadEFQTzllSlpkWk5WTEUwakEx
+ ZVZYS0NmSlE4aFNJOUUvOVlOSzV6NzgK1ktjrndnZGuFj5yeaMlTR9XK7At2nchE
+ xoQtedtqKVRFl6CKeyhjvobOJXiv3h/6/7UV1tcJ8EDzeZayFxNu2w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-10T12:47:54Z"
- mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
+ lastmodified: "2025-01-14T17:42:24Z"
+ mac: ENC[AES256_GCM,data:RTGlfltUK4p/LAl/3nswEhWwuBsBqX1XO0bd3ThZ8MqU/XvPMESpCkk2jnqMu7tIu6ArhWa6fDC1OvJgeBFOuqF5/lwPZaOGGuMrt/Tifjl9NfXdPYckjCY282n1PCWnn1KP1H3m+G2r9FKRKFqPtyqCs4hRWlSr0QefqVNWzg4=,iv:4NkVjIWfa2LxUVUSo4xP9oEYkS++ZSE9JCKa7qefiRc=,tag:gorzILriiTPF4eTC2VhmOQ==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -30,8 +30,8 @@ metadata:
namespace: postgres-cluster
type: Opaque
stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:qZFDYVj7FPcu8WY9ar0CSI+Xff0=,iv:APuEyu/YpvuRpfLwzK0GjRZct3s8ryNg01mov6oLEOc=,tag:0V5yHr362wE6Cz/1+fgvmQ==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:0t1FAJUjgNEv6reUjEctyzJLLiHZepvh09yCHnYZQ6pjzjJDU1QAFg==,iv:+ZNxcBrRPTpuwBZt9uUZFlra4w4n7F0Scq9q0uUWmM4=,tag:kiIJqVnoWez/dFwbuWMHKg==,type:str]
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:J/Zjt8E5Jorp7PAF3TnEQieKF3c=,iv:v1I3EJ1iXygTHkme7nAUkgej60lEytv4/LSzjC/UOew=,tag:ZuszbZG7N/ikNyZ0wbApcQ==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:KSN1JE7YWm+3vORCM/ekg5klQJEOriyuHdcQ2LjrP6/xwsK1vyUAyg==,iv:j3pb3Tcw3PIjxbOIQ0PUcj5lokarzTu3Zlmm9llNdOA=,tag:6vSYvof4QgBpi3AGUr4YYA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -41,14 +41,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
- djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
- SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
- VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
- 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmZNWVY4TjNsWkt5bFJs
+ dWF0Wkppb0VEZVhoRnJPUjd6VklTaTVKVkJrCnRMdEgyS0hsQ0J1RWRZN3hQOEtH
+ Q3lZZVJJOEgyOEd6RmpoRStWcnZLeVkKLS0tIERadEFQTzllSlpkWk5WTEUwakEx
+ ZVZYS0NmSlE4aFNJOUUvOVlOSzV6NzgK1ktjrndnZGuFj5yeaMlTR9XK7At2nchE
+ xoQtedtqKVRFl6CKeyhjvobOJXiv3h/6/7UV1tcJ8EDzeZayFxNu2w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-10T12:47:54Z"
- mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
+ lastmodified: "2025-01-14T17:42:24Z"
+ mac: ENC[AES256_GCM,data:RTGlfltUK4p/LAl/3nswEhWwuBsBqX1XO0bd3ThZ8MqU/XvPMESpCkk2jnqMu7tIu6ArhWa6fDC1OvJgeBFOuqF5/lwPZaOGGuMrt/Tifjl9NfXdPYckjCY282n1PCWnn1KP1H3m+G2r9FKRKFqPtyqCs4hRWlSr0QefqVNWzg4=,iv:4NkVjIWfa2LxUVUSo4xP9oEYkS++ZSE9JCKa7qefiRc=,tag:gorzILriiTPF4eTC2VhmOQ==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -65,10 +65,10 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:4aUCMQDSoo3RcycIkA==,iv:VzIcnEC0P6VcgTPTX7fqpAMVyQXnWEyeJUj5bz9Q8mA=,tag:iIKHdoTI1S+NGgm2NPQ2sw==,type:str]
+ key: ENC[AES256_GCM,data:4iwh2gi3vKCx3p+cgQ==,iv:LFuX86f6tdu4ex5kRBvJG8PJkg31mEOuaVe6s2oy/nc=,tag:K9gSdrsXeFW+DHCIyydA7Q==,type:str]
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:E+BL2PSdVfAKI5flZoB3G9A=,iv:58hmaWHPfCESeotPMQ8VcoKOb0KKvKdfmIAaZZvOw1k=,tag:KgwKKVI8VMzLfgpPse73JQ==,type:str]
+ key: ENC[AES256_GCM,data:qGcLR+2DTywP5h1IDP2+O4Y=,iv:ceJb1hNIu/qe61uI9Zn1KH2sxoPW8+bkVTBKuAQdLOo=,tag:MK8X4l8WT7pCFCD9Xsxi5w==,type:str]
wal:
compression: gzip
sops:
@@ -80,14 +80,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
- djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
- SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
- VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
- 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmZNWVY4TjNsWkt5bFJs
+ dWF0Wkppb0VEZVhoRnJPUjd6VklTaTVKVkJrCnRMdEgyS0hsQ0J1RWRZN3hQOEtH
+ Q3lZZVJJOEgyOEd6RmpoRStWcnZLeVkKLS0tIERadEFQTzllSlpkWk5WTEUwakEx
+ ZVZYS0NmSlE4aFNJOUUvOVlOSzV6NzgK1ktjrndnZGuFj5yeaMlTR9XK7At2nchE
+ xoQtedtqKVRFl6CKeyhjvobOJXiv3h/6/7UV1tcJ8EDzeZayFxNu2w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-10T12:47:54Z"
- mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
+ lastmodified: "2025-01-14T17:42:24Z"
+ mac: ENC[AES256_GCM,data:RTGlfltUK4p/LAl/3nswEhWwuBsBqX1XO0bd3ThZ8MqU/XvPMESpCkk2jnqMu7tIu6ArhWa6fDC1OvJgeBFOuqF5/lwPZaOGGuMrt/Tifjl9NfXdPYckjCY282n1PCWnn1KP1H3m+G2r9FKRKFqPtyqCs4hRWlSr0QefqVNWzg4=,iv:4NkVjIWfa2LxUVUSo4xP9oEYkS++ZSE9JCKa7qefiRc=,tag:gorzILriiTPF4eTC2VhmOQ==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -114,6 +114,20 @@ spec:
- name: barman-cloud.cloudnative-pg.io
parameters:
barmanObjectName: hetzner-store
+ backup:
+ barmanObjectStore:
+ destinationPath: s3://midnightthoughts-pg-backup/pg-base-backup
+ endpointURL: https://hel1.your-objectstorage.com
+ s3Credentials:
+ accessKeyId:
+ name: pg-s3-credentials
+ key: ENC[AES256_GCM,data:kt1F/bjwl984p/QHJA==,iv:aXwU9GBsCd66j+2a07k01Smgy2T6xXG+in2QCC4ac5E=,tag:FF7uFiQlKKv4wOTg68RICw==,type:str]
+ secretAccessKey:
+ name: pg-s3-credentials
+ key: ENC[AES256_GCM,data:7mk/78uVozGO1Cb0st4gMCM=,iv:TIDfrdFb9JZIT1DVBrNKgmD9d9hnxYrHv1LaxB9Aju4=,tag:yaduKbw6g10WGrsZWbM9pQ==,type:str]
+ wal:
+ compression: gzip
+ retentionPolicy: 60d
managed:
roles:
- name: synapse
@@ -254,14 +268,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
- djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
- SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
- VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
- 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmZNWVY4TjNsWkt5bFJs
+ dWF0Wkppb0VEZVhoRnJPUjd6VklTaTVKVkJrCnRMdEgyS0hsQ0J1RWRZN3hQOEtH
+ Q3lZZVJJOEgyOEd6RmpoRStWcnZLeVkKLS0tIERadEFQTzllSlpkWk5WTEUwakEx
+ ZVZYS0NmSlE4aFNJOUUvOVlOSzV6NzgK1ktjrndnZGuFj5yeaMlTR9XK7At2nchE
+ xoQtedtqKVRFl6CKeyhjvobOJXiv3h/6/7UV1tcJ8EDzeZayFxNu2w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-10T12:47:54Z"
- mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
+ lastmodified: "2025-01-14T17:42:24Z"
+ mac: ENC[AES256_GCM,data:RTGlfltUK4p/LAl/3nswEhWwuBsBqX1XO0bd3ThZ8MqU/XvPMESpCkk2jnqMu7tIu6ArhWa6fDC1OvJgeBFOuqF5/lwPZaOGGuMrt/Tifjl9NfXdPYckjCY282n1PCWnn1KP1H3m+G2r9FKRKFqPtyqCs4hRWlSr0QefqVNWzg4=,iv:4NkVjIWfa2LxUVUSo4xP9oEYkS++ZSE9JCKa7qefiRc=,tag:gorzILriiTPF4eTC2VhmOQ==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -286,14 +300,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
- djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
- SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
- VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
- 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmZNWVY4TjNsWkt5bFJs
+ dWF0Wkppb0VEZVhoRnJPUjd6VklTaTVKVkJrCnRMdEgyS0hsQ0J1RWRZN3hQOEtH
+ Q3lZZVJJOEgyOEd6RmpoRStWcnZLeVkKLS0tIERadEFQTzllSlpkWk5WTEUwakEx
+ ZVZYS0NmSlE4aFNJOUUvOVlOSzV6NzgK1ktjrndnZGuFj5yeaMlTR9XK7At2nchE
+ xoQtedtqKVRFl6CKeyhjvobOJXiv3h/6/7UV1tcJ8EDzeZayFxNu2w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-10T12:47:54Z"
- mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
+ lastmodified: "2025-01-14T17:42:24Z"
+ mac: ENC[AES256_GCM,data:RTGlfltUK4p/LAl/3nswEhWwuBsBqX1XO0bd3ThZ8MqU/XvPMESpCkk2jnqMu7tIu6ArhWa6fDC1OvJgeBFOuqF5/lwPZaOGGuMrt/Tifjl9NfXdPYckjCY282n1PCWnn1KP1H3m+G2r9FKRKFqPtyqCs4hRWlSr0QefqVNWzg4=,iv:4NkVjIWfa2LxUVUSo4xP9oEYkS++ZSE9JCKa7qefiRc=,tag:gorzILriiTPF4eTC2VhmOQ==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -322,14 +336,47 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSK01PeC9Pam1IUXQ5V2tW
- djFHVDdCQnZ6ZUlTQzZaMHlvSUtTbWF2RURNCktsVE9nQTAyekFPUFo4dFJ5VHJP
- SzU3NHU1RmUvQ0VZbTNodlZyZjZoV1UKLS0tIEVMZE96QlB4S2U4YjE3OVFrRm4z
- VG5xenpFWEU3ZG90YmVDTkU5V2ZqaGsKEQtYQOagBB1coY8YSjU0ovkDE6Vj5bdA
- 9pvOpxVKTT6JXPoIHSGtebHnkIFVZcIm1LpJsfm5xaC2wxfz9W3QSQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmZNWVY4TjNsWkt5bFJs
+ dWF0Wkppb0VEZVhoRnJPUjd6VklTaTVKVkJrCnRMdEgyS0hsQ0J1RWRZN3hQOEtH
+ Q3lZZVJJOEgyOEd6RmpoRStWcnZLeVkKLS0tIERadEFQTzllSlpkWk5WTEUwakEx
+ ZVZYS0NmSlE4aFNJOUUvOVlOSzV6NzgK1ktjrndnZGuFj5yeaMlTR9XK7At2nchE
+ xoQtedtqKVRFl6CKeyhjvobOJXiv3h/6/7UV1tcJ8EDzeZayFxNu2w==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-01-14T17:42:24Z"
+ mac: ENC[AES256_GCM,data:RTGlfltUK4p/LAl/3nswEhWwuBsBqX1XO0bd3ThZ8MqU/XvPMESpCkk2jnqMu7tIu6ArhWa6fDC1OvJgeBFOuqF5/lwPZaOGGuMrt/Tifjl9NfXdPYckjCY282n1PCWnn1KP1H3m+G2r9FKRKFqPtyqCs4hRWlSr0QefqVNWzg4=,iv:4NkVjIWfa2LxUVUSo4xP9oEYkS++ZSE9JCKa7qefiRc=,tag:gorzILriiTPF4eTC2VhmOQ==,type:str]
+ pgp: []
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+ name: hetzner-base-backup
+ namespace: postgres-cluster
+spec:
+ schedule: 0 0 1 * * *
+ backupOwnerReference: self
+ target: prefer-standby
+ immediate: true
+ cluster:
+ name: pg-cluster-v2
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmZNWVY4TjNsWkt5bFJs
+ dWF0Wkppb0VEZVhoRnJPUjd6VklTaTVKVkJrCnRMdEgyS0hsQ0J1RWRZN3hQOEtH
+ Q3lZZVJJOEgyOEd6RmpoRStWcnZLeVkKLS0tIERadEFQTzllSlpkWk5WTEUwakEx
+ ZVZYS0NmSlE4aFNJOUUvOVlOSzV6NzgK1ktjrndnZGuFj5yeaMlTR9XK7At2nchE
+ xoQtedtqKVRFl6CKeyhjvobOJXiv3h/6/7UV1tcJ8EDzeZayFxNu2w==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-10T12:47:54Z"
- mac: ENC[AES256_GCM,data:YpXG7kAmHor7YlyrOzeTu2nEggtiB2621kKbyxPGIzuIYd3628yF2Jdtxz1s60tOPlTfaRMsyojogGWug4BPya7J5H0jEleDW5yNxwEtqMOGFcjBOwN9elj/Wp5YuOL7wmBHpFUf5SPAQsMUZrQRn4FSldzdKTcB/pa1OE5Yji8=,iv:rEcfU/7sECq/BeIQ7hP+NVsgKchw8x6mQu8xpSzCBAE=,tag:uLWuTTYgdMtPNKebd+N7FQ==,type:str]
+ lastmodified: "2025-01-14T17:42:24Z"
+ mac: ENC[AES256_GCM,data:RTGlfltUK4p/LAl/3nswEhWwuBsBqX1XO0bd3ThZ8MqU/XvPMESpCkk2jnqMu7tIu6ArhWa6fDC1OvJgeBFOuqF5/lwPZaOGGuMrt/Tifjl9NfXdPYckjCY282n1PCWnn1KP1H3m+G2r9FKRKFqPtyqCs4hRWlSr0QefqVNWzg4=,iv:4NkVjIWfa2LxUVUSo4xP9oEYkS++ZSE9JCKa7qefiRc=,tag:gorzILriiTPF4eTC2VhmOQ==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
