cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

release.yaml (6298B)


      1 apiVersion: helm.toolkit.fluxcd.io/v2
      2 kind: HelmRelease
      3 metadata:
      4   name: cachet
      5   namespace: cachet
      6 spec:
      7   releaseName: cachet
      8   interval: 60m
      9   chart:
     10     spec:
     11       chart: cachet
     12       sourceRef:
     13         kind: HelmRepository
     14         name: cachet
     15   values:
     16     resources:
     17       limits: {}
     18       requests:
     19         cpu: 41m
     20         memory: 100Mi
     21     image:
     22       repository: ghcr.io/mtrnord/cachet_docker
     23       tag: "2.4"
     24       pullPolicy: Always
     25     ingress:
     26       enabled: false
     27       annotations:
     28         cert-manager.io/cluster-issuer: letsencrypt-dns
     29         external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
     30       host: status.midnightthoughts.space
     31       tls:
     32         - secretName: status-midnightthoughts-space-tls
     33           hosts:
     34             - status.midnightthoughts.space
     35     postgresql:
     36       enabled: false
     37     database:
     38       host: pg-cluster-v2-rw.postgres-cluster.svc.cluster.local
     39       port: 5432
     40       name: cachet
     41       username: cachet
     42       password: ENC[AES256_GCM,data:14z62hvPZZvsuBOsuHYgqv1toAHKp9RY/KH0+pJQziegnfZjWAVImKHwvvCic4SxEASBkwNJmqQYjlhEi0hI9K3bd8kZn5JvX8nq5cDP3Hh+r7RwHzHS0g==,iv:PkZzoTFyugQRvFni6ih59iULjZGt7mcJhigitKvpEAY=,tag:OpCEfHI8NZ1rYZ6o9Yezyw==,type:str]
     43     env:
     44       public:
     45         # Application environments
     46         APP_DEBUG: false
     47         APP_LOG: errorlog
     48         DB_DRIVER: pgsql
     49         DOCKER: true
     50         CACHE_DRIVER: database
     51         SESSION_DRIVER: database
     52         QUEUE_DRIVER: database
     53         CACHET_EMOJI: false
     54         CACHET_BEACON: false
     55         # Email find them here  https://docs.cachethq.io/docs/configuring-mail
     56         MAIL_DRIVER: smtp
     57         MAIL_HOST: smtp.fastmail.com
     58         MAIL_ADDRESS: ops@nordgedanken.dev
     59         MAIL_PORT: 465
     60         MAIL_NAME: Midnightthoughts Status Page
     61         MAIL_ENCRYPTION: tls
     62       private:
     63         APP_KEY: ENC[AES256_GCM,data:aDiw4vJtHn4cicl1vXaup4tb8v5vjb3k8dJrbynXArcoopYl78D39W/n/VnrfRfoJQ8m,iv:nn2ZNopZXcHcahV1dIVji72c6Qnz5fYOnV5hceHPtGg=,tag:3BA24E18Sd1k8tKsF47v0w==,type:str]
     64         MAIL_USERNAME: mtrnord@nordgedanken.dev
     65         MAIL_PASSWORD: ENC[AES256_GCM,data:+Qm6PYaaiVu/P74SMIoFXw==,iv:JnN5Omywf0EqFdAvyJIwxbHpGli7U1cfHdcAY1am7eY=,tag:C7xQTReGlTIs4czULPv+DA==,type:str]
     66 sops:
     67   kms: []
     68   gcp_kms: []
     69   azure_kv: []
     70   hc_vault: []
     71   age:
     72     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     73       enc: |
     74         -----BEGIN AGE ENCRYPTED FILE-----
     75         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnVE9ZYm5ZT0tIRUFWeGJL
     76         YmpRUTdaY0ZrMm80WUhvUnMyMlpkam1NNVhNClVCa2N4VlVTWDdSMzc2SnZ6aFRp
     77         TzlQK25hK1RXQ2V2NWVCN1lLdm5jVlkKLS0tIE5MYkVXVFdQN0hqUkdHc3h5NTNS
     78         TWZRTEpERlVwMXh3V0xKN3I5TTZXcmcKUaVzAi37kDrSOmA0Py81pbFiwL5GdUge
     79         Ee6wovuBvndz1OEmi8W9rpamT+CEdmXHZTxFMoM4pMOMQayCfQIyYw==
     80         -----END AGE ENCRYPTED FILE-----
     81   lastmodified: "2025-03-19T11:07:00Z"
     82   mac: ENC[AES256_GCM,data:PzQLmfSOrgNIok67C7FuSBhZ8hMVQumFXvlVIuB+oAD4R7BJ8SDfXY4SCjVLnhQXFineSYdgE1oKURuWDfIo4EjnQh0HQJavUaolOs3TlQrzv1VLXJDbrTm3E1yr+D+pw2yNYhoX7OopjDq+z/QjOMJ2M4XLqmvL1nFOQZC06rE=,iv:VDWtReujwXKyVwc/fuzWFLNBPL8edNzBYJpCmhCDTRs=,tag:jwnzwquRrKqLEEcqkLYV5Q==,type:str]
     83   pgp: []
     84   encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     85   version: 3.9.1
     86 ---
     87 apiVersion: gateway.networking.k8s.io/v1
     88 kind: HTTPRoute
     89 metadata:
     90   name: cachet
     91   namespace: cachet
     92 spec:
     93   parentRefs:
     94     - name: envoy-gateway
     95       namespace: envoy-gateway
     96   hostnames:
     97     - status.midnightthoughts.space
     98   rules:
     99     - backendRefs:
    100         - name: cachet
    101           port: 80
    102       timeouts:
    103         request: 240s
    104         backendRequest: 0s
    105 sops:
    106   kms: []
    107   gcp_kms: []
    108   azure_kv: []
    109   hc_vault: []
    110   age:
    111     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
    112       enc: |
    113         -----BEGIN AGE ENCRYPTED FILE-----
    114         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnVE9ZYm5ZT0tIRUFWeGJL
    115         YmpRUTdaY0ZrMm80WUhvUnMyMlpkam1NNVhNClVCa2N4VlVTWDdSMzc2SnZ6aFRp
    116         TzlQK25hK1RXQ2V2NWVCN1lLdm5jVlkKLS0tIE5MYkVXVFdQN0hqUkdHc3h5NTNS
    117         TWZRTEpERlVwMXh3V0xKN3I5TTZXcmcKUaVzAi37kDrSOmA0Py81pbFiwL5GdUge
    118         Ee6wovuBvndz1OEmi8W9rpamT+CEdmXHZTxFMoM4pMOMQayCfQIyYw==
    119         -----END AGE ENCRYPTED FILE-----
    120   lastmodified: "2025-03-19T11:07:00Z"
    121   mac: ENC[AES256_GCM,data:PzQLmfSOrgNIok67C7FuSBhZ8hMVQumFXvlVIuB+oAD4R7BJ8SDfXY4SCjVLnhQXFineSYdgE1oKURuWDfIo4EjnQh0HQJavUaolOs3TlQrzv1VLXJDbrTm3E1yr+D+pw2yNYhoX7OopjDq+z/QjOMJ2M4XLqmvL1nFOQZC06rE=,iv:VDWtReujwXKyVwc/fuzWFLNBPL8edNzBYJpCmhCDTRs=,tag:jwnzwquRrKqLEEcqkLYV5Q==,type:str]
    122   pgp: []
    123   encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    124   version: 3.9.1