cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

release.yaml (6564B)

      1 apiVersion: helm.toolkit.fluxcd.io/v2
      2 kind: HelmRelease
      3 metadata:
      4   name: docuseal
      5   namespace: docuseal
      6 spec:
      7   releaseName: docuseal
      8   interval: 60m
      9   chart:
     10     spec:
     11       chart: docuseal
     12       sourceRef:
     13         kind: HelmRepository
     14         name: docuseal
     15   values:
     16     ingress:
     17       main:
     18         enabled: false
     19         annotations:
     20           cert-manager.io/cluster-issuer: letsencrypt-dns
     21           external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
     22         hosts:
     23           - host: docuseal.midnightthoughts.space
     24             paths:
     25               - path: /
     26                 pathType: Prefix
     27                 backend:
     28                   service:
     29                     name: docuseal
     30                     port: 3000
     31         tls:
     32           - secretName: docuseal-midnightthoughts-space-tls
     33             hosts:
     34               - docuseal.midnightthoughts.space
     35     persistence:
     36       data:
     37         enabled: ENC[AES256_GCM,data:GJM4Uw==,iv:18583JXCtan4bNqVTqeYitzL/fb7BH3YUU2YttDc7Mw=,tag:8X1wTtBCgZBxeQ56nENu3w==,type:bool]
     38         size: ENC[AES256_GCM,data:uSsiIVs=,iv:wTSIk0UCdZgAbHCK/FcecipeIG7RQa2ED/nQZSj3Ii0=,tag:fplOP8MKuZtsbvMqn+3fzg==,type:str]
     39         accessMode: ENC[AES256_GCM,data:4XvPju09xbz63oE7Eg==,iv:Mt/LqAtnnyopwOVjVv2lNKFbwMxmqjEhq5PyFEZeqEg=,tag:matijltWjNlnIEKRGyuyBA==,type:str]
     40         existingClaim: ENC[AES256_GCM,data:C+Eki8aCDsMSJqzZhaOdHg==,iv:X8RiuXDsTXZZ1Y9NcjaIPkz8A2XNFqHMeZPxDsG41Kw=,tag:JQokzJNMAGuzgR/cMG0jvQ==,type:str]
     41     env:
     42       SECRET_KEY_BASE: ENC[AES256_GCM,data:OEScFIXcsplWfy7dO+dZr2vZyvIxErTb0jbCEPXBYHjBTdOsfLgkA2rEQFtMoW9g7D7s44rfN2m5NytWs75Wegp0pA3e+LQwxhUxlj5+YAiSL+GlOuClYJms/GK5MslV54aCN9EU4jHF24ssM3ELX/E8zeiDYfyF4n4dGctya10=,iv:vf3rTtnHSV4biD6Pr4NuZrHbO0V17A0npq1+ljLn9To=,tag:Hv1TbZRH3BTqO4D/eTYrXA==,type:str]
     43       SMTP_USERNAME: mtrnord@nordgedanken.dev
     44       SMTP_ADDRESS: smtp.fastmail.com
     45       SMTP_PORT: 465
     46       SMTP_PASSWORD: ENC[AES256_GCM,data:Ere40Q1+7V5sZ80yuM7dVg==,iv:0Ih7G1XryAoPMt9WV58Zc9efMG7WZrN5sP4RtGyptKs=,tag:HhmzxZdPdoGG4DkKr3dVtA==,type:str]
     47       SMTP_FROM: ops@nordgedanken.dev
     48       HOST: docuseal.midnightthoughts.space
     49       DATABASE_URL: ENC[AES256_GCM,data:49DPLX/Qy8lgIYzr4GnFuf965IjxZI20ES7jSFmkPr6q5euFYHsHGOeY7/QTjJ14HFQ5D/EnFfLdXt6pQVaDnWRSKquFuJOw/gpEo5DwLB3VOLvj80W/AhzgZoO6xVdaRlJ8EGikx24c0wkboObwoMauycTYlsdlvO1YNfAdaSZfb5AhxyJQRhkE1Q7BCwuVXhR5C0lrAMZ1iPsifKMIB/4We0QKtlM=,iv:YUEVBfxFRNDy9Jkvdg47rJO0A6ApWtMEkwx7sXJlzRM=,tag:tyl0X/yDhl0JwnUwV9Of3A==,type:str]
     50 sops:
     51   kms: []
     52   gcp_kms: []
     53   azure_kv: []
     54   hc_vault: []
     55   age:
     56     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     57       enc: |
     58         -----BEGIN AGE ENCRYPTED FILE-----
     59         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6cVhIdzlyb0FPQm1ucUh2
     60         ZGtrNHcvSVloUjNSYlNPRUhOYnR1TVFUdlVNCkQ3eTBpTVA1a0FiK2tqeWljQmVW
     61         UXpBU2tpTytNbUtseDgza3FzbGtxRjgKLS0tIEdwck5leXlCcVZyc2IvRE5QT0tB
     62         enhsM00vaS8zVEs1MnNralEyL29IczgKhj26BISy0KHbkI40lUd/A1jwyXgPQxic
     63         9gyVmy41ARJaZyYRdXncmbDCQY9jOr+QjElLT/LNgBDhVE4wGG6aRQ==
     64         -----END AGE ENCRYPTED FILE-----
     65   lastmodified: "2025-03-22T17:07:47Z"
     66   mac: ENC[AES256_GCM,data:5N/IPtLZWbS2F4sNgF1T8BKaqtiUbS5Zunoay3u7WQyL9hPM6ApTjeUwl8WK8W6I7yqsKCmHtdpx1ZXVbIdZKAOXmXjCCgHj3ofRRMG6JCMF0WHgUMX87bM/Am9BP2GE2B5XdhGL8Zrp+wYJMB/D1fQRP8nv49N4bLByAGzpyEU=,iv:xHc3kra4zVESdc05PIYQ/fV3PvdtICbpSpO/VGSezdw=,tag:vNH7hbq/hlhplRbwrSN8tw==,type:str]
     67   pgp: []
     68   encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     69   version: 3.9.1
     70 ---
     71 apiVersion: gateway.networking.k8s.io/v1
     72 kind: HTTPRoute
     73 metadata:
     74   name: docuseal-route
     75   namespace: docuseal
     76 spec:
     77   parentRefs:
     78     - name: envoy-gateway
     79       namespace: envoy-gateway
     80   hostnames:
     81     - docuseal.midnightthoughts.space
     82   rules:
     83     - backendRefs:
     84         - name: docuseal
     85           port: 3000
     86       timeouts:
     87         request: 240s
     88         backendRequest: 0s
     89 sops:
     90   kms: []
     91   gcp_kms: []
     92   azure_kv: []
     93   hc_vault: []
     94   age:
     95     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     96       enc: |
     97         -----BEGIN AGE ENCRYPTED FILE-----
     98         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6cVhIdzlyb0FPQm1ucUh2
     99         ZGtrNHcvSVloUjNSYlNPRUhOYnR1TVFUdlVNCkQ3eTBpTVA1a0FiK2tqeWljQmVW
    100         UXpBU2tpTytNbUtseDgza3FzbGtxRjgKLS0tIEdwck5leXlCcVZyc2IvRE5QT0tB
    101         enhsM00vaS8zVEs1MnNralEyL29IczgKhj26BISy0KHbkI40lUd/A1jwyXgPQxic
    102         9gyVmy41ARJaZyYRdXncmbDCQY9jOr+QjElLT/LNgBDhVE4wGG6aRQ==
    103         -----END AGE ENCRYPTED FILE-----
    104   lastmodified: "2025-03-22T17:07:47Z"
    105   mac: ENC[AES256_GCM,data:5N/IPtLZWbS2F4sNgF1T8BKaqtiUbS5Zunoay3u7WQyL9hPM6ApTjeUwl8WK8W6I7yqsKCmHtdpx1ZXVbIdZKAOXmXjCCgHj3ofRRMG6JCMF0WHgUMX87bM/Am9BP2GE2B5XdhGL8Zrp+wYJMB/D1fQRP8nv49N4bLByAGzpyEU=,iv:xHc3kra4zVESdc05PIYQ/fV3PvdtICbpSpO/VGSezdw=,tag:vNH7hbq/hlhplRbwrSN8tw==,type:str]
    106   pgp: []
    107   encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    108   version: 3.9.1