release.yaml (9007B)
1 apiVersion: helm.toolkit.fluxcd.io/v2 2 kind: HelmRelease 3 metadata: 4 name: collabora 5 namespace: collabora 6 spec: 7 releaseName: collabora-online 8 chart: 9 spec: 10 chart: collabora-online 11 sourceRef: 12 kind: HelmRepository 13 name: collabora 14 interval: 50m 15 timeout: 25m 16 install: 17 timeout: 25m 18 remediation: 19 retries: 3 20 values: 21 ingress: 22 enabled: false 23 replicaCount: 1 24 collabora: 25 aliasgroups: 26 - host: https://collabora.midnightthoughts.space 27 - host: https://cloud.midnightthoughts.space 28 extra_params: --o:ssl.enable=false --o:ssl.termination=true 29 username: admin 30 password: ENC[AES256_GCM,data:0+VngqllfqMxssZU38/UMaUajdL2y4lKHAVM654YBPd2sT3GNijs9Zmdj6urc6ymEgaLZDHoe0F2pIkOFOhyqQ==,iv:GQitiFEShCv/Jrq1D/V5S+G6Jor+6H8/QncvltT81Uc=,tag:5gxOH59m2sGUmGBPGjtBuw==,type:str] 31 resources: 32 limits: 33 cpu: 500m 34 memory: 1000Mi 35 requests: 36 cpu: 500m 37 memory: 1000Mi 38 autoscaling: 39 enabled: false 40 sops: 41 kms: [] 42 gcp_kms: [] 43 azure_kv: [] 44 hc_vault: [] 45 age: 46 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 47 enc: | 48 -----BEGIN AGE ENCRYPTED FILE----- 49 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6UStLR1RNZzErZ0VaNTRw 50 a0VETXVqaG5YMzNOOTRrRHhFYXBBNnVIcVNFCmp5RnNja3VMZGxvcnRMNkpFQ21w 51 NHNkdzl3VGY4b1oxVWdtNzM1Y0NVWFUKLS0tIGd2NSttbVFRSnBxSFlzSFgyaVhH 52 bnJ0cVFJZS9MOGdlSlFrZVRrODlKazgKv9LSpwR009/fBUM1PopiVPmUbAWQtNlT 53 JZNZWONdbuKCLy0YzETiL+eUbUu7/G9KMQVXIV/z5qaLdSmWkVlJwQ== 54 -----END AGE ENCRYPTED FILE----- 55 lastmodified: "2025-05-06T20:29:10Z" 56 mac: ENC[AES256_GCM,data:dMajaAWAzF/vZITich+V0pENWfhM9HV9T3+JD6YNPg/FcpCni2oirgXZvp66oPk/oWRsfq9l4zQmX9Td62Hws4kEtXwUIIMMgSAgugzVLrJ2clkqApRdBAV7UP8dOLCdVn3j7zgRLYujrHKnOV4j9CIX9eU4jKtIgpsY+iEA12A=,iv:K4H82oJi0ecMB1gS4xzLv5A2EeEEXgeaSGmDTuIRzG4=,tag:BxPn0YaHraPF3pRclwka8g==,type:str] 57 pgp: [] 58 encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 59 version: 3.9.1 60 --- 61 apiVersion: gateway.envoyproxy.io/v1alpha1 62 kind: HTTPRouteFilter 63 metadata: 64 name: deny 65 namespace: collabora 66 spec: 67 directResponse: 68 contentType: text/plain 69 statusCode: 403 70 body: 71 type: Inline 72 inline: Oops! Your request is not found. 73 sops: 74 kms: [] 75 gcp_kms: [] 76 azure_kv: [] 77 hc_vault: [] 78 age: 79 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 80 enc: | 81 -----BEGIN AGE ENCRYPTED FILE----- 82 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6UStLR1RNZzErZ0VaNTRw 83 a0VETXVqaG5YMzNOOTRrRHhFYXBBNnVIcVNFCmp5RnNja3VMZGxvcnRMNkpFQ21w 84 NHNkdzl3VGY4b1oxVWdtNzM1Y0NVWFUKLS0tIGd2NSttbVFRSnBxSFlzSFgyaVhH 85 bnJ0cVFJZS9MOGdlSlFrZVRrODlKazgKv9LSpwR009/fBUM1PopiVPmUbAWQtNlT 86 JZNZWONdbuKCLy0YzETiL+eUbUu7/G9KMQVXIV/z5qaLdSmWkVlJwQ== 87 -----END AGE ENCRYPTED FILE----- 88 lastmodified: "2025-05-06T20:29:10Z" 89 mac: ENC[AES256_GCM,data:dMajaAWAzF/vZITich+V0pENWfhM9HV9T3+JD6YNPg/FcpCni2oirgXZvp66oPk/oWRsfq9l4zQmX9Td62Hws4kEtXwUIIMMgSAgugzVLrJ2clkqApRdBAV7UP8dOLCdVn3j7zgRLYujrHKnOV4j9CIX9eU4jKtIgpsY+iEA12A=,iv:K4H82oJi0ecMB1gS4xzLv5A2EeEEXgeaSGmDTuIRzG4=,tag:BxPn0YaHraPF3pRclwka8g==,type:str] 90 pgp: [] 91 encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 92 version: 3.9.1 93 --- 94 apiVersion: gateway.networking.k8s.io/v1 95 kind: HTTPRoute 96 metadata: 97 name: collabora 98 namespace: collabora 99 spec: 100 parentRefs: 101 - name: envoy-gateway 102 namespace: envoy-gateway 103 hostnames: 104 - collabora.midnightthoughts.space 105 rules: 106 - matches: 107 - path: 108 value: / 109 type: PathPrefix 110 backendRefs: 111 - name: collabora-online 112 port: 9980 113 timeouts: 114 request: 240s 115 backendRequest: 0s 116 - matches: 117 - path: 118 value: /cool/getMetrics 119 type: PathPrefix 120 backendRefs: 121 - name: collabora-online 122 port: 9980 123 timeouts: 124 request: 240s 125 backendRequest: 0s 126 filters: 127 - type: ExtensionRef 128 extensionRef: 129 group: gateway.envoyproxy.io 130 kind: HTTPRouteFilter 131 name: deny 132 - matches: 133 - path: 134 value: /cool/adminws 135 type: PathPrefix 136 backendRefs: 137 - name: collabora-online 138 port: 9980 139 timeouts: 140 request: 240s 141 backendRequest: 0s 142 filters: 143 - type: ExtensionRef 144 extensionRef: 145 group: gateway.envoyproxy.io 146 kind: HTTPRouteFilter 147 name: deny 148 - matches: 149 - path: 150 value: /browser/dist/admin/admin.html 151 type: Exact 152 backendRefs: 153 - name: collabora-online 154 port: 9980 155 timeouts: 156 request: 240s 157 backendRequest: 0s 158 filters: 159 - type: ExtensionRef 160 extensionRef: 161 group: gateway.envoyproxy.io 162 kind: HTTPRouteFilter 163 name: deny 164 sops: 165 kms: [] 166 gcp_kms: [] 167 azure_kv: [] 168 hc_vault: [] 169 age: 170 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 171 enc: | 172 -----BEGIN AGE ENCRYPTED FILE----- 173 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6UStLR1RNZzErZ0VaNTRw 174 a0VETXVqaG5YMzNOOTRrRHhFYXBBNnVIcVNFCmp5RnNja3VMZGxvcnRMNkpFQ21w 175 NHNkdzl3VGY4b1oxVWdtNzM1Y0NVWFUKLS0tIGd2NSttbVFRSnBxSFlzSFgyaVhH 176 bnJ0cVFJZS9MOGdlSlFrZVRrODlKazgKv9LSpwR009/fBUM1PopiVPmUbAWQtNlT 177 JZNZWONdbuKCLy0YzETiL+eUbUu7/G9KMQVXIV/z5qaLdSmWkVlJwQ== 178 -----END AGE ENCRYPTED FILE----- 179 lastmodified: "2025-05-06T20:29:10Z" 180 mac: ENC[AES256_GCM,data:dMajaAWAzF/vZITich+V0pENWfhM9HV9T3+JD6YNPg/FcpCni2oirgXZvp66oPk/oWRsfq9l4zQmX9Td62Hws4kEtXwUIIMMgSAgugzVLrJ2clkqApRdBAV7UP8dOLCdVn3j7zgRLYujrHKnOV4j9CIX9eU4jKtIgpsY+iEA12A=,iv:K4H82oJi0ecMB1gS4xzLv5A2EeEEXgeaSGmDTuIRzG4=,tag:BxPn0YaHraPF3pRclwka8g==,type:str] 181 pgp: [] 182 encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 183 version: 3.9.1