cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

release.yaml (6555B)

      1 apiVersion: helm.toolkit.fluxcd.io/v2
      2 kind: HelmRelease
      3 metadata:
      4   name: kimai
      5   namespace: kimai
      6 spec:
      7   releaseName: kimai
      8   interval: 60m
      9   chart:
     10     spec:
     11       chart: kimai2
     12       sourceRef:
     13         kind: HelmRepository
     14         name: kimai
     15   values:
     16     kimaiAppSecret: ENC[AES256_GCM,data:APXLkwtm73WT+DgrtTbywYNq+NnFSqWhXHE84MhYqJxKQcVBbZ41QY7ArzmjOEeGlEBgVTXsL4sSR66GwtRt+w==,iv:tmaZrgPMzrKLvUv+BdjPXvHD1B9N61pFTD0bllDnNHg=,tag:GLEBu5iybkO/Qophmuw8Kw==,type:str]
     17     kimaiAdminEmail: noreply@midnightthoughts.space
     18     kimaiAdminPassword: ENC[AES256_GCM,data:rPluVn+0bMhO,iv:/6MPtw/nRjSX1X3EAoSAYmsu3GGFoj4I7j1zUGVLqJ4=,tag:YZYbOnjwA1n6hEN2Hih7pA==,type:str]
     19     kimaiMailerFrom: noreply@midnightthoughts.space
     20     # TODO
     21     kimaiMailerUrl: null://localhost
     22     kimaiTrustedProxies: ""
     23     # TODO: Fails with missing packages
     24     kimaiRedisCache: false
     25     service:
     26       type: ClusterIP
     27     ingress:
     28       enabled: false
     29       hostname: kimai.midnightthoughts.space
     30     persistence:
     31       enabled: true
     32       storageClass: longhorn
     33       size: 4Gi
     34       accessModes:
     35         - ReadWriteOnce
     36     extraVolumeMounts:
     37       - mountPath: /opt/kimai/var/plugins
     38         name: kimai-data
     39         subPath: plugins
     40     volumePermissions:
     41       enabled: true
     42     mariadb:
     43       image:
     44         repository: bitnamilegacy/mariadb
     45       enabled: true
     46       architecture: standalone
     47       auth:
     48         rootPassword: ENC[AES256_GCM,data:cIIGXYiN/+AFXe7PEfDY5DhGEVRCvs47FZt0+qeFYnguv7Rfpzy3NEM8fhlhi8WICsShCtPLq6qFc+3eAna9KA==,iv:1SQbsHux0HHZ+IopSSVLeSLNPPKFjMSx3FwNy18yBVY=,tag:d1JZexKVjXeap5qCbmVnSw==,type:str]
     49         password: ENC[AES256_GCM,data:Je6oVx1UDwJ00wN3UNgN2V5IfwKA+bPpS1qxpfbnvQWzVj3yXYXYL77uFErQq7j0G9otjb3T5iq/ifoAv+xzFw==,iv:AFGd8yUb6uUnX7mBZ2wwFi1BWubxljNnCHVBrN8bHT4=,tag:QxGck+BqS60fThDoZjKH/w==,type:str]
     50       primary:
     51         persistence:
     52           enabled: true
     53           storageClass: longhorn
     54           size: 4Gi
     55           accessModes:
     56             - ReadWriteOnce
     57     # TODO: Fails with missing packages
     58     redis:
     59       enabled: false
     60       architecture: standalone
     61 sops:
     62   kms: []
     63   gcp_kms: []
     64   azure_kv: []
     65   hc_vault: []
     66   age:
     67     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     68       enc: |
     69         -----BEGIN AGE ENCRYPTED FILE-----
     70         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5V1djTlY4djAyTG0ybXE2
     71         dHZMc1MybU82TDlVRVBJR2RCaGZvQy9XN0Y4CldwdUo2ckxWbEFZQlNwRlU4RFpm
     72         aTFOSnpKdkNEWXRxcW1EdDFLaCtkMk0KLS0tIGkrWGVSOW5sTUxPS25JWVRGOVZC
     73         aVZHUThkZkQ5N3ZDaE0xYUpPTktFdlUKyXnmTdBYiBn0lmL09N/rSCOwA5ydC7a0
     74         D0B1sYyxdlFV1T4msbzwXyBcOKZYHRRBDccnzCscdMC6izZJlpornw==
     75         -----END AGE ENCRYPTED FILE-----
     76   lastmodified: "2025-08-13T13:38:38Z"
     77   mac: ENC[AES256_GCM,data:DoVQ4+QoGkYWU3RDgKP1af6xMBYtBD84C6b12vzMgDnz3hPzAm+Ubicn9O1oxuv85v/pXml2pEcqO4K+5k0pokxCWK7Q7DYr2cWPBgLECyEN0f9RNDs45PLd3Uxja+OSyWuNeUkAsdUxt8AiiQapgMBjCrO0VwdtOU3epoftcMI=,iv:E8eTUluv5MsBUADNEzSni7I4WXQkYRrpsI2sx1evJaE=,tag:BwQ3a1Fa+dTsOejXARkewQ==,type:str]
     78   pgp: []
     79   encrypted_regex: ^(kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     80   version: 3.9.1
     81 ---
     82 apiVersion: gateway.networking.k8s.io/v1
     83 kind: HTTPRoute
     84 metadata:
     85   name: kimai
     86   namespace: kimai
     87 spec:
     88   parentRefs:
     89     - name: envoy-gateway
     90       namespace: envoy-gateway
     91   hostnames:
     92     - kimai.midnightthoughts.space
     93   rules:
     94     - backendRefs:
     95         - name: kimai-kimai2
     96           port: 80
     97       timeouts:
     98         request: 240s
     99         backendRequest: 0s
    100 sops:
    101   kms: []
    102   gcp_kms: []
    103   azure_kv: []
    104   hc_vault: []
    105   age:
    106     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
    107       enc: |
    108         -----BEGIN AGE ENCRYPTED FILE-----
    109         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5V1djTlY4djAyTG0ybXE2
    110         dHZMc1MybU82TDlVRVBJR2RCaGZvQy9XN0Y4CldwdUo2ckxWbEFZQlNwRlU4RFpm
    111         aTFOSnpKdkNEWXRxcW1EdDFLaCtkMk0KLS0tIGkrWGVSOW5sTUxPS25JWVRGOVZC
    112         aVZHUThkZkQ5N3ZDaE0xYUpPTktFdlUKyXnmTdBYiBn0lmL09N/rSCOwA5ydC7a0
    113         D0B1sYyxdlFV1T4msbzwXyBcOKZYHRRBDccnzCscdMC6izZJlpornw==
    114         -----END AGE ENCRYPTED FILE-----
    115   lastmodified: "2025-08-13T13:38:38Z"
    116   mac: ENC[AES256_GCM,data:DoVQ4+QoGkYWU3RDgKP1af6xMBYtBD84C6b12vzMgDnz3hPzAm+Ubicn9O1oxuv85v/pXml2pEcqO4K+5k0pokxCWK7Q7DYr2cWPBgLECyEN0f9RNDs45PLd3Uxja+OSyWuNeUkAsdUxt8AiiQapgMBjCrO0VwdtOU3epoftcMI=,iv:E8eTUluv5MsBUADNEzSni7I4WXQkYRrpsI2sx1evJaE=,tag:BwQ3a1Fa+dTsOejXARkewQ==,type:str]
    117   pgp: []
    118   encrypted_regex: ^(kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    119   version: 3.9.1