cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

release.yaml (5487B)

      1 apiVersion: helm.toolkit.fluxcd.io/v2
      2 kind: HelmRelease
      3 metadata:
      4     name: plausible
      5     namespace: blog
      6 spec:
      7     chart:
      8         spec:
      9             chart: plausible-analytics
     10             sourceRef:
     11                 kind: HelmRepository
     12                 name: plausible
     13     interval: 60m
     14     timeout: 2m
     15     install:
     16         timeout: 10m
     17         remediation:
     18             retries: 3
     19     values:
     20         image:
     21             tag: v3.2.0
     22         baseURL: https://plausible.midnightthoughts.space
     23         disableRegistration: true
     24         logFailedLoginAttempts: true
     25         totpVaultKey: ENC[AES256_GCM,data:cGeabjsUV8i7czAWhQ4X5yLsVRFHDVjbQlqB8UT9nKV0GAhMMSlR0qTObI4=,iv:bQBqySHv3SkevzQEyEFpA24owky0c8Qy3MsJU9wa75s=,tag:SoJHKpTw1dENUPjY2sjh9A==,type:str]
     26         clickhouseDatabaseURL: ENC[AES256_GCM,data:pdFgj2x0+wESVi4V5n80jalVjdGKIzPn/aepiab/0URr0pGAXgV+XnreToz1TpFMHcZXJeNBrL74qtgOHrPtxlnoILg38cw2t4KbJxpN00PXWppqxk83N2WtoSy9Pf26jIWhOe8JaX8VXZmJ6fDfTRqQxEdEZ7WhgLy0VzWFw+iQsOhcnDBV/2ecrCZ4anLcbyNFejnkXw==,iv:TsGAGa7Ua7U8Q8XGUmhiF1wYYDUp9BhzHcD1az6mwAc=,tag:OGXU9AVQAwxz1hnSiNmoqw==,type:str]
     27         databaseURL: ENC[AES256_GCM,data:90ebt9nYA8dLldkTO5y3pn7fN5EbQ065s75XiOl8PHN9WRFp+S8ot1rgV8kqhrX+76q2wP0YhU8sttwi8DV/2nnN51elvQeckD3y5OhrMM9Lc3nP5y/l2yDQFTWbqJiZvYxKQ05kob7igxmIOElqhxTu4Yi71FR/etmi2i/dx5lDvfDBVYr5IqtoOr1vk7yYRBdaEnUD/2Y=,iv:SxqEiWon87HCGiQ6u2ji3BFBAfAlC6NV5XE4L7iFsg8=,tag:fwsUWynREN6c9i7yOeZtLg==,type:str]
     28         mailer:
     29             enabled: true
     30             adapter: Bamboo.Mua
     31             email: support@midnightthoughts.space
     32             smtp:
     33                 host: mail.midnightthoughts.space
     34                 port: 465
     35                 auth: true
     36                 username: support@midnightthoughts.space
     37                 password: ENC[AES256_GCM,data:dIpZ3Gj7CJPajOTrdzdWx8JPjnjAaJOLDGdQnsihVl/gsCD6Us4ZLWGAvmW+cTUCYmGQXBN9/rYcgVTG9iUXjQ==,iv:YC5OBtzbcS8sEjG0CPAaVk30d78L7V/LPFuOQ7zJCcA=,tag:YumX+S5COUX+i9SkD1hXlg==,type:str]
     38                 ssl: true
     39         postgresql:
     40             enabled: false
     41         clickhouse:
     42             resourcesPreset: xlarge
     43             auth:
     44                 password: ENC[AES256_GCM,data:Fsx/G2LUVJGvhB353vsCJaLy+msxocx7lJnwJoYMjA06BT1AF48FGjOLUM/d0e/jrBfrULIRIR+6V7WBQhe1Sg==,iv:TAjNvBemWeshzBJ+MU/9aiaJ1/WE8hxIkd7hwB3eKBY=,tag:p6lgSaZRjejiGT4ziac6mQ==,type:str]
     45             persistence:
     46                 storageClass: longhorn
     47                 enabled: true
     48                 size: 512Mi
     49             extraEnvVarsSecret: clickhouse-s3-credentials
     50             extraVolumes:
     51                 - name: s3-config
     52                   configMap:
     53                     name: clickhouse-s3-config
     54             extraVolumeMounts:
     55                 - name: s3-config
     56                   mountPath: /etc/clickhouse-server/conf.d/s3-storage.xml
     57                   subPath: s3-storage.xml
     58         ingress:
     59             enabled: false
     60             annotations:
     61                 cert-manager.io/cluster-issuer: letsencrypt-dns
     62             hosts:
     63                 - plausible.midnightthoughts.space
     64             path: /
     65             tls:
     66                 - secretName: plausible.midnightthoughts.space-tls
     67                   hosts:
     68                     - plausible.midnightthoughts.space
     69 sops:
     70     kms: []
     71     gcp_kms: []
     72     azure_kv: []
     73     hc_vault: []
     74     age:
     75         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     76           enc: |
     77             -----BEGIN AGE ENCRYPTED FILE-----
     78             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SHltemdpUUtQZG01ZDVj
     79             VEVqU2gyRDZPcnh3WWVSamVFZUczQnhOVlhFCjFJSVZ1clg3TXpXSFJDaURxSTNy
     80             cDAybnBrcUdVWFc1VUYrKzltbGpScG8KLS0tIHlDeFhpMG1JSHQwTWVmYlQzYWRj
     81             K2NhN2pTSlFwNjFndHNUN1NaQ3dHblkKoawpu0/i8Di4G68MXyHS0QdRkLP3XVon
     82             3EcxuOmi+QS6rruyHWOMYz9FMGeHRCkhac7D6RBLKmXyHdAlO+TJtA==
     83             -----END AGE ENCRYPTED FILE-----
     84     lastmodified: "2026-03-03T22:09:38Z"
     85     mac: ENC[AES256_GCM,data:+5gQwX7rT8U+4ZfCOWbFZEOI9EkSrBoQ/v5MCnE+DNKxS2/9P38anJf3XdVs492GlpOROmTx2Qh2Y9/m37aBoShvMnRGJdfp6VqeXtk+IO4T/R819FY2JcS5nb1d3tevTsOrTbtbHZUjlQrUtPYy68GPqTc3AOI7BBC74/DDeTE=,iv:5DNb+s9BdJwkQeatRTLwDthgS2cZYn0yspBQJj7xMiw=,tag:DnrgCtsoRTzYwEoiNrTeLw==,type:str]
     86     pgp: []
     87     encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
     88     version: 3.9.1