cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

release.yaml (7530B)

      1 apiVersion: helm.toolkit.fluxcd.io/v2
      2 kind: HelmRelease
      3 metadata:
      4   name: vaultwarden
      5   namespace: vaultwarden
      6 spec:
      7   releaseName: vaultwarden
      8   chart:
      9     spec:
     10       version: 0.36.1
     11       chart: vaultwarden
     12       sourceRef:
     13         kind: HelmRepository
     14         name: vaultwarden
     15   interval: 50m
     16   install:
     17     remediation:
     18       retries: 3
     19   values:
     20     pushNotifications:
     21       installationId:
     22         value: ENC[AES256_GCM,data:q8s821ASyN8jJODQnKESXKKw99EHfcoqmPp+QSyDe+xFojZ+,iv:uAfX/geD0fOTjhZWIJWbX6ki5CwNrPGOq6OpikJEQVY=,tag:qukZVy2/ueUqUGNEINivIg==,type:str]
     23       installationKey:
     24         value: ENC[AES256_GCM,data:Z5Ype8Q1EwEYusSSeHT6AoRTKTs=,iv:urgZXvHXfts0QOOP8M5jGkjehRH1/HPCkb2nDtuD3CE=,tag:nm/DiGPsaQGkYvf8IMdPAg==,type:str]
     25       relayUri: https://push.bitwarden.eu
     26       identityUri: https://identity.bitwarden.eu
     27     signupsAllowed: false
     28     domain: https://vault.midnightthoughts.space
     29     signupDomains: nordgedanken.dev,gmail.com
     30     timeZone: Europe/Berlin
     31     database:
     32       type: postgresql
     33       uriOverride: ENC[AES256_GCM,data:JTIKCwwVw3deopLcbumlXDqAFgrtM0q+np+5wbnTMuLgJYgiB/enyAiJsULGLiQHkRTtcg9aEPvWW4+2HrUPWPVakSa7WLL8Jg1RMEPmgZDIiGQAcQBOR0lvoPj3SWgbh0vcfuPO4W2WLAjz8ij0vgDCjaxlt7JeAP002idn2KvwnMmK6Zil+Xb7fPJ5Nl1tl3cc0qrtcP1GyjBe1M8=,iv:cms2roPD/jJlR1wt0t7HPiG9c7yq91gKn6zNte139nM=,tag:NZSFSDelzDOeC6MxHN7XBw==,type:str]
     34     ingress:
     35       enabled: false
     36       additionalAnnotations:
     37         external-dns.alpha.kubernetes.io/hostname: vault.midnightthoughts.space
     38         cert-manager.io/cluster-issuer: letsencrypt-dns
     39       tlsSecret: vault.midnightthoughts.space-crt
     40       hostname: vault.midnightthoughts.space
     41       nginxIngressAnnotations: false
     42       class: traefik
     43     adminToken:
     44       value: $argon2id$v=19$m=19456,t=2,p=1$R0VoUlJ2T3I5UDRiL0h0cGgvTzYwbHhIL0poeFNpWmkzZThPUDh3TnNtND0$dm7crNLYaQFcGS7KZ38aKTyrV+E2RdyYKx1wDSjpu4s
     45     smtp:
     46       host: mail.midnightthoughts.space
     47       from: support@midnightthoughts.space
     48       fromName: Vault Administrator
     49       username:
     50         value: support@midnightthoughts.space
     51       password:
     52         value: ENC[AES256_GCM,data:q6+egVU0bl+CluqFVuw4qIIrc1LGw5RCwr4bAPTsh8RRt1c0vf4hJZAwLfc+tcaCNO99Jkl4KuRXesZAm+jN1Q==,iv:dSf92M0k6XknOrM2P/I+tuM6CS0TyxlDspVnXm1jPF8=,tag:/67d+hVcNjWK6N0ssq6CMw==,type:str]
     53       security: force_tls
     54       port: 465
     55     storage:
     56       data:
     57         name: ENC[AES256_GCM,data:Tz8aYV3YboKbeNvlW17t5g==,iv:MFeAk7gz6WNPuAGNKc8SsimwultHulPIbl48EEf4h14=,tag:9shjnIAo2QCcZZhX/1Thew==,type:str]
     58         class: ENC[AES256_GCM,data:gY40ogoAY2I=,iv:GFf70MCLhLp6U78zZg1dwBu7GVWZvlCuVfKwcDDk73M=,tag:b7xhnkX6lEljWNROyd5UpQ==,type:str]
     59         size: ENC[AES256_GCM,data:wOJtAPY=,iv:A2M4nALJ+Mb3u12DpbYtDp0r1THMrnIHyazzPNcToBw=,tag:EhejFrEjbmyr94h++shvAQ==,type:str]
     60         accessMode: ENC[AES256_GCM,data:xi09z1aUqh3RYwt3eg==,iv:L2udBSpUELL0zrNb4hqOOajL0hQmScwB+jqxSq0/0QI=,tag:w34mQxnd/yFXJzjPqNP+0Q==,type:str]
     61         keepPvc: ENC[AES256_GCM,data:x4htsg==,iv:EqsJfxeZNcnOY88v0TAxvHZnK194igqtwg7tx79yiZk=,tag:5d/jY1EZjQetsOJM4Ah7ig==,type:bool]
     62     resources:
     63       requests:
     64         cpu: 50m
     65         memory: 256Mi
     66 sops:
     67   kms: []
     68   gcp_kms: []
     69   azure_kv: []
     70   hc_vault: []
     71   age:
     72     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     73       enc: |
     74         -----BEGIN AGE ENCRYPTED FILE-----
     75         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXY25DbjBHRXptTFd4U0Qv
     76         WUpBejVlem5qRkNqdTFkL204MjQ4SG95d2hRCmNqay9vL2t1ZjRKemJHbEUva29j
     77         ZW5DcnVrTDlJNjNtK3VXZlRRV1ptM2MKLS0tIFFDMjBKOU1IOTRQZmhyUkU2NFJI
     78         akd6NWdaQWcraVF3ODE2Yk9CeVRYVlkK9+kkjjx7Tc460EBcyKo8ABuowyun7BHF
     79         MfxYFcO1qSoate+NX1RPZjErpoW3SccgPd6YgkN6zXxic5PGZu4ILQ==
     80         -----END AGE ENCRYPTED FILE-----
     81   lastmodified: "2025-08-03T20:07:48Z"
     82   mac: ENC[AES256_GCM,data:IJboxKsmBu4xBfLAufFLcqGlrRtKiZLMZi3QQ81yn6op3YcHEnrAhz298mGXzHT7EDsdQf8SdvJw6A8YnJ/oZ+V8O2XZjF3Os/Jmb4UC0MgA8Tx/14FVLJ7w2MEvH+HcBn63VhBjCOyWd5LukMIwZ4fpviUl/Y8NhxulAX9F5R8=,iv:ZvhSalxt6ny4+3pJDNq8DiHuGar37AQl6L2zAFK5+ag=,tag:Hb8HEi0PEA7xP/1Rl3+dgQ==,type:str]
     83   pgp: []
     84   encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     85   version: 3.9.1
     86 ---
     87 apiVersion: gateway.networking.k8s.io/v1
     88 kind: HTTPRoute
     89 metadata:
     90   name: vaultwarden
     91   namespace: vaultwarden
     92 spec:
     93   parentRefs:
     94     - name: envoy-gateway
     95       namespace: envoy-gateway
     96   hostnames:
     97     - vault.midnightthoughts.space
     98   rules:
     99     - backendRefs:
    100         - name: vaultwarden
    101           port: 80
    102       timeouts:
    103         request: 240s
    104         backendRequest: 0s
    105 sops:
    106   kms: []
    107   gcp_kms: []
    108   azure_kv: []
    109   hc_vault: []
    110   age:
    111     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
    112       enc: |
    113         -----BEGIN AGE ENCRYPTED FILE-----
    114         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXY25DbjBHRXptTFd4U0Qv
    115         WUpBejVlem5qRkNqdTFkL204MjQ4SG95d2hRCmNqay9vL2t1ZjRKemJHbEUva29j
    116         ZW5DcnVrTDlJNjNtK3VXZlRRV1ptM2MKLS0tIFFDMjBKOU1IOTRQZmhyUkU2NFJI
    117         akd6NWdaQWcraVF3ODE2Yk9CeVRYVlkK9+kkjjx7Tc460EBcyKo8ABuowyun7BHF
    118         MfxYFcO1qSoate+NX1RPZjErpoW3SccgPd6YgkN6zXxic5PGZu4ILQ==
    119         -----END AGE ENCRYPTED FILE-----
    120   lastmodified: "2025-08-03T20:07:48Z"
    121   mac: ENC[AES256_GCM,data:IJboxKsmBu4xBfLAufFLcqGlrRtKiZLMZi3QQ81yn6op3YcHEnrAhz298mGXzHT7EDsdQf8SdvJw6A8YnJ/oZ+V8O2XZjF3Os/Jmb4UC0MgA8Tx/14FVLJ7w2MEvH+HcBn63VhBjCOyWd5LukMIwZ4fpviUl/Y8NhxulAX9F5R8=,iv:ZvhSalxt6ny4+3pJDNq8DiHuGar37AQl6L2zAFK5+ag=,tag:Hb8HEi0PEA7xP/1Rl3+dgQ==,type:str]
    122   pgp: []
    123   encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    124   version: 3.9.1