cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

release.yaml (4682B)

      1 apiVersion: helm.toolkit.fluxcd.io/v2
      2 kind: HelmRelease
      3 metadata:
      4   name: weblate
      5   namespace: weblate
      6 spec:
      7   releaseName: weblate
      8   interval: 60m
      9   chart:
     10     spec:
     11       chart: weblate
     12       sourceRef:
     13         kind: HelmRepository
     14         name: weblate
     15   values:
     16     image:
     17       repository: weblate/weblate
     18       tag: 5.17.0.1@sha256:f48244022f9c9a4765b5cd100ad2ee7ff60af25b3f83be3330aa448408c51913
     19       pullPolicy: IfNotPresent
     20     adminEmail: ENC[AES256_GCM,data:mfMJlVWPjihqtfm9D2CM9rjdpP9P3eNt,iv:htDuxeNVXkVKaPJRFgtvWStSri3d3LOsnuEMc5+xfRQ=,tag:vRnHqFv9HM/Jbk/54RdbFw==,type:str]
     21     adminUser: ENC[AES256_GCM,data:r7Y0S4v/2Q==,iv:Rr0XLte1TiiywzrCbapV0xtlxdUFnPP3fxh5X1ErU4A=,tag:B5bAqjYali4sYPX27mGCmw==,type:str]
     22     adminPassword: ENC[AES256_GCM,data:/sC5QrWb4svo,iv:CRd65lDCw2pew3e2D1MXnY88Ivbj8dNO1u69yJUhy5I=,tag:G7I2/v4og91zdmUaiN7lug==,type:str]
     23     siteDomain: weblate.mtrnord.blog
     24     emailHost: mail.midnightthoughts.space
     25     emailPort: 587
     26     emailTLS: true
     27     emailSSL: false
     28     emailUser: support@midnightthoughts.space
     29     emailPassword: ENC[AES256_GCM,data:OS7yumZWe+RyASQJ3ZD++xvJ/rcyVED6z8h5WvfWcp6ZoUpYmOwF0nggr3Z+2dj/NDKhOOi0BAptECAySccPtg==,iv:SnxTavt8NtLdWcH+PTf1NpsoySnHK+hWkmA3XsrOF4k=,tag:TlbrM6a8QOZN2MDBiMT53A==,type:str]
     30     serverEmail: support@midnightthoughts.space
     31     defaultFromEmail: support@midnightthoughts.space
     32     extraConfig:
     33       WEBLATE_IP_PROXY_HEADER: HTTP_X_FORWARDED_FOR
     34       WEBLATE_SECURE_PROXY_SSL_HEADER: HTTP_X_FORWARDED_PROTO,https
     35       WEBLATE_ENABLE_HTTPS: "1"
     36     persistence:
     37       enabled: true
     38       storageClass: longhorn
     39       accessMode: ReadWriteMany
     40       size: 5Gi
     41       filestore_dir: /app/data
     42     postgresql:
     43       enabled: false
     44       postgresqlHost: pg-cluster-v2-rw.postgres-cluster.svc.cluster.local
     45       auth:
     46         userName: weblate
     47         postgresPassword: ENC[AES256_GCM,data:Iu/6ImbpFeoxiQ+1VOuN7bd//ynNU60ISsHFgmO3tORScQCfhYDFQwrlxftUGb0jJXqeBCc2IIBBIA278Glu+A==,iv:eEjm+iRyYMgdUK6ohYvy7dnDops/uVrx8hd5iCAFZg4=,tag:tSETavDwx9ThdNWl8tmfIg==,type:str]
     48     redis:
     49       enabled: true
     50       auth:
     51         enabled: true
     52         password: ENC[AES256_GCM,data:SHnPzs97u9EcykMKuEHllUf1E0gdKdNa+/BUOm8mqjoMI2zLidEJIlRHkNNHy40RVWeb9hXJztxETodlbFLgjA==,iv:tW4A4WQ6nmd9Zsi3dwiQHOzJGIZYGXsFSb0/4yzgpYw=,tag:PeSmR/vA2AbWR/T0a89egw==,type:str]
     53       master:
     54         persistence:
     55           enabled: true
     56           storageClass: longhorn
     57           size: 1Gi
     58       replica:
     59         persistence:
     60           enabled: true
     61           storageClass: longhorn
     62           size: 1Gi
     63 sops:
     64   kms: []
     65   gcp_kms: []
     66   azure_kv: []
     67   hc_vault: []
     68   age:
     69     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     70       enc: |
     71         -----BEGIN AGE ENCRYPTED FILE-----
     72         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYc2NTYmtQMUZ3ZVBpYjRS
     73         UzJrQzhNL3E3bHd3aG4zL0RzaU80ZU02OGcwCkpJQnBianVHVklrKzZFNVlwUFB2
     74         Und6SnNNNWxtTGVvcWhtd0g3Slh6dG8KLS0tIGNXb2JzcVQwN2hFZFVsUERCaXM5
     75         a1hWVFZEVGlDeXFraXpPNXVXQnFrL1UKP9c6+zwepJQQU4LUwC1E+JHGH9P7ROK2
     76         FHBjO/pJUZzISBEZmrJWH2kALGnmL41ZtvPnhAo8AoN+TVb0ADUaLw==
     77         -----END AGE ENCRYPTED FILE-----
     78   lastmodified: "2025-12-05T14:42:35Z"
     79   mac: ENC[AES256_GCM,data:3lMfKPfnK4gB8JMJQSz1Nuo7QfCas8GzoBxkdOsVFJjueEul8O2RIx7EhiLIBLGeAOka/w2Jq+16/2FF7ESm2Ue1urq6XZQLkshPTTRPDs9aQlww9GMp5qDAIb9g18yPiSDHjTRGRuO+LPrqQF2YdIEqg4s3typh8LR2yGAg+3U=,iv:f3mL6uAw/LBQAqcGrDeoPClJTSWECK0aeSoh4n3q48I=,tag:1PcEjhacn9LgH5+3SsmG7g==,type:str]
     80   pgp: []
     81   encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword|adminPassword|adminUser|adminEmail|emailPassword)$
     82   version: 3.9.1