cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

capacitor.yaml (11676B)

      1 apiVersion: source.toolkit.fluxcd.io/v1
      2 kind: OCIRepository
      3 metadata:
      4   name: capacitor
      5   namespace: flux-system
      6 spec:
      7   interval: 12h
      8   url: oci://ghcr.io/gimlet-io/capacitor-manifests
      9   ref:
     10     semver: '>=0.4.2'
     11 sops:
     12   kms: []
     13   gcp_kms: []
     14   azure_kv: []
     15   hc_vault: []
     16   age:
     17     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     18       enc: |
     19         -----BEGIN AGE ENCRYPTED FILE-----
     20         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBaG15Q1dnMzhqRDVGQjJT
     21         ZFkxWXBPRGo5WWZPM2FWRVB1Ujk5cHBWb2h3CnFKRXc2SXl3UW9vZWE2RDlzZVRE
     22         WkREZS9IbWdOU3FjMzdrems5SThwNWsKLS0tIHdDNWlMWHk3a2h0ZS9OUnR5L2NH
     23         UWNBRnhzV3dmSjlZZ2ZITHp3dmVOWFUK4lnBo3zKdmtctW9g2xqhg6NWyHXIIfio
     24         rzy7KPPv8P2CfvlVHfLyLr1gDnHKLPAvwMdrscSjSXuqUk0r+Cgwng==
     25         -----END AGE ENCRYPTED FILE-----
     26   lastmodified: "2025-07-11T06:55:22Z"
     27   mac: ENC[AES256_GCM,data:jK9anMBm8ehDxj4ESUq8Fi5XgSVbXamFSxDnF5hqSEEpSVAd3opapLRRXkA6RQyuB/ny0yvyIIN+RSRrSpQKo3plJJfWYaa1gVugYKCCATmi1HVjugSKccTLy7ZO5Qj9N1oVlbZJHPc01X8qc4vUmuWeAdvdF68KgI75apcLc3Q=,iv:Q0PhSDSgdF+kTbYX0JLeDtUiwDEgFGRAf6wOdmhwpKA=,tag:wBv17f+seY5kHrpekxN/7Q==,type:str]
     28   pgp: []
     29   encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     30   version: 3.9.1
     31 ---
     32 apiVersion: kustomize.toolkit.fluxcd.io/v1
     33 kind: Kustomization
     34 metadata:
     35   name: capacitor
     36   namespace: flux-system
     37 spec:
     38   targetNamespace: flux-system
     39   interval: 1h
     40   retryInterval: 2m
     41   timeout: 5m
     42   wait: true
     43   prune: true
     44   path: ./
     45   sourceRef:
     46     kind: OCIRepository
     47     name: capacitor
     48 sops:
     49   kms: []
     50   gcp_kms: []
     51   azure_kv: []
     52   hc_vault: []
     53   age:
     54     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     55       enc: |
     56         -----BEGIN AGE ENCRYPTED FILE-----
     57         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBaG15Q1dnMzhqRDVGQjJT
     58         ZFkxWXBPRGo5WWZPM2FWRVB1Ujk5cHBWb2h3CnFKRXc2SXl3UW9vZWE2RDlzZVRE
     59         WkREZS9IbWdOU3FjMzdrems5SThwNWsKLS0tIHdDNWlMWHk3a2h0ZS9OUnR5L2NH
     60         UWNBRnhzV3dmSjlZZ2ZITHp3dmVOWFUK4lnBo3zKdmtctW9g2xqhg6NWyHXIIfio
     61         rzy7KPPv8P2CfvlVHfLyLr1gDnHKLPAvwMdrscSjSXuqUk0r+Cgwng==
     62         -----END AGE ENCRYPTED FILE-----
     63   lastmodified: "2025-07-11T06:55:22Z"
     64   mac: ENC[AES256_GCM,data:jK9anMBm8ehDxj4ESUq8Fi5XgSVbXamFSxDnF5hqSEEpSVAd3opapLRRXkA6RQyuB/ny0yvyIIN+RSRrSpQKo3plJJfWYaa1gVugYKCCATmi1HVjugSKccTLy7ZO5Qj9N1oVlbZJHPc01X8qc4vUmuWeAdvdF68KgI75apcLc3Q=,iv:Q0PhSDSgdF+kTbYX0JLeDtUiwDEgFGRAf6wOdmhwpKA=,tag:wBv17f+seY5kHrpekxN/7Q==,type:str]
     65   pgp: []
     66   encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     67   version: 3.9.1
     68 ---
     69 apiVersion: v1
     70 kind: Secret
     71 metadata:
     72   name: capacitor-oidc-config
     73   namespace: flux-system
     74 type: Opaque
     75 stringData:
     76   client-secret: ENC[AES256_GCM,data:5DLPmAMTFTi9R0XfiqdRZ8Q1UF9n0OigZbMojXh+h6WnpyTXhi5GeetvGJatUP82dKUiNuBHaOutdxTbarw5TJse6iv4TLfjhqz9nx+CQIQUKr4jeGXDumldSyaD4smRTGG7Wg7GCy2j9msNqzzb6W9aWcOnZmGJQu+/9tezsFI=,iv:M/CYyZnYSnCDXd4JBsyeR0Aav9ER0xZ+G2jmt0nfLLs=,tag:EY9MLwB9Pd6ggEQTDKZoLg==,type:str]
     77 sops:
     78   kms: []
     79   gcp_kms: []
     80   azure_kv: []
     81   hc_vault: []
     82   age:
     83     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     84       enc: |
     85         -----BEGIN AGE ENCRYPTED FILE-----
     86         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBaG15Q1dnMzhqRDVGQjJT
     87         ZFkxWXBPRGo5WWZPM2FWRVB1Ujk5cHBWb2h3CnFKRXc2SXl3UW9vZWE2RDlzZVRE
     88         WkREZS9IbWdOU3FjMzdrems5SThwNWsKLS0tIHdDNWlMWHk3a2h0ZS9OUnR5L2NH
     89         UWNBRnhzV3dmSjlZZ2ZITHp3dmVOWFUK4lnBo3zKdmtctW9g2xqhg6NWyHXIIfio
     90         rzy7KPPv8P2CfvlVHfLyLr1gDnHKLPAvwMdrscSjSXuqUk0r+Cgwng==
     91         -----END AGE ENCRYPTED FILE-----
     92   lastmodified: "2025-07-11T06:55:22Z"
     93   mac: ENC[AES256_GCM,data:jK9anMBm8ehDxj4ESUq8Fi5XgSVbXamFSxDnF5hqSEEpSVAd3opapLRRXkA6RQyuB/ny0yvyIIN+RSRrSpQKo3plJJfWYaa1gVugYKCCATmi1HVjugSKccTLy7ZO5Qj9N1oVlbZJHPc01X8qc4vUmuWeAdvdF68KgI75apcLc3Q=,iv:Q0PhSDSgdF+kTbYX0JLeDtUiwDEgFGRAf6wOdmhwpKA=,tag:wBv17f+seY5kHrpekxN/7Q==,type:str]
     94   pgp: []
     95   encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     96   version: 3.9.1
     97 ---
     98 apiVersion: gateway.networking.k8s.io/v1
     99 kind: HTTPRoute
    100 metadata:
    101   name: capacitor
    102   namespace: flux-system
    103 spec:
    104   parentRefs:
    105     - name: envoy-gateway
    106       namespace: envoy-gateway
    107   hostnames:
    108     - ui.k8s.midnightthoughts.space
    109   rules:
    110     - backendRefs:
    111         - name: capacitor
    112           port: 9000
    113       timeouts:
    114         request: 240s
    115         backendRequest: 0s
    116 sops:
    117   kms: []
    118   gcp_kms: []
    119   azure_kv: []
    120   hc_vault: []
    121   age:
    122     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
    123       enc: |
    124         -----BEGIN AGE ENCRYPTED FILE-----
    125         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBaG15Q1dnMzhqRDVGQjJT
    126         ZFkxWXBPRGo5WWZPM2FWRVB1Ujk5cHBWb2h3CnFKRXc2SXl3UW9vZWE2RDlzZVRE
    127         WkREZS9IbWdOU3FjMzdrems5SThwNWsKLS0tIHdDNWlMWHk3a2h0ZS9OUnR5L2NH
    128         UWNBRnhzV3dmSjlZZ2ZITHp3dmVOWFUK4lnBo3zKdmtctW9g2xqhg6NWyHXIIfio
    129         rzy7KPPv8P2CfvlVHfLyLr1gDnHKLPAvwMdrscSjSXuqUk0r+Cgwng==
    130         -----END AGE ENCRYPTED FILE-----
    131   lastmodified: "2025-07-11T06:55:22Z"
    132   mac: ENC[AES256_GCM,data:jK9anMBm8ehDxj4ESUq8Fi5XgSVbXamFSxDnF5hqSEEpSVAd3opapLRRXkA6RQyuB/ny0yvyIIN+RSRrSpQKo3plJJfWYaa1gVugYKCCATmi1HVjugSKccTLy7ZO5Qj9N1oVlbZJHPc01X8qc4vUmuWeAdvdF68KgI75apcLc3Q=,iv:Q0PhSDSgdF+kTbYX0JLeDtUiwDEgFGRAf6wOdmhwpKA=,tag:wBv17f+seY5kHrpekxN/7Q==,type:str]
    133   pgp: []
    134   encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    135   version: 3.9.1
    136 ---
    137 apiVersion: networking.k8s.io/v1
    138 kind: NetworkPolicy
    139 metadata:
    140   name: allow-capacitor
    141   namespace: flux-system
    142 spec:
    143   podSelector:
    144     matchLabels:
    145       app.kubernetes.io/instance: capacitor
    146   ingress:
    147     - ports:
    148         - protocol: TCP
    149           port: 9000
    150   policyTypes:
    151     - Ingress
    152 sops:
    153   kms: []
    154   gcp_kms: []
    155   azure_kv: []
    156   hc_vault: []
    157   age:
    158     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
    159       enc: |
    160         -----BEGIN AGE ENCRYPTED FILE-----
    161         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBaG15Q1dnMzhqRDVGQjJT
    162         ZFkxWXBPRGo5WWZPM2FWRVB1Ujk5cHBWb2h3CnFKRXc2SXl3UW9vZWE2RDlzZVRE
    163         WkREZS9IbWdOU3FjMzdrems5SThwNWsKLS0tIHdDNWlMWHk3a2h0ZS9OUnR5L2NH
    164         UWNBRnhzV3dmSjlZZ2ZITHp3dmVOWFUK4lnBo3zKdmtctW9g2xqhg6NWyHXIIfio
    165         rzy7KPPv8P2CfvlVHfLyLr1gDnHKLPAvwMdrscSjSXuqUk0r+Cgwng==
    166         -----END AGE ENCRYPTED FILE-----
    167   lastmodified: "2025-07-11T06:55:22Z"
    168   mac: ENC[AES256_GCM,data:jK9anMBm8ehDxj4ESUq8Fi5XgSVbXamFSxDnF5hqSEEpSVAd3opapLRRXkA6RQyuB/ny0yvyIIN+RSRrSpQKo3plJJfWYaa1gVugYKCCATmi1HVjugSKccTLy7ZO5Qj9N1oVlbZJHPc01X8qc4vUmuWeAdvdF68KgI75apcLc3Q=,iv:Q0PhSDSgdF+kTbYX0JLeDtUiwDEgFGRAf6wOdmhwpKA=,tag:wBv17f+seY5kHrpekxN/7Q==,type:str]
    169   pgp: []
    170   encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    171   version: 3.9.1