cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

capacitor_temp.yaml (2791B)

      1 apiVersion: gateway.envoyproxy.io/v1alpha1
      2 kind: SecurityPolicy
      3 metadata:
      4   name: oidc-capacitor
      5   namespace: flux-system
      6 spec:
      7   targetRefs:
      8     - group: gateway.networking.k8s.io
      9       kind: HTTPRoute
     10       name: capacitor
     11   oidc:
     12     provider:
     13       issuer: https://auth.midnightthoughts.space/application/o/capacitor/
     14       authorizationEndpoint: https://auth.midnightthoughts.space/application/o/authorize/
     15       tokenEndpoint: https://auth.midnightthoughts.space/application/o/token/
     16     clientID: LKNnKYcm816EEnnFTmEdfo91kmWyJnc3lrh98NWW
     17     #gitleaks:allow
     18     clientSecret:
     19       name: capacitor-oidc-config
     20     #redirectURL: https://ui.k8s.midnightthoughts.space/oauth2/callback
     21     #logoutPath: /logout
     22     refreshToken: true
     23     cookieDomain: midnightthoughts.space
     24 sops:
     25   kms: []
     26   gcp_kms: []
     27   azure_kv: []
     28   hc_vault: []
     29   age:
     30     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     31       enc: |
     32         -----BEGIN AGE ENCRYPTED FILE-----
     33         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Y1dqRnR6Wlc5R0xxMXRB
     34         WWtDcFFETFAzcjdVempiSmtWMkdFNmZabkdnCmxoYjdFVisxQUhKSWtNWDZ0UTQw
     35         ZnJFZzY5UmhlWU5aVyszSGg2VzBadXcKLS0tIE02b2xzY1pPWHZGSTUxSnc1SkNa
     36         RENiUGZkZ1VJZm0xVHltbFR5azlRY28K8OyBCdnNoryiln5lgxIjgPXL0eigUlQj
     37         eo7aPaQr7KZy25MGpNHEMOFxk8B6QzgWS+KtXtAf/iWwl0PoRRFsFw==
     38         -----END AGE ENCRYPTED FILE-----
     39   lastmodified: "2025-07-11T06:55:24Z"
     40   mac: ENC[AES256_GCM,data:4qrKYJZhlURM0hBWv6XrL+d2DYinPOdgfXxnilxFO/lpemMjb8Jqu2qRYwhlaPWFHafVFj6o3wJ4ImGqqoKM7q2kSkCUEAmbWD2ioVRsqVOD6IztoFhAVDkEuAcyCRjcJeUELy4JXDARl6jd4ev+7AXJ4k80gCLBNMRgBWCW1lw=,iv:uTVK0q+YYPmazP4SzKKPhH0Jo76kR8kIvNDRxlgVqg8=,tag:kHI9zsb/MueKxZ6nAykaBA==,type:str]
     41   pgp: []
     42   encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     43   version: 3.9.1