From ced4bcd4c5a27dc9a47143bed3ef8f327b0f9f2b Mon Sep 17 00:00:00 2001 From: Nikolai Rodionov Date: Tue, 15 Aug 2023 14:53:20 +0200 Subject: [PATCH] Add new bucket to minio and setup rcon --- badhouseplants/values/secrets.minecraft.yaml | 23 ++++++++++++ badhouseplants/values/values.minecraft.yaml | 38 ++++++++++++++++++++ etersoft/helmfile.yaml | 5 +++ etersoft/values/values.minio.yaml | 6 ++++ 4 files changed, 72 insertions(+) create mode 100644 badhouseplants/values/secrets.minecraft.yaml diff --git a/badhouseplants/values/secrets.minecraft.yaml b/badhouseplants/values/secrets.minecraft.yaml new file mode 100644 index 0000000..66cd5bd --- /dev/null +++ b/badhouseplants/values/secrets.minecraft.yaml @@ -0,0 +1,23 @@ +minecraftServer: + rcon: + password: ENC[AES256_GCM,data:7kQAt4R+uN/28Uvn3KnJnOvOcCOf6FEaow==,iv:G20SygTZZ1O2DyPr+/f3XSC3bB4L5p/9CxZkPS5qibY=,tag:O2Ab+AC+Eho6MRm0vC9hHQ==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxTWUxY2hYT0dId2hsR0x1 + MXFtRjlSelgwdUcyVnBUdlJ6Nng1UkNJaHg4Ckc5NXBORjBCZHQyc0lDTiswazNF + cGhKVFFNdlZnRWlxS05OTklOUDJDQjQKLS0tIDNWNDVVWXcxUW8yUHgrOTNkRkQ1 + MGNDV2cvUUF3dWZHSlZNeVFDNXhzalkKubKuiiZuqoZTvRMr2FiUxnFUu+Pvj3Wf + pZTfZg9rnUukmV+kmwqQKcfoPNfeShhoAsszWwPM628cV9pq87I2/A== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2023-08-15T12:48:04Z" + mac: ENC[AES256_GCM,data:aksZH0kHJASsk6ziynB/xJ+vAH7TSU6Wjx+ZcqY/MlfBrdgsWBruCrutTtZE3rvchAVH1lSVeJ5z0w2Ix1/iMHOfkzM5U4LfU49e4HH6FinaWpOZ2tdODdr3Za2jF93FD6TfJOExCOL9pD94LdjBH4XbxBmpdrCqRMkX1Piu0tw=,iv:kKHZFQKqETRe7DZZVpNU4PE4xaeboA4sUWaP2uV1Nwk=,tag:qqAPQTpVhEEWa9Bmw0cTng==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.7.3 diff --git a/badhouseplants/values/values.minecraft.yaml b/badhouseplants/values/values.minecraft.yaml index f7d7105..f8ef327 100644 --- a/badhouseplants/values/values.minecraft.yaml +++ b/badhouseplants/values/values.minecraft.yaml @@ -62,6 +62,11 @@ minecraftServer: gameMode: survival pvp: true memory: 2512M + rcon: + enabled: true + withGeneratedPassword: false + port: 25575 + serviceType: ClusterIP extraPorts: - name: metrics containerPort: 9225 @@ -79,6 +84,38 @@ persistence: dataDir: enabled: true Size: 15Gi +mcbackup: + enabled: false + image: + backupInterval: 2h + pauseIfNoPlayers: "false" + # is set to a positive number, it'll delete old .tgz backup files from DEST_DIR. By default deletes backups older than a week. + pruneBackupsDays: 2 + rconRetries: 5 + rconRetryInterval: 10s + excludes: "*.jar,cache,logs" + backupMethod: restic + resticRepository: + resticAdditionalTags: "mc_backups" + pruneResticRetention: "--keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 75" + resticEnvs: + [] + extraEnv: + {} + envFrom: [] + resources: + requests: + memory: 512Mi + cpu: 500m + + persistence: + annotations: {} + backupDir: + enabled: false + Size: 1Gi +# --------------------------------------------- +# -- Install Plugins +# --------------------------------------------- initContainers: - name: install-prometheus-exporter image: alpine/curl @@ -116,6 +153,7 @@ initContainers: - name: plugins mountPath: /data/plugins readOnly: false + extraVolumes: - volumeMounts: - name: plugins diff --git a/etersoft/helmfile.yaml b/etersoft/helmfile.yaml index e69de29..af38673 100644 --- a/etersoft/helmfile.yaml +++ b/etersoft/helmfile.yaml @@ -0,0 +1,5 @@ +--- + +bases: + - ../environments.yaml + - ../repositories.yaml diff --git a/etersoft/values/values.minio.yaml b/etersoft/values/values.minio.yaml index f090b2d..25c0888 100644 --- a/etersoft/values/values.minio.yaml +++ b/etersoft/values/values.minio.yaml @@ -71,6 +71,8 @@ policies: - resources: - 'arn:aws:s3:::longhorn/*' - 'arn:aws:s3:::longhorn' + - 'arn:aws:s3:::restic/*' + - 'arn:aws:s3:::restic' actions: - "s3:DeleteObject" - "s3:GetObject" @@ -81,6 +83,10 @@ buckets: policy: none purge: false versioning: false + - name: restic + policy: none + purge: false + versioning: false metrics: serviceMonitor: enabled: false