82 lines
2.1 KiB
YAML
82 lines
2.1 KiB
YAML
---
|
|
# ------------------------------------------
|
|
# -- Istio extenstion. Just because I'm
|
|
# -- not using ingress nginx
|
|
# ------------------------------------------
|
|
istio:
|
|
enabled: true
|
|
istio:
|
|
- name: vaultwarden-http
|
|
kind: http
|
|
gateway: istio-system/badhouseplants-net
|
|
hostname: vault.badhouseplants.net
|
|
service: vaultwarden
|
|
port: 8080
|
|
# ------------------------------------------
|
|
# -- Database extension is used to manage
|
|
# -- database with db-operator
|
|
# ------------------------------------------
|
|
ext-database:
|
|
enabled: true
|
|
name: vaultwarden-postgres16
|
|
instance: postgres16
|
|
service:
|
|
port: 8080
|
|
vaultwarden:
|
|
smtp:
|
|
host: badhouseplants.net
|
|
security: "starttls"
|
|
port: 587
|
|
from: vaultwarden@badhouseplants.net
|
|
fromName: Vault Warden
|
|
authMechanism: "Plain"
|
|
acceptInvalidHostnames: "false"
|
|
acceptInvalidCerts: "false"
|
|
debug: false
|
|
domain: https://vault.badhouseplants.net
|
|
websocket:
|
|
enabled: true
|
|
address: "0.0.0.0"
|
|
port: 3012
|
|
rocket:
|
|
port: "8080"
|
|
workers: "10"
|
|
webVaultEnabled: "true"
|
|
signupsAllowed: false
|
|
invitationsAllowed: true
|
|
signupDomains: "https://vault.badhouseplants.com"
|
|
signupsVerify: "true"
|
|
showPassHint: "false"
|
|
database:
|
|
existingSecret: vaultwarden-postgres16-creds
|
|
existingSecretKey: CONNECTION_STRING
|
|
connectionRetries: 15
|
|
maxConnections: 10
|
|
storage:
|
|
enabled: true
|
|
size: 1Gi
|
|
class: longhorn
|
|
dataDir: /data
|
|
logging:
|
|
enabled: false
|
|
logfile: "/data/vaultwarden.log"
|
|
loglevel: "warn"
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
|
kubernetes.io/ingress.class: traefik
|
|
kubernetes.io/tls-acme: "true"
|
|
kubernetes.io/ingress.allow-http: "false"
|
|
kubernetes.io/ingress.global-static-ip-name: ""
|
|
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
|
|
hosts:
|
|
- host: vault.badhouseplants.net
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- secretName: vault-tls-secret
|
|
hosts:
|
|
- vault.badhouseplants.net
|