badhouseplants/k8s-deployment
4
0
Fork 0
Code Issues 3 Pull Requests 7 Actions Packages Projects Releases Activity

Update configs

Browse Source
This commit is contained in:
Nikolai Rodionov 2024-08-02 16:02:51 +02:00
parent da5568f034
commit 232b922270
Signed by: allanger
GPG Key ID: 0AA46A90E25592AD
6 changed files with 68 additions and 85 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
installations/applications/helmfile.yaml
View File

@ -25,6 +25,9 @@ repositories:
url: https://grafana.github.io/helm-charts url: https://grafana.github.io/helm-charts
- name: bitnami - name: bitnami
url: https://charts.bitnami.com/bitnami url: https://charts.bitnami.com/bitnami
- name: allangers-charts
url: ghcr.io/allanger/allangers-charts
oci: true
releases: releases:
- name: authentik - name: authentik
@ -46,10 +49,10 @@ releases:
- template: default-env-secrets - template: default-env-secrets
- template: ext-database - template: ext-database
- name: gitea-archived - name: gitea
chart: gitea/gitea chart: gitea/gitea
version: 10.4.0 version: 10.4.0
namespace: archive namespace: applications
inherit: inherit:
- template: default-env-values - template: default-env-values
- template: default-env-secrets - template: default-env-secrets
@ -93,7 +96,7 @@ releases:
- template: ext-tcp-routes - template: ext-tcp-routes
- name: vaultwarden - name: vaultwarden
chart: softplayer-oci/vaultwarden chart: allangers-charts/vaultwarden
version: 2.1.0 version: 2.1.0
namespace: applications namespace: applications
inherit: inherit:

52
values/badhouseplants/secrets.gitea.yaml
View File

@ -1,31 +1,31 @@
gitea: gitea:
admin: admin:
username: ENC[AES256_GCM,data:jWOKYLR8wEY=,iv:obfaa7iVArqZsfXI9glfNVhnEzNPnoPvA9WZrqzURd8=,tag:ZQykUfckAD6CcRsAxYLfww==,type:str] username: ENC[AES256_GCM,data:Scgn1nXvL1g=,iv:DGYrBNQ8zt02tyn3EADSTIWlT/kKhlQjr5y4L/uP3+g=,tag:Fj3O43JB71mH00pif9RTtA==,type:str]
password: ENC[AES256_GCM,data:ckwTYUA05SSl+3KD9G/XtQW+nnM=,iv:reeJTq7vWcfjggl9X+/t0yYzaz7xuiZLZM0xW7zlfcI=,tag:x0Dtf3ea53+1c0jhn2C5zw==,type:str] password: ENC[AES256_GCM,data:dfYWkz76I+YUsE0vf9ltrkE3Ghk=,iv:TDo+NEdOabFu9GNR8W1s7RuLbXFoqF6sf1XxqZd/hbs=,tag:duToLQzOOhLZgncxoMamPA==,type:str]
config: config:
mailer: mailer:
PASSWD: ENC[AES256_GCM,data:ZXMbptf1Tn8QVf9H6gLuLIpI+gs=,iv:QsHjgoEWy4mEf/NNBnuPFpXBFHoACn8pfQmbF1wI2ZM=,tag:/T6PGia+mkzmcUkWANO25w==,type:str] PASSWD: ENC[AES256_GCM,data:LVJZ5lr/PPaW03FW5a1ky+7HRJA=,iv:GvE9sagN+QKqft4UWxJ3GYHxhzZTwaa79dolpIiR228=,tag:DM7+eYb8JRDdlEgQuUHmyA==,type:str]
database: database:
PASSWD: ENC[AES256_GCM,data:mfMbZf7Kbn+5gwLi2JGMt6otMlQ=,iv:r2H7aSJKraBoDydV6N29hsRiH6bLUM0aJHPmo3dbSP4=,tag:WwBHKRYdJIv6IGQehO2yEg==,type:str] PASSWD: ENC[AES256_GCM,data:q2WKX4NcyT5YzPGpnuibw7Hz/IE=,iv:nqXKXP435t71wQzdB31BqkmNE6wIwsqt+atolNYP5X8=,tag:jAJxjZBF86mqEtUzvGNiLw==,type:str]
session: session:
PROVIDER_CONFIG: ENC[AES256_GCM,data:YexjXlIj5mtwhv5HD2rmpzo3hqIXpZkyPk0njFYe3tceDV2uclpLCmIrZOumwo4TdWtIZ5Axs336vXtFvi4LFSyyrzSnqSPNxC1aNHwmj4keMY1qvPG0qRCoS7Q7JcCak41gRopbx+RLn7BENZ6s0e19u5PXLDSB,iv:pkY0LBpXhnSr40YoZpklytGWmKe7CdsgPpQySXfON5g=,tag:96UXoPksLxE+mJzyjzjqEA==,type:str] PROVIDER_CONFIG: ENC[AES256_GCM,data:7noPsBvlc50ticLKsZWMyJxoGFHDRoau0qJW8CMAgj9v6tDUd9/WSYofq+o7ZNLYBRy8zDTZNbZPMuLuQiMUD+RhmtlT9yswqMZxYaXBA0RIqaYWIjkf/rpaZ9GfMUBGCsEacRcLSNGNy3VzotaQ55RXwYBTAD/I,iv:qNDaAlowf1AxhvnopdYbK4zGxMvXrzgzNOYCRtDz83I=,tag:n7mTpm2WPXp0LnbXeg/9fA==,type:str]
cache: cache:
HOST: ENC[AES256_GCM,data:C4GD2Nbb9Yi7TTKvipoPW3wM7e9BvQziBqweB/AUTq78pk20c2QoirNDETqcGaA002Phr8SwttdljnjVhCMr/w+Np/XkNy2rSB00A6R8t5/gDDoxUE92R2RLFIRB3Ao4UwKdL2X/YvzX1xDq/WC/i7VmvPTnLbas,iv:NMTgSxxvrut/Pxi5lZa6mbP/eOMt6rk2leFJESl5SJQ=,tag:bKJ1P6KXdjHC3bFmreD7OA==,type:str] HOST: ENC[AES256_GCM,data:FGSxLu/1m+lZDATxbnbeLZ4tPznVSa0xfmXC4ozFEZuEx/X7tSRv6LBRnbyRNaH/DFD3LlUgv+hjlzlSa+n/PQ6c5n6V/63wh86OZgWNEbcNjz9VoJ4ZFJyKfVB0eZaSRdpD2DugVMSDPcQ3i5e+8BDoDDceC4rP,iv:fiLfKcGZzPaoqtIHVFWG583BxK4ZQur1GfgmgmNbyR0=,tag:1omKm61vQoqLyJtMRN1gcA==,type:str]
queue: queue:
CONN_STR: ENC[AES256_GCM,data:28O5cVRnezFBWnyILjGxLf39SrS7nYNuI0km29qz5Q2qPGwojiLziyTsBb9AUlLZc5nLcGEUIJ5vnXONtw96aOobDwwyLmPE8X/QnpRvjRN4DmAF7LO98AuyTrTXEOSNMp3Dee88F9T9wdwr5ekh1Fb/gBSJpkkt,iv:PP0ZPxBulXce/bIUTuuQgiaOBWNcjMe2V/BgFGJm77Q=,tag:BDteA6nftpa6q6djyhivGg==,type:str] CONN_STR: ENC[AES256_GCM,data:3pBxv+nxjMH2a5BkQL7qziQOVkkfocihnc1yiksLAcV0IMV3+FaXAFc6HVo7QS00yrH73WaoB/finra0w+5wVGLFRxjTtGDmWZxDQ0C1OZQ1u8KUPypWYoy8cgVSQlZ2ykutrNL9osJ4BmGjLXnHg/ks4JU6dJiT,iv:4leUVw+vsT6DHAOWqUP1axf1sX90e+UtqBr5F2avKIg=,tag:k8z5tSpSYr8HxAEVfnN0bw==,type:str]
oauth: oauth:
- name: ENC[AES256_GCM,data:DWCdEzwP,iv:fJrSGxRPSljBLSnRRRCjsa3QCa730NGRyKJCVJe8YNE=,tag:vQFTYVUQXPcB3Mx9/qGfVw==,type:str] - name: ENC[AES256_GCM,data:v9R4twYA,iv:a1aLIjdiix9FQ9RviMRvxVASkMS+FW+lb+2I3E2W6JU=,tag:JFEQxu3asAO/Tklx4i1XVQ==,type:str]
provider: ENC[AES256_GCM,data:mSnq2rOw,iv:XC1JS1oqZxbBZoraWemzXWGSnpvn9NTx8OA57HV1B8w=,tag:kPxdj8h8Qk9oGayi3Di7yQ==,type:str] provider: ENC[AES256_GCM,data:yPhVTb0/,iv:z0Sk2Mx6K5XkY+NpNbYW5RY3j+TmLY7nvJE2fYKZaNg=,tag:XQGE4aAm12wch1tgHWQqfA==,type:str]
key: ENC[AES256_GCM,data:ft+Zqnu7oXHxMnMcRFpT934TGL0=,iv:qFj+BT37ZKIH69ikEf1YMwE1LC+dyAW7tBXhY5X6mYY=,tag:+p+3+GX5zakkXyi41H7Iog==,type:str] key: ENC[AES256_GCM,data:tfS04jC0YBMd87a2WNA+X08bKVc=,iv:V7pk5BqrRiwwK3sxmyj9DxLDs+nFtQoGHGB8ub98V9E=,tag:QwEn/T91UPhHSzFEGYVmUA==,type:str]
secret: ENC[AES256_GCM,data:CSGrxpxfGoKs4wHKl25s37Nenw/0nuagCa6Ed++nE9lnQlZ8G193CQ==,iv:oTOGJmZi/26OvKG5gkrUoFVaJ8erkHfVi44FTy9kb1M=,tag:upHqogYqdVZlUyJT3BG0/g==,type:str] secret: ENC[AES256_GCM,data:0RJlLTqZvrsSoWxNEse4iF5W0ajaBhr7vJWol33ArZSAmHGrcV1MAA==,iv:WL4h39Qyueas5+iavpI2k1QtF8eVOvLC0fqf910SNpk=,tag:PpNIhXLT3Qs1wdbFcqbIvA==,type:str]
- name: ENC[AES256_GCM,data:iZ2gRgmkZGcG,iv:N16HI6nVh8euitBKEq4yr3kr2cpLRb12XWKupXGR98A=,tag:L+rWF5wbrwWHhSus1JGP2Q==,type:str] - name: ENC[AES256_GCM,data:P2sLOGJ1Cf+S,iv:aR24am501lEjlzugz9nmT4IC6Zut9qFvs/LqUWGaf9o=,tag:iIR1LULA5Hkq5SdSVIVIwA==,type:str]
provider: ENC[AES256_GCM,data:2HlYsjvxnOx1sHuKlw==,iv:aXOjLsl1ZF3NCPpqyGrSM25lX3OLKoRpGzrRW47lGVg=,tag:LzGsYa36wqgch/nw+en6oA==,type:str] provider: ENC[AES256_GCM,data:EA6MCGOnmQgDv9q7Ow==,iv:7pyeOAqqruuyOKVwEqq3mFe+Wnw9jPUyrfo22qCF32g=,tag:D2nqlaQVoJDPpGCK8VbLbQ==,type:str]
skip_local_2fa: ENC[AES256_GCM,data:QYsYyg==,iv:tZt+yIvuDbFa9BWsoeUvcOpIonlufb9FO7YU59mGkVs=,tag:+2rr0Q7c9XfwjFR7C+ikuA==,type:str] skip_local_2fa: ENC[AES256_GCM,data:t5ggwg==,iv:ILi5VFo8+9t23CKyRXjZsCG2Gtx4gwfmxCi+JFKVcBk=,tag:fXmhnhsJOE9lUCNs34eoAQ==,type:str]
key: ENC[AES256_GCM,data:4/jJ0cc=,iv:iu8l1dGDIou4ytXhub7YKlIGs8WDEAAjKVbwd81m0Uc=,tag:D2BiWDfubzbK0cJl1Bk/0Q==,type:str] key: ENC[AES256_GCM,data:LHpPZ0o=,iv:FefBNYGyzr082UTRmQ4Raz+G+Pc0vKbd00xDf+g7xPg=,tag:UJmxEvT3zJV/1G4aG3Z1Aw==,type:str]
secret: ENC[AES256_GCM,data:iRRUJl5r7wJQY4SWaSMF2ut2+I37CGPhXOpCkMENNRm6dvFp7YNyiHVQT61PsWnoyWz9lFJMkjCnY98JDjvjWuYCW8O30IEklq/N4KYSgD5TLEWu1OCcPC8A7yMZJSI8rxTLKcevuGJD7ZT8hWl3nZDTkUwTEJy0qREqyhc8caQ=,iv:KOLmK6UddEq9hv938m409ldxVpR8pQLiJwk7Sr0W4mA=,tag:ZDBZwa6ZAQw4qGU9C+Z/xQ==,type:str] secret: ENC[AES256_GCM,data:AcaKQyQ0XkadGWec/VXuCCy8eXAFdQ4MX0P+IT3pOYzBF8KdcO+6T2+/I0buTr7JZ2u1ooT2KirhlnbA9/emXoADjM8cY8/BX5q3XvzMFG+DvW4GSlaQg2avSvo2mlC5vm9cDAoTa1eAhRzP3QfZ53Krs4naR14vV3iCMbWtmro=,iv:RNS30+WBWNok2rdMMuLZWDYmo7lAKoGlqGyCIpQtLpQ=,tag:zdsRKMOHb9Y6gT1zvSNSUg==,type:str]
autoDiscoverUrl: ENC[AES256_GCM,data:YxqoKonuM10Fawz8qJiOVILsoJDKuRotf4SHw/Vvw0srWvc26rpwzKoP+kj1u/UFv6pDmnBvrAgYVPGyJt/e4TgmsPDYfH6D0IVngaFLI5KDRll5aIUaAeQ=,iv:4U9CIgObfPwuqi/vxky4pNkL9R4BbStJ3YQ3MBH8LYo=,tag:Ouwcj0tjKu7eykoT3Rnkwg==,type:str] autoDiscoverUrl: ENC[AES256_GCM,data:wYmElXWvmsC9JTxPtcvIMKA155jv/x+j8mFaMS0FM4mg/q4+rTQe6OM8xTQDW31QMBz3Kyuydg23haF2sCKp4JHGXnnNSWsKnnoLhgAncFgxaWkKaT7W864=,iv:ifxKWgUNBPaxtC8/B3T7S2fNdbI4IkoTQzXZtnAYcRM=,tag:yKP3rGVmxov3e2USb7JJmA==,type:str]
iconUrl: ENC[AES256_GCM,data:OmHXFvlKnclwjbTc9AXbcMZOb7qW7om7Tgf7b3uHLgOmakuyTq7QhXM3oFQN+T/+J+Cna8MP27coLBDW8TL7RefT1TapSA==,iv:py3p4kh90W6BgAHmI2MIBu92y90M8QhQDmic0pX3m5c=,tag:yqci0Lu7K16/JBlJGkoXng==,type:str] iconUrl: ENC[AES256_GCM,data:LXmbQF0AHWtBtujM20X/umD3KAVX2VzydBH/FOA53Fb7+dooTHnJVOABYSUzWXBE3voOYYuv9qhZFkRZ1puRVW3BypMbmw==,iv:4dw5YTHmoTL3dGJRAd1crWmsRrX7/R6S8cfkGEjM/sE=,tag:NnALdqtDD6VDUWhOYWDc4A==,type:str]
scopes: ENC[AES256_GCM,data:IvNV7Q+7vPJn7EJZ7Q==,iv:S/aUhW0ASL4yAwe9IaeYdjokHrE+4MViEAGa+5wQlyY=,tag:OxkVQCSfjCQePnJqt+EcNg==,type:str] scopes: ENC[AES256_GCM,data:2mr3Aql5KTJ+TLuZeg==,iv:ThVhNaPexw1go2n9PmxCoYef03rnOAormiCfaF7OjDA=,tag:7t9oo6NANi4Xo4JxIlDi8g==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -35,14 +35,14 @@ sops:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDeU9sbjV2b0JjcVZsbFUv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2WjFONnYzbnBSdUpGS1Vl
OWpSYVhBSlBrR2FOVWlDZnhTRk84YmlpK3hRClBZeTQvclE1VkhkMkltbjMrN3Vk WHdXVVVJOGJPNFh0cjZzaU5kajEzRUkzY0RBCk4wUm13dVVPS3NUSDZXNXJJbWtt
cko2M2VsNkpNSjhPZExUUTB4enV6WTQKLS0tIHdOV0FidU5wN0ltNTVlNVF6MVJB NjZCK0t3dVg1UXdjNGZ0V21BME5CNGcKLS0tIDdPZ0ZhR2xDenorMmxvNFREclZq
ajlnQzNTK3NzcnJZN0FGVmx1VjhQVk0K2m9pzSB9gqIkOLBr/WwnrZfcj5633tFJ MkJ6VnJGQ2JMUXBHbHNYR2xrelFJRncK/N0iI7ywBLlKETEwifb32N0o/ht+mruh
PI+H+aXZwJtKuN4YOw0rlp5Jp4iQ9aD/9TLqYT6xQJbU1nibqCca1w== r8DezLwaLlR6Zxfpjv0Q+jFCzhD9sLA6Nrxyp2IRPlhUiFl0Nlzb2w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-07-21T12:10:40Z" lastmodified: "2024-08-02T14:01:55Z"
mac: ENC[AES256_GCM,data:JlINn9gcMkhLNbCuOmfrnhB5f2K94KO+8qSOeKf5KjeJFv5AmGP/ssCPVRxko8Mi68l7JueggjTLJUgRRuLr2JdH9lI3URK8Oh63d5iYbn/y0LIPJC//mw/WWrNO15H5tR4dt1vPOzi0KwozvpLt0R8SYYwU+IIF3Ej/kG2KMyk=,iv:ZKsYYVkeCjvPptzH00V2SFKFQ0St/TOnxSAbqWpWWZI=,tag:NSG4lsk+Adglo3R/e8ZceA==,type:str] mac: ENC[AES256_GCM,data:yezUsQvaGdRSgzfZl7Hsg8m0iAQiYAuPpsioxg/edgV4sTsLb96uE1y6muOHnRlMAj8uJWSWcKAt6W5OVQEh6kfhCr0Ya2AtKmRlsTe1OAzGN3d6/kt10TvIuG/tMHVp9a1A5VvZeOyYjf8rSBycI6qXRq4Vrk6hyNpSw87DAaw=,iv:IfCjYAY34W2iUJzHMBRt3YJnlXkSg6w1P4fjuzoOY/w=,tag:fhk2Jl1HO/xmxOkFdP4cZA==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.0 version: 3.9.0

40
values/badhouseplants/secrets.minio.yaml
View File

@ -1,18 +1,18 @@
rootPassword: ENC[AES256_GCM,data:Oo5/PfJwB0AEnrpuUeckcAlzbRA=,iv:3NRzi8zvELULy1swZckc0LGtY/TNxmVLT1a382cHHCI=,tag:PTBRor4RP0oTDPm2zshz8w==,type:str] rootPassword: ENC[AES256_GCM,data:xRKU4TSiXrxO24ngzxv9WXMT+Zk=,iv:IjhFM4bqeuBQK7f5qdoVi1d09JkaGXBxw6sQ0UluQdI=,tag:6UNdCNDP7m/NHciYNcM0FQ==,type:str]
users: users:
- accessKey: ENC[AES256_GCM,data:ibVq8IGPYcA=,iv:UfKKJjWfPz25wcqDy+Ylwf3RU8ILDXXKGW4g8RrGr10=,tag:W4e+W+yYzCawbJJd9QkBpg==,type:str] - accessKey: ENC[AES256_GCM,data:rKj7B4kq7N4=,iv:kw4tXzFM/Ff1qu1oKc5kwUG2cxaF3fMbQ1uvWkKuPFU=,tag:63Ci7t6X7uhoIg68wzZEjw==,type:str]
secretKey: ENC[AES256_GCM,data:Y+T302cB11+ETPqK+DrlyxQLvA==,iv:axTN9/NKUd+/cOmaxjcyXKrDsdDAvceFEplJ0dx7CX4=,tag:DXyavjkL0/rHMk+aRU+C/Q==,type:str] secretKey: ENC[AES256_GCM,data:GZeM/jGs1tHJMHhD54hibWiHAg==,iv:ddaPxZ5HX/KCuOFB0fGEPWF06xo5f/mct/3qXcrUoU0=,tag:rYlgfRLSLana0/0DD2ixhg==,type:str]
policy: ENC[AES256_GCM,data:Yx/vVQPP+zk=,iv:89Ye85k5DQYUNAlMAtafG2dF2nDJ+oKWgs0ZSaUejDU=,tag:AMqm4HRq2+ujTFSNAGSrhw==,type:str] policy: ENC[AES256_GCM,data:y35Cf/1PDD4=,iv:l2HpLgBHH2P15bNiBVAK9KDnGv8qD7m5Fk3ppOLmXsM=,tag:FFRS6rUoiIy9uwbGV+zsJg==,type:str]
oidc: oidc:
enabled: ENC[AES256_GCM,data:9O/KFw==,iv:GZQu0XFNhJGzMPeW19wzjthjNzPLpMilMfOEM1xZlww=,tag:6+asRMB15NubSSiSOgyFfQ==,type:bool] enabled: ENC[AES256_GCM,data:AULTFg==,iv:bKvMfypv40rmWcOMT24r3C1i2taJmf520sAo1tsl5tg=,tag:vTp1Wjxyxn0bRy6o7GP8Hg==,type:bool]
configUrl: ENC[AES256_GCM,data:ka+Vs9Nm68MivBaOiWsRgVuoXTLMmvYU3zfBj1mPUxKwyyhE3/3baUrkb+k+29lRyFO0To7AbqXkTaNpENGmt1kgEf/XMN+OR3PSa84AUW5BWnj6sG2uyi4=,iv:+Ro/oVQNElXiiRi15rQMbEFIgaY2pGL+ucj6cPilLUs=,tag://nk5O0WGmLuotU+MIT7Tg==,type:str] configUrl: ENC[AES256_GCM,data:WWJo/0V1n9oBfWAnq2k6MXvKEQu1lfXj2dKWyJAdv5AYkXd0CYSYBTSjKeD6WcrJTM3EZmMOdEvlZXoc2GP01uSnHzYlOD44oWK0qyxyiO8fsKbfn8aQIUY=,iv:cuR4u/8QxlYAm7TzHZMOEy6CzPfUiEhBVV7hi5cpfMA=,tag:/nUzcQPVE9BaN+uDLpPEkg==,type:str]
clientId: ENC[AES256_GCM,data:nLWv7as=,iv:RuRmQgRRNqj+Y9zr9Kj3UmJshCFp2elATiPixDN33Xk=,tag:cSH0nKOziWLi0OfOMGTvIA==,type:str] clientId: ENC[AES256_GCM,data:xPzyvDU=,iv:HUKtVXQAyufvqjOlodme2PfVplw3fZo5CboZwj7p7Qw=,tag:oHsHh2U/CyVU1Okz129JqQ==,type:str]
clientSecret: ENC[AES256_GCM,data:X52lUtR7tmi1FoNoaBCF3G0il+6eWqlmHek6WsOb+lfrItBp6B6oQ6mJHfTduJNFJsTjQgWZek69mQuTB975DGwvqjtTeA8VLhYpkgVDgKFEFvFTwaMpwCJRi7DGR8ZgMtbHZXS9gP5XRldQScih9p8LCiyngjPgl2es4PwUvWo=,iv:W2mFxLwg4leJ61Xs8TKmC8AlN3Zn/C5y09SRUPCVLHk=,tag:4mRNTPTWinzTQBo8tmzmKg==,type:str] clientSecret: ENC[AES256_GCM,data:jnNQX0BZYaDnCHOhO1fY1bmZbAh5yyjCdSc47CZboku79u5ZkUdZSg8yCHyy9OU2ne6e9fc2bwCzUCAlrxQDqKOn0fF9M3jARmMhFwdTS+cF2EE2jH25+eV6Px0/UFaQ5zEy7nsp225wFrW8NwXn21hGQH5HNqo7Yo7tjzgzgRs=,iv:Tq7XPom4uGuaWtSjZ2aEw5ngyljAZg8qYQp85MrUYEQ=,tag:zuRyqFAI5PPRjRk4DtmRsw==,type:str]
claimName: ENC[AES256_GCM,data:3iUTjRDz,iv:tfdfUdI8rFd7AgHl3bylpyudLGPajAUd5hcUJ9W18dQ=,tag:DSITNrUU8pGuKr7yiMAlOQ==,type:str] claimName: ENC[AES256_GCM,data:BR6a7Ps4,iv:x219aNeYdfvUUmMh7Vcax/BAWs2jYzi8SFibszJA4bw=,tag:9xnaWC2Ih3eBgf70FqXRZg==,type:str]
redirectUri: ENC[AES256_GCM,data:us0hp5Q4vfsDh5XrziJNPVlo27Azi8fWwbck4rtDyvzEPRVkjxFi0A6bITpQNoo=,iv:i+ZBQkp6QY8z7RL/3k8b+iVvsi/mzHvNG9W04V8s9ko=,tag:6d9XfSdR1Dqb9OpD3nAtWw==,type:str] redirectUri: ENC[AES256_GCM,data:TS9kOya1UT1DXXZqmB7DfC6l2p4kE2+rl/kTJ2+r6oyKg0pEfz6pRR5WOycDuJU=,iv:2bHQ1bP/YdcPGd4RVLB1SIolKL0yO7aprf0228FBdSY=,tag:vpNAReeyMCTQkjy8AsmV/A==,type:str]
comment: ENC[AES256_GCM,data:w+sQ1MJZmjen7Xm0ywKPmNzbNig=,iv:dV3QrEHtXF19nRN0fbIKbVqnjbXqpZletWOmkZK0CSk=,tag:K+JKywqzBMyCvbk+/UDkow==,type:str] comment: ENC[AES256_GCM,data:pFMsVTLEeHGSpHUBqWcLT6NdFvM=,iv:cecmL3rCVgNFdHl51/OOWj+n0dsAldznhgVflhEuW8E=,tag:u/epLP/ctnqjrzZAZhCSWA==,type:str]
claimPrefix: "" claimPrefix: ""
scopes: ENC[AES256_GCM,data:DyWv6iCI1nv0mkLBQHWZ3Ir8YoKfp3AvDBMb,iv:KmtrRhEM7ynj8WeyuXr9WCLJj/hjvzAf6odvFrmBTWI=,tag:xGUcVCg6rbnC/rpLxfpvSg==,type:str] scopes: ENC[AES256_GCM,data:KMSRU3jsWknn29TmdRUS+gVfLDa+8qQviK5X,iv:xu1Va/LfhfZo1QjTNbSTvI8INmUd4vKE34jSAFMXoWM=,tag:Hz5JPpo71xkCHzRgR5JCaA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -22,14 +22,14 @@ sops:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNjRVZ245ZEZZUThxSDZJ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cVlEckJ4cWNyYnZxaDVa
bUpveURDSlNXUjhXanlOL21oanZlWlZMaFRvCjAzMEEvN2RZcUpMZVJXT0EyRURY ai9NeXpWMzU3a0xEanhyaGNKY2gzd3hVdUM4CmxGQ1B3em1vcUw4czNsejdEbnZz
REcxQm55YVVUUHhGd2xsQWtvamNYN2sKLS0tIENIQktKcXJDV3dYM0NXWlMxQmVD T3BhR1R3UVVScXNaT1lRRHFTOGhCck0KLS0tIE9VOW1BK1lxVVkzbFp0RzZnb0VR
WGpGK0QvSGZXUGluR0xjbHRLWDhrQWsK8y9as6JrUSpHRf/01mD4ZWcc757E5sVY bElLVkNlOHJpMEkwVnFWUktHOE0vcU0Kc/oFKbItQDM3skgD/Ez4TafwBSoEUKsD
U0W9/jGZ4+7FjXpEwJxBdTzGZ4VXO6vfeZeES+wTRoh8FnZN0+K7Bw== kYYGexUQG1GkdG5HPiABFNQu6zVDSYDjeEPOh5DRzzFvudQmy5NeyQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-07-09T21:36:38Z" lastmodified: "2024-08-01T15:41:45Z"
mac: ENC[AES256_GCM,data:LKhkC0+rIVgf8sp9UjP822GNCUcJaivflKsNv/7v7qazJ4vMv8B/xHx7fLf1bBFk47UneGw21ebjPKaBFxQlaIA/FenT5wsDgbTEg0eppu7W1BAotTGq95EOldRKjCIU2BcmsbDAFNIsPTd8Q5EFkybZHRJGlF/wZne0efx6nQk=,iv:Y4ioUh3zzbtgif3QWTw8Xsa2cDdYN830OdraHc+3JjY=,tag:bUZHrtkpMS382DWpUGwInA==,type:str] mac: ENC[AES256_GCM,data:yO91CR14zwhaNSXKkCUuJt7WqnJVREzh5XoSKX1tJ0+XvAyTGPYL/IxnbgTHwtYB0BgF/srQzV5rCNg6KhmA/T29BLRI5obIvmmLhf6AZe0QCCvrhYRr0SrgIngOgG0hMKIg22f2BKagzi7kSVF5BysdD0EtUeDvLaoa3ckWjRc=,iv:+mY9hZaZUyImWKx8cFX5FlwhMOr3u9ttAdlV3dCij2A=,tag:npJlSBxu1uVUvZ9+YFRrkw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.9.0

14
values/badhouseplants/values.gitea.yaml
View File

@ -5,7 +5,7 @@
ext-database: ext-database:
enabled: true enabled: true
name: gitea-postgres16 name: gitea-postgres16
instance: postgres16-gitea instance: postgres16
traefik: traefik:
enabled: true enabled: true
@ -28,14 +28,14 @@ ingress:
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01 cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
hosts: hosts:
- host: git.badhouseplants.net - host: gitea.badhouseplants.net
paths: paths:
- path: / - path: /
pathType: Prefix pathType: Prefix
tls: tls:
- secretName: gitea-tls-secret - secretName: gitea.badhouseplants.net
hosts: hosts:
- git.badhouseplants.net - gitea.badhouseplants.net
replicaCount: 1 replicaCount: 1
clusterDomain: cluster.local clusterDomain: cluster.local
@ -65,7 +65,7 @@ gitea:
config: config:
database: database:
DB_TYPE: postgres DB_TYPE: postgres
HOST: postgres16-gitea-postgresql.databases.svc.cluster.local HOST: postgres16-postgresql.databases.svc.cluster.local
NAME: applications-gitea-postgres16 NAME: applications-gitea-postgres16
USER: applications-gitea-postgres16 USER: applications-gitea-postgres16
APP_NAME: Bad Houseplants Gitea APP_NAME: Bad Houseplants Gitea
@ -80,8 +80,8 @@ gitea:
service: service:
DISABLE_REGISTRATION: false DISABLE_REGISTRATION: false
server: server:
DOMAIN: git.badhouseplants.net DOMAIN: gitea.badhouseplants.net
ROOT_URL: https://git.badhouseplants.net ROOT_URL: https://gitea.badhouseplants.net
LFS_START_SERVER: true LFS_START_SERVER: true
LANDING_PAGE: explore LANDING_PAGE: explore
START_SSH_SERVER: true START_SSH_SERVER: true

8
values/badhouseplants/values.rook-ceph-cluster.yaml
View File

@ -19,11 +19,11 @@ cephFileSystems:
activeStandby: true activeStandby: true
resources: resources:
limits: limits:
cpu: "200m" cpu: ~
memory: "256Mi" memory: "512Mi"
requests: requests:
cpu: "50m" cpu: "100m"
memory: "128Mi" memory: "512Mi"
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
storageClass: storageClass:
enabled: true enabled: true

30
values/badhouseplants/values.vaultwarden.yaml
View File

@ -1,4 +1,6 @@
--- ---
shortcuts:
hostname: vault.badhouseplants.net
ext-database: ext-database:
enabled: true enabled: true
name: vaultwarden-postgres16 name: vaultwarden-postgres16
@ -12,15 +14,13 @@ workload:
type: RollingUpdate type: RollingUpdate
containers: containers:
vaultwarden: vaultwarden:
securityContext: {}
mounts: mounts:
storage: storage:
data: data:
path: /app/data/ path: /app/data/
extraVolumes:
logs:
path: /app/logs
envFrom: envFrom:
- environment - main
- secrets - secrets
- secretRef: - secretRef:
name: vaultwarden-postgres16-creds name: vaultwarden-postgres16-creds
@ -35,29 +35,10 @@ ingress:
kubernetes.io/ingress.allow-http: "false" kubernetes.io/ingress.allow-http: "false"
kubernetes.io/ingress.global-static-ip-name: "" kubernetes.io/ingress.global-static-ip-name: ""
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01 cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
rules:
- host: vault.badhouseplants.net
http:
paths:
- backend:
service:
name: '{{ include "chart.fullname" $ }}'
port:
number: 8080
path: /
pathType: Prefix
tls:
- hosts:
- vault.badhouseplants.net
secretName: vault.badhouseplants.net
extraVolumes:
# -- Because by default the fs is read-only, we need to add an emtpy dir volume
logs:
emptyDir: {}
storage: {} storage: {}
env: env:
environment: main:
enabled: true enabled: true
sensitive: false sensitive: false
data: data:
@ -86,4 +67,3 @@ env:
ORG_GROUPS_ENABLED: true ORG_GROUPS_ENABLED: true
ORG_EVENTS_ENABLED: true ORG_EVENTS_ENABLED: true
ORG_CREATION_USERS: "" ORG_CREATION_USERS: ""