From 55822e5c1b651f343d15fdfc7cdb346e9dc4e08c Mon Sep 17 00:00:00 2001
From: Nikolai Rodionov <allanger@badhouseplants.net>
Date: Sun, 17 Nov 2024 21:54:26 +0100
Subject: [PATCH] Install wordpress to the etersoft cluster

---
 .../applications/helmfile-etersoft.yaml       | 10 ++++
 values/etersoft/secrets.nrodionov.yaml        | 26 +++++++++
 values/etersoft/values.external-dns.yaml      |  1 +
 values/etersoft/values.nrodionov.yaml         | 55 +++++++++++++++++++
 4 files changed, 92 insertions(+)
 create mode 100644 values/etersoft/secrets.nrodionov.yaml
 create mode 100644 values/etersoft/values.nrodionov.yaml

diff --git a/installations/applications/helmfile-etersoft.yaml b/installations/applications/helmfile-etersoft.yaml
index 371340c..b14d10f 100644
--- a/installations/applications/helmfile-etersoft.yaml
+++ b/installations/applications/helmfile-etersoft.yaml
@@ -35,5 +35,15 @@ releases:
   - name: tf-ocloud
     chart: ../../charts/tf-ocloud
     namespace: pipelines
+    installed: false
     inherit:
       - template: default-env-secrets
+
+  - name: nrodionov
+    chart: bitnami/wordpress
+    version: 23.1.28
+    namespace: applications
+    installed: true
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
diff --git a/values/etersoft/secrets.nrodionov.yaml b/values/etersoft/secrets.nrodionov.yaml
new file mode 100644
index 0000000..0c2349a
--- /dev/null
+++ b/values/etersoft/secrets.nrodionov.yaml
@@ -0,0 +1,26 @@
+wordpressPassword: ENC[AES256_GCM,data:gcJ3cydOr0yTA/LbD6ecBn5cPzqceyGxvvQH/W4K,iv:rBoZO+SfjZlL0I0J3s9vWeg4LZd5M8O8INtODtFGHYM=,tag:xqpU75vR+U93UsFc4Qpuyg==,type:str]
+wordpressEmail: ENC[AES256_GCM,data:dO1PeBajNORU6K3JeRvg/EQufCtbviYVhhZR,iv:nyvjhPcikx9EBRfofw525PIK9Kgp2tFWiHS711YtAT4=,tag:9hajAZ6VPJvg8VX+kv+P/A==,type:str]
+mariadb:
+    auth:
+        rootPassword: ENC[AES256_GCM,data:eb9XO3OtvYsD8kgirYMhLQZIVOc1N9stv0P84Z7e,iv:6gymI9CWLmNOfpB0e9ZyjV5mXenwYdhHqV2MrHEGr3Q=,tag:3MSws+HfC1inlYk4rKOdGA==,type:str]
+        password: ENC[AES256_GCM,data:KLwfn3vmMcysP4xA2KYSHXnw3Rq7ptqmrA7TRCCN,iv:gjFaO3TJwGhIh3tKH0WbZHaT4FKDMbU8rNF2hLg2If8=,tag:dMNOks45rnK3x+pwYnCn6A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZcmVNaGF1eWtQWEZ4QnE1
+            eWN1aTBZamR4NHRjMlBjQi9DSnF6YTVaT2c0CkxMRGVNbGI0K1crMitUTkxHeGlz
+            K282Rk9wendTZGYrZTVqWDl2d0F0TVEKLS0tIDhYMFZGaWFkQ255M2d1OHNuNGJ3
+            anVBYy9lc2ZFQURTeHdIdS9Gd3gvblEKevHz9jiGV2gEMdR5qaFQqDaufIY1Ue5j
+            ihj+iVufhdX28NoHGn7dNa8ffqsHC0eNWmkTfICrjMjJyZdpkthZsw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-16T19:02:14Z"
+    mac: ENC[AES256_GCM,data:AIzxbuL/cmtwyAOKMZ6WaNtNW9tTFZ5TgqqNQat+4aahbhybFvGawKpchKqHaW5aqnwnKj+9wRo+STHGeDp58F/Y+aMvTQAloRt1X3nFtWJpmJmBI61hDl4EnU3r+vBTC7j/+9einH3WaRwntHLnF7NfeF7G8BFqvfYoHN0UFtM=,iv:LChRlRifjAW8ZPCtsgERmklZIh1hBYTwghv6JRi2l/o=,tag:+znn7DO+JaXe1+FXN637Kw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.1
diff --git a/values/etersoft/values.external-dns.yaml b/values/etersoft/values.external-dns.yaml
index fad21e1..1cee569 100644
--- a/values/etersoft/values.external-dns.yaml
+++ b/values/etersoft/values.external-dns.yaml
@@ -2,3 +2,4 @@ provider:
   name: cloudflare
 domainFilter:
   - badhouseplants.net
+  - nrodionov.info
diff --git a/values/etersoft/values.nrodionov.yaml b/values/etersoft/values.nrodionov.yaml
new file mode 100644
index 0000000..f87c96c
--- /dev/null
+++ b/values/etersoft/values.nrodionov.yaml
@@ -0,0 +1,55 @@
+ingress:
+  enabled: true
+  pathType: ImplementationSpecific
+  hostname: nrodionov.info
+  path: /
+  annotations:
+    kubernetes.io/ingress.class: traefik
+    kubernetes.io/tls-acme: "true"
+    kubernetes.io/ingress.allow-http: "false"
+    kubernetes.io/ingress.global-static-ip-name: ""
+    cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+  tls: true
+  tlsWwwPrefix: false
+  selfSigned: false
+wordpressBlogName: Николай Николаевич Родионов
+wordpressUsername: admin
+wordpressFirstName: Nikolai
+wordpressLastName: Rodionov
+wordpressTablePrefix: wp_
+wordpressScheme: http
+existingWordPressConfigurationSecret: ""
+resources:
+  requests:
+    memory: 300Mi
+    cpu: 10m
+service:
+  type: ClusterIP
+  ports:
+    http: 8080
+    https: 8443
+
+persistence:
+  enabled: true
+  annotations:
+    volume.kubernetes.io/selected-node: yekaterinburg
+  accessModes:
+    - ReadWriteOnce
+  accessMode: ReadWriteOnce
+  size: 512Mi
+  dataSource: {}
+  existingClaim: ""
+  selector: {}
+
+mariadb:
+  enabled: true
+  primary:
+    persistence:
+      annotations:
+        volume.kubernetes.io/selected-node: yekaterinburg
+      enabled: true
+      storageClass: ""
+      accessModes:
+        - ReadWriteOnce
+      size: 3Gi
+