badhouseplants/k8s-deployment
4
0
Fork 0
Code Issues 3 Pull Requests 6 Actions Packages Projects Releases Activity

Compare commits

base: badhouseplants:5a17d560448d952e01ac6ae62b76814a208a5e20
Branches Tags
badhouseplants:main
badhouseplants:renovate/memos-0.x
badhouseplants:renovate/renovate-40.x
badhouseplants:renovate/argo-cd-8.x
badhouseplants:renovate/gitea-12.x
badhouseplants:renovate/kube-prometheus-stack-72.x
badhouseplants:script-fox-xray
badhouseplants:before-single-node
...
compare: badhouseplants:3e31d1ff5ebae87587fbf44b3fc9b4212cb64538
Branches Tags
badhouseplants:renovate/memos-0.x
badhouseplants:renovate/renovate-40.x
badhouseplants:renovate/argo-cd-8.x
badhouseplants:main
badhouseplants:renovate/gitea-12.x
badhouseplants:renovate/kube-prometheus-stack-72.x
badhouseplants:script-fox-xray
badhouseplants:before-single-node

4 Commits
5a17d56044 ... 3e31d1ff5e

Author SHA1 Message Date
Nikolai Rodionov
3e31d1ff5e
Update smtp settings in gitea and vaultwarden 2024-09-13 06:47:14 +02:00
Nikolai Rodionov
a9c49f405c
Add a key for signing commits to renovate 
I've added a key, but it doesn't seem to work yet
 2024-09-13 06:47:14 +02:00
Nikolai Rodionov
2ef7029d59
Remove minio from the application helmfile 2024-09-13 06:47:13 +02:00
Nikolai Rodionov
ce72702593
Update stalwart config 
Put the admin secret to environment, and read it from the main config,
so there are no plain secrets in the repo anymore
 2024-09-13 06:47:13 +02:00
8 changed files with 154 additions and 152 deletions
Show Stats Expand all files Collapse all files

10
installations/applications/helmfile.yaml
View File

@ -16,8 +16,6 @@ repositories:
url: https://dl.gitea.io/charts/ url: https://dl.gitea.io/charts/
- name: mailu - name: mailu
url: https://mailu.github.io/helm-charts/ url: https://mailu.github.io/helm-charts/
- name: minio-standalone
url: https://charts.min.io/
- name: bedag - name: bedag
url: https://bedag.github.io/helm-charts/ url: https://bedag.github.io/helm-charts/
- name: grafana - name: grafana
@ -47,13 +45,6 @@ releases:
- template: default-env-secrets - template: default-env-secrets
- template: ext-database - template: ext-database
- template: ext-tcp-routes - template: ext-tcp-routes
- name: minio
chart: minio-standalone/minio
version: 5.2.0
namespace: applications
inherit:
- template: default-env-values
- template: default-env-secrets
- name: nrodionov - name: nrodionov
chart: bitnami/wordpress chart: bitnami/wordpress
version: 23.1.12 version: 23.1.12
@ -84,6 +75,7 @@ releases:
namespace: applications namespace: applications
inherit: inherit:
- template: default-env-values - template: default-env-values
- template: default-env-secrets
- template: ext-tcp-routes - template: ext-tcp-routes
- name: shadowsocks-libev - name: shadowsocks-libev
#- name: vaultwardentest #- name: vaultwardentest

92
values/badhouseplants/secrets.gitea.yaml
View File

@ -1,48 +1,48 @@
gitea: gitea:
admin: admin:
username: ENC[AES256_GCM,data:Scgn1nXvL1g=,iv:DGYrBNQ8zt02tyn3EADSTIWlT/kKhlQjr5y4L/uP3+g=,tag:Fj3O43JB71mH00pif9RTtA==,type:str] username: ENC[AES256_GCM,data:v3sgQA1FXqs=,iv:TXpcQIaJfhHyjBRkVSlwzUVUCkhbFzPvyiUXRrc89NE=,tag:JZ67LtzNrI1BpwvWLueJHA==,type:str]
password: ENC[AES256_GCM,data:dfYWkz76I+YUsE0vf9ltrkE3Ghk=,iv:TDo+NEdOabFu9GNR8W1s7RuLbXFoqF6sf1XxqZd/hbs=,tag:duToLQzOOhLZgncxoMamPA==,type:str] password: ENC[AES256_GCM,data:YZrXQ5yail+jmNQOGz50uT+icTE=,iv:eoGozzZ89DJqjt0j4cuf+2UmHnT+VP8vDY0ClSmiqfI=,tag:y8O5wJqiChNWV+5BbFhdCg==,type:str]
config: config:
mailer: mailer:
PASSWD: ENC[AES256_GCM,data:LVJZ5lr/PPaW03FW5a1ky+7HRJA=,iv:GvE9sagN+QKqft4UWxJ3GYHxhzZTwaa79dolpIiR228=,tag:DM7+eYb8JRDdlEgQuUHmyA==,type:str] PASSWD: ENC[AES256_GCM,data:QxCpONzUd9h/qS9H77zJMsAPUp3un5Yl4+6+l3rPajRuRvjaRtcTXAxLnxpxEgGLUFpLgIPryWD3eMKT,iv:5iyEN1vUrxmgEN803fd6Q63zxnhmmGa4aj/TRrJNTwA=,tag:63SaHKG/K+PQ5grwv+zN8A==,type:str]
database: database:
PASSWD: ENC[AES256_GCM,data:q2WKX4NcyT5YzPGpnuibw7Hz/IE=,iv:nqXKXP435t71wQzdB31BqkmNE6wIwsqt+atolNYP5X8=,tag:jAJxjZBF86mqEtUzvGNiLw==,type:str] PASSWD: ENC[AES256_GCM,data:qH2pVwmY1o7pVFMyl9tBGW02Psw=,iv:/XkFFeCiYWE3dCoYj63rIA0+V3lvJWZUvMyO6NkAfSM=,tag:UWIzPp9MlYRUHbBRRJrTnA==,type:str]
session: session:
PROVIDER_CONFIG: ENC[AES256_GCM,data:7noPsBvlc50ticLKsZWMyJxoGFHDRoau0qJW8CMAgj9v6tDUd9/WSYofq+o7ZNLYBRy8zDTZNbZPMuLuQiMUD+RhmtlT9yswqMZxYaXBA0RIqaYWIjkf/rpaZ9GfMUBGCsEacRcLSNGNy3VzotaQ55RXwYBTAD/I,iv:qNDaAlowf1AxhvnopdYbK4zGxMvXrzgzNOYCRtDz83I=,tag:n7mTpm2WPXp0LnbXeg/9fA==,type:str] PROVIDER_CONFIG: ENC[AES256_GCM,data:lI3Mg6ZljleZ2IdivcSOrvLDMUdhbHTlRN2viIwyE+EHpHOk+0Onu2AkOTgnspGhvXkmpX0AAynUCOEmkI1k0eST4XdC4a+vp895Hu/6+UgODN2UCMutjkVg0kgRm6GcpI9i/FnoaHp4VR09nT9k13dqXCs7VhEk,iv:SMG084+MzKSxkgJqASNrkDVcVjw9VEjp0vsYyziobtY=,tag:kM6i/8LUvzd+3K5iXmzdag==,type:str]
cache: cache:
HOST: ENC[AES256_GCM,data:FGSxLu/1m+lZDATxbnbeLZ4tPznVSa0xfmXC4ozFEZuEx/X7tSRv6LBRnbyRNaH/DFD3LlUgv+hjlzlSa+n/PQ6c5n6V/63wh86OZgWNEbcNjz9VoJ4ZFJyKfVB0eZaSRdpD2DugVMSDPcQ3i5e+8BDoDDceC4rP,iv:fiLfKcGZzPaoqtIHVFWG583BxK4ZQur1GfgmgmNbyR0=,tag:1omKm61vQoqLyJtMRN1gcA==,type:str] HOST: ENC[AES256_GCM,data:R9V0k6ecZgb3saCeF3VYSR4zGv67ikdwckembcmU6f9o9M7GVivOV/nMVrW9dN3RKOVsyznJAYiFKtlPYD4JxTkjDCIbtK04innCdUmMqi6ziXeb1RQq9syefVOHF0GRi/sbWfruNY39dwqbH7Ol+Ot9oDMjDLJ6,iv:fCVXeLYZSV5x7E8TpX5XNShagZHfUSpF/rewvX2BVqs=,tag:bcLJh4QSSw+QkGIYmOSC3Q==,type:str]
queue: queue:
CONN_STR: ENC[AES256_GCM,data:3pBxv+nxjMH2a5BkQL7qziQOVkkfocihnc1yiksLAcV0IMV3+FaXAFc6HVo7QS00yrH73WaoB/finra0w+5wVGLFRxjTtGDmWZxDQ0C1OZQ1u8KUPypWYoy8cgVSQlZ2ykutrNL9osJ4BmGjLXnHg/ks4JU6dJiT,iv:4leUVw+vsT6DHAOWqUP1axf1sX90e+UtqBr5F2avKIg=,tag:k8z5tSpSYr8HxAEVfnN0bw==,type:str] CONN_STR: ENC[AES256_GCM,data:NuXv8GwzLccYAyLL9e02PKCWoUSQ4gYJg6n5VI64eQ6nQiKgYN6kjvQYPkK/zIrHwv4pnsiI+IpUHiQhIsZyMQW8SibBO38ZfEUwzJBpp9VSjbGYuqwK6srcsk+H4F5XZhI2tsAXchywf8bhC90dtX+sneMAYdcv,iv:X5RrpwG38M/x0+c/BFQc9dhiJPGeYngvHL/wsDZZbQA=,tag:SN+6f6Ld+98tDNaI8Sc5yQ==,type:str]
oauth: oauth:
- name: ENC[AES256_GCM,data:v9R4twYA,iv:a1aLIjdiix9FQ9RviMRvxVASkMS+FW+lb+2I3E2W6JU=,tag:JFEQxu3asAO/Tklx4i1XVQ==,type:str] - name: ENC[AES256_GCM,data:q+bXBBH+,iv:tEGL4Hgp1a7CVZ0WNfPylGM6llDuU+gFwmGrZGyBihA=,tag:j8igdV+mTxuHP9rjeixkDg==,type:str]
provider: ENC[AES256_GCM,data:yPhVTb0/,iv:z0Sk2Mx6K5XkY+NpNbYW5RY3j+TmLY7nvJE2fYKZaNg=,tag:XQGE4aAm12wch1tgHWQqfA==,type:str] provider: ENC[AES256_GCM,data:Xb7vAdyq,iv:49z26uy6QRo5y/lSXKvcfywLK0DuTFb63YVxYA1wobE=,tag:0ynquRoj0Bil8FYg6wURVg==,type:str]
key: ENC[AES256_GCM,data:tfS04jC0YBMd87a2WNA+X08bKVc=,iv:V7pk5BqrRiwwK3sxmyj9DxLDs+nFtQoGHGB8ub98V9E=,tag:QwEn/T91UPhHSzFEGYVmUA==,type:str] key: ENC[AES256_GCM,data:BPgxRsbe6BAQlvprJf3q8B+ddQY=,iv:QrBEnvkTwKmf1/7TCGDPIADPhhHfugCzNRwSJJe/nvA=,tag:n3laygkDMAHg8jFfplRPSw==,type:str]
secret: ENC[AES256_GCM,data:0RJlLTqZvrsSoWxNEse4iF5W0ajaBhr7vJWol33ArZSAmHGrcV1MAA==,iv:WL4h39Qyueas5+iavpI2k1QtF8eVOvLC0fqf910SNpk=,tag:PpNIhXLT3Qs1wdbFcqbIvA==,type:str] secret: ENC[AES256_GCM,data:wXLN+GYGCHhyQqQYGso6b1U1BmOBHSkXR61wyoEEHIMYRnGmDCA1ng==,iv:DEXqNGRLSU+EUNt1x9dqEMRc8nsGg+TjN1c6wyQcTQQ=,tag:uX/3TWYSYKX3k9BJSIf+TA==,type:str]
- name: ENC[AES256_GCM,data:P2sLOGJ1Cf+S,iv:aR24am501lEjlzugz9nmT4IC6Zut9qFvs/LqUWGaf9o=,tag:iIR1LULA5Hkq5SdSVIVIwA==,type:str] - name: ENC[AES256_GCM,data:yE+puM05oI/1,iv:Ups4cBHl/Lmj8RSPW5sh2A9xGIxHOazJnTpyFluhfhU=,tag:xLMiY0p8KQaBGFrog7mzXQ==,type:str]
provider: ENC[AES256_GCM,data:EA6MCGOnmQgDv9q7Ow==,iv:7pyeOAqqruuyOKVwEqq3mFe+Wnw9jPUyrfo22qCF32g=,tag:D2nqlaQVoJDPpGCK8VbLbQ==,type:str] provider: ENC[AES256_GCM,data:r9qYI/J613FmkrFRDA==,iv:EUxmXmg4T7nRFVa4HZAxRfb+90fsSKcns/suu6tQC8E=,tag:HNMAwWigse/50YTEg429wg==,type:str]
skip_local_2fa: ENC[AES256_GCM,data:t5ggwg==,iv:ILi5VFo8+9t23CKyRXjZsCG2Gtx4gwfmxCi+JFKVcBk=,tag:fXmhnhsJOE9lUCNs34eoAQ==,type:str] skip_local_2fa: ENC[AES256_GCM,data:jFIZ8Q==,iv:k7pWtnnmBUy/4yE+eJ6C6iwoK+jGHNt0e+3ekUf5KSo=,tag:iCgt7V4mheagXBkZwR0S1w==,type:str]
key: ENC[AES256_GCM,data:LHpPZ0o=,iv:FefBNYGyzr082UTRmQ4Raz+G+Pc0vKbd00xDf+g7xPg=,tag:UJmxEvT3zJV/1G4aG3Z1Aw==,type:str] key: ENC[AES256_GCM,data:KSPkJbE=,iv:pnuGLWLqYPX13XoKEPIXQcPbLpK00CJG4gJIgKvgDiA=,tag:GD3kbHU1IuslQ8nkSiQmKQ==,type:str]
secret: ENC[AES256_GCM,data:AcaKQyQ0XkadGWec/VXuCCy8eXAFdQ4MX0P+IT3pOYzBF8KdcO+6T2+/I0buTr7JZ2u1ooT2KirhlnbA9/emXoADjM8cY8/BX5q3XvzMFG+DvW4GSlaQg2avSvo2mlC5vm9cDAoTa1eAhRzP3QfZ53Krs4naR14vV3iCMbWtmro=,iv:RNS30+WBWNok2rdMMuLZWDYmo7lAKoGlqGyCIpQtLpQ=,tag:zdsRKMOHb9Y6gT1zvSNSUg==,type:str] secret: ENC[AES256_GCM,data:N/GQgcpaFgUSq2zPSciWiqm/3l8aDmpzSqXL0NEpDNe9eB7FBvInljU4/HOCBoxd09Xv+6UDr4RzP3fZpyLkQVGHEUx2MLEDobmEWbCXsXNhV/92GN9wGe+gF9w4jPlieLXIGucn1ELwnPD13nnb6aFH2BJjeWb93MxSNqOSjfk=,iv:5W9YNbJI/8o/CeDGwLo7lpLoS294cwMgNK2yCRdaGCs=,tag:rLL3ENb9/Kei4ubrlMIf1Q==,type:str]
autoDiscoverUrl: ENC[AES256_GCM,data:wYmElXWvmsC9JTxPtcvIMKA155jv/x+j8mFaMS0FM4mg/q4+rTQe6OM8xTQDW31QMBz3Kyuydg23haF2sCKp4JHGXnnNSWsKnnoLhgAncFgxaWkKaT7W864=,iv:ifxKWgUNBPaxtC8/B3T7S2fNdbI4IkoTQzXZtnAYcRM=,tag:yKP3rGVmxov3e2USb7JJmA==,type:str] autoDiscoverUrl: ENC[AES256_GCM,data:l2fkf+wJU52wLG4Ea6+xFRWZoE4WBg3UIT8cOOb9chjzcWWeG6cxKiiI4feevzuUUkIDFEGG04bFu6Gh/tgf/ERiMYlXNVMXF6TDA4gLylZ/InQa6+ra1lM=,iv:4WFqWodHQFxr3lbLvJlmrH0CRjBTHIRGIybw3YyRw84=,tag:T3v9P7l0eEXO5qnp0Kzebw==,type:str]
iconUrl: ENC[AES256_GCM,data:LXmbQF0AHWtBtujM20X/umD3KAVX2VzydBH/FOA53Fb7+dooTHnJVOABYSUzWXBE3voOYYuv9qhZFkRZ1puRVW3BypMbmw==,iv:4dw5YTHmoTL3dGJRAd1crWmsRrX7/R6S8cfkGEjM/sE=,tag:NnALdqtDD6VDUWhOYWDc4A==,type:str] iconUrl: ENC[AES256_GCM,data:JcyeyiW/gYi8I30CafwIXD028ChoTHSUAR4P94vU8KOAQ63aybc/lCBpZ2MDNelrJI7gYQX2B5ST2My3FuaySvN2ac3PGA==,iv:90fkZSOWOw5x4gPHduw8kHQCbYE65DrTVp8V1jT0h1g=,tag:U5d0k3XNl5k5n0L93nA8zg==,type:str]
scopes: ENC[AES256_GCM,data:2mr3Aql5KTJ+TLuZeg==,iv:ThVhNaPexw1go2n9PmxCoYef03rnOAormiCfaF7OjDA=,tag:7t9oo6NANi4Xo4JxIlDi8g==,type:str] scopes: ENC[AES256_GCM,data:PmCest22VSJidBXnLw==,iv:RQ1xHmw9ohbeq/C4OcQiB8jlW5NZKZHHyMVS7ihlT1A=,tag:pqZLf2NYBS8Xljg+f+vNpA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
azure_kv: [] azure_kv: []
hc_vault: [] hc_vault: []
age: age:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2WjFONnYzbnBSdUpGS1Vl YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4VWhaYTFiOGs2NHF5a2lT
WHdXVVVJOGJPNFh0cjZzaU5kajEzRUkzY0RBCk4wUm13dVVPS3NUSDZXNXJJbWtt Q0NjR2ZOMkdFZTVLUzlmdGo0cHhmbThJY1RzCmFHQzN0eDYrSUt1ZDUzTkZVYTBl
NjZCK0t3dVg1UXdjNGZ0V21BME5CNGcKLS0tIDdPZ0ZhR2xDenorMmxvNFREclZq YzBid2VIQWxyMERQUjk2VlFFajQ5TFkKLS0tIDA4bzlwbWs5d3UraXBXaElCWUNT
MkJ6VnJGQ2JMUXBHbHNYR2xrelFJRncK/N0iI7ywBLlKETEwifb32N0o/ht+mruh SDhaYlVhaExiUkVoUSs0MjBrK21LNGsKGjZPAjO8PU3s/8eYFD6/hbinjj4yAU8M
r8DezLwaLlR6Zxfpjv0Q+jFCzhD9sLA6Nrxyp2IRPlhUiFl0Nlzb2w== W76hvpASbqg3AoQtSjgNeJfCgfntFdghFy66ELbCCQtO/XB0fIh1TA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-08-02T14:01:55Z" lastmodified: "2024-09-13T04:19:53Z"
mac: ENC[AES256_GCM,data:yezUsQvaGdRSgzfZl7Hsg8m0iAQiYAuPpsioxg/edgV4sTsLb96uE1y6muOHnRlMAj8uJWSWcKAt6W5OVQEh6kfhCr0Ya2AtKmRlsTe1OAzGN3d6/kt10TvIuG/tMHVp9a1A5VvZeOyYjf8rSBycI6qXRq4Vrk6hyNpSw87DAaw=,iv:IfCjYAY34W2iUJzHMBRt3YJnlXkSg6w1P4fjuzoOY/w=,tag:fhk2Jl1HO/xmxOkFdP4cZA==,type:str] mac: ENC[AES256_GCM,data:FGVQm5BxRm046oxnEc4kusR/RsUPeI1wbqyhhsq/VErv/3n4jfww19ixzHpCye+8PzQQNAfWxNyvkwhpArKLFbFcZVsyITChZK7BaHwLmM/IBzN5FwW27gtNVfIU7DCUM2plK6Nk19Ssj7lkr6Q3JWhjKb9oFHr9YbCTqJzjYNU=,iv:l0CWvvWjPY1bh0E7zfCBM6IDJZu3N7vEHk/Eu7iU7tc=,tag:8ziHcJV5kSLtqrRxnvvIjA==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.0 version: 3.9.0

17
values/badhouseplants/secrets.renovate.yaml
View File

@ -1,5 +1,6 @@
secrets: secrets:
RENOVATE_TOKEN: ENC[AES256_GCM,data:NjYgNj3EjVucj4lN1+QfM0KZD90BYJNbTTxI1VX7/UqKL3YW1nb5JQ==,iv:pJcK9F2ccGkSlsjm3Ybaiy2V2aqTaEqqUxrHdy38sx8=,tag:xGdt0MsfpoPYAVmcMycGbw==,type:str] RENOVATE_TOKEN: ENC[AES256_GCM,data:SjatRI4Pbqcl1ceITU/VizwbknFAVR16ugyazE0y/tDVT+4Q87dJNw==,iv:zEn4NSgjV131c0SeSHhlf7RK9/CuBA68er8O79mcZrY=,tag:desIpnnImqWetRX9fhQCaQ==,type:str]
RENOVATE_GIT_PRIVATE_KEY: ENC[AES256_GCM,data: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,iv:ylaRwfDFH9ikqteyvULBxcjr0bUJMkauglWcs5pN2GI=,tag:fjlY3ulfUchg9ucKpXbP6A==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -9,14 +10,14 @@ sops:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0Y01qNnFSbGtqdXhpNTgv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibjlXMStoemowcFhLUnVr
bGhzQWRqTm1tVkVrNFZYQmxrNWVlMnMxaEU4Cmp0QWpqNTRhVFJVVTBuNEtIcTlt SFUxamkveGo3ZkJaSlpaY29qZWlDOWlsaTJFCjhaWThyaTVoQVBPYVpKekF6VHZ4
RVo0aDE3N1FFRHZOUU1GRzA2eHRmUFEKLS0tIG00QmlXVFBndUJOUFhjZ3I2bGRi ajQxTzZPYVo0dkE5NkxpL1VlTnJmeDAKLS0tIDJXb0syejRVajByWEdhVmh4UlNl
QnNkME9VSVV1bzhYdEVhSHdrdHBSVW8Kvbm6cuPgFVMS0ZT1ECRk65f1hYUSGUEX NDlpcXk4amtPaTRGeWUvbUhUV1JDd0kKfignlV64ANbQamsrju7QvEs2vabo8XRU
OY4IWB3x6UgiNWLL+xa7wPzcxNNWC4aFNNh/lVCgJjc49zSM9H3Mmw== D1GQLvuaB/dlhuPzf0Etw7ltPCCZ4fjqYWkzHUb5qK35pf8HBnP3bg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-09-11T21:28:52Z" lastmodified: "2024-09-13T04:40:01Z"
mac: ENC[AES256_GCM,data:9L1o290zOuoyzaJz8mxdjPXXCNqDGnQpZ8LKmTayPRQtqttmFLY6HmP3Lgw0enYB7G1x9JPFxorm++0WlnDfHGBwMC+BSFv/1B0s4x35DY/zCE5OCpUapLHK2gUm5XXP2Sf1OJNg0BEuoYzzcR/X+PfVU7Trj6BPz8ozD0PP3ao=,iv:nHpIbQXR+PH5lM1ihz86o7/3avSQ/BmXcLzfTMFOsEw=,tag:9pGiWrIMN5lzOt8JeszJew==,type:str] mac: ENC[AES256_GCM,data:O1aUJCTU2eljg4x6M5bfdXtjKxjk3gA5zdXp9xc7bz/pxCC1hesRvgkjaXNp/0AQ0P0QKo98hd4yZArilx7P3zZd1HtJ88lUeK4p+YvSTcX22bOU77zH+qmr/iJvP5m3dUDGDRvKcNQ8RawVxV4iB3ZZSUVZAoUIWmjSc5m6wFI=,iv:zPm2GQvCESz80K0PoFCd6s0Wp4gpJiGb0HK8/7XDm4w=,tag:XtE6Ua8LahNQEfQFThuRhA==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.0 version: 3.9.0

24
values/badhouseplants/secrets.stalwart.yaml Normal file
View File

@ -0,0 +1,24 @@
env:
secrets:
data:
SW_ADMIN_SECRET: ENC[AES256_GCM,data:Cbeqg1J5J4oSmXhiWRX0jiEgflrI7MVRiLmFlM5dQAqAfO/IoruZsqfYtKZjxsPGhKA=,iv:+IKV2jW69cnZo1gCGWyf8hZDh2wvBAkcOJ1xEm6pBM4=,tag:So7bqtKscDOnKhCz+AOsCw==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXUHVRdFA0UTZCVitsYzFq
a2JhaUR2ODkydmN3ck1wc1h0UTRXMmI2eVUwCkd2bk9TWVFlUEdhcGk4RUFmVHZp
djJsOU1vanEySkpVMVN6SWF4OWd6MzQKLS0tIDJZcWxVeWJtOE1LNFZDZk5ZSEl5
eUhLTUwvUysyYnhSMzRhanMyT3BPam8KkK4cWHKEGGSnva0t6XjmVY9uoc8gHX+Y
CdixG+aPhhimSx64DsZiE01ZGnT7iL1OC/W3umGWZv3OO0IAEXo3NQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-09-13T03:42:42Z"
mac: ENC[AES256_GCM,data:R8Uq4puFFIG5/snx/pgFLbYX+uqFZoVQOyn3Iw1Vh7vRX1QkG0njFMp3sbHTMfXqvoRPuXNJNK88jA+e0P04BzfbKqj9O+biP+AksRsS+5uGIeNtZXWzFOwFl5+Fv/RLvPY08+stE09ChUVZzJSe+l2ed7OSs8FXtJrJAXrSSh8=,iv:elp8yKU2AUjIIa4b2sZm0VJbO+qg//+SjGMvm9dMNbc=,tag:k79lBuL4Pa6+P35kLeeoQA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.9.0

56
values/badhouseplants/secrets.vaultwarden.yaml
View File

@ -1,30 +1,30 @@
env: env:
secrets: secrets:
enabled: ENC[AES256_GCM,data:WG5QPA==,iv:uYf+nTK+RRDlvlskBRAHQuRuFpmv1KoSsUqv/O8fbQQ=,tag:Zr7cDfHHvoaRYeV408QBTw==,type:bool] enabled: ENC[AES256_GCM,data:e3fXvA==,iv:Zu9lAd7V/mYTAXFaMaxZaJFrnqfbO4YpeyA5iI/zeW8=,tag:13h7DQWTg8j1ZdWgmKD0Dg==,type:bool]
sensitive: ENC[AES256_GCM,data:tW/TJQ==,iv:6/MKYxGz3wHQlr0DVMkLDgD+SKosIakEVhCYZV/Ayoo=,tag:QFoOthMocjwcpqEOz30BWg==,type:bool] sensitive: ENC[AES256_GCM,data:dywYnQ==,iv:BbfRBvw7H/kRRvGvcPFhSy1p557GIlJHxaWouTes44s=,tag:Rs/MxeWFCmcplHocjmem5A==,type:bool]
data: data:
SMTP_USERNAME: ENC[AES256_GCM,data:OGnPg84jd3qQz0ZsJZlGW8B/Zux4Es3fVL4u,iv:GiyH+/1dA4TQhgY+LJml+M5Q3y3lS4v+7FNbS0yLZ/Q=,tag:4LXnZ9+mp2y/iM4VF9P+fA==,type:str] SMTP_USERNAME: ENC[AES256_GCM,data:VzNMG8K92B/z24TdbQfQfWDQIxv8KA==,iv:5EbYpTvuEyyDUG8Tk8OqoEtHwRuUOC+Nn8Ll3oqwOvo=,tag:CCH6AOMFh6d2jw3bwTJnmg==,type:str]
ADMIN_PASSWORD: ENC[AES256_GCM,data:WXm5lWgr0ItwuHCgLJbRajwfUDLUhHDVOXbFHPbfGdb9kfeIzWcY/AfkVTRj3S0Xacc=,iv:kRKKE88pv9J+7RHORwymbDqwTys0uY27GBHfjFqRZXU=,tag:LoUecZzPqCIBdRJNBmoGzA==,type:str] ADMIN_PASSWORD: ENC[AES256_GCM,data:teShVLb7WBZ+b92dvr0uZ3KxKLIANdYwpbeBI6LLQjBbiTv/zGpDBEbjBlOKprpktnI=,iv:7/fPn9p/I/2xY1df5xL1Z73K2X+F8vSlMgBTriDPFuA=,tag:+iePuZ5tao/zV8MKKJ88CA==,type:str]
ADMIN_TOKEN: ENC[AES256_GCM,data:4UQ5sWFwJQ6eM/hBCDZFOufh6df1mCElEfCg6yGHU6e8lyn804Dkw3EfgFuS1JlQTaCY+SFTfGAQLLcylM10t1eaXguKGiAy3fyohGzH4bOUiaAKJtze8w==,iv:Wl3dLjW1MokTZe6HR0gL4YsNjPwLlBCP2/MVQDQ/80g=,tag:Vy+cDXWu/TZs2yy4Gjc9Sw==,type:str] ADMIN_TOKEN: ENC[AES256_GCM,data:CoqOi9FbiVD88UItHiuhUGdrMZlPg6DDcJmhCsfQ1tVOQ8qUepisx/OeyNgQ3qBkawARebEaeADEGMvbzqt0eRf0St6HqKlVJTdBpFGlu0kQcJS7YCONLA==,iv:3ZNWJyKp1TlNW+/U3bQD3FsdE5+Ranbn98OkSlLnnGM=,tag:xbnMEHwi5TWxyK+4waE4BA==,type:str]
DATABASE_URL: null DATABASE_URL: null
SMTP_PASSWORD: ENC[AES256_GCM,data:F17rTY4wSaW2W3qoZo4yBxv4a9s=,iv:A5ODmOPdG8ydrK6TL24J5S65rwjwMb1oGb5o3U4gagU=,tag:7s7OxKkO/6AO3+Lb0hRDbA==,type:str] SMTP_PASSWORD: ENC[AES256_GCM,data:ZpimTNDLp5wwZleKfZS6YYSkzle7PbkoJWi3kFCiVH+PoVUTQid3SW/4Zig7yVd4KsfVzth8Q4yRarWl,iv:ANKX4Y8guitZMTayVJz9unhV4PX8/oc6qiuRrS2roOU=,tag:wGZbjpwgmNueL9T2b7qRYA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
azure_kv: [] azure_kv: []
hc_vault: [] hc_vault: []
age: age:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhLzVRdW5ITFJmWHE5dkRr YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEazgwUEJGZWxWb3hHdkNs
R3pGbTh3UmFTTXR4VVVGRjlSUURudmxwM1hjCk16U3BKYkZTcmdwaFZtcTZNYk9C a0M1alRqdStzNmVUWGFWbis4ZXpNMjhwM0hRCkh3WTlUMVIxbzQ3V1EyRXljenZW
M0ZBZk52bDBuNWZwa21SMU1mSnhmWEUKLS0tIGZVV01KQ3Z6OGltN1RFSks5MVJI R2luWVRnV1J2SERsbVlzRUNqeWs0Y3MKLS0tIEV5aUdIMTcxalJXbkVBNVRJR2R4
a2xWUGZpMmovY1Qya05nVXRZVUFDTFEKhF34OSdGZizs1/Rs9qvUOVtomQBvOFbS WkV5SDZVbzhPQjNwVEdjUEQ1NHo3QmcKk2g+YWoh2rE73Bj/Ap6HHPd8IXiGCb5G
hRsK3Orwig4HJdzj1UOZd8UMGwj6Mzhw+aKUJKL67igMwxbxVcaU1Q== AXuxljIlThV7/EnIStPt+IIZ2fjqRbQTMGGmmqHI284QyA69uoDLrQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-07-15T18:52:23Z" lastmodified: "2024-09-13T04:24:11Z"
mac: ENC[AES256_GCM,data:WgVkg91V7NEXw6gqAkDODnpS3z4Bs/QSsMMOtu+RhjzoxZqupi4JNDcqjlWmiX/y5tw/021PyMTim0uhiCuiigooIY8z4BBABBPnjKocLqQ+BLQtQD//kv78RJhS9XsYPioF3hfe+9oXP3Xsn8b2mHsv77dfnWb9++zJMypiMYQ=,iv:6T5bTmYyk5FKLE2qUXzlpe3roU8cWVKIbX+1buE8EQk=,tag:hD+1TjiXuVtNaIg85+HDxg==,type:str] mac: ENC[AES256_GCM,data:gJk36JWS36urA8pM2c5U5WRRVf6YpAVV1Vyf8gHaVEmRfzZIdprF6v9co7U+Qz9eT4X/0BJcB2AvbAiuhycnScOXtL+MXKcd4zOfNFgheEz0ctNZQNmsNwCAjjGjRFu7cUp4mCR+7lbZBIHbrQOe9u7NReJlfc9uvK4YXhsKc4Y=,iv:xefJr9cgFSeULcTf0pJIRkMf80i/FkLhVLTz6rN7PK8=,tag:YJ+89kRtLnMANqiYy0OcXw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.0 version: 3.9.0

46
values/badhouseplants/values.gitea.yaml
View File

@ -6,7 +6,6 @@ ext-database:
enabled: true enabled: true
name: gitea-postgres16 name: gitea-postgres16
instance: postgres16 instance: postgres16
traefik: traefik:
enabled: true enabled: true
tcpRoutes: tcpRoutes:
@ -38,7 +37,6 @@ ingress:
- gitea.badhouseplants.net - gitea.badhouseplants.net
replicaCount: 1 replicaCount: 1
clusterDomain: cluster.local clusterDomain: cluster.local
resources: resources:
limits: limits:
cpu: 512m cpu: 512m
@ -46,13 +44,11 @@ resources:
requests: requests:
cpu: 512m cpu: 512m
memory: 256Mi memory: 256Mi
persistence: persistence:
enabled: true enabled: true
size: 15Gi size: 15Gi
accessModes: accessModes:
- ReadWriteMany - ReadWriteMany
# ------------------------------------------ # ------------------------------------------
# -- Main Gitea settings # -- Main Gitea settings
# ------------------------------------------ # ------------------------------------------
@ -60,7 +56,7 @@ gitea:
metrics: metrics:
enabled: true enabled: true
serviceMonitor: serviceMonitor:
# -- TODO(@allanger): Enable it once prometheus is configured # -- TODO(@allanger): Enable it once prometheus is configured
enabled: false enabled: false
config: config:
database: database:
@ -72,7 +68,7 @@ gitea:
ui: ui:
meta: meta:
AUTHOR: Bad Houseplants AUTHOR: Bad Houseplants
DESCRIPTION: ...by allanger DESCRIPTION: '...by allanger'
repository: repository:
DEFAULT_BRANCH: main DEFAULT_BRANCH: main
MAX_CREATION_LIMIT: 0 MAX_CREATION_LIMIT: 0
@ -109,9 +105,9 @@ gitea:
ENABLED: true ENABLED: true
FROM: gitea@badhouseplants.net FROM: gitea@badhouseplants.net
PROTOCOL: smtp+startls PROTOCOL: smtp+startls
SMTP_ADDR: badhouseplants.net SMTP_ADDR: stalwart.badhouseplants.net
SMTP_PORT: 587 SMTP_PORT: 587
USER: overlord@badhouseplants.net USER: bot
indexer: indexer:
REPO_INDEXER_ENABLED: true REPO_INDEXER_ENABLED: true
REPO_INDEXER_PATH: indexers/repos.bleve REPO_INDEXER_PATH: indexers/repos.bleve
@ -132,20 +128,20 @@ postgresql-ha:
redis-cluster: redis-cluster:
enabled: false enabled: false
# extraDeploy: # extraDeploy:
# - | # - |
# {{- if $.Capabilities.APIVersions.Has "traefik.io/v1alpha1/IngressRouteTCP" }} # {{- if $.Capabilities.APIVersions.Has "traefik.io/v1alpha1/IngressRouteTCP" }}
# apiVersion: traefik.io/v1alpha1 # apiVersion: traefik.io/v1alpha1
# kind: IngressRouteTCP # kind: IngressRouteTCP
# metadata: # metadata:
# name: {{ include "gitea.fullname" . }}-ssh # name: {{ include "gitea.fullname" . }}-ssh
# spec: # spec:
# entryPoints: # entryPoints:
# - ssh # - ssh
# routes: # routes:
# - match: HostSNI('*') # - match: HostSNI('*')
# services: # services:
# - name: "{{ include "gitea.fullname" . }}-ssh" # - name: "{{ include "gitea.fullname" . }}-ssh"
# port: 22 # port: 22
# nativeLB: true # nativeLB: true
# {{- end }} # {{- end }}

55
values/badhouseplants/values.stalwart.yaml
View File

@ -21,7 +21,6 @@ workload:
args: args:
- -c - -c
- cp /app/config/config.toml /app/etc/config.toml - cp /app/config/config.toml /app/etc/config.toml
containers: containers:
stalwart: stalwart:
args: args:
@ -38,15 +37,15 @@ workload:
path: /app/logs path: /app/logs
etc: etc:
path: /app/etc path: /app/etc
envFrom:
- secrets
storage: storage:
data: data:
enabled: true enabled: true
storageClassName: default storageClassName: ceph-filesystem
size: 1Gi size: 1Gi
accessModes: accessModes:
- ReadWriteMany - ReadWriteMany
extraVolumes: extraVolumes:
certs: certs:
secret: secret:
@ -64,7 +63,6 @@ ingress:
kubernetes.io/ingress.global-static-ip-name: "" kubernetes.io/ingress.global-static-ip-name: ""
kubernetes.io/tls-acme: "true" kubernetes.io/tls-acme: "true"
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
traefik: traefik:
enabled: true enabled: true
tcpRoutes: tcpRoutes:
@ -98,11 +96,6 @@ traefik:
service: stalwart-pop3s service: stalwart-pop3s
entrypoint: pop3s entrypoint: pop3s
port: 995 port: 995
storage:
data:
storageClassName: ceph-filesystem
files: files:
config: config:
enabled: true enabled: true
@ -115,38 +108,38 @@ files:
[server.listener."smtp"] [server.listener."smtp"]
bind = ["[::]:25"] bind = ["[::]:25"]
protocol = "smtp" protocol = "smtp"
[server.listener."submission"] [server.listener."submission"]
bind = ["[::]:587"] bind = ["[::]:587"]
protocol = "smtp" protocol = "smtp"
[server.listener."submissions"] [server.listener."submissions"]
bind = ["[::]:465"] bind = ["[::]:465"]
protocol = "smtp" protocol = "smtp"
tls.implicit = true tls.implicit = true
[server.listener."imap"] [server.listener."imap"]
bind = ["[::]:143"] bind = ["[::]:143"]
protocol = "imap" protocol = "imap"
[server.listener."imaptls"] [server.listener."imaptls"]
bind = ["[::]:993"] bind = ["[::]:993"]
protocol = "imap" protocol = "imap"
tls.implicit = true tls.implicit = true
[server.listener.pop3] [server.listener.pop3]
bind = "[::]:110" bind = "[::]:110"
protocol = "pop3" protocol = "pop3"
[server.listener.pop3s] [server.listener.pop3s]
bind = "[::]:995" bind = "[::]:995"
protocol = "pop3" protocol = "pop3"
tls.implicit = true tls.implicit = true
[server.listener."sieve"] [server.listener."sieve"]
bind = ["[::]:4190"] bind = ["[::]:4190"]
protocol = "managesieve" protocol = "managesieve"
[server.listener."https"] [server.listener."https"]
protocol = "https" protocol = "https"
bind = ["[::]:443"] bind = ["[::]:443"]
@ -155,43 +148,43 @@ files:
[server.listener."http"] [server.listener."http"]
bind = "[::]:8080" bind = "[::]:8080"
protocol = "http" protocol = "http"
[storage] [storage]
data = "rocksdb" data = "rocksdb"
fts = "rocksdb" fts = "rocksdb"
blob = "rocksdb" blob = "rocksdb"
lookup = "rocksdb" lookup = "rocksdb"
directory = "internal" directory = "internal"
[store."rocksdb"] [store."rocksdb"]
type = "rocksdb" type = "rocksdb"
path = "/app/data" path = "/app/data"
compression = "lz4" compression = "lz4"
[directory."internal"] [directory."internal"]
type = "internal" type = "internal"
store = "rocksdb" store = "rocksdb"
[tracer."stdout"] [tracer."stdout"]
type = "stdout" type = "stdout"
level = "info" level = "info"
ansi = false ansi = false
enable = true enable = true
#[server.run-as]
#user = "stalwart-mail"
#group = "stalwart-mail"
[authentication.fallback-admin] [authentication.fallback-admin]
user = "admin" user = "overlord"
secret = 'R@ndomToken$tring' secret = "%{env:SW_ADMIN_SECRET}%"
[tracer.console] [tracer.console]
type = "console" type = "console"
level = "info" level = "info"
ansi = true ansi = true
enable = true enable = true
[certificate."default"] [certificate."default"]
cert = "%{file:/app/certs/tls.crt}%" cert = "%{file:/app/certs/tls.crt}%"
private-key = "%{file:/app/certs/tls.key}%" private-key = "%{file:/app/certs/tls.key}%"
env:
secrets:
enabled: true
sensitive: true

6
values/badhouseplants/values.vaultwarden.yaml
View File

@ -1,4 +1,3 @@
---
shortcuts: shortcuts:
hostname: vault.badhouseplants.net hostname: vault.badhouseplants.net
ext-database: ext-database:
@ -7,7 +6,6 @@ ext-database:
instance: postgres16 instance: postgres16
credentials: credentials:
DATABASE_URL: "{{ .Protocol }}://{{ .Username }}:{{ .Password }}@{{ .Hostname }}:{{ .Port }}/{{ .Database }}" DATABASE_URL: "{{ .Protocol }}://{{ .Username }}:{{ .Password }}@{{ .Hostname }}:{{ .Port }}/{{ .Database }}"
workload: workload:
kind: Deployment kind: Deployment
strategy: strategy:
@ -24,7 +22,6 @@ workload:
- secrets - secrets
- secretRef: - secretRef:
name: vaultwarden-postgres16-creds name: vaultwarden-postgres16-creds
ingress: ingress:
main: main:
class: traefik class: traefik
@ -35,7 +32,6 @@ ingress:
kubernetes.io/ingress.allow-http: "false" kubernetes.io/ingress.allow-http: "false"
kubernetes.io/ingress.global-static-ip-name: "" kubernetes.io/ingress.global-static-ip-name: ""
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01 cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
storage: {} storage: {}
env: env:
main: main:
@ -43,7 +39,7 @@ env:
sensitive: false sensitive: false
data: data:
DOMAIN: https://vault.badhouseplants.net DOMAIN: https://vault.badhouseplants.net
SMTP_HOST: mail.badhouseplants.net SMTP_HOST: stalwart.badhouseplants.net
SMTP_SECURITY: "starttls" SMTP_SECURITY: "starttls"
SMTP_PORT: 587 SMTP_PORT: 587
SMTP_FROM: vault@badhouseplants.net SMTP_FROM: vault@badhouseplants.net