diff --git a/clusters/base/apps/radicale/secret.enc.yaml b/clusters/base/apps/radicale/secret.enc.yaml index feb8a6b..9154897 100644 --- a/clusters/base/apps/radicale/secret.enc.yaml +++ b/clusters/base/apps/radicale/secret.enc.yaml @@ -4,19 +4,19 @@ metadata: name: radicale-secrets namespace: radicale stringData: - users: ENC[AES256_GCM,data:H1oE1jDfgArBjJlrDhMOMnd3Mrc2Mc+2jFJKz6srZ4NKI8u3K8vf3JmoZFK6XA/8CTUp5Rvpd+O459Spau8XZ4M+H0MqukCEVKWiMkuSS/tNuac2vGI2PufeIz6GR1HlpUWMfrnPr3SUDnp9bE3B1djkZk7w91HJLv/+GomyDffLcQkJF3q/jA==,iv:1iRIQ5g/crLYsJ/2csPxmXkyqG5oJUONY7zWmuHZbBc=,tag:sytxP8qgs/+7S3AZo8aC1A==,type:str] + users: ENC[AES256_GCM,data:dFoE2mjx/6RI4ExttguKxUb3VOhbZhE5z9lYe/XVAAmB8LeAPt6ikV+05ZdIPRjJeuC7ay/OV7dl7Xq2n8e/2RRc36aBvrIUE+1mgsWh5gulLm3ij8XmxNFUik/sdwSAr6+8DyYYB6a1/2TmeyzmKPxhzl1sdBm8C1XDe6DsN8vg9dM6m/HCuQ==,iv:2M7ZeAku2t/T33WLz+9cFFxkgKbTF4jf7+Nbu/s+bik=,tag:9cdCQqwcw2Xi/50Gu1TORQ==,type:str] sops: age: - recipient: age1nqjekn6qk8uqunyv5cl88nx9g3y8a94h5qr0u53q5dsdsmhr7g2syy6fsd enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTC9nZjd2RjJqUHlBaUwz - OEl4Vlhud1lVK3gwZ3RWb0s4eUNZWmFqQTBJCjFNQlpTRGNFTUpoTC9idU1nNlA1 - UTVWaVJMY2hjMllKVEZSQUtvZGJCVGMKLS0tIEM0dGUrQWlRVzRRb1lvaTBCYjRM - T0MrSTJGcVk5ZFFjbStsVzM2VlNhYW8KBbevNTC/FymllcC5doSpn5xkfiOSBwMH - TG9dkscqQV86acTtouqexc/3UmpRwZhFqVelY4AbCs5hB0a/v0V1dg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNDBKcE55a0E5MHdWTnYz + Qzd1SitRWVduWVMrSDFUUUtkOWZLNFVLdUFzCkdJbW1jc0U4Z0tTSXlPbjY3REZL + Um1iNW4vcDNuRStTZGVYYkxWK0NDOUUKLS0tIG1ORllYNnlDell4TnkvanBGTW13 + azVwMUk4Mk9pMkJTL1RwK1A2ajEzcXcKf8O4WrUGYIYVEKGC0K5jj5YzxpKj4C48 + XJZwkghwu1Feek4OplfkZvPJ4TIjUt9IKuHMFA+xh35q0j02BKKXzg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:17:44Z" - mac: ENC[AES256_GCM,data:lE1WLOkSRXqetZG5260aSS7ZbhsuJaX3MxgtpyAKdycq9bm1uSv/S4GHDy7elIbNTlXPtUPwNmT+SrWskc+1hoeRdLHxknZwGr/mLHrBFXQhyvH1uKj0i5pYAFhce74HpW25TZGTue1POsC3VjAateU1qMAJly0fZuqt78PEDcU=,iv:mzw8iijCix0SFV/bjyswEZ3Xh55VvKCvjOjiLkDy0uo=,tag:dJ/j/i62/fDo7oqgxyLCxA==,type:str] + lastmodified: "2026-08-26T10:17:48Z" + mac: ENC[AES256_GCM,data:uF+TeD8ovIkbd9z/OfOiEikvHoJR62z9mAsekVk3KwDMLZ7YdpbyR/GKHX0RXGPbJUAL+C0OVflp027mt0hjfGO6yD4hKvzLhaazNlOHgVJh30yc6/0QVc5BwMYb+U3WKPnZwXCIUkqEZYAVpmIM+UhKk6W7599KjBjfVJtFx5E=,iv:9j913XVhXm26MI6Ba2cfs/VCjSz+P+garnLRtL2HW2c=,tag:uSj6PX1Z02wIRe8AFT9gzg==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/vaultwarden/secret.enc.yaml b/clusters/base/apps/vaultwarden/secret.enc.yaml index 2a90fe7..9005f99 100644 --- a/clusters/base/apps/vaultwarden/secret.enc.yaml +++ b/clusters/base/apps/vaultwarden/secret.enc.yaml @@ -4,20 +4,20 @@ metadata: name: vaultwarden-secrets namespace: vaultwarden stringData: - #ENC[AES256_GCM,data:AffIDcVKgZnTtLbbqx2PFZriPuccC//Lmy+PSx0VNQY1OLAwdE7ESFI1qlSx82PsDlUhCM0b7j/L,iv:OS26G7ChoAeM7xzjeK/oLg2pfMRnFFQi81otUPZq1vM=,tag:8L2tA86nGFR718l3KainTw==,type:comment] - ADMIN_TOKEN: ENC[AES256_GCM,data:zEXMwyWmiLXyuAqc3hFkWwBwuXtiiNWi36hlTQgvr3U+TCiJEJIiUPHK4ry8NHS4wZKlJJWZ41vlPyuP/Jr+8beFXlk4oZbPhRvNa/DTk2N1eKUd/ykLPyMkmwa2t119S12OIHqoQkfSkZ0X6VX3e91XqelYLA==,iv:xxoOP4qOrQKG6RfVY0ZelGoY63+oUlTr/V9XoHQykAs=,tag:0cNu4mGVnz9dBZgYoBCa9w==,type:str] + #ENC[AES256_GCM,data:jp2kdvwxPjG8rrYikVm8nXnuZeNpQsf88p7Q5L+xFabJSKuDB5wJrYj3LHV4f3XvMxo5dIcl35wM,iv:8B5dc9BKGGbampxf5ks7c7HpwPpj3kmqyiSfoX7jCuo=,tag:7eEiJIKLLOHmXqN1iQI+0w==,type:comment] + ADMIN_TOKEN: ENC[AES256_GCM,data:Si0uO4J8HuJTB1lyFJ8T96YXqaJf06zcYCfpIHbKGHy8NEhzD3Y558GQANUS2myaYMl59kHB5Vn450M3z2jVHlB7A3+5iJJhrWLdu1rqha0DeZiRFfuFf6xoZbZZ3wRZfigps2Fqft+32E68OSn/9GJWdXsD7Q==,iv:HsAe8YGphRS4oN/zcLlNjKq1r9+0TNtgq9hmCpTkePk=,tag:MmivEEtZd5geXjm6+c24Ug==,type:str] sops: age: - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYZmVvbHp2MkcyVlJZQmZB - N0k2Rk9lak9PYVVudldJcGc2ZmhkaTl4NDFzCnVWSlRYc04zWHVkbUc1aVhjdnYw - YmorczRsYjdybFg5Y3RpUnV0Y2NKdTgKLS0tIGMxUXFkd0hMandMcFFPQktlOEVD - YWRyZVM3NGdrb2YwNGRyNUR4SFlMZGsK228mMCi6+cgQu4JEnRjJqcuIrpTPTq5Y - xHlyFMwo73UMQg5pzGok2yfi3ObhCD0GNtWeTHBu56SsDDaUJXPG6A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLMEgwSUhoNS9MSS9kYzdX + OHNiRDA4U1hyK2pQOUw3Nk9MUDhMVnNSZDJZCkJBSzNURlBwSVBXeXMwcldzQkdr + aFlob056U2RvanQ3anVCQm5mdCtFVWcKLS0tIHRmWi9JaUtEd3BCZVBDeTd1NWJQ + VmhEbnNEZVN4eDUzUWFjVEtqejBISkUKSwCxyNlNP/ooQEtgX/aVK53NoVXyd8tH + r1tny5l6KyWAYClOqYXWwwf8tp5Gro3YOfTYxsQdaWeb02HkW6vjOg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:17:45Z" - mac: ENC[AES256_GCM,data:hKPS2DWW4w8m4s7BWuUUjJKBsvRqHp6lp7qPeDmRyVOW44EqX+pusLDpvkBNAeAcwpz/2FvuPw8vkTc+z4EhGtqUy2k3pbwsC7cKJ6DyM/3kvdtoDrh+yerKUQymgYVW0PhMLjAWeCD//Ja5auhoPJ6O59QAH58xT3eHd/f5cSc=,iv:uC5F+y76Hh8HM7+EzML3G9ACLMREkHcpFEBSfOjMT54=,tag:8edRfJi/JQPAWqZdEAUeqg==,type:str] + lastmodified: "2026-08-26T10:17:48Z" + mac: ENC[AES256_GCM,data:zGMJ2UWeqx/0S8APQ5+sijt68ntvhLF37ER5qxyhKcx4OyZhO/bjYGo7Nwvk4sAhYSq+nixiDWKUW2XaDWE1TTE2xiOtUmRv6Yao72WicRzT1RkaeL3GPUKrVFmX0rIVRQwOuCMxLVNewMmTx3DlHearBxIXVO6BVYOU2EiDIJs=,iv:8UUEnjl5VWKjxCRzvoc1hkpxaxnnaCtqCBPVsS402N8=,tag:WePuujjk5tLl109ssYlH7w==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml index 65b2611..8d66269 100644 --- a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml +++ b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml @@ -4,19 +4,19 @@ metadata: name: zigbee2mqtt-secrets namespace: zigbee2mqtt stringData: - secret.yaml: ENC[AES256_GCM,data:8WWBEvJf1wO/f7hZYC1oL1kNdJ2cScytgL4OyYv1MM3r3JY5ctiyQi3BTTGMPlSeAkZ+K0wR6gj8v4s6+++TWzxkrRE1rv4WrVstxE0xPYg+qg4ZavwjsQ+g/QbXKSRbfYnBuva9gm/gsN2E286wS6JMiNlRiqWPtRYIqQE=,iv:/Ux9xf1cCKxvrh1h+kD5iEv4vTnYzkVuJ4BrMgU427c=,tag:7KcNdy5fpi/VzI11bh2DwA==,type:str] + secret.yaml: ENC[AES256_GCM,data:W8OSElMPX5j+lu5kVfn+eouGeN0g3PuCkjTOI+2Coltegt80kBGXy1lzuC7t/B0Wf4iVpM7miGLscgK2uRLBmPWAmzk9KkU8p06G4XqhvtVmFEhL66fFk3d113P3bbb9UDNjgwNrE85BAvCMdM92Vs7lUogi+2d6Xko1pu0=,iv:YioWooOrpokFfV6mHWcTOK2wvXl+0Ys/opyIrYRYb48=,tag:pcTAwqwPbxoZkbClhHEsyg==,type:str] sops: age: - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4cEdha2JyYXRrZlFRZlgw - RERhTVBVVjJYYURoaDFZMFJacVZJSFNwVlFnCkcydHRkRlQyMDlPR0wraDZCTnpp - cit3em5FYklnWFA5QXUyNEZlZkVvMGsKLS0tIEVLVFA1d0Z4dnoxWlpDMzd6MklH - TCtFMG8vdFg1cFlrbTFITFdQc0RTTm8K7Okh3TGaLLua7GpqAEMMvk2S6IKrMIGs - XcmPGAHvLEkgDy+TOUp5LKYxhhu2C9zoO/mYvseYeqECKzqtuzX3fA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4OGNFa2VyRFNhK0d0Y0xz + S2tyN2V4REFtbER1dHVCRXV2RjNSbEFXZG13CkljL2RTdmhjbDJRR3pUN09sWEkw + SzVwdGxZeDhNbGpHR09sNXNHYzJXWGsKLS0tIHlWSVJ6OFZVZVl4M2VRWkRkRGhl + R01tK2dPMWtrdi9EL0hBSHhsOXh1MGsKPt12B452HLP8R7DdAptL3nJ+/s3QMrSP + dM4YfL6YnCFKreP9MhTev00FP9cFDZRwN2fBvklPq/AP/HXAqw9Pjg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:17:45Z" - mac: ENC[AES256_GCM,data:8wLKvXRK/oC0YY6/+28m8scESchRQEduzjwz+t/diOLJFYqCK+Vn0iPyW8bog48Pnpk8TUoSoHg50D5D1DWzuLtDgvFSzk3UBljwnwgd4wmQe8vplAxTR9XALCxNaeGeR+x3DtrmAlK0ogAi0eMfaHVPsKGRbcQ1iO1GeDYUIUA=,iv:ve7apVK94QhszfZ+5cid0L+g+oCj0lbmSBMnypzPb+g=,tag:e1TE8oLYiUHqh032pdE9Gw==,type:str] + lastmodified: "2026-08-26T10:17:49Z" + mac: ENC[AES256_GCM,data:b9/Ype3gv8sptpyiR7gF6LTMWxsB8WO+/Y7GY84o0/adkedVDpxE4z03NECcVHbCXqqOy37wLfj2BKAnFejyOHTbGlRmWkVHsQ0jlekhP9gZhAv0pA/JGVftT4AuM/pL9/Ciha1KyeBHSGLDVON5YE9W5i1E+TCH464jD/OMz0M=,iv:mBcS3TXcrSj5FvuNs6RDEHlxO9qimqokYKZFWhqgacY=,tag:uHhUFzGKoTaXz3n10B1RAg==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/home/apps/kustomization.yaml b/clusters/home/apps/kustomization.yaml index bd48e79..7b39097 100644 --- a/clusters/home/apps/kustomization.yaml +++ b/clusters/home/apps/kustomization.yaml @@ -1,6 +1,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ../../base/apps/vaultwarden - - ../../base/apps/zigbee2mqtt - - ../../base/apps/radicale + - vaultwarden.yaml + - zigbee2mqtt.yaml + - radicale.yaml diff --git a/clusters/home/apps/radicale.yaml b/clusters/home/apps/radicale.yaml new file mode 100644 index 0000000..b2a7cce --- /dev/null +++ b/clusters/home/apps/radicale.yaml @@ -0,0 +1,20 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: radicale + namespace: flux-system +spec: + interval: 10m + sourceRef: + kind: GitRepository + name: flux-system + path: ./clusters/base/apps/radicale + prune: true + wait: true + dependsOn: + - name: namespaces + - name: infra-apps + decryption: + provider: sops + secretRef: + name: sops-age diff --git a/clusters/home/apps/vaultwarden.yaml b/clusters/home/apps/vaultwarden.yaml new file mode 100644 index 0000000..d7923cc --- /dev/null +++ b/clusters/home/apps/vaultwarden.yaml @@ -0,0 +1,20 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: vaultwarden + namespace: flux-system +spec: + interval: 10m + sourceRef: + kind: GitRepository + name: flux-system + path: ./clusters/base/apps/vaultwarden + prune: true + wait: true + dependsOn: + - name: namespaces + - name: infra-apps + decryption: + provider: sops + secretRef: + name: sops-age diff --git a/clusters/home/apps/zigbee2mqtt.yaml b/clusters/home/apps/zigbee2mqtt.yaml new file mode 100644 index 0000000..4647b67 --- /dev/null +++ b/clusters/home/apps/zigbee2mqtt.yaml @@ -0,0 +1,20 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: zigbee2mqtt + namespace: flux-system +spec: + interval: 10m + sourceRef: + kind: GitRepository + name: flux-system + path: ./clusters/base/apps/zigbee2mqtt + prune: true + wait: true + dependsOn: + - name: namespaces + - name: infra-apps + decryption: + provider: sops + secretRef: + name: sops-age diff --git a/clusters/home/infra-apps/cert-manager-issuers.yaml b/clusters/home/infra-apps/cert-manager-issuers.yaml new file mode 100644 index 0000000..1239910 --- /dev/null +++ b/clusters/home/infra-apps/cert-manager-issuers.yaml @@ -0,0 +1,20 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: cert-manager-issuers + namespace: flux-system +spec: + interval: 10m + sourceRef: + kind: GitRepository + name: flux-system + path: ./clusters/base/infra-apps/cert-manager-issuers + prune: true + wait: true + dependsOn: + - name: namespaces + - name: infra + decryption: + provider: sops + secretRef: + name: sops-age diff --git a/clusters/home/infra-apps/kustomization.yaml b/clusters/home/infra-apps/kustomization.yaml index 8cc5c12..25d9aa1 100644 --- a/clusters/home/infra-apps/kustomization.yaml +++ b/clusters/home/infra-apps/kustomization.yaml @@ -1,4 +1,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ../../base/infra-apps/cert-manager-issuers + - cert-manager-issuers.yaml