longhorn.aggtaa.com

clusters/base/apps/markdown-vault-mcp/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: markdown-vault-mcp-secrets
     namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:rwP/zaEgKcTx9MifORlacquSDsBdjlZ8DRxxQXUrx1kmrLqK6dWntWEKI2fx06M5ajaJhQ0W3C9uNNebjwiuhA==,iv:Amod0QmRu8cty3GXNx1PJgMnlywcUm0OPp1HtHK+7x8=,tag:c7cdeW3GuSIhrsIM1sgwlg==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:YAnKLxac4UuDovt4UGHhw1TxVhpEIpcyGJkfSu7hSDda8j+eNhAlT9ViuffW4TAMR4GAVN62yLHclXwNYkpQIA==,iv:4Bt6kNEV35wrJAuFAMNqzPI+GT2ma0XdEOhNw1LmTXE=,tag:xFh6D177ESEGAswr33fcww==,type:str]
 sops:
     age:
         - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5ZFRTdjhHWjFwRjhYV0ZM
-            NHpsSUx3WkwxWEpHSy9DYVdlTzdnZmhaK0dZClBhakhvanBSQWFxOE1XTldNRHdu
-            YWduc25JZkd4UjUzSE5ZZ3ZEZmRHalUKLS0tIDE0QVorQVJRWUkrbVVYRVNDVmox
-            dkVMcUtianRlRVpyMnZyUkI1WGFtU00KP/q+PHNgsy3vqUvmlukO+5axCmFyYJS8
-            AuUWCz+XOfYk0sxhlBWrUJoc8CL1SNg2IeZSVu4Dx2tpohkDKXFelA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhcFByU1pHb05mNmFFQXEv
+            bFFPUzd5Zmd5aGd5UFNJRktTbVlOU29OWEEwCmp4eGpZeFpROFpzTG5oN29DbVRl
+            aEJJMXV1RVZRL0Fya21EUjBuOW5OWlEKLS0tIFM1eWxnK2dyclZiTm1FcERtWWlR
+            Mi9acGFhUlE5dlh1blhWcHdHbzBZLzQKdmQ6h3qk7iIa+nOUAayrNV+E1c18d/dR
+            L7pEwJqdqb8uzSBaUzamJBdvBee0NT47qVWLKLgXBat+eiTBUrkK6g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:20:15Z"
-    mac: ENC[AES256_GCM,data:6/WCEsa6nYxmjBCqCZs6Rm7frarSpK7eJybtkauBwoNjOruuH6pJuIhiI8X2h+e+AYN9fNEEzD/6HS3vHsu92jpLU7bp1mzhvqhek6+ge23502YOy+bl1MaS3SqBPP2wbBbWRFfqP8Hh8uEApUXq0R5CYoX8f4/PW1TrnHvTvCs=,iv:T5ERopywaFlhZ1PaUeFSWYMVzBF7rWnjNU+W//NmhF4=,tag:fItmUZSg0J7qjGokMLNXnQ==,type:str]
+    lastmodified: "2026-08-26T10:20:21Z"
+    mac: ENC[AES256_GCM,data:Gb8Er4ZEfovhI8wwvE9HUyd4nXq28dvDO3QSU+fkwRXEHO5tgx7oKFCMFLXuyCZEW6vl2V3Y3unHlRFVEiMyo++hzsYPMz/aLFXbpyhZRIylVHumhOebzYQHa702wMmyFYO5lmVRhpm1WZ8RSiFELLdXd1oZp0j2Qd7+TMt4rhk=,iv:IU5C1lC8m3nbSZyP7C3tjAmYiEZ66PyBUwn8fgPd57k=,tag:b/UWzP+dlKAMsvc93B6yCw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/mosquitto/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:EFb7f/JregWzZ5zewXstqNnJmBVkXHMEa9Tl0HZ5QaKJgSEOxTmnvmrgyIfF45TyS2GN8xdRTN+9PK7EuXYhi477MrfCCvmOW0tMnYxy1f6CtyvFQCcmL324lt7/g2k6fVZdx/4gvASbvq6+CaXfqcHztHAkOqagSUpo1FuPaeclAZLLdJb6Ieo5xIM63laYpRkL/2rs4iFO0edelVOcL5DeUixnN5lqThekbNE8cmnpR1ZDsDjCc8bKVYoFVQ==,iv:c5hhquiAPuKsj/Tl146ZKaHT65u5lahNnQpyZ946gdI=,tag:bZJ5PQFLvM7p5Ip4zcin8A==,type:str]
+    passwd: ENC[AES256_GCM,data:RCzIQ2VUxlwiCIs7J7XmUAJnjCilnZdIPHY8/9YlrJmEbeykffaAu4rZonyqkg706aGkuN5l2/oB2uQmGSRMWBBi3ZLp8S5a2lqs9RnTmmc0T6HskndjoUa7NLItCf5z+wzgvg8YsoS/U9vVeXW2elvk/0fbKcdjN+FzK08ABjXTVnZgbCLArgQAG3LzZvug4mgRencGJSsEXMAyObfCAmc1aEZ7no3pcaFHI9EugKbZhh5IP8oJ/0UeC8l2hA==,iv:KkzxdAgv3KnGw+kAt0f5tR5mYMONk77n4nBZdbADqog=,tag:w8/DVnZ4wHj7kSf1n8KrQw==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPcXhFVk02bzE1NnVlMkVY
-            b1ZSaFc4bVRsUXVNNitEWGJNWWhzZVpVM1dzCnh2b2c3L0I0VERrTXBjNHYyNTMr
-            QVdMQTJKeGRqbUJBaWt4bllOdVdGUzAKLS0tIE00Zk1hVE5sT0ZPYm85TG9QZUFX
-            OUd0WDBocWFlUStCS0oxSWFVaEx3ZEEKNazEr5WPrQXK6EEsl4+N93G+K7BllCBc
-            wGDuv7KF982ia+mo2EDzmWt3HIubP4arKFpw/EgvBXYMNlMQyY2ATw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXK21EUVhMRjVPdEFYWHVW
+            K2NXR2VnQUhjTkJYNXRpMC9YQ28zMmswSkZNCldZVnpId3grazBrSWxyOFBhMXpr
+            c2QvRmUyWHBuaHhUWTNEd1JRSTFVMDQKLS0tIElHaE5mVWJDVmx0d3BRWlhudXNu
+            c2FIRFQ3bHdUeGRaVkFud2ovL2l5Z1kK5Id0Cq+2G9qhWWl61gKgCDX9/TzZuDK9
+            qNiYZLbbRCCRRIFiou/YYGAeOZOahULRFzp7kpFU+eb2RQ3Lf/49CA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:20:16Z"
-    mac: ENC[AES256_GCM,data:6rs1Jy9h2+3F1TB2ximYr4UxO8RsPLlTpJpO7he1urDZpQQQkJ7VB7eFo5H/97HxCEPxc96YuvknA/5nem/RAGLPsGkbTBCrblgg0/4PO2gqBbgV6ZkVdqB0q6utDOltXdWm0bB/ep9d/INnlBY0RG/bxXBsWivx1b30oeeHI9k=,iv:Htt21AC7RLrtCWFUC7Cqpy1sMnXmMNtbsATY5hKX7n8=,tag:AFVPSbf3oxct06lJwvkiJA==,type:str]
+    lastmodified: "2026-08-26T10:20:22Z"
+    mac: ENC[AES256_GCM,data:ryJEHqt4NWoauhSTIzmEuHGhWnmhHMdSl6+82PK+QET11yM3HeB+P4WNsjAjWfy2/n7AHrknwLDMYYEVr5BEG2iFvyiSuymgink24kY7JeCPUZ0yxZN9GpUeDzSLS/pKhWidaYMJpAc0Dmm107GNQ/rKll/oy7OYz5k27ufiLFs=,iv:0Wl1WY4TAV/DEkCBsCk+2qAqOjNLQwHH56QibrdeXX0=,tag:19juWUmzAwyiaUixJ+fL5Q==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:flB2OY8Dn/8Q28EEt3z1McMtZiDD3SCPBhj+SwSOlKJnwR7PsYEo2DdcZcatf+/x6VOiAaSFbWvy,iv:vOo92RnCnZZK9dLJoiv+w+x0dIwEoIHNIad1ImBuefs=,tag:/6Ddqx/nNS9BUqX6fCvSKg==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:vGH+FCMW4WJJZ/JGvrc/1erK6m9+6tHH/Vl9UsZ2mRayx4N8FZ2umhU7cJYvLf/J69EVwadTbi9MmX5KYZkrdniay5/KEx0ZhSKhUEFleI+N8x5oHvs+i5M8hI8NCWVPEXrfJdJGasVlguiMov1iWX3BKh96Zw==,iv:1phgl1P4TPcUowFTnP+VQZQTyW3987tnMtcU4FeU8Ew=,tag:OgDVRpLdSPd6Ne6H9QCz6A==,type:str]
+    #ENC[AES256_GCM,data:p7K3yTpcx9TMEBnrHJBCLDzkkYBU2bvffvDXtfbn+hZYhhcoIzEhGJhEJbyYNSsk2ygeHyr5Y/88,iv:jUsOYpJUn5hb+rtfV2/zGfcpVLztfc7XwPA33OSr74k=,tag:WCfS+XSFvuawdIcNcNEsHg==,type:comment]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:HJvJMAxwdn01Fw5dBYFmViJ7fxDbA186CaDhRMNlW03H82X5xFTb6UAyhgy6ltkTVU4Pk94kAg0bRhfxQM3/t+5cl99eDb6Ia4paYiyJpAhMd23FUTI9ec1q24FHJhnh6acmujR+H5YNcEW+hzXLTnOoOTDnNg==,iv:MfvMJVp9X40P/kSEmKC+DFTyvNWal1erV7kya3fzo2g=,tag:Zqp2Ezipl5KN+NLqXFjroQ==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKd0h6OE1WRGNFQW43ZUpW
-            aVpVN2xpWXJTaWVyNXJoYTJEaFlSc3I3SVJBCkg5QkVFV3k1TGJUZEhMVHA0OUdU
-            NFhXYlpWS29mbkk5Z2g5VHpmRVBIc1UKLS0tIG9CTXlId0Y5Nit6bVN6anhWMkJ2
-            VnlMUHRydmFTeXpwL2xkd0s0cUp4aE0KXIRVhmDZMYZqUbs1wIE0yqp1hmLa02w1
-            yy7e8N4af8YYsBuxb+Uxy+3VYnu5lOfDV5rVmSMYvjLQesrLNsiuNg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4ZENXVncrOXp1MW9yWU52
+            RXpJRlZiYWVWd0NKSHBDNmt0Sm9qUXZhUndrCnFMeDczMy9BM1dJeS9CenlpcDVl
+            N3A1WnF1S3h5c29GZDFRTUN2KzREYzQKLS0tIGFLNTdlM1pTNWNCYjM4dWZKcXp1
+            Rm5DYjNkTkVXZ0YvdHpYajAvSUgyU00KFUHizWnegcBsUjylO8iogAA5zDYXzjKR
+            Cpr6ujEuqqfismuocg7WxGChl6d0/nVVyXZ3ywNArMHfFOh/TCVsSQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:20:17Z"
-    mac: ENC[AES256_GCM,data:90Rxcg2fa/aws3H5keuOE07hCbIJZBinbB2nKXvNzDwQkh7jClH2nzT51kdQEDxkEV5rySoWAVInWh5Y4bKAAMLloJC21cd5TzTOMUf4JcZBg1oaRFVUg+xIS7GKT5nydKFy9oVVZUFFkyFQDumnmNyuT/tIv3BYOrah/m8F5NY=,iv:wHFKkZ+qBgiybpshn3cRiQsjZ4SxHDj8D1hEwRFMeNM=,tag:pI6A8CG0FXb0oos1R7sQxw==,type:str]
+    lastmodified: "2026-08-26T10:20:23Z"
+    mac: ENC[AES256_GCM,data:NCyhZVHTqyb6TxxzVlNIl3phYTcUjR3wEyWQW8EwRAAjnmbM2iP1LbN9vJYPxU9WT0ZPZFhOLTCuoQTbpbdpk481olwRapCavofFmJHbSFVcLKiglT/GTJ8aPCmCVn8vxsL31Arw1NFj/sPORxqfqj4NvR7TwxhG9tpAbO+K/Yw=,iv:JZ2sCO+oAtwxHE5zfQt8ytzcF/eZOKJyn9nMufDc0i8=,tag:jqwfrwdOKOLZacrhwb1mEg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/zigbee2mqtt/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:wCM4CuZV1yUzFL4ziLvVDMbqf0JPxCx/EeqJQlTogBj7CLNRmNOhty6VhO40KZLbI3ixJeCR0+r/98ureUa9sKumpTBsHXOM94Vyih7sHRswDWl3TYd2y0NfJDDG9MpmMtp5Q9YBCqtj7HFGhcgcbfzYFCauIkFSG9Eo/Ck=,iv:uyiUw5PBThmbI8jm0sVebciXZfr8Z6jhS1pWPLpMbus=,tag:+2T6Og6LBQ83q5PWjr4C6A==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:QaX7IVfDTPvl+eFIDPZC2fLlURFZ9qTqMSNr6Qah8eDRMxEUVOgO5TI9YJS9HQEU5vPUMIhJqugs0QHxEuOwi0bUmTyjSHe93nK+hWqaw+kc4eOf7zbLzur7A8ndoEwx9MpcCprrccPq+R2jL1zaGoAvMtPOFAmdzfeA5c8=,iv:gvcEfM2AgkOc0mXMoxyyVjolQg3VVPCqBmny7CO5zrg=,tag:BO+VD9/TLGMt671XI+vmDQ==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVUjVhcjZaVjgzVG54cEtB
-            cjhTRTV5MDE4VHQyTlJuMnhlUUNMTXpVRm1nCktIZXR4RVZoSHhjYUZnSURrK3J2
-            TURZSnhTOU9ZR1pJNzMxMlltdzJWYmMKLS0tIGZLbDlPdUhHM0lRTFJjTGx2eE9J
-            bklvQzNpaUtNcVFQU3FWdWc5NFNDcmsKSnkFX6PqSkNvqbsx2bCzBvXGa9jK1wzB
-            Ebww3fbg7Reho1M4FwF7d/sVcwjA5C3abbRCige7ezqtcAy353+Mlw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQOHVXdUtqbkgyOWkxZy9Y
+            OXI1OVdDQTFRL1RhQW14U0FZLzJqVU5VTFVFCnNQYnFHL3hrWHJSa3dHM1Z4blN1
+            VkZaUnlQOCtjTjFhVXZvemorNFBEOHcKLS0tIDlDM0prdzQ3ejMxWlZldWNxWERI
+            YTFORTcxc3g5c0pPYktuR1RHam11M00KOu5w9pu9Vy/RyAJ8eGw7HOiiCd84CBbL
+            PKfL8OtugYb28R5IvJ6PsvfFR2TAz0vuFG0gGl5FiNbs21MZ5TkMhw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:20:18Z"
-    mac: ENC[AES256_GCM,data:DwvydHBM1Xbb8c9IArjf2O5Iu4E5ggiahnKzW/GJ4CNLLljnCmzF10GCjIA4+MXvnbxenHoKY+WZkHGck79JkVqAXGoRljPaYOiKjrx2dFarZJUr8tC1y9NBPrcbn2+BRIowXUrxwLIXTvTGlio0myTbNrS4AnatBhgXrTy49w8=,iv:uZwcaZqVgMj0wKQgTjft/ubSdFP1tE9AQpKJoxOlrCw=,tag:9hd4l6ZqfJ50A8WNOWlUIA==,type:str]
+    lastmodified: "2026-08-26T10:20:24Z"
+    mac: ENC[AES256_GCM,data:9cod++im7wGvOR1mo2u0YXrcol7inftTzAUUIX4TA7csp/zQ+YEu4eKz46mb0YWCHE+o1ojgJWee6BW1U5pYwjoWcnvF7T4rr4SwdmgW6Zy570K010hY/Ep60j3DoR6Tk33JBCJswNWeSV/fyGcLGFaA4PtP3xchccEs7E83BpM=,iv:oY7cTDXJ0miAsPcxog5niWZcMmo2pnaJYqZo2IVG+wo=,tag:VBktPj2CxAflcGSPdjppLw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/infra/longhorn/longhorn-system/ingress.yaml

@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: longhorn
+  namespace: longhorn-system
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: auth-authelia@kubernetescrd
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: longhorn.aggtaa.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: longhorn-frontend
+                port:
+                  number: 80
+  tls:
+    - secretName: longhorn-tls
+      hosts:
+        - longhorn.aggtaa.com

clusters/base/infra/longhorn/longhorn-system/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - helmrepository.yaml
   - helmrelease.yaml
+  - ingress.yaml