immich
This commit is contained in:
azykov@mail.ru
File diff suppressed because one or more lines are too long
@@ -4,21 +4,21 @@ metadata:
|
||||
name: davical-secrets
|
||||
namespace: pim
|
||||
stringData:
|
||||
PGSQL_ROOT_PASS: ENC[AES256_GCM,data:WDcjTW2EtFHpgl9FxJR5tZmQu/kvGBG8FY5nilph/ijvbfDNARtLr95vwen9jo4p,iv:Srnil7n8/UWaWXzjqey/p2ZHgAQZpaskEMT3ZVev6Rk=,tag:i8v517gwteIE0fIMZd/Z9w==,type:str]
|
||||
PASSDAVDB: ENC[AES256_GCM,data:Bp+462uDEUT+f075QBKCj1CBcWUY4InkTKN1hIPHy7XLHoyRNznoZmuOzFzCfsN7,iv:pPErSQQ1aRUS0Bi1q2/DawfUwE9Top/RwG9cuiLDLlI=,tag:djQqp6oWud3H9TTdjXxl9g==,type:str]
|
||||
ADMINDAVICALPASS: ENC[AES256_GCM,data:XLViuT5Zl/EAO5X9GhUMHS7DTibomRrZ1y2lprx9iso=,iv:lnmllMsgyGXE7iTNEBZ8m1xNVAkmYbOH5G9uv/o7FmI=,tag:FDZzJajLey8eTr6jHBVPbQ==,type:str]
|
||||
PGSQL_ROOT_PASS: ENC[AES256_GCM,data:Snmm6h3ZE83eek/6XXgGOouQMXiEH+UfJJSH1gyxN9Vp2pF+Uaix4z6dH0kCTJQl,iv:XEzn2zxCjeV87DNoMyqmK7bDws8nHjQziwDOXEF57lo=,tag:AH1wAD6++Qqb6nLPnltfPw==,type:str]
|
||||
PASSDAVDB: ENC[AES256_GCM,data:agre6KaJifEwUOuUQfKs1aVhUjQenmX7f3oZztNnsuZbwXPdGcO5EX9J5sxs19I+,iv:7PDkYQSDdOEFkj8M4LlV4owfy40mDWEgMuf9kvxTUDc=,tag:NKUTqiCsn3Xej03PG1ZZYg==,type:str]
|
||||
ADMINDAVICALPASS: ENC[AES256_GCM,data:XJX6XHLKNvXG/wFBZ4Nzzi3OKvao1Vi/YuBt5AvQKEM=,iv:XO0uBtsCUoFLRQ3vv5UKhBaB47mn8gkHn9ECuVAWtoc=,tag:/uV+KJnJr4bwdrXx8ACIfg==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnUk1JVXJhbEZONmhZZlhE
|
||||
dGZLN3I1RWpKeVlqUlprbFFFOURNR1FobW5JClBhUnlmRHoyYkFEbVRnWlhMTmxV
|
||||
dXhyZS9FRjIwenlhTmZFTXlRc04wcTQKLS0tIG8zY0lHN1plMk1nNDlyV2QyU1M3
|
||||
b3UycEhkQ2Z2UHRrNFBUVTdEV3FERzAKKP7vSAf2cAWK0mOBjr7bhjDRuUOew5Id
|
||||
SkGE6Lt5/zdY1VIUspljRXSOMI7akF+7ELyTCPz6WQrwPh5yvrJyxA==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVWJNdTN0eEhORnBwOWVS
|
||||
L1lSVElDZklHamM4SXd6VUg2WjFDbDFKSUV3CktVTGxpbUxQRkcyU3pha2p3VlJ0
|
||||
SEh2bkF5alBycGl6cm02Syt1Z2hxbHMKLS0tIHZ3bjJKcmpUQ2tDTHpGcWxCb1Jt
|
||||
aVFuSEliNjVSNjVmZG00WXJRODU0RzgKe+uwi2Qhj0VFmy6dLJexJ0mYE1elRCwd
|
||||
OZMY5AASicpGjQejyzJpJpllvyxCPqQOqyTXJix9Z/PxsU7wnSAOlQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:35Z"
|
||||
mac: ENC[AES256_GCM,data:0x4PZkZKB+h2yw2KwKBtQO3JzifqhZfiOxey1nVJbKhKgnp/dxmHnkO+E8ZeaU1cmcMBkzre26GR5lWcq5Ut9qhQlBvQ27eWdRzVUcP8yel7kowPjxaRCajrfPaSP5/YFlYh18hab6X1W/UER4hh6BlVv23xugGOqMBUHl+XxWU=,iv:dtp/C/wiizeKBVsGSN/SZfoPdBo5csUdZE6ackoI8Pk=,tag:ITMWSxZCagKzQ5NAsy363A==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:43Z"
|
||||
mac: ENC[AES256_GCM,data:eLuZMTzTe9qQEAZY6DCEoAXaLV/qXDGiaLQra5bQqg4cXS0W5reEKibhLPsB2mR73So4KXP8NI6UNTePIw0Q/VOBjT/Kf3tbe12kaOpe6upBNsE49cgNG9xR353v2AKDzvsLk+r6krIV203tpr7/Lcedc4ewkWsQqJi1a3Goe7I=,iv:LyrLz1uP4ekDo1lE3Edm+Ppp3Rqg9EtdkPFIiCCmnyc=,tag:jZBTURgW6NvL92L4uAjxLQ==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -0,0 +1,50 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: immich-ml
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 30m
|
||||
chartRef:
|
||||
kind: OCIRepository
|
||||
name: immich
|
||||
driftDetection:
|
||||
mode: enabled
|
||||
values:
|
||||
controllers:
|
||||
ml:
|
||||
containers:
|
||||
app:
|
||||
# CPU-only: hardware-accelerated tags (-openvino, -cuda, etc)
|
||||
# need specific host devices (e.g. /dev/dri) that aren't set up
|
||||
# on these nodes. Switch tags later if that changes.
|
||||
image:
|
||||
repository: ghcr.io/immich-app/immich-machine-learning
|
||||
tag: release
|
||||
env:
|
||||
TZ: Europe/Moscow
|
||||
resources:
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
memory: 4Gi
|
||||
|
||||
service:
|
||||
app:
|
||||
controller: ml
|
||||
ports:
|
||||
http:
|
||||
port: 3003
|
||||
|
||||
persistence:
|
||||
# caches downloaded ML models so they survive pod restarts instead of
|
||||
# re-downloading (a few hundred MB) every time.
|
||||
cache:
|
||||
type: persistentVolumeClaim
|
||||
accessMode: ReadWriteOnce
|
||||
size: 10Gi
|
||||
storageClass: longhorn-single-replica
|
||||
retain: true
|
||||
globalMounts:
|
||||
- path: /cache
|
||||
@@ -0,0 +1,65 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: immich-postgres
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 30m
|
||||
chartRef:
|
||||
kind: OCIRepository
|
||||
name: immich
|
||||
driftDetection:
|
||||
mode: enabled
|
||||
values:
|
||||
controllers:
|
||||
postgres:
|
||||
containers:
|
||||
app:
|
||||
# immich requires this specific image - it bundles the
|
||||
# vectorchord/pgvecto.rs extensions immich's DB schema depends
|
||||
# on; a plain postgres image will not work.
|
||||
image:
|
||||
repository: ghcr.io/immich-app/postgres
|
||||
tag: 14-vectorchord0.4.3-pgvectors0.2.0
|
||||
env:
|
||||
TZ: Europe/Moscow
|
||||
POSTGRES_USER: postgres
|
||||
POSTGRES_DB: immich
|
||||
POSTGRES_INITDB_ARGS: "--data-checksums"
|
||||
POSTGRES_PASSWORD:
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: immich-secrets
|
||||
key: DB_PASSWORD
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
memory: 2Gi
|
||||
|
||||
service:
|
||||
app:
|
||||
controller: postgres
|
||||
ports:
|
||||
postgres:
|
||||
port: 5432
|
||||
|
||||
persistence:
|
||||
data:
|
||||
type: persistentVolumeClaim
|
||||
accessMode: ReadWriteOnce
|
||||
size: 10Gi
|
||||
storageClass: longhorn
|
||||
retain: true
|
||||
globalMounts:
|
||||
- path: /var/lib/postgresql/data
|
||||
# postgres' parallel query workers need real shared memory, not the
|
||||
# default 64Mi container tmpfs - matches shm_size: 128mb in the
|
||||
# original docker-compose.
|
||||
dshm:
|
||||
type: emptyDir
|
||||
medium: Memory
|
||||
sizeLimit: 128Mi
|
||||
globalMounts:
|
||||
- path: /dev/shm
|
||||
@@ -0,0 +1,33 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: immich-redis
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 30m
|
||||
chartRef:
|
||||
kind: OCIRepository
|
||||
name: immich
|
||||
driftDetection:
|
||||
mode: enabled
|
||||
values:
|
||||
controllers:
|
||||
redis:
|
||||
containers:
|
||||
app:
|
||||
image:
|
||||
repository: docker.io/valkey/valkey
|
||||
tag: "9"
|
||||
resources:
|
||||
requests:
|
||||
cpu: 20m
|
||||
memory: 32Mi
|
||||
limits:
|
||||
memory: 256Mi
|
||||
|
||||
service:
|
||||
app:
|
||||
controller: redis
|
||||
ports:
|
||||
redis:
|
||||
port: 6379
|
||||
@@ -0,0 +1,82 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: immich-server
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 30m
|
||||
chartRef:
|
||||
kind: OCIRepository
|
||||
name: immich
|
||||
driftDetection:
|
||||
mode: enabled
|
||||
values:
|
||||
controllers:
|
||||
server:
|
||||
containers:
|
||||
app:
|
||||
image:
|
||||
repository: ghcr.io/immich-app/immich-server
|
||||
tag: release
|
||||
env:
|
||||
TZ: Europe/Moscow
|
||||
DB_HOSTNAME: immich-postgres
|
||||
DB_PORT: "5432"
|
||||
DB_USERNAME: postgres
|
||||
DB_DATABASE_NAME: immich
|
||||
DB_PASSWORD:
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: immich-secrets
|
||||
key: DB_PASSWORD
|
||||
REDIS_HOSTNAME: immich-redis
|
||||
REDIS_PORT: "6379"
|
||||
IMMICH_MACHINE_LEARNING_URL: http://immich-ml:3003
|
||||
probes:
|
||||
liveness:
|
||||
enabled: true
|
||||
readiness:
|
||||
enabled: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
memory: 4Gi
|
||||
|
||||
service:
|
||||
app:
|
||||
controller: server
|
||||
ports:
|
||||
http:
|
||||
port: 2283
|
||||
|
||||
ingress:
|
||||
app:
|
||||
className: traefik
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
hosts:
|
||||
- host: photo.aggtaa.com
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
service:
|
||||
identifier: app
|
||||
port: http
|
||||
tls:
|
||||
- secretName: immich-tls
|
||||
hosts:
|
||||
- photo.aggtaa.com
|
||||
|
||||
persistence:
|
||||
# brand new, dedicated library - deliberately not reusing the old
|
||||
# docker-compose install's NAS data, and not nfs-photo either.
|
||||
library:
|
||||
type: persistentVolumeClaim
|
||||
accessMode: ReadWriteOnce
|
||||
size: 100Gi
|
||||
storageClass: longhorn-single-replica
|
||||
retain: true
|
||||
globalMounts:
|
||||
- path: /data
|
||||
@@ -0,0 +1,10 @@
|
||||
apiVersion: source.toolkit.fluxcd.io/v1
|
||||
kind: OCIRepository
|
||||
metadata:
|
||||
name: immich
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 1h
|
||||
url: oci://ghcr.io/bjw-s-labs/helm/app-template
|
||||
ref:
|
||||
tag: "5.0.1"
|
||||
@@ -0,0 +1,9 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- helmrepository.yaml
|
||||
- secret.enc.yaml
|
||||
- helmrelease-postgres.yaml
|
||||
- helmrelease-redis.yaml
|
||||
- helmrelease-ml.yaml
|
||||
- helmrelease-server.yaml
|
||||
@@ -0,0 +1,22 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: immich-secrets
|
||||
namespace: photo
|
||||
stringData:
|
||||
DB_PASSWORD: ENC[AES256_GCM,data:7Pzt0sgMCbesVzcVNX63Hi8FmmR0WIlS1DeWhYn4EKA=,iv:Op9riDZatzmYYuQpzwfJ5J+rCTyzVK1WsLFECXQKwAY=,tag:0tI1N8eu70om9GEU109f5w==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5TTlvZVo0NGV6RitxWC9w
|
||||
d1VoMWRJQkdpekY0QzEwTHprQkl6cURTL2o0Cm8wRnJYNVFMWTIxaFpZd0MzMm5w
|
||||
NEw1QUpzUjBrSG5kZ25ZMVl2MVVFU2MKLS0tIGMzc3ZnNUwxV3NOaGRKajUyVnI5
|
||||
dEpEQTd0RVh4RGdFRnluUXZmV1k0T2sKJPSsUQPrKpUKVUeSkfYGvaPjvbaZl+UI
|
||||
UNBx6B5oLbiIaB2gRjEVSx1ppC+n1L+LYszGvFvRTJuLLCGXcEaCmA==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:44Z"
|
||||
mac: ENC[AES256_GCM,data:+bwvNRkXRw+cneVf+CLAxjGFHtnvfj6O0NZxSxcRqcWUSOvLcL+4Aevrun0vCk+49l9TED/U2TbpECVIH3f576UK4Ge0EP9enPsNBJezJURsTdCeWWXJHs/R+E8/agUDBU4zXGo9hmABu687V5e7c8U2ZCm1o7UdO4SdvUukSDM=,iv:275XCj4coFIxhIlmDmlxoYXIvnx5Z79oDEi3mtupXTk=,tag:o1tEkjNa3vfRVZTuxICMQw==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
@@ -4,21 +4,21 @@ metadata:
|
||||
name: markdown-vault-mcp-secrets
|
||||
namespace: mcp
|
||||
stringData:
|
||||
BEARER_TOKEN: ENC[AES256_GCM,data:vuko3RNaepAnSy+pgcb/FlSHlybr2LFCWBOdceiRFpFAaQNmElEEPaqdaVJU5jsTN/7uOq1cL6Arg8hUsrSn/A==,iv:4rQmPd2PBHeC3zU+x4a46euLI0T8p9TMAf6u6AAdCLg=,tag:uBd++tGTBQkWFm+x0/daqQ==,type:str]
|
||||
OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:2GZeGHdM3J3OcMOroDN2/Oz8DLcYuHWJ7UDCLiIXNWx4a4IwJL8PgH5hW/2v/XwaF3/8e8IMPoeoXVodsNKJqQ==,iv:knrWs2Dr6Gc2hYkHlxY4s7kpdfq6w8w38e1VSZWuigM=,tag:vtx7yt3wRjUsa820zdl6bA==,type:str]
|
||||
OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:3pkP5Ds85wVhQe9upEknsVfWRGi6c+ikAhgSRUu8viP48K2P+BGs0reGfgpJif3E+ItsfKJoeeHfAjWpfRljsg==,iv:JG75Fx5ohwR/LVAkMzEBw4WWv2ohuQnYUuS4RkJL0BE=,tag:QUncosi4cV7326lpsvZfew==,type:str]
|
||||
BEARER_TOKEN: ENC[AES256_GCM,data:6kWzb6qyDtbSznDRSnwb4EeC8x+4D64QF4D6Zb/f0dmwPIJs5jWv3qIl6hEtyq1kzmkNv4aiqkSB+uVQ3Uyv0w==,iv:zeFOWj1CY+k2VA5VH5Msro63sChoPIlRAa2+1fZj2cw=,tag:d/AGfdGatL1dC+Ia4WHKOQ==,type:str]
|
||||
OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:iWahoE3GUca+bb5lLhp/TyIYgIn9davvpKmPkp+9BtvRi/kyBdEwpQzbYlQ7A+Vn3yT+0Vr34sWW3EcvN/kAiQ==,iv:v/48XL8zBzJDfO6ntUBEhiUxhintludda9jb7bTNHA8=,tag:pyT1hKJs504GmTLSIn6cwg==,type:str]
|
||||
OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:UDcgkrEn08K4iPh088/la1EiY4UiOavFWhYMduf0xNd6sfKAeJqL6ufM7eE5G7D78SlGUL2sWzHb7PNJ0nRY/A==,iv:KQLQxwMitHxKidtUyHfVgmZIFC96V0dqqETEjlp1Duw=,tag:jefp4bL4OmqOYS2m3Zp0sA==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwUEpRTjEyUEh3NGJsbUVQ
|
||||
dTlUdUUwdjVTNnk3QXlRSTB4RnJJS2RPUURBCjl2dVNRaFJQclpISzlyTEMvdjBJ
|
||||
UzBITkM0N2lvNVdVMzF5YVdUNDVhUE0KLS0tIGZMTi9jWThuNzNaaDJZSTRVWkxn
|
||||
aDFsU2FrT2ZTVng0Zm91ZmhyWGR3KzAKHlBOG+o5EdTNMPgRU5nQNsMUniNua+8b
|
||||
RUp8lYB8bIAmQFMfoa5G+axUpVgrvhMcWdmFmsdLVdIrpOr59mm89w==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOM1l2cFpzaUkzY2lMY2Ft
|
||||
ZGtNZkZGZzdqWGFyb2tRR0FNRmE3Tmo1V0FVCmRVcEM5MWV3NWVKbldPMUQ1dS9Z
|
||||
bHdJbVFGN1lBeTJyRitENUhrenBKVjQKLS0tIG14YzVvLzhwN3EwQjhEVzA0dnhx
|
||||
SXIxWUthKzVqK0M4UXY1czkzbGVzd2cKf//DwDlAjyhIlHcHAPPimO3K+2CWF33c
|
||||
MASAMz+lCAgPj03q+Hbq7YnknH34KspzOnGCo9RgahcHGbladFfO0A==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:35Z"
|
||||
mac: ENC[AES256_GCM,data:pagUJrLPwKiRxa1IOqP26jWDdPaWohk0xUNCSq5ZlcbsFR+sZ7ENa//N4C8LCniGU34BSK3bUq5F5gwnZhFQb5CCnYkEVX3nIFvkXO3INY7l75BVGkQ1UJCNCYW3JPxMUIbAHP3zJnqhCFQjlwNADFuXzlqhi1gdTVxAgzCjHjs=,iv:RwWW9SvLOvUB5Sx2sm44UKeYQtqOqjhsWWs+R251C2I=,tag:O649ckRslfYES1N4uPXbxw==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:45Z"
|
||||
mac: ENC[AES256_GCM,data:wtCnG17FfOqGqPxLW0cbNY1COm0IBvxUcmdlj64WkOwd7NbdQ/H4BOLFPJMJb45O1+XJAFcZyB54U84hT005FhCrXWyweUfsMrxtkqa6ZlymuxNdxCwHSeN2Py4BHHNdeRAyfcdW9+P0IkjFF95ed1Aa9x+Zqr4z9UOJgG/9LdQ=,iv:vRp9HnQihMYtUj05FkccM/j3Mg9OTbP2ShIzuOzwDnA=,tag:tmKJkt/b0GcGak5A75NGzA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,19 +4,19 @@ metadata:
|
||||
name: mosquitto-passwd
|
||||
namespace: mqtt
|
||||
stringData:
|
||||
passwd: ENC[AES256_GCM,data:a0yetbNB9n5ExQQK6131bjkB0oP20EvUNg+4+yHW/sMLRKfya0WtB5RhUvuZOsd93KIf9fBKWsKbLs44ekyQsY+u8oOIb1VUh9Wpx/1RJs14ZbviRpNiVdYGfV/5CDregPdMNIMtkBjgbTZWjTD4NmbKFVNjakw4X+eO0Ukyqt9QHl1xDgMUznboElHkFa/1rr1WEOlmXmxW70hU/Z8kev5dRJnRj1wPrs40VA+v5CHcSv9q68CQXoFvoa2hcQ==,iv:r3t/W6VDAidnm4Mdxt+CQPATCdLAYwIRmfc8IVPgOXI=,tag:oXALowjRRcOomv12jC7v/A==,type:str]
|
||||
passwd: ENC[AES256_GCM,data:SK64d6ZskCyI8Jv7+V5TsybQi3GEn+iYkbMsZeOXc9QcOqE6DHkZDIZueAEhqE5PmhQYln4tw9pACHgptaPhmURJrwkzvFWvsu7Yug3QVwCz7UHqbz0k/lP8GWOFGwwOvFpgTFhVBZBYaT+mhi1F51gjUKLdntoa5tyZXL5t8LV3KlolcliOtg8BsMIpQghBbGJD2UBRcLbIQuKLPgzunuya/hl+q3P0gKHEaIOfQOAeAuDelxDOizgdundAow==,iv:cbdk3htdVYxUxPA3XoWDsg76YnPkQm1yJnST02nbcts=,tag:mvYTdi0HM7XwB3hcrhDX5A==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrVXpBSWJkSXFhVVlSemln
|
||||
bHVGelVoVTV4UVhobnNIelVxc2JDeTBkM0Y0CmMxRUhKZFhPNXlNbmh3TThYNWQw
|
||||
bDB0UTdMNkxhQ2s5NWs2RlBDQVo4bzAKLS0tIENpZVZpSWxkRjJSSDdkVVIvamRD
|
||||
WDFrQkM0UXFrS2lmL2xrMkdBcXpVQzgKbYdAW+VIQECa0NEf6kegoXtUzZECV6XM
|
||||
Mzk2iYvkOyWoN+kyRU43hC72IzK08DPU8RpRPpIFFfjYlHKUlKuBXA==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPaG5tSVp5c3V1K2FQTW9D
|
||||
Yk9IbnBFK0N2Y2l0b25INWRPSy9RR0IrdmhRClBlcnN6bUVDUlZCQ2UwMHlhamZN
|
||||
UkxjcllqWWVhcjVTNEVVb210V3A0YzgKLS0tIGFFR2IvbEdLRGFrWVdlbGh1aVdE
|
||||
WXF1bXBOeDJxSXVLNXJXTFVqa1BjMFUKEt5WIFdKeWbGLmI5d1u+NDYCpPm4r1tA
|
||||
f3Fbed6zMgZlfFoaWh11bmnXZNmXevHA/+8n9Qj5A/rzHxG20LCOBg==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:36Z"
|
||||
mac: ENC[AES256_GCM,data:ZfP/c9cb8sVtgmqEIVSr6v437RIXMODdbbD1eC+1Hs/HUddbTMLKdgYjhdQGuU+lkujNc5ye7YK//tFT1WoBDzSCrL2w4I5b0/r0DD4hMaCXu8rd5mj/5pr7VWM0pZo2qfSiuyyMRCCXe9BK8uTMV0YOOx9fizUd5uosBQjurCs=,iv:cSmG2gtkNXpld28Ke4lQ4VLcu3DlonVyVtCr3Thq0/A=,tag:f36JCnSj4gXLOVXrwqaiww==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:45Z"
|
||||
mac: ENC[AES256_GCM,data:CHrnXuYPDncyy0pdEUtMPVohJlbdzOHgBcCWFV1q5shMpR72llCSrEPpWuORELZQkeDucjGgvVAlA082H9v5qHy7isji2Z7M/sTaZTGGePUIsPOtYY+kMiKGuPTXIYJKIDrnlJapa/YcfGgdS/d2KGBm+8a+X7NDI7iUqUEb2oE=,iv:6S/6T36Mbr103Meg0zWHVIT9KBm0ecMDch062cEpmwg=,tag:IRRLRDg4Pu9kQKqZPc9brA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,20 +4,20 @@ metadata:
|
||||
name: vaultwarden-secrets
|
||||
namespace: vaultwarden
|
||||
stringData:
|
||||
#ENC[AES256_GCM,data:TOJlEEzTx2BJH3Unw5Z9evuAv4rJTzdaihTVy1FPtSFmFo8VSMIcKkcb4D/veGZz4dXIq4nR2s6J,iv:u0hAryIuyqnvAWCawgPWCzNlRNcLFbJfASNkdYcHXQw=,tag:JmmuHintOMFFjCM3IxWMDw==,type:comment]
|
||||
ADMIN_TOKEN: ENC[AES256_GCM,data:zRnyCbqHTqjbvj8HlwYfj4+Vmq+8C04ivSDfYkoOGkUYLMKhMbF1IlMoBAY2yYA4ESbnAytVHdHXmhMGa81QlyzsLaYXUncVBbUsV+Cp3w8/Wybc7OdnLRH6VOSZUnQ7x0sarut03hkMmNl3piImBiPofi/Bdw==,iv:inABwESPKyJPDWpKjVapdf1J8VV6k5SwF36VeKcwamI=,tag:YTSAZKnYNuv8LOAb2Z/D+g==,type:str]
|
||||
#ENC[AES256_GCM,data:rfU8h/pq/vwPZ+03ME6JNdzoj2MEuaVTLVS5LLWgxEXkV+jJju1h/a2xxvyEH6xBgtzy/OVSkbHK,iv:T3eQiK2bKNTwdT+3DjsMWCXc1//xLdZ3v3qbpvy2m2Y=,tag:kWMjPVX1v86xgR4d1MkXWQ==,type:comment]
|
||||
ADMIN_TOKEN: ENC[AES256_GCM,data:Bz/8MdtbxlnzkWC5lH3jtC515hGeoHR48TGuejsTAlMGaXk5G5+VCSs+6oGKdv0EyWeWSOHjKlalfC/2agstoVNbYziWnN0wcGZ8l4PRu3i+wtOd64Ydf3nyjOGRWzQNX0+lb1YwEsjzdHpU0qq2XGTfXzOfCw==,iv:tdIZyLby6EjtEWhBxREZcHo44+nXlzY5WmPzqPly5NM=,tag:Ko0jsJeZwLAz+jbSsLj/XA==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmT2w5V2taTndmMTgvMzh4
|
||||
MXVwVW5HWHlFeDA2cUpKV2dNMEJURloxYUNjCkhoSFNOVzRpanUyTnBRT2cyTkRB
|
||||
ZEp1WXdkZ0xEVXVXNnVPbUtYYTE2OHcKLS0tIDF3ZEpEbVRxNy9VNGdNWkJWQmJS
|
||||
U3JWZHZpZXdId3hITkc0eU82Wi9pTXcKVR6qDQV9itXPXVoS+IbcJtQ2Uq6zEVsV
|
||||
uAnTpFxv5Pm1URpBmkcvskYOTnigCIpl5mrRvrKUANGVQwfa9IcJIQ==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQkkzeGxEMEw2WEExU0tM
|
||||
ZnJLbCtLOGZRQWhOMXhTTVFrQkFuNFBRZlI0CjJ5b2FMSnUxVXI1NWI0RStOQmpx
|
||||
eGNqT0RMbUtWU0wrTWNtaGRNdC9ieGsKLS0tIEl6SGNkZFJkdXJNa0EwdSt1TDVS
|
||||
eFk3Q0pUZ25hYTVTNXZYeUsyMU5pcFEKb+us2keyKcwUx5oy3wIsujscYiA3hGgw
|
||||
vqu/cf4eypT6Ju3/6WmJuSX5FjexzenYPTbOI7QyRYtN7bc4G8WQAw==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:37Z"
|
||||
mac: ENC[AES256_GCM,data:Gz5vhQq9E1vI6nljJ+9HkS+njCjl9CaaTvOFS3oQy53fcGhekrslS3zZ9QL27XqpnuolupObT2N2qFem0VJCovBGILOaF5Vip9DZbtRBKi762a2l8xvzj/Tm4ZxqoG9eXGe9+sKNVznkaVduLP4lxsCVRbToPgHpMN77+DouwAY=,iv:4CEKGXrOQUS8d2Z4p87nyfbKm3Y1SqfOcG94mrtXSus=,tag:YO73BhxGhbFyVn3zkMEhKw==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:46Z"
|
||||
mac: ENC[AES256_GCM,data:aos1VAzIQBorTRhTmF2lIYNwNYsc2+bljeKzt8BIHCFdR9TiecZaEfEzVi8z/Sdv68ye9m7xR7odjN6elCmQsLrCWWfjWqeHQQVfi2DbStCRX3QAMfbjCO1r84pZWGGN7fdfKCOcmzP5peDjdhJBc6fCyxiA4FAE/tnIdOwloTQ=,iv:Qvz/HpogGNLMGoV9ohdy0RsH/Cn4TTwr+eedmLbTTFo=,tag:kNpBeQkD59H+/NjSfwQWLA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,20 +4,20 @@ metadata:
|
||||
name: webdav-secrets
|
||||
namespace: webdav
|
||||
stringData:
|
||||
WEBDAV_USERNAME: ENC[AES256_GCM,data:hhcWsos=,iv:UcfZ2fNoGSF+dR/w24rjuyp6tDlz+m4kHIUYihw/DCE=,tag:2uz6OfCEL8/u4/rNHdj8xg==,type:str]
|
||||
WEBDAV_PASSWORD: ENC[AES256_GCM,data:5vnIbAIWw46GT4VhdKmFne6gWSj2LRG9zPxIe9cDX9BlL++xLrrMmWpxI6zTBdxQ,iv:EQJF5aXWC6dMd3cSfSUPEwWLlnPSj+923ESxxZRsX+o=,tag:YzlkV5UeaReoaGhPF/v0qA==,type:str]
|
||||
WEBDAV_USERNAME: ENC[AES256_GCM,data:QtaIzcw=,iv:7N9iscatzvJXIebiYlExngGvL4Qf03FjsVCS0pJj3pY=,tag:pQKAIdqtoNgKNOy2iYqdrA==,type:str]
|
||||
WEBDAV_PASSWORD: ENC[AES256_GCM,data:ljhKLIbM9+uV7RQPGmzeYctlvB/OliWnTQJgIj2UuWC+juc7N0jd21MbCRShgnq3,iv:kbT0D9TYnpsnraZY4ynJP7CSysUkWfCicya+bxxqf3E=,tag:LZp+/pBxIa7ijkc1aVm66g==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBudGQrU3dGb042aUtaQ25Z
|
||||
emNhY1FSWHppZ2FqOGYvWHBpYktDRzhOdDBvCmswWUJtclEzdkgrcDlET3ZXWFJx
|
||||
N0RxUHVEUlJXYlB2OTArZXhlSmJOUjQKLS0tIE9JRWxHT1lsTEczRWp3eVlxTG1F
|
||||
MHU0ZmcweGxKSms5L3ZnU2loNlpRU2sKZPRWWN7xpAgnWTCdoxAXHILoxz4OjJ6Q
|
||||
iRYrdJjOmJFgPVH39Pggr3oBwDtschyz0wwrUIr8ZDCQgFud3t/9DA==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBicVpFRlRCL1JtaGw2NldB
|
||||
eTg1L3gvZ29wdk1aRVFxUGY2Y0tFYTMwU0NZCmM4VEFXK2tZL3FnNjk1Uzhudmw1
|
||||
RGdhUzRjVWl6eWozR1dzbGNvaWVtUGcKLS0tIEJpTWF2bU93My9VazNZWThTMXVU
|
||||
REQ5MVZjYlc4cWtXaUlyV0Q0MmoxYzgKREQ/Pq3ysir1FmafeoCTTjA0ol7TdeAy
|
||||
rhLjuR+baNZXEU0FP7hcm2q/UmcH412tEFqQlDlCfSe+/DHhfKRGrQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:38Z"
|
||||
mac: ENC[AES256_GCM,data:pIvd3Ms3G/WVwOieLRMAzHX10rENORRM59mptHozvWfBvFWrwvKBXR4b1cWMmh89aKfJT8dx5XYdPXqpc5DUky6hNxgVB1Rz9n+llK2vpW/sS0IKfGdJUxih2e89oUCGgJpN7pb46Vwl9BbJ3doLeogZtxjcDnRNi6WW37Mt3+8=,iv:IqHuIAVAOa4xVjmhC9qVISmdgxO9+Yxm/N78FD7H2v8=,tag:oQ/eClwpWdv4c60vdXrTcQ==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:47Z"
|
||||
mac: ENC[AES256_GCM,data:XrlGWXa+s7IWEzL1P0Ve2IHDXWc5Fbpx/OzrfroUgcXCVOIZs0dwslsyR08zeo8kTukTfAoGsds4FJtqoNLQ68mzDiipDU2yksza767MXGfdrUNxyEfW3s0p5vJiBr1d1Vkb9k2l9e7zU59x018q+8sA4e6sBiaYcJvYX0nPP3E=,iv:erucFEVH5lo1/4nwBtRkGTTVZ8rNLW69hiWluPE0WEg=,tag:f79y2+AZydahk3d0RB+sNQ==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,19 +4,19 @@ metadata:
|
||||
name: zigbee2mqtt-secrets
|
||||
namespace: zigbee2mqtt
|
||||
stringData:
|
||||
secret.yaml: ENC[AES256_GCM,data:1Bp5poyu4nQxKudOFPT1ceQUXOokIdas6zbMHoxb+u4fFfLu6jy8KG+hroGLTH2g2AUGF/dPLoUOC8wT5Fg8Ml2YnrZTtqBpBkbEQiSJ/BNF9H9mQi5U7VnymbBFm8hmGj+YKLw1dSiWk7xSfo/xfaAaRglE/H/DY8PsaJk=,iv:UdKFl53EEkrjikGwc6LGJOR5qUzqXiIq1SMEZAl05ts=,tag:0wHTgAnufpR1q2o6LEIRNg==,type:str]
|
||||
secret.yaml: ENC[AES256_GCM,data:GjLuGVn7TEjugBqZuhEea978efvSulcbkjRaYImd9wWzu46jU/sn5mvSkKzp2a0RKpH0z85tWK3OrqLBtCSWX2gksX42XDbFf1PKQX/wnnhiSZFRnfgHBRGUeHXJHGZXkuoXaCSbJJJ7JHql//Pq1xNHSGogcwmVG4Os3K8=,iv:XasBz8jdQuoiAiVO7PXlcmBrdS9Gro4s8vG5m9lfyYw=,tag:sXKp5rWbpMckfdeWfXpR5w==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoQUtaeTQ3Tlk4K05pellu
|
||||
RWVrRWJmcCtOcitoYUVPNDNlVVhET0x5VlFnCjlndnFxYWpvVlVKRTI5cXRPaWlH
|
||||
N1E4UDdMdlR6KzdLdEZ0cE9rVXZjUkUKLS0tIFpReEwvdW1acDdDT05qVlozYzFy
|
||||
NURoV0Q1VXduY2RSTENNZWw3amNveUkK5XTjccXl0r8wSqQfZHlAQnBfL2y4zxsD
|
||||
aK/cAqAWu64r5sfNsWdzZ2LCbpRo4C1riM2zG0ij8xnHaNULsHUedg==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAreFltNHRoU3BrUzFTcU0w
|
||||
cmN2dkx2RXp0VXhZL0lOUnZVRE11Ti8rVm5RCmFqVHJvWXRsOGswTS9FOUdjSnN6
|
||||
bG9LeXhpL29LMmgzelNzN25UOXVHdjAKLS0tIGZFak4zR3VwREFQRGx3dHF0aWNk
|
||||
Njl1MGpjdVZyY2JiczBjd0pVbXJzM1kKTiwYaEaqs15UFe+MF7MiD8JREMYTvOJR
|
||||
xucZvj0CHKDXeJcp6tLUB7rBSZhNjJL8KMhmpNcp6ImwcDu/5wk8xQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:38Z"
|
||||
mac: ENC[AES256_GCM,data:IdGCXliSmInBqft+9V2+pMjSx7y7PidgTSqiS03LOqOYK9lYn4WQqgyFBPobgS6xx7qS6lX0KumqS2yIgPFZqOSUVfGq/iaPGcksCelY2sWAnE0VZaI76RuFw5+3spweX8yiVUTTvFcjj8WIiOYPZr093biHY5h/IjTJ9XxTSB4=,iv:lnoe0ds1PXc+k9Se/DqDHcRJ9PA9GoaxZlNubNufsQM=,tag:9IQ4LEI50IqSL/+oRpg9MA==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:48Z"
|
||||
mac: ENC[AES256_GCM,data:9S+lSTjgaMCNcSbCVlw7wjxP8u57g/KatbzFnaH5Ez67vv5nlpFU2bwwCE/yhczTqrWqXsPe6Ro+ufGsCWXBZGiztv3YN1LtxP6Rkdbl6h7c/mj1JS7sEG162qASrZrlpN/gObWsGDFTGZgDUkdTsmTn0M12RbVByjzEJOiz7ms=,iv:Oj5ibov+3CYFWxs3u6aijeMSK7kMPDE2L73N3mcyJoM=,tag:jY715s8kPORNpo4FL+U7ZA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
Reference in New Issue
Block a user