immich
This commit is contained in:
azykov@mail.ru
File diff suppressed because one or more lines are too long
@@ -4,21 +4,21 @@ metadata:
|
||||
name: davical-secrets
|
||||
namespace: pim
|
||||
stringData:
|
||||
PGSQL_ROOT_PASS: ENC[AES256_GCM,data:WDcjTW2EtFHpgl9FxJR5tZmQu/kvGBG8FY5nilph/ijvbfDNARtLr95vwen9jo4p,iv:Srnil7n8/UWaWXzjqey/p2ZHgAQZpaskEMT3ZVev6Rk=,tag:i8v517gwteIE0fIMZd/Z9w==,type:str]
|
||||
PASSDAVDB: ENC[AES256_GCM,data:Bp+462uDEUT+f075QBKCj1CBcWUY4InkTKN1hIPHy7XLHoyRNznoZmuOzFzCfsN7,iv:pPErSQQ1aRUS0Bi1q2/DawfUwE9Top/RwG9cuiLDLlI=,tag:djQqp6oWud3H9TTdjXxl9g==,type:str]
|
||||
ADMINDAVICALPASS: ENC[AES256_GCM,data:XLViuT5Zl/EAO5X9GhUMHS7DTibomRrZ1y2lprx9iso=,iv:lnmllMsgyGXE7iTNEBZ8m1xNVAkmYbOH5G9uv/o7FmI=,tag:FDZzJajLey8eTr6jHBVPbQ==,type:str]
|
||||
PGSQL_ROOT_PASS: ENC[AES256_GCM,data:Snmm6h3ZE83eek/6XXgGOouQMXiEH+UfJJSH1gyxN9Vp2pF+Uaix4z6dH0kCTJQl,iv:XEzn2zxCjeV87DNoMyqmK7bDws8nHjQziwDOXEF57lo=,tag:AH1wAD6++Qqb6nLPnltfPw==,type:str]
|
||||
PASSDAVDB: ENC[AES256_GCM,data:agre6KaJifEwUOuUQfKs1aVhUjQenmX7f3oZztNnsuZbwXPdGcO5EX9J5sxs19I+,iv:7PDkYQSDdOEFkj8M4LlV4owfy40mDWEgMuf9kvxTUDc=,tag:NKUTqiCsn3Xej03PG1ZZYg==,type:str]
|
||||
ADMINDAVICALPASS: ENC[AES256_GCM,data:XJX6XHLKNvXG/wFBZ4Nzzi3OKvao1Vi/YuBt5AvQKEM=,iv:XO0uBtsCUoFLRQ3vv5UKhBaB47mn8gkHn9ECuVAWtoc=,tag:/uV+KJnJr4bwdrXx8ACIfg==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnUk1JVXJhbEZONmhZZlhE
|
||||
dGZLN3I1RWpKeVlqUlprbFFFOURNR1FobW5JClBhUnlmRHoyYkFEbVRnWlhMTmxV
|
||||
dXhyZS9FRjIwenlhTmZFTXlRc04wcTQKLS0tIG8zY0lHN1plMk1nNDlyV2QyU1M3
|
||||
b3UycEhkQ2Z2UHRrNFBUVTdEV3FERzAKKP7vSAf2cAWK0mOBjr7bhjDRuUOew5Id
|
||||
SkGE6Lt5/zdY1VIUspljRXSOMI7akF+7ELyTCPz6WQrwPh5yvrJyxA==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVWJNdTN0eEhORnBwOWVS
|
||||
L1lSVElDZklHamM4SXd6VUg2WjFDbDFKSUV3CktVTGxpbUxQRkcyU3pha2p3VlJ0
|
||||
SEh2bkF5alBycGl6cm02Syt1Z2hxbHMKLS0tIHZ3bjJKcmpUQ2tDTHpGcWxCb1Jt
|
||||
aVFuSEliNjVSNjVmZG00WXJRODU0RzgKe+uwi2Qhj0VFmy6dLJexJ0mYE1elRCwd
|
||||
OZMY5AASicpGjQejyzJpJpllvyxCPqQOqyTXJix9Z/PxsU7wnSAOlQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:35Z"
|
||||
mac: ENC[AES256_GCM,data:0x4PZkZKB+h2yw2KwKBtQO3JzifqhZfiOxey1nVJbKhKgnp/dxmHnkO+E8ZeaU1cmcMBkzre26GR5lWcq5Ut9qhQlBvQ27eWdRzVUcP8yel7kowPjxaRCajrfPaSP5/YFlYh18hab6X1W/UER4hh6BlVv23xugGOqMBUHl+XxWU=,iv:dtp/C/wiizeKBVsGSN/SZfoPdBo5csUdZE6ackoI8Pk=,tag:ITMWSxZCagKzQ5NAsy363A==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:43Z"
|
||||
mac: ENC[AES256_GCM,data:eLuZMTzTe9qQEAZY6DCEoAXaLV/qXDGiaLQra5bQqg4cXS0W5reEKibhLPsB2mR73So4KXP8NI6UNTePIw0Q/VOBjT/Kf3tbe12kaOpe6upBNsE49cgNG9xR353v2AKDzvsLk+r6krIV203tpr7/Lcedc4ewkWsQqJi1a3Goe7I=,iv:LyrLz1uP4ekDo1lE3Edm+Ppp3Rqg9EtdkPFIiCCmnyc=,tag:jZBTURgW6NvL92L4uAjxLQ==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -0,0 +1,50 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: immich-ml
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 30m
|
||||
chartRef:
|
||||
kind: OCIRepository
|
||||
name: immich
|
||||
driftDetection:
|
||||
mode: enabled
|
||||
values:
|
||||
controllers:
|
||||
ml:
|
||||
containers:
|
||||
app:
|
||||
# CPU-only: hardware-accelerated tags (-openvino, -cuda, etc)
|
||||
# need specific host devices (e.g. /dev/dri) that aren't set up
|
||||
# on these nodes. Switch tags later if that changes.
|
||||
image:
|
||||
repository: ghcr.io/immich-app/immich-machine-learning
|
||||
tag: release
|
||||
env:
|
||||
TZ: Europe/Moscow
|
||||
resources:
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
memory: 4Gi
|
||||
|
||||
service:
|
||||
app:
|
||||
controller: ml
|
||||
ports:
|
||||
http:
|
||||
port: 3003
|
||||
|
||||
persistence:
|
||||
# caches downloaded ML models so they survive pod restarts instead of
|
||||
# re-downloading (a few hundred MB) every time.
|
||||
cache:
|
||||
type: persistentVolumeClaim
|
||||
accessMode: ReadWriteOnce
|
||||
size: 10Gi
|
||||
storageClass: longhorn-single-replica
|
||||
retain: true
|
||||
globalMounts:
|
||||
- path: /cache
|
||||
@@ -0,0 +1,65 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: immich-postgres
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 30m
|
||||
chartRef:
|
||||
kind: OCIRepository
|
||||
name: immich
|
||||
driftDetection:
|
||||
mode: enabled
|
||||
values:
|
||||
controllers:
|
||||
postgres:
|
||||
containers:
|
||||
app:
|
||||
# immich requires this specific image - it bundles the
|
||||
# vectorchord/pgvecto.rs extensions immich's DB schema depends
|
||||
# on; a plain postgres image will not work.
|
||||
image:
|
||||
repository: ghcr.io/immich-app/postgres
|
||||
tag: 14-vectorchord0.4.3-pgvectors0.2.0
|
||||
env:
|
||||
TZ: Europe/Moscow
|
||||
POSTGRES_USER: postgres
|
||||
POSTGRES_DB: immich
|
||||
POSTGRES_INITDB_ARGS: "--data-checksums"
|
||||
POSTGRES_PASSWORD:
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: immich-secrets
|
||||
key: DB_PASSWORD
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
memory: 2Gi
|
||||
|
||||
service:
|
||||
app:
|
||||
controller: postgres
|
||||
ports:
|
||||
postgres:
|
||||
port: 5432
|
||||
|
||||
persistence:
|
||||
data:
|
||||
type: persistentVolumeClaim
|
||||
accessMode: ReadWriteOnce
|
||||
size: 10Gi
|
||||
storageClass: longhorn
|
||||
retain: true
|
||||
globalMounts:
|
||||
- path: /var/lib/postgresql/data
|
||||
# postgres' parallel query workers need real shared memory, not the
|
||||
# default 64Mi container tmpfs - matches shm_size: 128mb in the
|
||||
# original docker-compose.
|
||||
dshm:
|
||||
type: emptyDir
|
||||
medium: Memory
|
||||
sizeLimit: 128Mi
|
||||
globalMounts:
|
||||
- path: /dev/shm
|
||||
@@ -0,0 +1,33 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: immich-redis
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 30m
|
||||
chartRef:
|
||||
kind: OCIRepository
|
||||
name: immich
|
||||
driftDetection:
|
||||
mode: enabled
|
||||
values:
|
||||
controllers:
|
||||
redis:
|
||||
containers:
|
||||
app:
|
||||
image:
|
||||
repository: docker.io/valkey/valkey
|
||||
tag: "9"
|
||||
resources:
|
||||
requests:
|
||||
cpu: 20m
|
||||
memory: 32Mi
|
||||
limits:
|
||||
memory: 256Mi
|
||||
|
||||
service:
|
||||
app:
|
||||
controller: redis
|
||||
ports:
|
||||
redis:
|
||||
port: 6379
|
||||
@@ -0,0 +1,82 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: immich-server
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 30m
|
||||
chartRef:
|
||||
kind: OCIRepository
|
||||
name: immich
|
||||
driftDetection:
|
||||
mode: enabled
|
||||
values:
|
||||
controllers:
|
||||
server:
|
||||
containers:
|
||||
app:
|
||||
image:
|
||||
repository: ghcr.io/immich-app/immich-server
|
||||
tag: release
|
||||
env:
|
||||
TZ: Europe/Moscow
|
||||
DB_HOSTNAME: immich-postgres
|
||||
DB_PORT: "5432"
|
||||
DB_USERNAME: postgres
|
||||
DB_DATABASE_NAME: immich
|
||||
DB_PASSWORD:
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: immich-secrets
|
||||
key: DB_PASSWORD
|
||||
REDIS_HOSTNAME: immich-redis
|
||||
REDIS_PORT: "6379"
|
||||
IMMICH_MACHINE_LEARNING_URL: http://immich-ml:3003
|
||||
probes:
|
||||
liveness:
|
||||
enabled: true
|
||||
readiness:
|
||||
enabled: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
memory: 4Gi
|
||||
|
||||
service:
|
||||
app:
|
||||
controller: server
|
||||
ports:
|
||||
http:
|
||||
port: 2283
|
||||
|
||||
ingress:
|
||||
app:
|
||||
className: traefik
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
hosts:
|
||||
- host: photo.aggtaa.com
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
service:
|
||||
identifier: app
|
||||
port: http
|
||||
tls:
|
||||
- secretName: immich-tls
|
||||
hosts:
|
||||
- photo.aggtaa.com
|
||||
|
||||
persistence:
|
||||
# brand new, dedicated library - deliberately not reusing the old
|
||||
# docker-compose install's NAS data, and not nfs-photo either.
|
||||
library:
|
||||
type: persistentVolumeClaim
|
||||
accessMode: ReadWriteOnce
|
||||
size: 100Gi
|
||||
storageClass: longhorn-single-replica
|
||||
retain: true
|
||||
globalMounts:
|
||||
- path: /data
|
||||
@@ -0,0 +1,10 @@
|
||||
apiVersion: source.toolkit.fluxcd.io/v1
|
||||
kind: OCIRepository
|
||||
metadata:
|
||||
name: immich
|
||||
namespace: photo
|
||||
spec:
|
||||
interval: 1h
|
||||
url: oci://ghcr.io/bjw-s-labs/helm/app-template
|
||||
ref:
|
||||
tag: "5.0.1"
|
||||
@@ -0,0 +1,9 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- helmrepository.yaml
|
||||
- secret.enc.yaml
|
||||
- helmrelease-postgres.yaml
|
||||
- helmrelease-redis.yaml
|
||||
- helmrelease-ml.yaml
|
||||
- helmrelease-server.yaml
|
||||
@@ -0,0 +1,22 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: immich-secrets
|
||||
namespace: photo
|
||||
stringData:
|
||||
DB_PASSWORD: ENC[AES256_GCM,data:7Pzt0sgMCbesVzcVNX63Hi8FmmR0WIlS1DeWhYn4EKA=,iv:Op9riDZatzmYYuQpzwfJ5J+rCTyzVK1WsLFECXQKwAY=,tag:0tI1N8eu70om9GEU109f5w==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5TTlvZVo0NGV6RitxWC9w
|
||||
d1VoMWRJQkdpekY0QzEwTHprQkl6cURTL2o0Cm8wRnJYNVFMWTIxaFpZd0MzMm5w
|
||||
NEw1QUpzUjBrSG5kZ25ZMVl2MVVFU2MKLS0tIGMzc3ZnNUwxV3NOaGRKajUyVnI5
|
||||
dEpEQTd0RVh4RGdFRnluUXZmV1k0T2sKJPSsUQPrKpUKVUeSkfYGvaPjvbaZl+UI
|
||||
UNBx6B5oLbiIaB2gRjEVSx1ppC+n1L+LYszGvFvRTJuLLCGXcEaCmA==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:44Z"
|
||||
mac: ENC[AES256_GCM,data:+bwvNRkXRw+cneVf+CLAxjGFHtnvfj6O0NZxSxcRqcWUSOvLcL+4Aevrun0vCk+49l9TED/U2TbpECVIH3f576UK4Ge0EP9enPsNBJezJURsTdCeWWXJHs/R+E8/agUDBU4zXGo9hmABu687V5e7c8U2ZCm1o7UdO4SdvUukSDM=,iv:275XCj4coFIxhIlmDmlxoYXIvnx5Z79oDEi3mtupXTk=,tag:o1tEkjNa3vfRVZTuxICMQw==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
@@ -4,21 +4,21 @@ metadata:
|
||||
name: markdown-vault-mcp-secrets
|
||||
namespace: mcp
|
||||
stringData:
|
||||
BEARER_TOKEN: ENC[AES256_GCM,data:vuko3RNaepAnSy+pgcb/FlSHlybr2LFCWBOdceiRFpFAaQNmElEEPaqdaVJU5jsTN/7uOq1cL6Arg8hUsrSn/A==,iv:4rQmPd2PBHeC3zU+x4a46euLI0T8p9TMAf6u6AAdCLg=,tag:uBd++tGTBQkWFm+x0/daqQ==,type:str]
|
||||
OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:2GZeGHdM3J3OcMOroDN2/Oz8DLcYuHWJ7UDCLiIXNWx4a4IwJL8PgH5hW/2v/XwaF3/8e8IMPoeoXVodsNKJqQ==,iv:knrWs2Dr6Gc2hYkHlxY4s7kpdfq6w8w38e1VSZWuigM=,tag:vtx7yt3wRjUsa820zdl6bA==,type:str]
|
||||
OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:3pkP5Ds85wVhQe9upEknsVfWRGi6c+ikAhgSRUu8viP48K2P+BGs0reGfgpJif3E+ItsfKJoeeHfAjWpfRljsg==,iv:JG75Fx5ohwR/LVAkMzEBw4WWv2ohuQnYUuS4RkJL0BE=,tag:QUncosi4cV7326lpsvZfew==,type:str]
|
||||
BEARER_TOKEN: ENC[AES256_GCM,data:6kWzb6qyDtbSznDRSnwb4EeC8x+4D64QF4D6Zb/f0dmwPIJs5jWv3qIl6hEtyq1kzmkNv4aiqkSB+uVQ3Uyv0w==,iv:zeFOWj1CY+k2VA5VH5Msro63sChoPIlRAa2+1fZj2cw=,tag:d/AGfdGatL1dC+Ia4WHKOQ==,type:str]
|
||||
OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:iWahoE3GUca+bb5lLhp/TyIYgIn9davvpKmPkp+9BtvRi/kyBdEwpQzbYlQ7A+Vn3yT+0Vr34sWW3EcvN/kAiQ==,iv:v/48XL8zBzJDfO6ntUBEhiUxhintludda9jb7bTNHA8=,tag:pyT1hKJs504GmTLSIn6cwg==,type:str]
|
||||
OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:UDcgkrEn08K4iPh088/la1EiY4UiOavFWhYMduf0xNd6sfKAeJqL6ufM7eE5G7D78SlGUL2sWzHb7PNJ0nRY/A==,iv:KQLQxwMitHxKidtUyHfVgmZIFC96V0dqqETEjlp1Duw=,tag:jefp4bL4OmqOYS2m3Zp0sA==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwUEpRTjEyUEh3NGJsbUVQ
|
||||
dTlUdUUwdjVTNnk3QXlRSTB4RnJJS2RPUURBCjl2dVNRaFJQclpISzlyTEMvdjBJ
|
||||
UzBITkM0N2lvNVdVMzF5YVdUNDVhUE0KLS0tIGZMTi9jWThuNzNaaDJZSTRVWkxn
|
||||
aDFsU2FrT2ZTVng0Zm91ZmhyWGR3KzAKHlBOG+o5EdTNMPgRU5nQNsMUniNua+8b
|
||||
RUp8lYB8bIAmQFMfoa5G+axUpVgrvhMcWdmFmsdLVdIrpOr59mm89w==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOM1l2cFpzaUkzY2lMY2Ft
|
||||
ZGtNZkZGZzdqWGFyb2tRR0FNRmE3Tmo1V0FVCmRVcEM5MWV3NWVKbldPMUQ1dS9Z
|
||||
bHdJbVFGN1lBeTJyRitENUhrenBKVjQKLS0tIG14YzVvLzhwN3EwQjhEVzA0dnhx
|
||||
SXIxWUthKzVqK0M4UXY1czkzbGVzd2cKf//DwDlAjyhIlHcHAPPimO3K+2CWF33c
|
||||
MASAMz+lCAgPj03q+Hbq7YnknH34KspzOnGCo9RgahcHGbladFfO0A==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:35Z"
|
||||
mac: ENC[AES256_GCM,data:pagUJrLPwKiRxa1IOqP26jWDdPaWohk0xUNCSq5ZlcbsFR+sZ7ENa//N4C8LCniGU34BSK3bUq5F5gwnZhFQb5CCnYkEVX3nIFvkXO3INY7l75BVGkQ1UJCNCYW3JPxMUIbAHP3zJnqhCFQjlwNADFuXzlqhi1gdTVxAgzCjHjs=,iv:RwWW9SvLOvUB5Sx2sm44UKeYQtqOqjhsWWs+R251C2I=,tag:O649ckRslfYES1N4uPXbxw==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:45Z"
|
||||
mac: ENC[AES256_GCM,data:wtCnG17FfOqGqPxLW0cbNY1COm0IBvxUcmdlj64WkOwd7NbdQ/H4BOLFPJMJb45O1+XJAFcZyB54U84hT005FhCrXWyweUfsMrxtkqa6ZlymuxNdxCwHSeN2Py4BHHNdeRAyfcdW9+P0IkjFF95ed1Aa9x+Zqr4z9UOJgG/9LdQ=,iv:vRp9HnQihMYtUj05FkccM/j3Mg9OTbP2ShIzuOzwDnA=,tag:tmKJkt/b0GcGak5A75NGzA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,19 +4,19 @@ metadata:
|
||||
name: mosquitto-passwd
|
||||
namespace: mqtt
|
||||
stringData:
|
||||
passwd: ENC[AES256_GCM,data:a0yetbNB9n5ExQQK6131bjkB0oP20EvUNg+4+yHW/sMLRKfya0WtB5RhUvuZOsd93KIf9fBKWsKbLs44ekyQsY+u8oOIb1VUh9Wpx/1RJs14ZbviRpNiVdYGfV/5CDregPdMNIMtkBjgbTZWjTD4NmbKFVNjakw4X+eO0Ukyqt9QHl1xDgMUznboElHkFa/1rr1WEOlmXmxW70hU/Z8kev5dRJnRj1wPrs40VA+v5CHcSv9q68CQXoFvoa2hcQ==,iv:r3t/W6VDAidnm4Mdxt+CQPATCdLAYwIRmfc8IVPgOXI=,tag:oXALowjRRcOomv12jC7v/A==,type:str]
|
||||
passwd: ENC[AES256_GCM,data:SK64d6ZskCyI8Jv7+V5TsybQi3GEn+iYkbMsZeOXc9QcOqE6DHkZDIZueAEhqE5PmhQYln4tw9pACHgptaPhmURJrwkzvFWvsu7Yug3QVwCz7UHqbz0k/lP8GWOFGwwOvFpgTFhVBZBYaT+mhi1F51gjUKLdntoa5tyZXL5t8LV3KlolcliOtg8BsMIpQghBbGJD2UBRcLbIQuKLPgzunuya/hl+q3P0gKHEaIOfQOAeAuDelxDOizgdundAow==,iv:cbdk3htdVYxUxPA3XoWDsg76YnPkQm1yJnST02nbcts=,tag:mvYTdi0HM7XwB3hcrhDX5A==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrVXpBSWJkSXFhVVlSemln
|
||||
bHVGelVoVTV4UVhobnNIelVxc2JDeTBkM0Y0CmMxRUhKZFhPNXlNbmh3TThYNWQw
|
||||
bDB0UTdMNkxhQ2s5NWs2RlBDQVo4bzAKLS0tIENpZVZpSWxkRjJSSDdkVVIvamRD
|
||||
WDFrQkM0UXFrS2lmL2xrMkdBcXpVQzgKbYdAW+VIQECa0NEf6kegoXtUzZECV6XM
|
||||
Mzk2iYvkOyWoN+kyRU43hC72IzK08DPU8RpRPpIFFfjYlHKUlKuBXA==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPaG5tSVp5c3V1K2FQTW9D
|
||||
Yk9IbnBFK0N2Y2l0b25INWRPSy9RR0IrdmhRClBlcnN6bUVDUlZCQ2UwMHlhamZN
|
||||
UkxjcllqWWVhcjVTNEVVb210V3A0YzgKLS0tIGFFR2IvbEdLRGFrWVdlbGh1aVdE
|
||||
WXF1bXBOeDJxSXVLNXJXTFVqa1BjMFUKEt5WIFdKeWbGLmI5d1u+NDYCpPm4r1tA
|
||||
f3Fbed6zMgZlfFoaWh11bmnXZNmXevHA/+8n9Qj5A/rzHxG20LCOBg==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:36Z"
|
||||
mac: ENC[AES256_GCM,data:ZfP/c9cb8sVtgmqEIVSr6v437RIXMODdbbD1eC+1Hs/HUddbTMLKdgYjhdQGuU+lkujNc5ye7YK//tFT1WoBDzSCrL2w4I5b0/r0DD4hMaCXu8rd5mj/5pr7VWM0pZo2qfSiuyyMRCCXe9BK8uTMV0YOOx9fizUd5uosBQjurCs=,iv:cSmG2gtkNXpld28Ke4lQ4VLcu3DlonVyVtCr3Thq0/A=,tag:f36JCnSj4gXLOVXrwqaiww==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:45Z"
|
||||
mac: ENC[AES256_GCM,data:CHrnXuYPDncyy0pdEUtMPVohJlbdzOHgBcCWFV1q5shMpR72llCSrEPpWuORELZQkeDucjGgvVAlA082H9v5qHy7isji2Z7M/sTaZTGGePUIsPOtYY+kMiKGuPTXIYJKIDrnlJapa/YcfGgdS/d2KGBm+8a+X7NDI7iUqUEb2oE=,iv:6S/6T36Mbr103Meg0zWHVIT9KBm0ecMDch062cEpmwg=,tag:IRRLRDg4Pu9kQKqZPc9brA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,20 +4,20 @@ metadata:
|
||||
name: vaultwarden-secrets
|
||||
namespace: vaultwarden
|
||||
stringData:
|
||||
#ENC[AES256_GCM,data:TOJlEEzTx2BJH3Unw5Z9evuAv4rJTzdaihTVy1FPtSFmFo8VSMIcKkcb4D/veGZz4dXIq4nR2s6J,iv:u0hAryIuyqnvAWCawgPWCzNlRNcLFbJfASNkdYcHXQw=,tag:JmmuHintOMFFjCM3IxWMDw==,type:comment]
|
||||
ADMIN_TOKEN: ENC[AES256_GCM,data:zRnyCbqHTqjbvj8HlwYfj4+Vmq+8C04ivSDfYkoOGkUYLMKhMbF1IlMoBAY2yYA4ESbnAytVHdHXmhMGa81QlyzsLaYXUncVBbUsV+Cp3w8/Wybc7OdnLRH6VOSZUnQ7x0sarut03hkMmNl3piImBiPofi/Bdw==,iv:inABwESPKyJPDWpKjVapdf1J8VV6k5SwF36VeKcwamI=,tag:YTSAZKnYNuv8LOAb2Z/D+g==,type:str]
|
||||
#ENC[AES256_GCM,data:rfU8h/pq/vwPZ+03ME6JNdzoj2MEuaVTLVS5LLWgxEXkV+jJju1h/a2xxvyEH6xBgtzy/OVSkbHK,iv:T3eQiK2bKNTwdT+3DjsMWCXc1//xLdZ3v3qbpvy2m2Y=,tag:kWMjPVX1v86xgR4d1MkXWQ==,type:comment]
|
||||
ADMIN_TOKEN: ENC[AES256_GCM,data:Bz/8MdtbxlnzkWC5lH3jtC515hGeoHR48TGuejsTAlMGaXk5G5+VCSs+6oGKdv0EyWeWSOHjKlalfC/2agstoVNbYziWnN0wcGZ8l4PRu3i+wtOd64Ydf3nyjOGRWzQNX0+lb1YwEsjzdHpU0qq2XGTfXzOfCw==,iv:tdIZyLby6EjtEWhBxREZcHo44+nXlzY5WmPzqPly5NM=,tag:Ko0jsJeZwLAz+jbSsLj/XA==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmT2w5V2taTndmMTgvMzh4
|
||||
MXVwVW5HWHlFeDA2cUpKV2dNMEJURloxYUNjCkhoSFNOVzRpanUyTnBRT2cyTkRB
|
||||
ZEp1WXdkZ0xEVXVXNnVPbUtYYTE2OHcKLS0tIDF3ZEpEbVRxNy9VNGdNWkJWQmJS
|
||||
U3JWZHZpZXdId3hITkc0eU82Wi9pTXcKVR6qDQV9itXPXVoS+IbcJtQ2Uq6zEVsV
|
||||
uAnTpFxv5Pm1URpBmkcvskYOTnigCIpl5mrRvrKUANGVQwfa9IcJIQ==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQkkzeGxEMEw2WEExU0tM
|
||||
ZnJLbCtLOGZRQWhOMXhTTVFrQkFuNFBRZlI0CjJ5b2FMSnUxVXI1NWI0RStOQmpx
|
||||
eGNqT0RMbUtWU0wrTWNtaGRNdC9ieGsKLS0tIEl6SGNkZFJkdXJNa0EwdSt1TDVS
|
||||
eFk3Q0pUZ25hYTVTNXZYeUsyMU5pcFEKb+us2keyKcwUx5oy3wIsujscYiA3hGgw
|
||||
vqu/cf4eypT6Ju3/6WmJuSX5FjexzenYPTbOI7QyRYtN7bc4G8WQAw==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:37Z"
|
||||
mac: ENC[AES256_GCM,data:Gz5vhQq9E1vI6nljJ+9HkS+njCjl9CaaTvOFS3oQy53fcGhekrslS3zZ9QL27XqpnuolupObT2N2qFem0VJCovBGILOaF5Vip9DZbtRBKi762a2l8xvzj/Tm4ZxqoG9eXGe9+sKNVznkaVduLP4lxsCVRbToPgHpMN77+DouwAY=,iv:4CEKGXrOQUS8d2Z4p87nyfbKm3Y1SqfOcG94mrtXSus=,tag:YO73BhxGhbFyVn3zkMEhKw==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:46Z"
|
||||
mac: ENC[AES256_GCM,data:aos1VAzIQBorTRhTmF2lIYNwNYsc2+bljeKzt8BIHCFdR9TiecZaEfEzVi8z/Sdv68ye9m7xR7odjN6elCmQsLrCWWfjWqeHQQVfi2DbStCRX3QAMfbjCO1r84pZWGGN7fdfKCOcmzP5peDjdhJBc6fCyxiA4FAE/tnIdOwloTQ=,iv:Qvz/HpogGNLMGoV9ohdy0RsH/Cn4TTwr+eedmLbTTFo=,tag:kNpBeQkD59H+/NjSfwQWLA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,20 +4,20 @@ metadata:
|
||||
name: webdav-secrets
|
||||
namespace: webdav
|
||||
stringData:
|
||||
WEBDAV_USERNAME: ENC[AES256_GCM,data:hhcWsos=,iv:UcfZ2fNoGSF+dR/w24rjuyp6tDlz+m4kHIUYihw/DCE=,tag:2uz6OfCEL8/u4/rNHdj8xg==,type:str]
|
||||
WEBDAV_PASSWORD: ENC[AES256_GCM,data:5vnIbAIWw46GT4VhdKmFne6gWSj2LRG9zPxIe9cDX9BlL++xLrrMmWpxI6zTBdxQ,iv:EQJF5aXWC6dMd3cSfSUPEwWLlnPSj+923ESxxZRsX+o=,tag:YzlkV5UeaReoaGhPF/v0qA==,type:str]
|
||||
WEBDAV_USERNAME: ENC[AES256_GCM,data:QtaIzcw=,iv:7N9iscatzvJXIebiYlExngGvL4Qf03FjsVCS0pJj3pY=,tag:pQKAIdqtoNgKNOy2iYqdrA==,type:str]
|
||||
WEBDAV_PASSWORD: ENC[AES256_GCM,data:ljhKLIbM9+uV7RQPGmzeYctlvB/OliWnTQJgIj2UuWC+juc7N0jd21MbCRShgnq3,iv:kbT0D9TYnpsnraZY4ynJP7CSysUkWfCicya+bxxqf3E=,tag:LZp+/pBxIa7ijkc1aVm66g==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBudGQrU3dGb042aUtaQ25Z
|
||||
emNhY1FSWHppZ2FqOGYvWHBpYktDRzhOdDBvCmswWUJtclEzdkgrcDlET3ZXWFJx
|
||||
N0RxUHVEUlJXYlB2OTArZXhlSmJOUjQKLS0tIE9JRWxHT1lsTEczRWp3eVlxTG1F
|
||||
MHU0ZmcweGxKSms5L3ZnU2loNlpRU2sKZPRWWN7xpAgnWTCdoxAXHILoxz4OjJ6Q
|
||||
iRYrdJjOmJFgPVH39Pggr3oBwDtschyz0wwrUIr8ZDCQgFud3t/9DA==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBicVpFRlRCL1JtaGw2NldB
|
||||
eTg1L3gvZ29wdk1aRVFxUGY2Y0tFYTMwU0NZCmM4VEFXK2tZL3FnNjk1Uzhudmw1
|
||||
RGdhUzRjVWl6eWozR1dzbGNvaWVtUGcKLS0tIEJpTWF2bU93My9VazNZWThTMXVU
|
||||
REQ5MVZjYlc4cWtXaUlyV0Q0MmoxYzgKREQ/Pq3ysir1FmafeoCTTjA0ol7TdeAy
|
||||
rhLjuR+baNZXEU0FP7hcm2q/UmcH412tEFqQlDlCfSe+/DHhfKRGrQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:38Z"
|
||||
mac: ENC[AES256_GCM,data:pIvd3Ms3G/WVwOieLRMAzHX10rENORRM59mptHozvWfBvFWrwvKBXR4b1cWMmh89aKfJT8dx5XYdPXqpc5DUky6hNxgVB1Rz9n+llK2vpW/sS0IKfGdJUxih2e89oUCGgJpN7pb46Vwl9BbJ3doLeogZtxjcDnRNi6WW37Mt3+8=,iv:IqHuIAVAOa4xVjmhC9qVISmdgxO9+Yxm/N78FD7H2v8=,tag:oQ/eClwpWdv4c60vdXrTcQ==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:47Z"
|
||||
mac: ENC[AES256_GCM,data:XrlGWXa+s7IWEzL1P0Ve2IHDXWc5Fbpx/OzrfroUgcXCVOIZs0dwslsyR08zeo8kTukTfAoGsds4FJtqoNLQ68mzDiipDU2yksza767MXGfdrUNxyEfW3s0p5vJiBr1d1Vkb9k2l9e7zU59x018q+8sA4e6sBiaYcJvYX0nPP3E=,iv:erucFEVH5lo1/4nwBtRkGTTVZ8rNLW69hiWluPE0WEg=,tag:f79y2+AZydahk3d0RB+sNQ==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,19 +4,19 @@ metadata:
|
||||
name: zigbee2mqtt-secrets
|
||||
namespace: zigbee2mqtt
|
||||
stringData:
|
||||
secret.yaml: ENC[AES256_GCM,data:1Bp5poyu4nQxKudOFPT1ceQUXOokIdas6zbMHoxb+u4fFfLu6jy8KG+hroGLTH2g2AUGF/dPLoUOC8wT5Fg8Ml2YnrZTtqBpBkbEQiSJ/BNF9H9mQi5U7VnymbBFm8hmGj+YKLw1dSiWk7xSfo/xfaAaRglE/H/DY8PsaJk=,iv:UdKFl53EEkrjikGwc6LGJOR5qUzqXiIq1SMEZAl05ts=,tag:0wHTgAnufpR1q2o6LEIRNg==,type:str]
|
||||
secret.yaml: ENC[AES256_GCM,data:GjLuGVn7TEjugBqZuhEea978efvSulcbkjRaYImd9wWzu46jU/sn5mvSkKzp2a0RKpH0z85tWK3OrqLBtCSWX2gksX42XDbFf1PKQX/wnnhiSZFRnfgHBRGUeHXJHGZXkuoXaCSbJJJ7JHql//Pq1xNHSGogcwmVG4Os3K8=,iv:XasBz8jdQuoiAiVO7PXlcmBrdS9Gro4s8vG5m9lfyYw=,tag:sXKp5rWbpMckfdeWfXpR5w==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoQUtaeTQ3Tlk4K05pellu
|
||||
RWVrRWJmcCtOcitoYUVPNDNlVVhET0x5VlFnCjlndnFxYWpvVlVKRTI5cXRPaWlH
|
||||
N1E4UDdMdlR6KzdLdEZ0cE9rVXZjUkUKLS0tIFpReEwvdW1acDdDT05qVlozYzFy
|
||||
NURoV0Q1VXduY2RSTENNZWw3amNveUkK5XTjccXl0r8wSqQfZHlAQnBfL2y4zxsD
|
||||
aK/cAqAWu64r5sfNsWdzZ2LCbpRo4C1riM2zG0ij8xnHaNULsHUedg==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAreFltNHRoU3BrUzFTcU0w
|
||||
cmN2dkx2RXp0VXhZL0lOUnZVRE11Ti8rVm5RCmFqVHJvWXRsOGswTS9FOUdjSnN6
|
||||
bG9LeXhpL29LMmgzelNzN25UOXVHdjAKLS0tIGZFak4zR3VwREFQRGx3dHF0aWNk
|
||||
Njl1MGpjdVZyY2JiczBjd0pVbXJzM1kKTiwYaEaqs15UFe+MF7MiD8JREMYTvOJR
|
||||
xucZvj0CHKDXeJcp6tLUB7rBSZhNjJL8KMhmpNcp6ImwcDu/5wk8xQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:38Z"
|
||||
mac: ENC[AES256_GCM,data:IdGCXliSmInBqft+9V2+pMjSx7y7PidgTSqiS03LOqOYK9lYn4WQqgyFBPobgS6xx7qS6lX0KumqS2yIgPFZqOSUVfGq/iaPGcksCelY2sWAnE0VZaI76RuFw5+3spweX8yiVUTTvFcjj8WIiOYPZr093biHY5h/IjTJ9XxTSB4=,iv:lnoe0ds1PXc+k9Se/DqDHcRJ9PA9GoaxZlNubNufsQM=,tag:9IQ4LEI50IqSL/+oRpg9MA==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:48Z"
|
||||
mac: ENC[AES256_GCM,data:9S+lSTjgaMCNcSbCVlw7wjxP8u57g/KatbzFnaH5Ez67vv5nlpFU2bwwCE/yhczTqrWqXsPe6Ro+ufGsCWXBZGiztv3YN1LtxP6Rkdbl6h7c/mj1JS7sEG162qASrZrlpN/gObWsGDFTGZgDUkdTsmTn0M12RbVByjzEJOiz7ms=,iv:Oj5ibov+3CYFWxs3u6aijeMSK7kMPDE2L73N3mcyJoM=,tag:jY715s8kPORNpo4FL+U7ZA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,21 +4,21 @@ metadata:
|
||||
name: longhorn-backup-target-secret
|
||||
namespace: longhorn-system
|
||||
stringData:
|
||||
AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:z7rr7TRv+dir1Dl71X6yowBvKKA=,iv:tCvlOWco7nMqoMrw5mxX+sUejPe60rlnyutSw3gTJW4=,tag:A+oruTTZkItlEYM4U0qgzA==,type:str]
|
||||
AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:kqc5UNtldJ4IvLFYMFG+UL5LiyWqU26A7y/7RnQ8sI7xYBXoFgaFwA==,iv:a7CglsoXqSL40FacD6oZMOd93IsTj5CRFgk8ehKdfYI=,tag:xdlyiAGjRzl+zmBhUkD0xw==,type:str]
|
||||
AWS_ENDPOINTS: ENC[AES256_GCM,data:sweN5KDtM1S/JXbE6n4AA3ISXOGWwtKchEuHISX2TCXAbDloO3jukh9VYrc3UkWBhzIyp8xC9gzk+RnLWQ==,iv:qIrNboYNnk6MsI/ZPmwNAmlNGjY2nntI0eWz/WCnTtE=,tag:rg8stEVKjyQCh3+7ptTmSw==,type:str]
|
||||
AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:MDFAe4ED+pNdJITOH8U7L//bJqc=,iv:Gr1M/UofheKqRjIKG1+78vJCSNdCjMNhVVvGM9DnSBU=,tag:MSfXDBde5iiUhLb/uZ8W7Q==,type:str]
|
||||
AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:8QmzN6tuUpSoC2GuF3KM8F0HBmDuaWoaioRKONUW+kWS2zqjzIw4sQ==,iv:dWWjM3H7g8DvH+LAJEJW2vee5ng5me6W7TzR7iu/5kA=,tag:MFb8H7LN6WPVCpCmILSbDg==,type:str]
|
||||
AWS_ENDPOINTS: ENC[AES256_GCM,data:dxkmPtfVJGK2IcuDuiv4zfaP8S0JHH+731M4K+6YMrmy/uXZPuBTfXhM6WkRc4L8XNzXHAomAXD5/IeyPA==,iv:+gWza61xyv2HnPGmbdReAW2UE9PRi83QQs+TiQWWkR4=,tag:rAfc4lnPlM2S+8Iz5BIHqg==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRkpyU0lJM3hvYmRaTzRS
|
||||
bTAvSmIwU2IzQXpOcnVRWEZ5RDFXc3FZSnpBClA0Wkh4aEVzdzlnNm1CYlRuS2tP
|
||||
WjZVaFJZRDFDVUxQcHBNVXowbnBua2MKLS0tIDdqQmJuc092cS9lR1o0L0tlNHFa
|
||||
QWdUSHd6cDFaWHdTcmNzaVdtNEl5NmsK4y/mqCLVHt7VYXeb4QOWRBOUOlW80cw3
|
||||
xXnLR9YDgU2qh7rhV1R/Ivowt4Z2nPq6I1JOZfGnG9jVobnX5FG90w==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1V3lYUUoycGx2THdCYXFO
|
||||
UVVocUZZRE1DRi8zUFNrSnNkYjVDNU9KZzMwCmJ6eFNyQUV4SUZod3pFL2toOW5E
|
||||
cDNIVlZCa2ZnL1hqam1DK25NT3VwUEUKLS0tIHVWaEZvSlVBV3JwUXdjam1jY242
|
||||
OTkrb1NONTlKNHBVSGxkckVtWDJpUnMKKVu5KvpVYsekISatyoblkMvdfoVulhvb
|
||||
CVBUeFG7QPlsyciIRWglIl5dDh67cGjV5hj98A7TjrLIrZvXRUJK9w==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:39Z"
|
||||
mac: ENC[AES256_GCM,data:2g1ifSCHFIUKBscdCy/LXVMYeXmLe6sTkPNxci98xNJMPqOFOQol1+EdMC9VyU/zoyfSADmSdCrGL0juMF9jo0Bjo1J7syN66t9alCASduSj6YX0bMav794Yx+7ZkYXysdU1auQvHE1ZlfCHzGTE2hdlPggxOQWBekgezNi4SYk=,iv:JB6vY+a/5C//q229b5CnvXcS5XiwHF+2wjrbVGt2kmI=,tag:nlsPrHeCghT8AMj4puiUnw==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:48Z"
|
||||
mac: ENC[AES256_GCM,data:8pUtim8rGYKbNEx4p1Moh+U2+Wyc3oTRnDNfqBIQTYLcib7lAfd+amHnon/TiKkG/eh301x90Z+4LMmg5VSEHDtvQs3WS8diSWOT5cKmi7bX7+g9iY3qIj0iGJGeJAc4QRd5S+7K8GTOxt6O1xRhOAMaLAqyqx76H7A/H2L9nb0=,iv:vLj/7STqmh40aAKiTr8CYPSM2pptayGEiGASfAsLhyE=,tag:TIRwswwmnPz20MkVRPo6AA==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -4,24 +4,24 @@ metadata:
|
||||
name: s3-backup-proxy-secrets
|
||||
namespace: longhorn-system
|
||||
stringData:
|
||||
WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:J4t+I5a1QzbZGYuqKhhlo4t7Bx4=,iv:CHQntadI/BUVnz7NnUb4bHVT0T1wIAxXbujdvmXiKTA=,tag:gDLusfF9XSw1MugzgEUr2A==,type:str]
|
||||
WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:UgsZPjk/aeT/UiVyQkWv0MCu3/8Ksi5DV+lU+l7DAn5lMlqqiQ3EVg==,iv:qDbCorDwvPweemZmfyEvmtoSYFvW8CVf7hMmWg5w8Ws=,tag:ZYzWoKjayKPz62EBrSplWQ==,type:str]
|
||||
CRYPT_PASSWORD: ENC[AES256_GCM,data:ldr4AGJxu2Rk5XmAJg8ieL0vOVlvE7qJmQy8A47S31nlEkaVW1+q4l6hbA==,iv:vM10+ungkH7H/ADlmRlOsDlSjj8M+yv9tGS9XXyc+mo=,tag:P45JyONMRtgYsi+MDF3t+A==,type:str]
|
||||
CRYPT_PASSWORD2: ENC[AES256_GCM,data:Ixrsh0SOErFNFwdxdI9tX1KGICzIl/UQcyUtvT2oAbWO6vl8FV0pQrAYjQ==,iv:ZOCROwclVQ2Hxlv83+CFHSBU1EIbOH3BSJNdj+pQpBg=,tag:v4ooEI7suaYYGwaizSDAgA==,type:str]
|
||||
PROXY_ACCESS_KEY: ENC[AES256_GCM,data:f2whrd+WUjNrwVSFOC0oKwtycIk=,iv:AMHS+BTsW8SjY/LBc09CNVvNGu1RXtLuQe5irT9WQDA=,tag:7SAgQ4hyrDbHESStXPkf/g==,type:str]
|
||||
PROXY_SECRET_KEY: ENC[AES256_GCM,data:UxpDzFTsUwmSG43sZND+iKx8GMOEBPkBoHhJO6FKnvNdLAInrh70UQ==,iv:2CsaGrB85ZCBKN2qGtN+nUljnWOvr+EKXZSjUyDPzZo=,tag:MyzBMUkRGJKt55pyOi+7nQ==,type:str]
|
||||
WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:LKIjmD2hBfSIWDuBHdeq0ih0NqM=,iv:DylX57HzCAZzQ1Jyu3VfunVo2Y6gv9eodWDT9CAqGYA=,tag:/463+al31uZd7ejBuV+TXA==,type:str]
|
||||
WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:VABMxcmwp5Tz35mOyJubR9CiW6fkCIl8oMb2CN2Q9a89VIZvZY+QbA==,iv:hZktpWghbx7OhCWJyWEyVY5jVRHnT4KsV3bKrOG49BY=,tag:wjuHUFF9l1FQxK6mkUg9EQ==,type:str]
|
||||
CRYPT_PASSWORD: ENC[AES256_GCM,data:iwJH8lbeEle7e9yCTt6JhS+JgoBJ24xz6crP9Y4kJ+3SdNpJfiAk0vDKSg==,iv:hY593cPbL65d902q0/hKL3qRFFaScNyhJ4vfNkV7WP4=,tag:w9lC3eZD7czFuE6GdYTyJA==,type:str]
|
||||
CRYPT_PASSWORD2: ENC[AES256_GCM,data:w/I93QhSqxnqoHEOuBB6tEq8JgxLjp6axnwoFR2scuX/OOgzN2uaMTISCA==,iv:/Tdmur94Mu7iIo42sFyM5hMAOOoDDPdcaPI9HBHjgEQ=,tag:4GMk4uiftNZqJDS8m7NbVg==,type:str]
|
||||
PROXY_ACCESS_KEY: ENC[AES256_GCM,data:1tTUPcQlM3KlX3JEleGKgSFQ/VQ=,iv:1hZ5HzRQSlYnM5QeD4OSodbWdaRy2dCI8BviD7Qeu74=,tag:vMhuK9NljuXUWJC0PFkm7A==,type:str]
|
||||
PROXY_SECRET_KEY: ENC[AES256_GCM,data:iIe6dXX8tBFKgsRpVCTKD/ywomR0bORqqB88iPn4TQjAd8CGXcWX0w==,iv:W1PfJOUk9AZtPkuG3EevifcAWOfwQElIdieIZXH8UZk=,tag:JWBUwj9pigaByao5QZCRnQ==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyWHA0b3EzUUI2Tkt5RkZ0
|
||||
SVUrS01oSzdVRHVHM1BaZFNHSHdGSGJwdUE4CnJ3RmNhdjBmRWFUYytXNWhjOCts
|
||||
bitybTJWMlIxczRYa05DOXVUaDJnbXcKLS0tIHUxdlVvR2tCeXpOaTduaWNrQUZX
|
||||
Qy9UVHdLNTZVcGorWjdFMjcwYStuNWMKsO20ffsi795zUvLsOuN8YL58aWIAY4pi
|
||||
xjtkJSbc2+jc3+MENDnaoQaClaVfHaDnuaTRb1QHFnCeQap7nm+MDg==
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSDJsRVlyeUNLR0VnaWVs
|
||||
T0s4YUVLNW9wYkNVZnpEY2I2WGhPSjJDakFnCkxnQ0JzZ2l5bDVqM1NJaFBCdlBs
|
||||
MmpWR1dBaWcrSlRBc3dkZlZ3OTNQWDAKLS0tIDRsTkl6QS9talZHWkF6d1Q5Nld1
|
||||
WTZFV1YzeVJzT2ZIK3FJc001bjU5YmMK3saW6t+tMcpHSRsJHe6BQE/zsAXsEPMP
|
||||
Yyi5wRPeXilb5AITdkIwhapJvOUg59QeQXbjaHm5ponx65xgsX2z3A==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2026-08-26T10:27:40Z"
|
||||
mac: ENC[AES256_GCM,data:EO4zFVa8OGiroPf7pSD1/R1j8OV+DtrrLLwHGz24ePg2F9DusW3MsEeLNSmj73oocyD+7HE2o5wRNQt0ZT1xdcg83tUd2q8eEnlqyk5GPLDbVhlWrz5zXnEWEdSwhkv6fLGCR9reoz13mpa43PlTz/Bgv1p5l3EcyqriWnTi7WY=,iv:UR6695v4lKppCOHYfa8f8l+uKwDDed8Rdyvf9xLHgV0=,tag:I6UL1/57ItNytUjEz9Ljrw==,type:str]
|
||||
lastmodified: "2026-08-26T10:27:49Z"
|
||||
mac: ENC[AES256_GCM,data:9SmNLuA+OzG9d+kORaXRXx1Ak2XfoTHZIwS6dSoWgC6hAagFXlRfEfNBCFh2VsRkllcOrEqpNcZg0SPRUBrPgTseEVrmmqf2GE0bwUgHlmycIIFck2y8ATpciSyPsD0A6teSNdQdsLU5EM+e+unPS5neRvW1gfDSUnXSgTt/ifo=,iv:GaPeH/9J4QJYRkvoHc/bUFIF1sVssSB9cHqqlWOxf/Y=,tag:T6lLGinraOPwF/O/kaDOFQ==,type:str]
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
version: 3.11.0
|
||||
|
||||
@@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: photo
|
||||
@@ -0,0 +1,21 @@
|
||||
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||
kind: Kustomization
|
||||
metadata:
|
||||
name: immich
|
||||
namespace: flux-system
|
||||
spec:
|
||||
interval: 10m
|
||||
sourceRef:
|
||||
kind: GitRepository
|
||||
name: flux-system
|
||||
path: ./clusters/base/apps/immich
|
||||
prune: true
|
||||
wait: true
|
||||
dependsOn:
|
||||
- name: namespaces
|
||||
- name: infra
|
||||
retryInterval: 5s
|
||||
decryption:
|
||||
provider: sops
|
||||
secretRef:
|
||||
name: sops-age
|
||||
@@ -16,3 +16,4 @@ resources:
|
||||
- syncthing.yaml
|
||||
- nfs-photo.yaml
|
||||
- photo-stats.yaml
|
||||
- immich.yaml
|
||||
@@ -15,4 +15,5 @@ resources:
|
||||
- ../../base/namespaces/finance.yaml
|
||||
- ../../base/namespaces/nfs.yaml
|
||||
- ../../base/namespaces/syncthing.yaml
|
||||
- ../../base/namespaces/photo.yaml
|
||||
- ../../base/namespaces/photo-stats.yaml
|
||||
|
||||
Reference in New Issue
Block a user