davical

2026-08-08 19:39:02 +03:00
parent 625d43b033
commit 7e19f3cef7
13 changed files with 243 additions and 53 deletions
@@ -0,0 +1,82 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: davical
+  namespace: pim
+spec:
+  interval: 10m
+  dependsOn:
+    - name: davical-postgres
+  chartRef:
+    kind: OCIRepository
+    name: davical
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      app:
+        containers:
+          app:
+            image:
+              repository: tuxnvape/davical-standalone
+              tag: "82-1.1.12"
+            env:
+              TZ: Europe/Moscow
+              HOST_NAME: c2.aggtaa.com
+              DBHOST: davical-postgres
+              UPDATE_FROM_OLD: "false"
+              PGSQL_ROOT_PASS:
+                valueFrom:
+                  secretKeyRef:
+                    name: davical-secrets
+                    key: PGSQL_ROOT_PASS
+              PASSDAVDB:
+                valueFrom:
+                  secretKeyRef:
+                    name: davical-secrets
+                    key: PASSDAVDB
+              ADMINDAVICALPASS:
+                valueFrom:
+                  secretKeyRef:
+                    name: davical-secrets
+                    key: ADMINDAVICALPASS
+            probes:
+              liveness:
+                enabled: true
+              readiness:
+                enabled: true
+
+    service:
+      app:
+        controller: app
+        ports:
+          http:
+            port: 80
+
+    ingress:
+      app:
+        className: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-prod
+        hosts:
+          - host: c2.aggtaa.com
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
+        tls:
+          - secretName: davical-tls
+            hosts:
+              - c2.aggtaa.com
+
+    persistence:
+      config:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 256Mi
+        storageClass: longhorn
+        retain: true
+        globalMounts:
+          - path: /config
@@ -0,0 +1,45 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: davical-postgres
+  namespace: pim
+spec:
+  interval: 10m
+  chartRef:
+    kind: OCIRepository
+    name: davical
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      postgres:
+        containers:
+          app:
+            image:
+              repository: postgres
+              tag: "16-alpine"
+            env:
+              TZ: Europe/Moscow
+              POSTGRES_PASSWORD:
+                valueFrom:
+                  secretKeyRef:
+                    name: davical-secrets
+                    key: PGSQL_ROOT_PASS
+
+    service:
+      app:
+        controller: postgres
+        ports:
+          postgres:
+            port: 5432
+
+    persistence:
+      data:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 2Gi
+        storageClass: longhorn
+        retain: true
+        globalMounts:
+          - path: /var/lib/postgresql/data
+            subPath: data
@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: davical
+  namespace: pim
+spec:
+  interval: 10m
+  url: oci://ghcr.io/bjw-s-labs/helm/app-template
+  ref:
+    tag: "5.0.1"
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrepository.yaml
+  - secret.enc.yaml
+  - helmrelease-postgres.yaml
+  - helmrelease-davical.yaml
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: davical-secrets
+    namespace: pim
+stringData:
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:rz09JogFSKE0WZ7pFnmB4zQRlRh4q/FJRGQ1fqdziBHr3XXBN1VL9jH+rNskeC87,iv:i7Qurv0oxo1/694SnXMYdAVm6k3z3qABKFYB9BCF7+E=,tag:AEZ91YNXIhLVBvkepTW1Pg==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:ikj0ff/H96xleM0PhLKwLmtV/L5GgK4IQAsXU769qQUpieZdQEfcTAmo4Zm6IVND,iv:PitHCE6IVXHy0JHp1xkkZDvI9QsglK+i9eQ716mo5F0=,tag:L0P73rJJ6C9DvG74tuyORw==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:HowIpooTOWtMOR/uUixES9tHgnqKmvl9LeUwX4pqlYY=,iv:BPL/zF8ac9aWtadSzMM1xGI/t18r/SzTFPWda5nQj4o=,tag:MpULHsvnU5FdtwLbsaqysQ==,type:str]
+sops:
+    age:
+        - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoN2JWU0JwblJFcllaL1hO
+            UGFlanZxRTdtNGVmektpWFFtaUMvc3dUVWlZCkhMTnlxblh1U2VQRlR1Y0Fnb2tF
+            cGRUMDByYzVrclFnVk1VaTRicTltZEkKLS0tIE1oM1ljeU8vVkhMUU9pazBYYUlr
+            ZmxMaGZXTDl3cDB4elc5OHA4ZU9OaGcKBq1Ikzju51qznsSE6iuiNqHHkQv0/KRL
+            AkhFuWMoQZIrBDsUeJcweNM18GWe8hqF+NTWpeWPWAXQ203lg3MV7Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-08-26T10:23:33Z"
+    mac: ENC[AES256_GCM,data:J6f3fwP6HkScwRJJwnaCVPKBoEG69BUrhU00R8oXQQTqPbi3K9BrBtXMc/+R78ENCS28nv3/sLHRfFt1NBjGw0ftD+MF05tDVCEX8Ju3TIdO6e64NaJngS8sRJWI+s7i4A7IHtrbqCL4k02KLGMmj/cP/K9M30uhfDQeF6oplDo=,iv:Lvp9o6Nyu5h/y9gUweoiR/m6+G3/GXwXy07i5jhecYc=,tag:t+evYHXT92APbc89nPyQtg==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0
@@ -4,21 +4,21 @@ metadata:
    name: markdown-vault-mcp-secrets
    namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:YJtRMdEq75Su8zWoBUFIuy4T2xzwJKCJsqrJ2LDPgoa+Ampcg08grnOnVW6Kxf6R/YvyFadXPJm3uTHWiHsFKg==,iv:uSw5RuTD3TpTx9WOcNHwcQgzw/Cyei3JneouQwNBah4=,tag:jxlpll2pAPIY4E7iFThjOg==,type:str]
-    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:jPdq18S8c90hNjGUJgADiwKs72JUwuE3vqYQnz17vbuQzVCplViPRKIaf3+cVSyc+dZi44fp3UBCanF/wX0RBw==,iv:0vFT3RKkkvzsFJ4eLjYO5BG1gy/dIe+2Vhw3C11ixAA=,tag:3ZAOY7Ee/gLZueWiKvVXcg==,type:str]
-    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:cKOY/URxbCEDVe4TNIe4EdRdIZ3OBm8gAf4pcGmdaz8VVMxArFbrCic+x2x3erjlZUMdt24kPZl4W25xVoQptQ==,iv:08z/PLkPU/K1RsH9wUBBSME2wiF8ql1H7WOrqEwf2oI=,tag:Q9KaXfgBeLt/4udktRmQNg==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:5yBr/2aGlcsZRVGTygY1esYJajkEMWUQkW35i8u921PkQeme3Xgd6JWvHL7WzgnayEte+8s4Qi4DFA5VEWOYfw==,iv:f42d6mGyOi3lgDvt4+k4/t465xXeZHOpx0PciJKe6b4=,tag:qgHhvQpa144b60PXb50lEQ==,type:str]
+    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:3l2P+tKlV5pCQfkCLWZQD0/aBnZgZXRtmAGJS87FsyLvDGzCZhTRUzsw9PmKiyg2ThntxN6UGLm7BqMr0Sz4Bg==,iv:cDd6T8YVQU5P/6OIKvVSf71R7jtYBJP2a2gLifp/Wr4=,tag:TtPJIslGGWWtiQM+9dUsIg==,type:str]
+    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:ZeeOJXbrK1Hm4R5LshHoJBErFV7BoKxeJg8gIAYBNzjinJNtiYb8tQxFP569rZ/hUAVZlTzVN2Q7ubXfXeG4Jw==,iv:VI6DhG4N061PYvwBJ/X+5Ww8L+Cm5VcolHrvqEJrcjs=,tag:M9/TwFSFYKKWyI9lrooSBQ==,type:str]
 sops:
    age:
        - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNmo2SDFzMWxjU2ltem5v
-            OEFPT1VDTXFlRnJJWEVzUmlaZW10OE0vZDN3ClFEaE5rVFZDckdBcEJVNHBaZ2Vz
-            S1NCK245cGwyRHZSWEhDclJMZFhVbWsKLS0tIGhzdktoMXh0V1krdTdUbHFmZmor
-            NHB6U09uNE1CVmNBanRoMEp2ZGZvMDAKceX/gXyrr0kgmYzYeT9yIJ8zq6LMITcM
-            mPyebSY1/Z4xUMmyew/Vme0X1u8pA/CR59PZnFFvs3uGA5q4IfM+MA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGbTRrMXB1OWExNGtoWkdH
+            cEZSUWlWR3lrNFZiKzgzZm9iYitLMUNFc0FrCktYSzVTZzgvYmlWa2FLYzdOSUZw
+            MVdTdk5udXlYWVo4L21VRGhRY3haZmcKLS0tIDNqcXJrYU5jN0Z2ZlUzZS9WSEtQ
+            Ym13UWRuOFRVaGtsUFBlZ2V2NXFyNGcKRprrUq96RRwtMth+Fj7GvyBIaPQUAXwp
+            mt2JD8wDljAjsx5x0TbvZV1wBPNczvembHNRXMhPydiapl0ljnG99w==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:26Z"
-    mac: ENC[AES256_GCM,data:R/42V4zcCyLXUyOnWzsrNv6axIJY3xBxRkRMRAUcJU01JDfs1754BQcY7bplL3HXgjAODW52b+GzBf4eSPxWN66eYNyLKHBq/+v9s3tO20IXoW3xQ1cyqJYi5UGJRFbin05LJWuKDAYDMy2Saeyb8f9k8W4tL+idq9qiSCc1nx4=,iv:K5cKa+h6gkS1QJ9qNl5WCJXxwOLIQ0TVtJ4uiRvfRro=,tag:oEAH+C5vnagrzOphAYJSBg==,type:str]
+    lastmodified: "2026-08-26T10:23:34Z"
+    mac: ENC[AES256_GCM,data:Z26opqbJOy7oqSp7uy5Ts0IvjBx2DWYk6rwv0qWI9/UyZWXW1LZlKgtK+KVslTGRoNR4Vn1mRlYz4uu008rlqZFNCV+sjVs5JeIQhAOBUlGvJqpjahJFHXhl3Ifl+OMEBN32ebI+I2y/GYkxgMVL71luJaPnJdq0WOKEVngfv20=,iv:JEyJgocrszOW50c14m1iZ3fzUkG3wF8+9qDyCJHz/nI=,tag:RNNJl2PNvxWWv/MN3PC1OQ==,type:str]
    encrypted_regex: ^(data|stringData)$
    version: 3.11.0
@@ -4,19 +4,19 @@ metadata:
    name: mosquitto-passwd
    namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:ZnOMCQCJm3vw9G4Alx3KzAkHpnxl0VyfsE7c2a6NrXcZ/9Xp5joL97xxp+klWd9kH5bJrTuSq93ThZEoAVwFSAVBoeIfz6CYNiZbRfLxym7N9rQyt7iICsapltxoF+sFKp6VaRPxRFXpfzt5NR5s5qclGKjTyQpIRb3AD/Sf+UdXqjlwilL7E4cI4n89xBaxQjdP1tbJLsmmC9ONm0gYPmPozCSksD19QwTMpHjv0z2Nzn0/SANHs+OHe0cMsA==,iv:gXB3BNYVjIZ40Vpn7vbvzcRkMpyy/eHit/LHlM79tRk=,tag:jiKwST8/pQLYMl7BpNxptQ==,type:str]
+    passwd: ENC[AES256_GCM,data:vt7E5tL0e3esCFgM/ZAG8Qn6sFityKQ1mW8bS8F3Sutyd9tMGBuSmr2MxOiydsbMW4iNnamA2rTXDfY1XFay8BtM905h81q982r2kdDp1o9OI22yyLw7237Qo7Rs+PWM6Y/Cb365jq96q+xuLG1aIBxYXoFxMGXCTD8cjPIw0dMmfEcyP9D5vVj7TrGc9q/yYCarLXfFz1MUwzUpul591poUayrUPdVE7ziuRjCa3y0XlsPPUZRjdg7j/XD8Zw==,iv:wVJ8wfGInb3gQIydJhEfN5yDw79J5n6mHyjXlZVv90w=,tag:eNZf2sOHvX5th97A8+3hzg==,type:str]
 sops:
    age:
        - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmVWUzbEJFYm1SVVhBQTA3
-            Y0NicW56OTlweXJ6Tmk0MXRaMDRFa0JISlZzCno1S0NzcDQ3YTRHU1dwN0tpdUIx
-            ZTlPakxMYytqOUJhZFBpR3lIL25lUXcKLS0tIEhUYm1jMEJ6M2JlK2RsMmp1Qmdy
-            VXBJaWRSeFBBOVpGS2JDREc3RFlibzAKiP2P0ecBpqvOmA8/JX+O7NhF8DEXQUpK
-            aTGu0Afrjt9YwyEAyRG8yKFqhj2INsPn/QRMNIrPo1Sy3yonBAdgeg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBueFlmcTJ4MFIveHMxWFBW
+            Smo3NitDVW9NWkpUSklmQ0lMSlFad0VYZXc0ClNWbGZrdGkrdnFoWWt1YU5SWUxi
+            WFBWOHovR0FnT1VsNWxuVy9mNjJpOTgKLS0tIHc4eFl1U2dYanROL0Nqd1dPaWJ1
+            cXd2Ulp6KzJ3ZFRKRXVGOGNOdnU1YkEKbKTX4ZNuph3V0v6F1E6H0kS2KELLFT+3
+            9dnAAOvK/k6NtdbzCB3d6JenA4RpnBLsuceol8ovky7TIJAl7Kx8mQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:27Z"
-    mac: ENC[AES256_GCM,data:FRAOW3QUKO9QBGjBOGy3ZSM+r0C/8p+jjytnju8Rxaxe3d8QKdhDjZKv/AF/zlBFYXxn7ei8dSPKE6XgTWns0tA9SMbEBieltY1wUoYIYqJMxyPw1wov9P1jgzr1ojN2qcV9ltJcbB68z2ayDCiij90nC8z/yrbIegvj+WZT8a4=,iv:aIio4A2xk0BsIq9jJhoF+K4aKy3w3SaCim1J26ftBlI=,tag:d26UwQcLlxl/wOgFDZToqQ==,type:str]
+    lastmodified: "2026-08-26T10:23:34Z"
+    mac: ENC[AES256_GCM,data:XPh9lCQsjqNzIVct8PdheeauAVIhvsVgP7jpQG2ooUH1nQRQBm4WB8aqnrGGg5bldCriuJPKNUYVhwgusweeWBcJPDzmU2jLztqGLfagoz1IUeeuHKZpIFTmeetOHw/wtsaY2QgOMErQ1EyPni6qN6lblWDM0PkJ2DbPIvQsv5E=,iv:oFiOq6RjKU2xDzsqbBdP3NHkUOZ+/KiNkNG5Bp/O+MI=,tag:dXiS4SHgEAZOPjG/Ljb0pA==,type:str]
    encrypted_regex: ^(data|stringData)$
    version: 3.11.0
@@ -4,20 +4,20 @@ metadata:
    name: vaultwarden-secrets
    namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:CsFI/FO9tobfsi3OjfYsmrDLW46cCQv3kpQhCdw7wxLX5QFeAUjKY2G9j6/qNKAB3PuV0QaLk4oC,iv:JzkKtUPhgnNZ4ksI7KY932F7fzy0oEYbyWKDEeBMG3s=,tag:mjc4wAHKLjG+yVf7mHSrBA==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:eMPNd5BiQQT9pXfvm4iGUoLvMMSN4NelRgJ8cOMrZqb4DisL0U72WiI8AiB6advVwgzB2n+2And+MliMWLH0VMNUf8K9owHeXka2nwTcPgQyE7S0ikNijM6SG+roYn1LAfXYzXjP5CcM5pLeU1d5Wbns17hBxA==,iv:jzChHgLdrsgQvGf+lfjubCL2r5ECWuBPRsyzQcbeV5A=,tag:2MjjpxgOWLg353gRR9226A==,type:str]
+    #ENC[AES256_GCM,data:TFCzzj3AJeVaE80RNpuX4OWKIx1EPh+bFML1Rz9ZDqfF+S8ZMmj/8fQ27XdoB7i4+ye9ZjcvVOrK,iv:frIuFRg4OrjtHz0ROX4ULyYufOOFSWS55BC9372DtaQ=,tag:Oy62c8fe0U/l9xq8rvjjMg==,type:comment]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:mMlSTRUkq5LPw66izNJIEdN6z3HAEUtL0NEoob1UnL0oo0bA1xIcwsI/BwJd5y+lXPhFGeCFMSFq63R3kIWBLP4GFqI2ykMEQgOUDoYGMpJoEhpgWs5U6ibHn21qKcloGm4zTrHNWWmXEHiLZgn7A9GaEQyynA==,iv:VlzEd+Uy0oeOI/n/RSKcMhXMUfRwnmfNPglphzMKGPw=,tag:LYR7wNKJw0CXigxeP9QFfg==,type:str]
 sops:
    age:
        - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVZENmanVYY3F4eGFsdUVJ
-            elNhNjV0RitqdVhRZlR0V0VvZlFHVjBpcUdFCjFGZnk3dXFwL1JxN2pCSWJ5QW53
-            YkpQaDNkOVFPZUZ0bEtUYmVqUGdKbGsKLS0tIEVZdjRRWDNvWUk0dTBEeWpvZzg1
-            R2dsZ0hUa3lTSm9tcDFlWEduMUppTWcKa+eXQQP5/q6fsTLwcORs86XCT7Uz6Pe4
-            ikgIipBjtdWj4wX7FK+E4w5yC0J+2xrmgWrBUeha6EzUKj7STa16zg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzK1ZFQ3RSbTFqRDRpMzNu
+            L016RWM4WkVkNWFZYy90UGwzemNLV0NJMVIwClVSdE9Zck5LdGxzeUFXY0pERmVG
+            UDBhZ1RKMGxiOHZVOEViWklMUnFZdHcKLS0tIGtIakYxMkFTczZHWHBpc3hqTW5Y
+            R0tUb3dXYnJUVmJTeEV6am5HYWhnbTgK/fxADP7m5JwcjpX+58GvO7jmuGWrQCLG
+            stmNHqHpvZQ2GE2+dYflpG6eu4GTyaqdqhMyBGLGLpSgGWzR7it1HQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:28Z"
-    mac: ENC[AES256_GCM,data:7XdQH6Op1F9EEJq+s3vqKbU2ZD73KEAWoCo2HbcoThJppc7nKuCjdXUJ4J2tLC0wu9Dqmfse9ORJRXHluwGgg9amVIogZU8v49rdXeGoUe8hfROj+fThV39FIjUQYPNKi1Y0PBECO8+I69T6mpcOi13WiddrtGocVzZEClTz85E=,iv:cLIMtPX+H4SpvqWw6qRK//PR/iEQcNrUjpiaJ6nPec8=,tag:kgKXtPM+86pPZWB2Y99NCQ==,type:str]
+    lastmodified: "2026-08-26T10:23:36Z"
+    mac: ENC[AES256_GCM,data:xe1cXdcpb3O9l5gOUwQANouMD6WHr9ghsdv4nB18PsGHV2Jo3SQlIr/SXVD5lNUw8UP33ZW5KLWmvQkx7xzFKcQxTYG3KREE6B96sFwoHP5ZZRDU+5/R5UDc1MA6/IpzL1Lp+z+2ryLm5VdvEe01tkmRDVQJ6kmjRs/wDU7PdDw=,iv:XtTfVfYqRTTje35HttbkaPhtKnSi9uf3sBNJ4U2QHUA=,tag:6fsn1GUJuF0fFxADz+vpzA==,type:str]
    encrypted_regex: ^(data|stringData)$
    version: 3.11.0
@@ -4,20 +4,20 @@ metadata:
    name: webdav-secrets
    namespace: webdav
 stringData:
-    WEBDAV_USERNAME: ENC[AES256_GCM,data:BDFX3Fw=,iv:xd5oo4vf9oK44x8J/CZr84z1rGqHXGZ7guIGIViNBUQ=,tag:LokABy4keIOZAwd/GECI5Q==,type:str]
-    WEBDAV_PASSWORD: ENC[AES256_GCM,data:DEoGnuAlDC8E2E4715+m2zpb/auRkiV/UHS4c41Cc/PCF6bJw0Auj2/7ojUhcCqg,iv:0Ab59NavLMKbvLht0VSYsDMZhIB4C0AlpwWwpxiMPcY=,tag:vmb0ztBYdp+LV2XvG9PFJw==,type:str]
+    WEBDAV_USERNAME: ENC[AES256_GCM,data:93bdEhA=,iv:/Mwa/wokciqkeMjl2KFb30Ii6uq9IQxU9PFE6Ghk1Vk=,tag:zIVaaue1N2E2MnrCMzVu2g==,type:str]
+    WEBDAV_PASSWORD: ENC[AES256_GCM,data:P8Z2OUjowVE70/NZJlXj7jJqjnJJhCzS4NYmXR3JZda4nauqJoepmoT9psM217JB,iv:RXjc98leLVzDl2Kf2S2jr7LsBFrjPC8TflBpOJHrdfg=,tag:v3kBkcUoUsoFAh4sCj6FFA==,type:str]
 sops:
    age:
        - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsdUZMNXhqeGRjMWdEeldx
-            VlFFaFFrbjMrdjJ5OWJGV1hhaFFUeUQ1ckJRCnZYbGEvQTJaSkYranNTZHVLUnEw
-            ZTNlTmMyQlh2NzNXdWNDZ1VNMWlkK2MKLS0tIGhWUUU3U3lMTVJ1NU9SSHB2c1NV
-            eWlScmtNTXhqTVNFSm9aZUxuWjNybncKaY3Z1qSzmkxW1Qwx1NkwgsH5rP382473
-            Cr9pGF2Cg5FIJkwbnjkNpRp6+Z2Setc/sA1uWHjJM4BvpHXDu49p6w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuOSs5aE9KdmNCL1Q2Z01s
+            ZURld0F2SlhUeTlzVEkzbmIxQWIwRjZQTER3Cm5OWnlSUU12YWtMMlBWZnNsU0tw
+            eStGMmthb3hmS3BNbjZsNjFuYy9rdXMKLS0tIDBHTkd0SGY2UjdzbG0rRVBERkND
+            WFVVeUpBVEFtM3EzeERvZCtIR0RoQ2MKmUMGqjOAlW0tg+4cWuCQhewOpXCGUeW3
+            4RNZai6E1ZiNUmg7Dc5E2I3XsS/TMB1aO/NZa7UakeTLaf/eI3yUyQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:29Z"
-    mac: ENC[AES256_GCM,data:H0pIVZDiAWUvk7gyxhytUpCFb8QDISsNebUZnZw9ihD1jq17BuvJTGncab/seImSaUL8xdZp5oAZ7nF81JKBbxKuVywf1alGjfg40fL2aeNVeG6IH7S7891bcx2FTZir8jwNY8ooPo+3e3P56FHmElcj0yhVUG+dapgExB4XrKw=,iv:bA2uoifGHWbtahrRTL9j6s90kDUssATfncI4eLhfHko=,tag:VRehuFQYMTGAHaOikIv4iQ==,type:str]
+    lastmodified: "2026-08-26T10:23:36Z"
+    mac: ENC[AES256_GCM,data:wUVKhFCAZdSrpPBgzoLoPKZZIqvyqd6AkBHHVt8Y3dyWh/3SKFgYkoGmqQ6lEYSg5I+2I/VB0/Q/WUKETkWLf8/burZvsnvwBvC5ZhpqT6QGkSU3Ebxao6o828vTJb+fxJDCQ8kBPSoE/1Ks2vAqpyGCkq6wHwN8zCrYV2xtvjA=,iv:OvMyFKRMR5cHKASKIg7nNgYmmGGRQ20rt/w5hBuEHpo=,tag:hx4img5sp7D1Q0LAd7xEIw==,type:str]
    encrypted_regex: ^(data|stringData)$
    version: 3.11.0
@@ -4,19 +4,19 @@ metadata:
    name: zigbee2mqtt-secrets
    namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:IaVb6rFBMxgFFz3HBXpa+IJbkpS27c1grkTqpKKjqDlVznav3pFv0wLY6ZzqtjaAWNmL9PVhVRp50BGSOmqzCnndaSf3x5jn4y6tA0T56y73C0CaUW6uESQKixxU67ZqexC0HvC5nfDIu3ockgfJxAsJnu0xrAEMOev1l70=,iv:ItC9hxU4yDFf9iaJqMpp6dWqu1GLt3VBHWL92LiGTIw=,tag:yF7oUcngyx9RU3O1QcYvLw==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:XM/owDt1gSmsrtkjMfYQPR4GVh9Fna+67QXGms+nrNzUbADDojzTaaIr62INS5+f+Rvvd8ZYW5c3CBr6UMcsyhR449WZNq7OcIDFiyCleaVkQmvrOIRJIiBR+Mm0rGbY4W7P9WwWIbSTM3GZmbVDD3kQnB2KlKfX50bGx7Y=,iv:GLItHXXSMkp7cGBnCc7GajKqS/4OCs59uSzC17lc0fk=,tag:uIW8A2m8B4/aAC4IvpKA3w==,type:str]
 sops:
    age:
        - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYOURvMmlPNHJzeWFiNVF3
-            WW5OR3pQbE5hcDF0NERNbVNmMVMvMWNISEVFCllJS1dsUEpIRGc2eGxQQVZqME5W
-            REJNcXZIeE9sWHpPaWRUUFhQSm9BZ0kKLS0tIEt0NzFxQXdmWVJTT2djOUQ1Z0hJ
-            Z1dPSjdvZmsrZERuOGRGKy9PcXBqRkUKH2R8705+Xg6QJ1AWmv8WbhyxC6sgptcJ
-            GbQn5BLzeG+VRH2roQoMMWe4wSWZQRancJWBlolRX5Y/0Kh213BgFw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyNlVaRmZ6YUQxamFkd2RC
+            ZDFsQ0p5NTMyTlhKM01MNWtLL2lxeWN5TlJjCnZZNTFOMGx0enN2Y2lkR3J3aDUw
+            OE9lT3Y2bmd5NUhZekcxSldEaEs2TXcKLS0tIFd3V0lYbEFZdEdjRGlMaGVEU21p
+            SUZFUDB0UUtQV3l0eWhwQzA0d09hWkkKbiFrvnAyC+UQ3vvscP0kEncv5lBV9L3D
+            evu1kmd61dvtaJXAc2Zfa54sMw0+ydLUYakUNsf58UjO/hZtsosPmg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:30Z"
-    mac: ENC[AES256_GCM,data:P/TVUGtEGeoEiICD3OvqxMC0SY+OV5N2HopsFDgFb3vC7Pgasn+zBeqqpIJtI//Hn+jl+DoyU+TUZmE707wisPYJkdjtVZtO3qgf9aDbml/spPoItP2hh1iaRqsLv15vIFL4itWW5n7AfNZXcVI+R1jDe7bGypfnQX5K/x6Q2ZM=,iv:vWcIDEtkYBKhg8CzZ+ElA4r/zum4Xh7WUAoQSd68F7o=,tag:X2iRPrD1dvWMbnX/tbo8Dw==,type:str]
+    lastmodified: "2026-08-26T10:23:37Z"
+    mac: ENC[AES256_GCM,data:TMAJM5ixoJptCKfyxjH7t3MtfOBYKEwCiv6DEfkpfXzljIOOcKDlfbynu2lWLdSQkvLEQOKZU5+He+pCjSOXZ9h9DZtgImNpkYrJJrmvMVkLxAipAzy5gNCrmNtg+k2GVZ7vdmd2WOA052FBwhvdomXqyT6twdmy500pJrm2j3c=,iv:jv6BkH2UZzGj1DtwIzDTZVuaJr/E2+e6itWUnaUIkSo=,tag:cvxWaPeCKuPOiv1vbrzqOQ==,type:str]
    encrypted_regex: ^(data|stringData)$
    version: 3.11.0