diff --git a/clusters/base/apps/authelia/secret.enc.yaml b/clusters/base/apps/authelia/secret.enc.yaml index 9e61aaf..d04cf9d 100644 --- a/clusters/base/apps/authelia/secret.enc.yaml +++ b/clusters/base/apps/authelia/secret.enc.yaml @@ -4,20 +4,20 @@ metadata: name: authelia-secrets namespace: auth stringData: - configuration.yml: ENC[AES256_GCM,data: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,iv:S/IOoLyQNY3N9FvrcQn+z72wo35M6ztvvRehq/2mEcg=,tag:mDj58KejRP8nl1/jPhnAMg==,type:str] - users_database.yml: ENC[AES256_GCM,data:zO+i40zVp42vqV0frISgv2WDwmKm2zOwP+SfkY9Q6ZTUq4rL973QRTrJtx1IxXu5A46Mf55O7uxvfm5IHnhoOLS+TI1PEeS6VjiP/ig2+x7O1DgWJN2BePm8w6iypY0LiIXBsL+yVRYAMYGIcNd1KOYdFKytopbZ/fjOsOsMGbEg0tH1WE37+r9Nfp4ZFoGPW36Sa+1VgRnaHK8ac7xKL2DJekHSTAuFyX2zHXgEB0to2HZJzpfIdvO1jjeqlVDyA9nxSgae2+1Uy5QUz2s4mPMfemSfq6T87WMvE2OenlAZmYBT7fFtxDsxxJWUiRIdQcVd8vf6D93H6nHxjMzhw1RxTdQ7mDU6MfYjSIjUsBCsJNkY52Y25q+oD/uHgAJJSbLfB3xBLGnIk1m6l5chJcsW2PwsLXPwecHmFRQtKq0zQgNo5W2nBJ6mTOK0ZdbdMhwxGyQMSGH4MT0IGiY1Tky0XVCGr8ady+p19WWWlMqqnfXc0xAPgsoWHnF0by91fe4QskBvn2K3YXp/o7zz2FmPZwD8WLQeILk1zhlvxu0u1jTpm9gSuA2/gEJn52TOOuBHq5XpQwGmy5RnZ4bqzda9P6dneSQnNuQcQM7Q3eewRthsylM/VRFtJZo8eKFGEBwzJx2HWedqYbtvA2byl4oNyKiD3lw1GHWsfOI0qj6nFpPVbS0knSj7gi8JQXsVKGUm9OcxfC2rBCM11is1zI1hcLQLi3emHZ7bQzaAA8OLqZBBOpggsTzX1PA4YdjMXQl3KqR4YAYP4r6AFNH0J3Y8Jk0aVkT7X+mSx0FV4OpwmjBBqlB46gjsBULpC8oN8cgFhalU2ETquDNjzVqMKSfySNem1CwXOhWFC2RtTJ0p7mciXMR+7Kin1YjPnzTiVARAU6yDsIewJ+LZxKeKftwWkvPRX+Dr/Qrg9oz4RE2/ckb3z8ZUFGEH7ZFVEAlp9fyss7NxiWMShrnmDCGMpDXvlrgYi0ClswbXL/ydh+B0To6IWGfkRLfkU44dELbpMcZzzwD1R78odAdWJPCzsG66qOk0ZbzSEfpyMimg9bDKNcsNjUy3iH0+m8E0swgOjG96Sm5cpAhne7kbvcZubvBYDhvCnl+g5zGvL7Et125FeWR93Jw6lt96AVSARkvPF6/sNYVDrNWpurooBG43+gKRo89VF6zJe3pcwS2RNBR/bS7lVp0S0FCHc14z+XhegeTaVLjeaY+bcClb/NgtEfjsu2Obpu9UAoCHZcXfhYF2es8ScuqmU7rcaqvThv+O86eRtgi6SkUkLvYFBnLolzwNCAhKfK5XVLJR+GyNtd2WcnEfSbr611f/VNl57N3XFAOshK2atGRR5wMe91++sdST4ZAZNphfCiEPhK6PrmIALbVg4Rtd3PptVYYEHhpZPq3UauUiSZw4bFMlnpYvyHmLT2oWVClyQH1CDF2zx233qxqYgzbmuUPoc6BsZyxGxHNSzerAA9wpDTc6agxi6Q/L8vmL9MexVCPxJ1tNn+oINxXgOZp/4aJKoBrSGOLOs6bTbIFJ9xfXqpE6S6UiI/SXP5N4yd3Se+G9T41u4HTnCEZLjSHwjUdRX2XCcfUZgaG/IysE7BCFWy0yjl/uJXAygku6voj0n1k4vtTNcHekq3Fn6P6VKfXJon0PCRIIdwGKKPIv6aMilN3bt8GmNeNfzCNCbdl65rvipmBDTrrqPK+gqMu02Cg3n+4Qeg==,iv:Qdm4jln4oD8hqbQ9HOYCDToj1itCfEuacUrm4TLfrBY=,tag:yHaoqKOrGwrRKF47UwifDQ==,type:str] + configuration.yml: ENC[AES256_GCM,data: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,iv:VmJSENaxEI5IJtjT9ifQP9ghTWD99ZwN409cdMr8J9o=,tag:h3GeHuZwSTKl/tFYhtkkig==,type:str] + users_database.yml: ENC[AES256_GCM,data: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,iv:x1Jrj3OsQLYdeyQXOqLQQk4joHHMybz0HbYJ6DMXjX4=,tag:YpAb16LYthhyDrpdWv9vpQ==,type:str] sops: age: - recipient: age1ncw6uagcgncd5m2admqxt73ey0mcd99jsw9sa9lcdv3gu70mcerql8ya0k enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlVmFvcFlCUS9QOFFCcjdT - aDdtR012RFkxaG44d0pyelJUVE5uNDF5OVVzCjFkZWgxZ0wxU2dVcklQM3BIWDg4 - TGY4eXo0QW4xeXVrMlF1OXg1Z2ZRcncKLS0tIE1iUkdML1QrSWZPMkdiR3B3ZHQ4 - eEtyZDlWRVFWZGpPTXcwaHJ3NnpTc0kKOHBLmjdmhg+8qEIMhuQtIlfUIv0Gfg0T - AZpxFaOy4BH8JIbSS0jQPRXt1lRejpSllWNqIOuMBW6gy170+niRKQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVSlVRUnJDUU5vclBhUzdt + RE56RXE2ektRVzRXbG5MTGxEc3VmWVpuT2h3CnFsbFA4YkV1dXk2NVFvdGgvanlH + cnRvVTM0bDRZeURIWjUrQkV5TmNPWXcKLS0tIG5GUzBwTTdpVGM2ellTOWFtbkhV + U1pyNTZtWUMwRlNwL1NrUy9KQkU5OTgKuNicA7wHdKKKF/Jc0xvIhlw39eExBepy + pJ3wS0hFTVfw3ogpKU+tU81WkGcRMAYtu0yDWDZkzjYCqyELw9QqIQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:28Z" - mac: ENC[AES256_GCM,data:NOnwdff1Lu4qVxxeHGjWvrXMLgCczu6wpDDlpn3FX1FT6VUaP+H/2bR/t6IsKF9nf8JLVZOnGpMRAmLKVYUVb6p+h6v57Hk6QM6Pp380Ersx56GtM6wnZhU/RvP5dpzpZ6QCmnwUOXPh7FWCzb/V9+DLQa0HL9HC5yA9ikdqsH8=,iv:7BBNXjKCMLHvMtAxK7i+rMQeUs0kfjHNHm9pNKH+jIk=,tag:uC+Pnr8xfVmq8e8M4p74zQ==,type:str] + lastmodified: "2026-08-26T10:28:37Z" + mac: ENC[AES256_GCM,data:Jn1fkxBeyp4r+cYLNKSmbGVP+fNMaTnnijrcnO4t/+UyCDu1642wKdfygxCBAa1DjB8BWTEHvlYu/AQo7IZJEjvc70OHY0jR2rfdR1dkmpL9GJskVOgJyqJGl/lKGB9ohsx/n2W8YfstQkpC755eSjZhIUxLFlz0sKZeYjctzaY=,iv:Nga1PANtzdWhB/bc5j6jVjrvyrITVWPAxe21GNJLP0Y=,tag:Is7o2YBZyczSYeU/+kRZ5A==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/davical/secret.enc.yaml b/clusters/base/apps/davical/secret.enc.yaml index 9b12374..2a878d3 100644 --- a/clusters/base/apps/davical/secret.enc.yaml +++ b/clusters/base/apps/davical/secret.enc.yaml @@ -4,21 +4,21 @@ metadata: name: davical-secrets namespace: pim stringData: - PGSQL_ROOT_PASS: ENC[AES256_GCM,data:/PTuUu4mxQGnwYWXu2F+oSZs83bThqrMmnVg4QEFs5U3vRELC1Y9B7ljHQmfa+Dy,iv:mROnkAdrBknqb8LE4dxEqd0t+ikKLB8bmBjZYGHVYT4=,tag:XxeFtw3V4wa/39Myh+AsZQ==,type:str] - PASSDAVDB: ENC[AES256_GCM,data:n/hQIuYYId06jg9FDjsQQuWIHrTV08hSXfKspxPjJtpkMmeAVRAKUl7W3qMUHHTG,iv:NrRa3GdNRYq2dmKsvd3B1sz0goV6NEB4JvL4/xDlSXI=,tag:Cg1HPknlk9rg8SxRktrEMg==,type:str] - ADMINDAVICALPASS: ENC[AES256_GCM,data:Z+RjBVGEfFOvob/H3K7gvYsYmPKWaGpFh7e1zr0s8dI=,iv:81z0pLTjjViI3WcxJNjuMgyS3Dqr7xiFsGoU7DtWYQQ=,tag:oey5cwF3wUEr+iteaNWXvw==,type:str] + PGSQL_ROOT_PASS: ENC[AES256_GCM,data:h9vHW7F0u+hFdLAOHa57ezQZi9sCWkGoWI5V94QZ1Z8MjG3w1fuWiW8IsxiAzp2R,iv:WGUDhu0cNaT9kPtrsmxb8AlC17PaJe65QdXsBNLTSEQ=,tag:hpQJi13BIhTccB22ZOORgw==,type:str] + PASSDAVDB: ENC[AES256_GCM,data:0BvDh9RoSD6vSWnhg1U0E3Xhg7WdRAw57SZHGypaFx9sIkifaXuqewZ4VF2kTzJg,iv:s3HIEtDAjPaTPuUlEe22XP3a9pl4SmvQm/lUN67F314=,tag:rtAHLR8p3ER/yiuoAqLijA==,type:str] + ADMINDAVICALPASS: ENC[AES256_GCM,data:DWbDyZjLT+Q+ZsrGKTK/Y6YtUm/5/lNYyyVnngMt+qc=,iv:DPK55weHdS3m/m9dNSRpAKFFFvAGdqHS5bsjgx+V4UA=,tag:wa4wnrWberwjFtUlGdp0DQ==,type:str] sops: age: - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSTHB5TElUZXNNRjZCVC9P - dXhub1JVUGY1MkR6SGVvYmZwYVRNTDUvNWlnCnZucE5mSS9HNE4wWGxrVUNucVla - K0gwM3Rwc3NqbWh0dFdwTGF4TjMyVFEKLS0tIGNUUFgyajFZbldXczR6Q1RnUWN2 - eFJWZ0J1TGF5RStON2ZTQ1FqSGdCcHcK6ltsoYLyLyhFIdvI6l+BzlOyshv6UXlf - ztyD6II3nK867NC+3U8ydhVak7S26ZcV7UO9z7YzZtglW6+nX9OfPw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLa2ZtRENMREJyYkdGSVox + RDBNT1ExMUVoSVgvZ0IwbHNkVEovcWpWQjJBCnppZklMV2hYaVZqSG5rWGhLbXpS + bkRXajFuQ0kyQ0UzWUtjVFRVR1dMTGMKLS0tIGR0NmphVE1DaHhaUWNZZ0lNTFpp + RzErcHQ0T2FlckNYVFZIelFHOXlKb0EKZEiLIW9NlPX8I85jk6ZAG3SGFVRPclhM + N/cnWr71Pf2EPhok6cPW7wOz6F7PfZYC3KGExwKQ6I/VxDLcx3hzew== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:29Z" - mac: ENC[AES256_GCM,data:nkHRKLOf3XJGIxFR35xZ6Kz39Uqj7k7s6a9o9uyXou6X4Azt0JY2/g8bPlmvHc36FMAsoh4ZkcYkGfHggddtNhJS633bbct0YJY9b9LSJr2S+HNZrJgMstns39nRNZCAFeXotITCe2QtG1+Xj3oDjHDGdQWDqapxLKW/Nytv93E=,iv:gNDGnCoXhsE1aZABiTolsm55dG3SNIE8PFtgomTUNJs=,tag:PvCQH2bELO9YfMTrLZRoqQ==,type:str] + lastmodified: "2026-08-26T10:28:38Z" + mac: ENC[AES256_GCM,data:0tqJuh04qqm1qZHVxH+CUiEq9mL/6ooc4k8yFC2o8kMKIenq4u1TuaqSRiW5ot+IW0O8EDo6DjE9h6++0j6YLubNmUczcHIRIgp9uIUXcn2MpLiL+dRlpzn5uZ3rGnHAGGs2OIjw9k5kBWEAfxyaY3lx5AS3RsdEnJ1arJN1pr8=,iv:eZoMuwoyxekq5096uQbvTGfVx87iBUH8GG0cQUtI6yI=,tag:z2gNkHs4gQ8SYkWrY/IFWQ==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/immich/helmrelease-server.yaml b/clusters/base/apps/immich/helmrelease-server.yaml index 7a87d2e..b94fac0 100644 --- a/clusters/base/apps/immich/helmrelease-server.yaml +++ b/clusters/base/apps/immich/helmrelease-server.yaml @@ -34,8 +34,7 @@ spec: # already there. Running it as a restartPolicy:Always init # container (started, gated on the startupProbe below, before # regular containers) guarantees that ordering; a regular sidecar - # container racing "app" on every pod start does not. Same - # pattern as clusters/base/apps/nfs-photo. + # container racing "app" on every pod start does not. mergerfs: dependsOn: - fix-permissions diff --git a/clusters/base/apps/immich/secret.enc.yaml b/clusters/base/apps/immich/secret.enc.yaml index e94d02d..a46c25d 100644 --- a/clusters/base/apps/immich/secret.enc.yaml +++ b/clusters/base/apps/immich/secret.enc.yaml @@ -4,19 +4,19 @@ metadata: name: immich-secrets namespace: photo stringData: - DB_PASSWORD: ENC[AES256_GCM,data:hQbH4veR4gJOZH8zY71mqinSrKU63KkEtjJaKiImjCU=,iv:oVfNqGyHEGZzb9kCnS4yUC5nnXCCm7VYJ5SPwJn7AyE=,tag:vbe2rQW4V5MeZqVx6/U/6w==,type:str] + DB_PASSWORD: ENC[AES256_GCM,data:EaWBsfoQfWIKnu/YspqxzFMo9Aax3QfqCD0rGvpWH64=,iv:CbgYE8hs/Y79KTNnYiK71c2OxTc2DKMF9uEazW6KFHQ=,tag:9ZUSk7LY3y7m/7gyjcS7Rw==,type:str] sops: age: - recipient: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkOE1oa1J4bnU4eDdqOHZY - YmNDeHRKTzQ1TWI0L2pqZ3lNTkRaUVQva0drCklMbHU0S05YakgwVXE4Q2RFTmw4 - TGU1bGFIQ0ZjTXpEMVk3RENzSWlUTkkKLS0tIEx3UTBXTGRvVGd3TjdETlVFWUdn - M0J4TmZCam5jOHNnOWlqOW9hTnNvRTQKR2X0uze2pVEmQ54atawqZ8P9RL9fSQyX - IyBSB6KIj1LTtlDfTerXZ8asJBl/FWAJNZMTsL1wZq4+vTOdR/BvlA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0TG94VzZCZFB4d0xOK2Vp + ZU56K04yT0FMMGpTcEs2am9naXNldXJrZVNjCkR0a0JpSHNwMlY3bEY4SzBZci9H + SnJ3ZVBaR1VhYWZCaVVPTU16Tjk5OUEKLS0tIEh4aDlrKzJjejliQ0liMFZSMTRh + aUIyU0NtOTBFellqa1BlT3REOVNLTHcK+EZy78BFEIgmlkOKNj+PrD+UHvTsY+lw + k59McaLS6aClkCYz71eTnGNQnWz1d+aTeqxkmwHCoKH7a3uspAn78g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:29Z" - mac: ENC[AES256_GCM,data:M2y12n6Q2fI7kqi5eAIZxGlwUemWsnabXmvRHS0C2AGN5b00sfxSti1M/fZXP9ubjZR+Ms1D0dta8dyAcCPdSNQMzGew5x4Cdv6CLkcXaTbORI5Bl2X2E8XRwDeZYuM9F4hpPnXa02MaCFQyIQiLyhk6m9xz9GlNCqCSejZOr8M=,iv:uK3ya99vk0AXWVyvA0B0UMDmHEJUOOGHKydaanPGkLQ=,tag:lRtmmkv8bCh6GBxtON7L0g==,type:str] + lastmodified: "2026-08-26T10:28:39Z" + mac: ENC[AES256_GCM,data:WAxa4Cn/zwcsYSvvYOd/WTx8sHJjsxLqY1fbDn2wp9PifrGwkFI13wZQEdb/kJoBB966nJjXPd0sFOjwWhk8UsroFDmNnGtmxnSIaxKuv9+GmqAa9oTWYzwPkWcMI5mA19U5lw198eXym7fK3WwOSJZtSodRrA59ZCUwsJ7PKsQ=,iv:rvzBbbnZ74lWU/dnqxirk5irHSirNId5s2uehRGEygo=,tag:dvf7mDj0N0kg18uEDkkPkA==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml b/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml index e26a2de..9ca5a9d 100644 --- a/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml +++ b/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml @@ -4,21 +4,21 @@ metadata: name: markdown-vault-mcp-secrets namespace: mcp stringData: - BEARER_TOKEN: ENC[AES256_GCM,data:/5wHS4TFUzbVgvL//s7nIor1roI8LaEI92ag37bp5APhICqCigdNHCDv8rr3vUf+Ss+CxZoYTNkgZsieus36Tg==,iv:i2H2rL434MTnlcRLq+lI8mu7ao7DmDc/TPT/xB6q0UQ=,tag:DAN4aUknohmHF/kW5aFayQ==,type:str] - OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:oleyhjc47S0he4zsU2grRQZvfXntT6hC2nqTGayQT++OMACMI6W1VoeyTYu0AJFIIYBU5bldLnXnJZyOlEGkmA==,iv:qjeXO1aFsRSboxgNYL0/RvKUSSKO+zevEhcKZpJlMCo=,tag:JzZCKxJfoUrge0PTB5nb0w==,type:str] - OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:ac8Et8AxqWJIElTkU/5mtnow7LCmCDungLtEGI/7hZwr/KGtKX1q4rppmBhgb4odEfMjG2yUNXbHqGbDF+nX8A==,iv:PQkSr2/sPGk8FoGkuRFcC+Iy1FjhHa7vlTeDxKKJo6Q=,tag:rfGcZDUExxWViCwkwgVSdw==,type:str] + BEARER_TOKEN: ENC[AES256_GCM,data:ZYZD68H3J7iMLvNBUIx0AyW84ax7DmVShPht2i6SuNLDtDp2BVEHmiYaeTrwNNqVWHlOw962n9AFNHNdCk4bEQ==,iv:dgrJelpseiJlqE1UFrV+FcTPPPGp5Zi7tuvhOUyUb+o=,tag:FXMbbQw5YdTPoBJOZUZm3w==,type:str] + OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:+v7Z9nzWRTueVpynLFqIXlO3A4G/ahGWiW3jgFAU+AHec8vcRwEn17tDGzFZC+pqOvf5akabhQY58dQPQSwL1g==,iv:XDdrWbD5hBRzmU6Yi+TzIrlPOIwRfT4saa2VHoxlzwc=,tag:0ahp/dlWO0RRq5Onv4VkaQ==,type:str] + OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:RCbJpLoOH4Oaz4tKzvcrlT9ERlNIKgziUQwZzOdrJaylME6ai/SePIFUQenHg+Ecie//WwS6hnKH0MZoD/0LNg==,iv:lN3TRvneC+UKcY88n+c+vJVGLpDdNSPUaKI0n7eixdg=,tag:dOpknPqy42KjhOA3KoBDFg==,type:str] sops: age: - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VjNiM2ZTMGNPdTdPUnpM - K21uRUJQaEtDRW1SRWJVR0FNSGcyL1JIQWc4ClBrd0dQR1ZlQWx1VEdqRDVTVUwv - QVZzQnRKcUZYNmg3a1dVQlZBQnRtZEUKLS0tIDM1YUUrTXR4Q2JoWXpyZkpPdFRp - TWkramFkZjFhUG9JamR6RXZIRXRNSHcK0d30Tdc14MsJ2lzbv8ftj0VP0IM3yPDR - Ow/c+IA4nz7YMKeOfTGF5sd4VWVwFN0zBxPB4i0LECa56HZ7n5yCnQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrMmRvOVBGdkJkTkczU3Vj + S3VQd0lha0pNelVVWW9wZlRDZkF1YjBGeHhvClpZS2piM1I0Sit6NG9WVjdjSmlU + UzUyam5wMWZYL0w3eDVNQlgyRGNJaFUKLS0tIDJSRzNxRVRlUnlKZUMwaUVzODJ2 + R3hlLzdKME9laXg3TUhBSXdWWXhqcFEKNan9DcpAOusXDKCOAINEWrtS3vBv9KTo + 9P9R9VgMGXezKJlNmrnTdjfxqLmxwqtmWE7SQwhJk9yzZclg38CZ9Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:30Z" - mac: ENC[AES256_GCM,data:PNOwmif0L2j/wwYkLmgJNBw0Vb9qMpDr8+1fhZZ8CvHuVurZ4ycor5xElV3UTUGun1DAlU5cPhud41GQ1MvUADbVwzPTtlQNkC/8vuDRr0nQIhx+UaGRB+6j/5gvfKqigauX1aeV2xIoF0uZdoGY1g91tdyNoIS6CD1l61AS3GY=,iv:B/HkBrHT93lunnGU84EL05gvaTFzyU3cwBSfeu5t22E=,tag:bIGrLJkUeHJ9hEtE0LwXNA==,type:str] + lastmodified: "2026-08-26T10:28:39Z" + mac: ENC[AES256_GCM,data:SLEQmF/2OL+3HmMkFLFHEL++5cHw3hW9JFTOIaJEKDii/HdOhTy3JDlBjT46qOksKW8JHzuZAgaLhU+dgmJacCXVESDtvxAKhItfJshjgwuTzo6KrEFtZO0If+oX5q2kqnogza1o/HeXdhCWjo2hKz1T/OVYwsP928atLrGRZtM=,iv:DbT55VYmeFspcrTW6Y/u4/138h7Zk08jr4a3i7EQsPc=,tag:FrkJ2NxQNqBdtHg52zq7rw==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/mosquitto/secret.enc.yaml b/clusters/base/apps/mosquitto/secret.enc.yaml index 3ca0d43..101a07d 100644 --- a/clusters/base/apps/mosquitto/secret.enc.yaml +++ b/clusters/base/apps/mosquitto/secret.enc.yaml @@ -4,19 +4,19 @@ metadata: name: mosquitto-passwd namespace: mqtt stringData: - passwd: ENC[AES256_GCM,data:zVGrqFMcQKR5vNAtjPzVriJlsv4ivyo/2QC18YD681aY1H6Iqrz3SwNYoY3ddE9wK4/dQ1304UkgOr7YXbYbMWiF0MfE1sKiYycdk79IqTHWxAWZhXAwZVPiWMNoS8M54oPQ/2bzoU5+gvBHKSG42omvWF9JajDZ5rzOAtOszlC7LgT/EVZbiNWKkElpGqmYtO68o4jUa2S5znsV4H1wv4KOdqJFXlv0j8L+73yXhrslH5xMaCwbvmVNqAS2UQ==,iv:8EqQ9pM4jrrhzyx/q8ndo6Wzby+xq+ChZKwsP+IfVTg=,tag:Nog8bBqw/5Q2FmdD47d2xg==,type:str] + passwd: ENC[AES256_GCM,data:vx6rVXF4dpXvkso3A2C3h+xugSLrNptZqjwWvPWCl+Z1NZTK0LBZYgD+l+K+2Zy3Yp+VTy5vmdkeQp3EdBoZKW7z9DktPQ+RQ1B+s/IuJZ96+3mHzCbhGrOlmWycPXzDznWIrZipptGzS1jWOvMryp4GTMr3uO5JiTlNpkAkHi30R99VaLWW0wASkjDvymPUFJGzpehUrxLHrbWxOxd7O2SEVIv0prCfTn/y2iUYIqCV9NyfdiRKuHYGlggCgg==,iv:ddtwmwtWgtDGuZkA6pcX9388XdCC/OF4KKb1BYMCn20=,tag:me8zubD5vPfCzGfeNRepMQ==,type:str] sops: age: - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0ekRwV0NJV1JFc1lVSzQ5 - QVduYVRaVjRZVVdDL1JMZWpzR3FwVVVwWVZZCjdRQVZIcGpWYXBselQxWThya0NZ - TC9DdTYxdis3MTZBU1NJYnZhdkdRYWMKLS0tIDhZR3BjTEd4TEFaUlRXdi9QcVlh - MlRCbXJUakJueTVTa3VGR2pVaktMZWcKhsOXlkRM6Pr5S9LJt2yYdMJxtXQfvzV8 - 2fYO1EBcsj94PqflpGxPSpBjLvvioiMdQ3tsSSIaaznWYPX5YIiQbg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSQUdNai9GZ3ByaHZXRWRz + aWJCbFlKMXptR3RRaXczQW5sLzZNWSt1cVVzCmZ4R3NEZ09ZZ2pTeC9ZQ2thMElV + M245eDdnZUVKOXovSFVwcUpsRHlGc2MKLS0tIER5b0ppYlVDL3RQLzBUUklUTGVi + U1U5VUZFc0tpQ3V3MkhXcGl6aldwRk0KbmHp7whZvvBHpQcBRxyhHOD3GqrUqnzj + gepSvnkBGPy4xS/833RWMLiaJOjJPIwTBKIwD2Yq4xyNOoxEZ/4gTA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:31Z" - mac: ENC[AES256_GCM,data:KARZJRsC4DmzVjdZSonCACCQVOQ72sAYjzD6Wojap4EFjLE0CBQMb9ZguRE47aTO6b5X7s4ltNlYJ6LsAtCyDA3DdggYaRIwNjotzxc7LzRXykszTUgjqN5cSBgf30NLXH9h2PaU54vjRwhOedAOEHUTR/MoxlkKZ/ryoLAtJpk=,iv:qV29VID24dPRHVY+RxpZX2ecGaJTBjxujvAHfsb03Dg=,tag:ALEiuI7REJJa9qE0ZJ+9Kw==,type:str] + lastmodified: "2026-08-26T10:28:40Z" + mac: ENC[AES256_GCM,data:GwTuNbW+Ys1WTsciqa78quN7lxdMuuiL4UiczSqEY2uLZh6A/Hxgh/ioCtmtG2B/XiUfwqf2F1O7rZ4WXXoAl0ARh+x5iWjC8tVncMBK36RGN//iIOFY7ctsmwPiGHshPdRasgXU4FefmzyjavpC470xgAkyiMRN18dfONHovro=,iv:Xq0lJQEiEpJoSr2kgfbkQUyRxK4Ac0Kuhrbt3ufi+7c=,tag:VeZ/HayMq6E5u6ezz3fsjQ==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/nfs-photo/configmap.yaml b/clusters/base/apps/nfs-photo/configmap.yaml deleted file mode 100644 index ca23170..0000000 --- a/clusters/base/apps/nfs-photo/configmap.yaml +++ /dev/null @@ -1,95 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - name: nfs-photo-config - namespace: nfs -data: - ganesha.conf: | - NFS_Core_Param { - NFS_Port = 2049; - Protocols = NFSv4; - Fsid_Device = true; - } - - NFSV4 { - RecoveryBackend = fs_ng; - RecoveryRoot = /recovery; - Lease_Lifetime = 40; - Grace_Period = 50; - } - - VFS { - Link_Support = true; - Symlink_Support = true; - CanSetTime = true; - umask = 0000; - } - - EXPORT { - Export_Id = 1; - - Path = /export; - Pseudo = /export; - - SecType = sys; - Protocols = NFSv4; - - FSAL { - Name = VFS; - } - - CLIENT { - Clients = *; - Access_Type = RW; - Squash = No_Root_Squash; - Protocols = NFSv4; - } - } - - # individual disks, exported alongside the merged /export view so - # clients (webdav) can also see each underlying disk on its own. - EXPORT { - Export_Id = 2; - - Path = /disks/base; - Pseudo = /base; - - SecType = sys; - Protocols = NFSv4; - - FSAL { - Name = VFS; - } - - CLIENT { - Clients = *; - Access_Type = RW; - Squash = No_Root_Squash; - Protocols = NFSv4; - } - } - - EXPORT { - Export_Id = 3; - - Path = /disks/sub1; - Pseudo = /sub1; - - SecType = sys; - Protocols = NFSv4; - - FSAL { - Name = VFS; - } - - CLIENT { - Clients = *; - Access_Type = RW; - Squash = No_Root_Squash; - Protocols = NFSv4; - } - } - - LOG { - Default_Log_Level = INFO; - } diff --git a/clusters/base/apps/nfs-photo/helmrelease.yaml b/clusters/base/apps/nfs-photo/helmrelease.yaml deleted file mode 100644 index 3d7025e..0000000 --- a/clusters/base/apps/nfs-photo/helmrelease.yaml +++ /dev/null @@ -1,240 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2 -kind: HelmRelease -metadata: - name: nfs-photo - namespace: nfs -spec: - interval: 30m - chartRef: - kind: OCIRepository - name: nfs-photo - driftDetection: - mode: enabled - values: - controllers: - app: - strategy: Recreate - podDisruptionBudget: - maxUnavailable: "0" - initContainers: - fix-permissions: - image: - repository: hectorm/nfs-ganesha - tag: v10 - command: - - sh - - -c - - chmod -R a+rwX /disks/base /disks/sub1 - # native sidecar (restartPolicy: Always): mounts the two disks and - # exposes their union at /disks/merged via FUSE. It must be up and - # actually mounted *before* the "app" container is created, since - # HostToContainer propagation only relays mounts made *after* the - # receiving container's own mount exists - it won't retroactively - # pick up a FUSE mount that's already there. Running it as a - # restartPolicy:Always init container (started, gated on the - # startupProbe below, before regular containers) guarantees that - # ordering; a regular sidecar container racing "app" on every pod - # start does not. - mergerfs: - dependsOn: - - fix-permissions - restartPolicy: Always - image: - repository: ghcr.io/hotio/mergerfs - tag: release-v2.42.0 - args: - - "-o" - # category.search=newest (not ff): getattr on the merged root - # dir has to report one branch's attrs, and with ff that's - # always the first branch (base) regardless of which branch - # actually changed. NFS-Ganesha's directory cache relies on - # that mtime to know when to re-fetch a stale readdir listing - # - with ff, writes to any branch but the first never bump the - # merged root's reported mtime, so Ganesha keeps serving a - # stale listing to NFS clients (confirmed: mergerfs's own - # readdir is always a correct live union - this is purely a - # getattr/mtime-propagation issue up through the NFS cache). - - "allow_other,use_ino,func.create=ff,category.action=all,category.create=ff,category.search=newest" - - "/disks/base:/disks/sub1" - - "/disks/merged" - securityContext: - privileged: true - probes: - startup: - enabled: true - custom: true - spec: - exec: - command: - - sh - - -c - - grep -q fuse.mergerfs /proc/mounts - periodSeconds: 1 - timeoutSeconds: 2 - failureThreshold: 30 - resources: - requests: - cpu: 50m - memory: 64Mi - limits: - memory: 512Mi - # runs after mergerfs is confirmed mounted (see dependsOn) and has - # /export, /disks/base and /disks/sub1 all mounted too, so the - # /proc/self/mounts snapshot it takes covers every path ganesha - # exports. ganesha's FSAL_VFS resolves each EXPORT's Path against - # this frozen /etc/mtab, not the live /proc/mounts - any exported - # path missing from it (e.g. this ran before mergerfs, or without - # that path mounted here at all) fails at startup with - # "resolve_posix_filesystem() ... No such file or directory" - # even though the path is mounted fine in every other container. - mtab-setup: - dependsOn: - - mergerfs - image: - repository: hectorm/nfs-ganesha - tag: v10 - command: - - sh - - -c - - cat /proc/self/mounts > /mtab-vol/mtab - containers: - app: - image: - repository: hectorm/nfs-ganesha - tag: v10 - securityContext: - readOnlyRootFilesystem: true - capabilities: - drop: - - ALL - add: - - CHOWN - - DAC_OVERRIDE - - DAC_READ_SEARCH - - FOWNER - - FSETID - - SETGID - - SETUID - - SYS_RESOURCE - probes: - liveness: - enabled: true - spec: - initialDelaySeconds: 2 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 3 - readiness: - enabled: true - spec: - initialDelaySeconds: 1 - periodSeconds: 2 - timeoutSeconds: 1 - failureThreshold: 2 - resources: - requests: - cpu: 50m - memory: 128Mi - limits: - memory: 512Mi - - service: - app: - controller: app - # cluster-internal only. pinned (not DNS name): webdav's PV mounts - # this over NFS via the kubelet's in-tree kernel NFS client, which - # runs in the node's host network namespace and can't reliably - # resolve/route Kubernetes Service DNS names - it needs a stable IP - # it can reach directly. - type: ClusterIP - clusterIP: 10.43.166.34 - ports: - nfs: - port: 2049 - protocol: TCP - - persistence: - config: - type: configMap - name: nfs-photo-config - globalMounts: - - path: /etc/ganesha/ganesha.conf - subPath: ganesha.conf - readOnly: true - base: - type: persistentVolumeClaim - accessMode: ReadWriteOnce - size: 100Gi - storageClass: longhorn-single-replica - retain: true - advancedMounts: - app: - mergerfs: - - path: /disks/base - fix-permissions: - - path: /disks/base - # exported directly as its own NFS share (Pseudo=/base, see - # configmap.yaml) alongside the merged /export view. - app: - - path: /disks/base - mtab-setup: - - path: /disks/base - sub1: - type: persistentVolumeClaim - accessMode: ReadWriteOnce - size: 100Gi - storageClass: longhorn-single-replica - retain: true - advancedMounts: - app: - mergerfs: - - path: /disks/sub1 - fix-permissions: - - path: /disks/sub1 - # exported directly as its own NFS share (Pseudo=/sub1, see - # configmap.yaml) alongside the merged /export view. - app: - - path: /disks/sub1 - mtab-setup: - - path: /disks/sub1 - merged: - type: emptyDir - advancedMounts: - app: - mergerfs: - - path: /disks/merged - mountPropagation: Bidirectional - app: - - path: /export - mountPropagation: HostToContainer - mtab-setup: - - path: /export - mountPropagation: HostToContainer - dev-fuse: - type: hostPath - hostPath: /dev/fuse - advancedMounts: - app: - mergerfs: - - path: /dev/fuse - run: - type: emptyDir - globalMounts: - - path: /run - tmp: - type: emptyDir - globalMounts: - - path: /tmp - recovery: - type: emptyDir - globalMounts: - - path: /recovery - etc-mtab: - type: emptyDir - advancedMounts: - app: - app: - - path: /etc/mtab - subPath: mtab - mtab-setup: - - path: /mtab-vol diff --git a/clusters/base/apps/nfs-photo/helmrepository.yaml b/clusters/base/apps/nfs-photo/helmrepository.yaml deleted file mode 100644 index 7df387a..0000000 --- a/clusters/base/apps/nfs-photo/helmrepository.yaml +++ /dev/null @@ -1,10 +0,0 @@ -apiVersion: source.toolkit.fluxcd.io/v1 -kind: OCIRepository -metadata: - name: nfs-photo - namespace: nfs -spec: - interval: 1h - url: oci://ghcr.io/bjw-s-labs/helm/app-template - ref: - tag: "5.0.1" diff --git a/clusters/base/apps/nfs-photo/kustomization.yaml b/clusters/base/apps/nfs-photo/kustomization.yaml deleted file mode 100644 index eea457f..0000000 --- a/clusters/base/apps/nfs-photo/kustomization.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: - - helmrepository.yaml - - configmap.yaml - - helmrelease.yaml diff --git a/clusters/base/apps/vaultwarden/secret.enc.yaml b/clusters/base/apps/vaultwarden/secret.enc.yaml index a45d035..a8a61cf 100644 --- a/clusters/base/apps/vaultwarden/secret.enc.yaml +++ b/clusters/base/apps/vaultwarden/secret.enc.yaml @@ -4,20 +4,20 @@ metadata: name: vaultwarden-secrets namespace: vaultwarden stringData: - #ENC[AES256_GCM,data:4iLAaNssxEjpapC9wJr1DtKzE9tzV7rNp/dDbW92dEWaYflpbI7fDJaPGbnD5N7OGeAXaWtP2EJh,iv:i0GPZ/XWCdNJZt1Sy2RTn2OB3ufYLozxvmADBnyAgnc=,tag:2hAzue8wQ/MgoNcUMmINzA==,type:comment] - ADMIN_TOKEN: ENC[AES256_GCM,data:bVdm5vb0HTu2UwL8tvnNppZfuLgjd9H7sy1xP/So+yGzLfeX3a3vQogKqWKLRmja6XMYhvQfhNIXgykixrxKYuwdhoWgbCsaYoLr5JMovsd6s5AjC7klhR8ubdRQ4eh82CG5AkDf+cNnACSrsORpdSON87Kneg==,iv:MrCEkjdtUj3jRYpY7nip1OZlRroseleu7T5maSO5Plg=,tag:LqDwwtCKlIBufCeXjzo4cw==,type:str] + #ENC[AES256_GCM,data:TMN5qNN8MaoHPLM3so5WaedYv6Pe6yMiWeNoTeaGrsMYzyyjXdmNvWjTtCqBIjI1Ui6IE+7WbVgX,iv:dLI70rzHlnl/KuVrH6g5uWFSfcPcyQ5P4Yu3jglMKiI=,tag:ogl1aIxdu/OqhczGGV2kvQ==,type:comment] + ADMIN_TOKEN: ENC[AES256_GCM,data:5a1csddeGt5TrBGV826S4jOWX//LL1IJmGAgsx7UqXXqmBDyoyFmOFtG40emZcAEwdMTs54oy/5Gb3wBpY8znPnfV8TCyiQtRTE4AXardoxpBSoOb7Ldve3wWQL85qaz0IcyWCBORp8959SlFLH1IZzhT8s8CA==,iv:PRdjszZDdWO/0y1UFNApCSvN7LVvJl2O+KGQPZf2AME=,tag:Eir7V8+nXLwdn2kyhCUpVA==,type:str] sops: age: - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZcWc1U2cyekZyaFQ5UTRY - V2Jjam1STTgvcHlRMjg2bjlsQjV1eWlucUQ4CnR3dFFoT0l2MFY5QTc2TjhlbDg2 - K0Z4MmVFdVE5alVvZzlYTnBObnNBU2cKLS0tIE9ZRS95T3ZEVUF5TVQ4MUVRSGxF - eStHK3oxcUdzazNnY1J5MkZtZTY4dUEKof+V/AJ7DCcdGHVo0kZsPwFd9X7sDtyo - Nrc0xlVH1+OwTXnta991CIyKFmssV637US6zdy2EkAH53po7hSdELg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWSWVzb1h6YXgrS0lGUkhu + Qk5taDQwT2ZxdDRKMUpURy84SUF0dm5OOUJVClg5a0tTR01OR1BRZjNiRkVDZWpv + OXlwVnU0VmxKNHYzSC9DQmFPUHFDbjAKLS0tIFNRQWRjd0JrVzFPY1ptQlljVVUz + Umxnem5DWmh4Z2RQMVAxOHhnaWhydm8Keyn4W+WeotJcbtTksrAl4XEtFF6dKXDl + pcPh05XDahs8AcYhKeo8iCmqhXrv/5R+u9yJ9mTPAGc7ZrJZq1acNg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:32Z" - mac: ENC[AES256_GCM,data:U8O7RfZ0yBQIWTsPaNILCVT4nhVfPRANAABZI+LCvHF4Nrf69LQCTPiaoXwAuNK02jEZwrT5LmkS6vfiEBotvsy9VvwmF4uwW/3WwxF9EnfMi6YdRJ1Yb1rRJKfPrHCFuPrd0odj0lBeKalOGyd+B4xzWMZpONzIQZpbwPBiDx8=,iv:k11/B5N3sPUbZfLesdeVLNHsUkdVXjLvzJ5jrXRqwps=,tag:XabU7gCEXzEE/6Uqm8PO4w==,type:str] + lastmodified: "2026-08-26T10:28:41Z" + mac: ENC[AES256_GCM,data:wdGbJfvWn8rg4tA2gkefJCSZbPXjexs+JUJKUAhvdSWJLMsfJYAm3LfamUJuxmyMsiA3rQVh6ja0DG9idEED5TghGD8tgsj9zOzu/kcvcC8yiqCIl2flxxAsUsJTnIOHR4GNN1c7B3Hwhj5oEAFUQDHc7R/Whj/Nae3gKNsqlbY=,iv:OZsl+FOPN7Khadxhmh3HDwwFD7ubzryRrrBlVr2/LOw=,tag:ZgB5/vi+qu9juaYw+Pc+3A==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/webdav/helmrelease.yaml b/clusters/base/apps/webdav/helmrelease.yaml index 0db73e2..de1a244 100644 --- a/clusters/base/apps/webdav/helmrelease.yaml +++ b/clusters/base/apps/webdav/helmrelease.yaml @@ -90,21 +90,6 @@ spec: existingClaim: ganesha-export globalMounts: - path: /webdav/export - photo: - type: persistentVolumeClaim - existingClaim: nfs-photo-export - globalMounts: - - path: /webdav/photo/library - photo-base: - type: persistentVolumeClaim - existingClaim: nfs-photo-base - globalMounts: - - path: /webdav/photo/library-base - photo-sub1: - type: persistentVolumeClaim - existingClaim: nfs-photo-sub1 - globalMounts: - - path: /webdav/photo/library-sub1 sda2: type: persistentVolumeClaim existingClaim: nas1-sda2 diff --git a/clusters/base/apps/webdav/pv-pvc-data.yaml b/clusters/base/apps/webdav/pv-pvc-data.yaml index 56d540a..bf298df 100644 --- a/clusters/base/apps/webdav/pv-pvc-data.yaml +++ b/clusters/base/apps/webdav/pv-pvc-data.yaml @@ -36,118 +36,6 @@ spec: --- apiVersion: v1 kind: PersistentVolume -metadata: - name: nfs-photo-export-nfs -spec: - capacity: - storage: 200Gi - accessModes: - - ReadWriteMany - persistentVolumeReclaimPolicy: Retain - storageClassName: "" - mountOptions: - - nfsvers=4.1 - nfs: - # pinned ClusterIP, not the service DNS name - kubelet's in-tree kernel - # NFS client runs in the node's host network namespace and can't - # reliably resolve/route Kubernetes Service DNS names. See nfs-photo's - # helmrelease.yaml (service.app.clusterIP) for the matching pin. - server: 10.43.166.34 - path: /export - claimRef: - namespace: webdav - name: nfs-photo-export ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: nfs-photo-export - namespace: webdav - annotations: - helm.sh/resource-policy: keep -spec: - accessModes: - - ReadWriteMany - storageClassName: "" - volumeName: nfs-photo-export-nfs - resources: - requests: - storage: 200Gi ---- -apiVersion: v1 -kind: PersistentVolume -metadata: - name: nfs-photo-base-nfs -spec: - capacity: - storage: 100Gi - accessModes: - - ReadWriteMany - persistentVolumeReclaimPolicy: Retain - storageClassName: "" - mountOptions: - - nfsvers=4.1 - nfs: - server: 10.43.166.34 - path: /base - claimRef: - namespace: webdav - name: nfs-photo-base ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: nfs-photo-base - namespace: webdav - annotations: - helm.sh/resource-policy: keep -spec: - accessModes: - - ReadWriteMany - storageClassName: "" - volumeName: nfs-photo-base-nfs - resources: - requests: - storage: 100Gi ---- -apiVersion: v1 -kind: PersistentVolume -metadata: - name: nfs-photo-sub1-nfs -spec: - capacity: - storage: 100Gi - accessModes: - - ReadWriteMany - persistentVolumeReclaimPolicy: Retain - storageClassName: "" - mountOptions: - - nfsvers=4.1 - nfs: - server: 10.43.166.34 - path: /sub1 - claimRef: - namespace: webdav - name: nfs-photo-sub1 ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: nfs-photo-sub1 - namespace: webdav - annotations: - helm.sh/resource-policy: keep -spec: - accessModes: - - ReadWriteMany - storageClassName: "" - volumeName: nfs-photo-sub1-nfs - resources: - requests: - storage: 100Gi ---- -apiVersion: v1 -kind: PersistentVolume metadata: name: nas1-sda2-nfs spec: diff --git a/clusters/base/apps/webdav/secret.enc.yaml b/clusters/base/apps/webdav/secret.enc.yaml index 0770e68..3f2b031 100644 --- a/clusters/base/apps/webdav/secret.enc.yaml +++ b/clusters/base/apps/webdav/secret.enc.yaml @@ -4,20 +4,20 @@ metadata: name: webdav-secrets namespace: webdav stringData: - WEBDAV_USERNAME: ENC[AES256_GCM,data:nZdShvc=,iv:N9d/RLw7/LIA4KQPgnE3+/8oSeXP+U+7flrr6bRtkpk=,tag:ck/SX0JE2MlsbbppjKGAuw==,type:str] - WEBDAV_PASSWORD: ENC[AES256_GCM,data:bKj44og7bLk4J1nOk+NYJozcRrCIO8oLC2YDKiuIOp+/mP1hzociGkXiw5XMSsck,iv:pflTHT61DL8llQa6BVRjjvK2O+sXtjWVX0l6uDpkX3o=,tag:BfYjYK9VsqihrNo4VECHcw==,type:str] + WEBDAV_USERNAME: ENC[AES256_GCM,data:v0JX04A=,iv:LT4o0j2vHYLW/sWY6Cxr77XWs+tsSV0L+SPeLTRmv4M=,tag:0nXa+esguqcPJtst0kix2w==,type:str] + WEBDAV_PASSWORD: ENC[AES256_GCM,data:oA8aGH4uID6uCx6tqWGlcYnQRoYwoJ3obCVdegZLnB7Ebc118Xbc7VVVIEyDeEH2,iv:tAiDQbi1NMZozkozXqUDqx75khYyAcaeNE2FVVnqfQA=,tag:7jsUwo4rb7SBJ/dMOJPHTw==,type:str] sops: age: - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZMEY5MlBsSTFRdlFCZ3dy - L2J2c0FqL3lmS045U2J5VGRnb3pPdWpLa1NnCmpjWFdqaVEwblovaHFEb3ZhMDlw - TXc1TnZabjBIZFkwVkxYelFCbUQ1d28KLS0tIG1ENEZqQ21qaGhMZWhiL1JrWnFh - TjExckwrTW4rV1NkQndNeUF2WWJZcFEKaOpXhoR5e20zWvACdNGfIJxusZ+AC+Nn - KnG6v8sQl34aylw+TeTR3ibmTupToyZoX6mVUXBdLDCzB8CT+hxehA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0eXJSc3A3cVVodFdXMmsz + OGtPdmRYR3NWM0J6U0prMjdJQzFESloySEVBCmJPT3lPblo3OFhURlJZR2NNNmo1 + WTZDYTJxWXVBTFlxcmtoTEJwcnhSS0UKLS0tIHlEODV0YXhRZ3B6VTlMdDVqVTZB + RExqV29TRWppRElkZmhwcGJzbHlqYVEKSPuo4vovXaOzH3etf/zS/o8twB4S38VH + n5Dq5A9ZWCsAg2XdVkoaVMf0dWyUC7C+5hc2gvn1DSyZYf4afYbdMQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:32Z" - mac: ENC[AES256_GCM,data:SfFGemzruM6xmH22/TPV93JjIbZmgVopRh/6gQPlpZ6PxksKEzFXBU3VwIAYigr1xNmSInGB67+DCWMWZ9eDWnG0cb9kxdGEd7wH5lPAJp7Lpkibnv3bT9qxE7vOZkdJbe+9OF6a/x3xbMeaszYXzEVq3X0LeEoIYNFvDssJGBM=,iv:owir/2ULkuVr6CeKTS02UMvpIAFR2hVE8WpefRpyRck=,tag:MuA4NzXTsx5wsNA9v+a5Nw==,type:str] + lastmodified: "2026-08-26T10:28:42Z" + mac: ENC[AES256_GCM,data:byL9l24s9Lqx2GlHOSV6efZyf3uJAE8ju5Dia3lM/7BLoRrCifnQ/wlZ0JAsKQRJabtE6f9BZ3O85XaEE2ZQkM0Q/YWJ7keRwwpMrXD8PHgYjNnb1M0qiTEvCVIdP/Y3ZF1KfNG7Gl7f3gXeAONhkaSmp8aS4ogk7xSMMECYJQ4=,iv:UwprivEHRWeJVpDmzfJRVSs/Ca54ln7u/Qe9DbQMzng=,tag:lPsYjJRotG7nAjlCDXdS5Q==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml index 897ac6d..9f953df 100644 --- a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml +++ b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml @@ -4,19 +4,19 @@ metadata: name: zigbee2mqtt-secrets namespace: zigbee2mqtt stringData: - secret.yaml: ENC[AES256_GCM,data:zD2kJfWkXrirqZ2hbKBg/b/IT+d57OKvLlHTrU9Qf1FIbAA6WQMSczMehyjPVKhwB16haR2hm/cAmGSnLxbu9rh/0F2lI2XcIpBIuhoxExC45q7o7Ew1OOVmtp7jm12ON3O0U8TPd4AdhugX/yzU5JmLsU1zOdnGx6YPNuQ=,iv:VnSZSqDJxNQ2KRV3Vbu+X+pg7CePRj0dUDrJSiUIFqA=,tag:BIPm2MKSYaGcW9WLyW0+fw==,type:str] + secret.yaml: ENC[AES256_GCM,data:OylIO4CFvxPDiZuKSc4gY8QMaUdFXu0LT6ko8Lvx+WpJr1tONYuJy8PiHpUS/q8HbnK1xfA516+/s63s/p4BscTWaPoXsQgTvryQS93LBN9b3Zy/bKnjyjrZCrA3hbPE2kN8XI/c3+sSPWbSLem45CJz/BWyWphNoGJgxOE=,iv:XwN4BgwUyk0JHqiqmRcerP7yrbzlgrpU5cepBYsuB8M=,tag:hE3IBNftFjRwKWjSGVd/Jg==,type:str] sops: age: - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBROWhvZFBHZUZLUlJ0MmhL - dnUrNmYzcTJWM1RHc2NYY2sxVUdxZkduSUdjCnRYcGpCT1NTUUQ2K3kwSUxDVW1l - azVpWjNxNE8vRGpUdXdQR0VSMnlXZkkKLS0tIGczaWhxSmhXVVN0YWpTYTRieXlr - WWFyOXEyNzh6aVlXT25maG83SVNrdUUKAdPPCm0nTIo5WIEKzsAzNoxK1LfpdSQd - r63l6csfbkWl079xm3ZVq1UV+jfEX4mRn6EsYMH/i+tVgjQc0g0BKQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6SWp4WXJzd2ZVY2MrSEtU + K08wSXJCSjExZnlRQStTQk1vMUxmWk8ybkRvCktCUkFucjBTalJPbVRaQUxCRUpl + VmRqMXZjbVN3REJiNFhoNHhlSDk2R1UKLS0tIFFwMkk2RnpTdmhzSmV6ZVZnWHhz + ZjJDMUI0bmxmUjRpaE52OEo2R1ZIZTAKEdBooxF6Siv0mIODZAJ1fuB6SQjNOfEn + HxG3aIfILcgZmEQpYrHhlE10B6fLNcU9Kq4i6jz+s9o1HSTH7oFflA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:33Z" - mac: ENC[AES256_GCM,data:2G2hyItyAKvYxOn5m3rgNRzXsn/Gmrhj/xLiCz2cl88E59rnlujUlgi1kKMFv7QyXK9dQtr78EIQGdSmC+jItoJlC9zNMGD5AtDaij7CwdUo75zPy1Y8LKo9K1Xua9gfS2vCHbBCI8cwGVwE5TfIfE2lB04zjVLaTPbp5UgqjfY=,iv:bl13cjoDhSloNebCTTPZ7Pw37bKbLuFDcMmQh0LJndM=,tag:BkXXAMd6ySxRXvZZIaNzNw==,type:str] + lastmodified: "2026-08-26T10:28:43Z" + mac: ENC[AES256_GCM,data:pcl7AAZ8xKEdgNGHkiEZN8qjTuP4mAA9wI9sSwK3uAu3hcekDG3kwe0qLzs/Gs2x+dn+n8JnfQDWNqORJuYhHG0Rxu5AciBANZekb0a6h1B5UTuOxt+z2YIfX/2D3+xetHereIwVR6gbeA/ATNNkSJyiSK4ujgF9bb6gRc/AB3w=,iv:C7gky4HrlfFwKMr7NYAqxiwuBeLKRmBt8OHWnV6CMz0=,tag:VEA3Ni4zuBnENUTYslxW1Q==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml b/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml index 8f7966e..3b785a3 100644 --- a/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml +++ b/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml @@ -4,21 +4,21 @@ metadata: name: longhorn-backup-target-secret namespace: longhorn-system stringData: - AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:+BQQLrwxJgIXEVj6XSZofMirIRY=,iv:aR5z0STuo0tVQdw3LWJ5ZQWlztRqc85OlWplEQgjyEk=,tag:EhItdTZLzwzXL3V5hJLvNA==,type:str] - AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:yeSP7adfBHA7fh+knB2CPKUTJMmdSv0yHaLwcYCz0W6lUX4lgRYW2g==,iv:d8Fl4/jZYDdmfmXBZP0Uft4Wt9PJCLEed3DYuOcM96M=,tag:Z1oWUn55gKViexmW6YcPTQ==,type:str] - AWS_ENDPOINTS: ENC[AES256_GCM,data:27yF4AQMqa+NIY0VjGHCoPXV5VinvywFTHzN6O4caOcbGevYHB3aCoX+XvNAFSycd7pewmBd3MD8VB8Z4A==,iv:rgxaOeOC+hSpXhf+5jIiYrBbDiSx+K5zdA5LJUp63EY=,tag:G+Tf0zYUxVj/4VJulGexVg==,type:str] + AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:CzF3thQY1KXwV7RgGn0hCUS30t8=,iv:OAHduSdQI8o41T9qOf8pvYRAaHEJB6dVgFWHsrHVTHg=,tag:485xA0PzetwsJ0gbGq2SMA==,type:str] + AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:Xlk39e6Y36c+LYOe7NiiWw/L9m2MD3Ze3bM6m2RNwrezAUOnGjeVkg==,iv:rmO/HFXHdKvyCsHKFSRBYaU5xiaobxBQa7LdojoD4go=,tag:OgPPPmCgnG686wRjVkM6Ow==,type:str] + AWS_ENDPOINTS: ENC[AES256_GCM,data:bxmMz2Nm4AV3FLFZieZorS9C87JqKFGVGuIkFIhJCHxh2OJZuxly4R18g7KEmIVItMuONFX0fuSJuc5qNA==,iv:V8NrW/o5xybTvGxYUMWOMgskOz8XAvmD46BhFYdIz4k=,tag:IBdOiYkc/IIc4QRO0Z92kw==,type:str] sops: age: - recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtaFRuV2ltTVcyY1gyTkhp - RnhyZ3YwUmhnVlQ2MlFwRkRYbERFRVpKbVFJCkdqY2ZQZmRpZk4ybVpkVGFCWDhj - UWxSK3RzSS90S3N6cHNhTjNMaHN4WG8KLS0tIFNCUWE3VHhNMC90QmNJM2p6azVM - ZTVvRFZtTEY0OFZPTVEraytvTDJITWMKkO3k936r4ewmQAS7aRTfSlK99aJqgLjF - gPa8k8X9euxkWsz4jW+1hVFGmQbue1eRvj4QgBT6/p8IATb4Jfnzaw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsRlRjM2ozb3FnZFdTaHRq + b1VqNWdHSlppZ3ZrWWxBVEFKSm93U0lzZ0VBCnpJSzVVZ2VSQzUvWUFFMEU2Undx + RVZybklwaUs0K0xhSXZJOWRxVTBBOFUKLS0tIElWM2hUa29LcU1Qa1BGcHoyWUNX + OW1sREp5Qlhjamd5UGdjdmtGYTZaZU0KSXqn/zD+jgBoa9uAwt1vpSydJQEHmv/U + k/9lKi9PMpxXs/g02OGocazOxVFnnnrlaCd8gFUg5Qfco1zID0cHiw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:34Z" - mac: ENC[AES256_GCM,data:/FAZZ7T48tTxIovjvcVxOxNatPBuPiyRO19sBsXhsyEn4pu9M7rHdhgmoBldlg9rKI5RP/kntkQoKtQzjLDSEZVUWEHXQ8UIbMLdfFw8ifItxayILy7K1TMPekJp0jfalorzii7oqBnc9dlJXePG+cD1LQVPEMHhvzcj/f8NS2U=,iv:6owWcyi1V33MHAGeOKSWRKxvtV/Cvd52CNL0cWcFVCs=,tag:q0hxLoA9ZghpXeqWcHoFVg==,type:str] + lastmodified: "2026-08-26T10:28:44Z" + mac: ENC[AES256_GCM,data:iX4YX9zmVcYrEcfnSi9ZHLKbE1DrxrkpavGBi1doZh1UJm+aCot/OGoHMmetOIo8r21vh1vLblXdXAQHzgelXEJsQITXc88eYmyzObwyQoiQizMhQde9lv3dV2ZNLivkJZYJvKZ7RmSpxBIWCF26UElob2eALVucDkQyjpwAI0c=,iv:2pE8xGw2sbBSRzALPpkDpPM+tBptS5uFk8en1aSGiO0=,tag:le/11hLzhQISA1JU/NV8FA==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml b/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml index bfc8fad..d207e09 100644 --- a/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml +++ b/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml @@ -4,24 +4,24 @@ metadata: name: s3-backup-proxy-secrets namespace: longhorn-system stringData: - WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:IGkZMeXKi08HLTnW6eJrdQgp+KE=,iv:xYhv4oIEbUOX1JByHkqHnbNL6PMz3ARTWRg7pHS/UD0=,tag:NfKW7ubjVAyVr7JdprM4tw==,type:str] - WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:Ch6HFGzOuX46Ilxr4ewV0gSRXxABbFR3LsQlITmflNluPYzkTkr/gw==,iv:hITaX8ch5N7Uyoq/FrjJ6edk6MsN55jCgEQu9mfv2aE=,tag:C9ZMVmcN7Fk2TN9AKQmprA==,type:str] - CRYPT_PASSWORD: ENC[AES256_GCM,data:Gcii8QqKa9BysiCa6ZkgcLC5WTcCZrAgu7P79WlTZyEWa5y7Y9saESHALQ==,iv:+/MXrVhqxMthl9PoCJS6v1TWr8yFdsukGFwnc57hG3s=,tag:tTsEP5VF3inPK2PgDELztA==,type:str] - CRYPT_PASSWORD2: ENC[AES256_GCM,data:XJG3q7nDAWJ35+AlSn92AMCgaj2S5kV10Fu618t0ssi7B9ofavNTGXb6eA==,iv:8YxmGdpkh5old4HFVFT4BD4yDFFcs+aW1s2le/1BXz0=,tag:oSLoa9KnEizW1QakA9uJgg==,type:str] - PROXY_ACCESS_KEY: ENC[AES256_GCM,data:UoUdnb1eW1guaXRHHPUjXWj8r88=,iv:LYETftuDZSflZUhtuNBRbwrDDUD83jIIisz8TZbWdJk=,tag:KMyIy4QIv7AMOpw3NbWXmQ==,type:str] - PROXY_SECRET_KEY: ENC[AES256_GCM,data:0VAzeJOwWEshqrQi9gISOKdM29gMAd8dsRPc9c+WTFt2Id+59tO5Mg==,iv:ZVSCRmKKG5wAKdPrHId8VwfcDj34HbQlO5IPyOAQrd8=,tag:piC06vgROa0wzLc2zoVc2Q==,type:str] + WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:f2Xjx/onP7nRPzVOut5W7ySQxKc=,iv:mKu4/qjPmp64+426oJyvoM87P9XUpzXNamPO6/7IKt4=,tag:7Hbla9XMKWguZVAFmOwXJg==,type:str] + WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:/hgsEzaaeWumQj5f9DNuHtzuj16Y01f9PbRES4qUxCJ8uAf1DdNGrQ==,iv:WU6JQzodyHfIi110OVXOBhKdo5JHdmjNSYowdL7UXBg=,tag:emtbmHU3sNUJIWXorBa6Qw==,type:str] + CRYPT_PASSWORD: ENC[AES256_GCM,data:FVaZbMQPfS97gBMDT1F4f7rOoEoTuu/Fxx9hG7HfrELklNm+HFXCLDd0cQ==,iv:Ao3s9IGMz3Bp7SXRTX3lrXDUVRCP3bQITT+tFH0DhBU=,tag:9nvJ5CH72BkZYK8Ev0jFNw==,type:str] + CRYPT_PASSWORD2: ENC[AES256_GCM,data:HorsAqVyIqHKfQjyvd+H1VHtlcPGBuGdg7bxSTCFFfnHExg6g5X56YVDcw==,iv:dy+fwG+pIhVuVkG1+d+SD3HcMoLez2MYUhayxqWExss=,tag:z0mV3moLZ2ynFIuFVs9VkA==,type:str] + PROXY_ACCESS_KEY: ENC[AES256_GCM,data:vycUoNonirOKU4Mxd5WfxpD5UD4=,iv:KzlQX1NOxa+jicuX+m+UsLMR+vHg0exLGy1tMtid9bE=,tag:kHfQRl3Konf6zcSu26cqpQ==,type:str] + PROXY_SECRET_KEY: ENC[AES256_GCM,data:YaHtGifFnDQc4MaQFhv2FI9M0ucud7r/9WYE7UCb4CniQ9EsCJv5/Q==,iv:e4fWpZ02xJEvlUXCpSWdZfW4X+ni8nqlkluu69ap3kU=,tag:HXchMUvLNWMCz+lJX1BrgA==,type:str] sops: age: - recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWOXZJSmtYWHRWUnBJZGVU - dnlsdkZGNk5GNG13Ly9FUFJ0cXZMdXhRNUg4CkN6TWNLN0dybGxqZTR2K09ZRWls - ZWFYVmVCSllHUENBcnMrR01KY3JDSjQKLS0tIEkzZVlUWEhUSFArb1JxSHl5Q0tw - UVhBY2NiUlBnTEEyRE9LSHVGZ3k2QkkKCcOvQ7vZLqW88Gj+9OoRuWXFQuRWtnIB - aEdsOUnZOda/at6UIxLe3XuBj+vewhS2P0bOpJ6ZeuvQ2AhSlOT60g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMFhtTGxrUnpNRkMrSUVP + V3hlU1MxS1lsTjBLV3p4Q2ZvZG96UUdzUEVRCjhzMnZDQzVON0oyWUtUR3N1VWFS + Y2NZcEg5azBsa1RzUTg5U2gvWU5YVDgKLS0tIHVxTEE1UVBSelh2eE9TMlNDRk1k + cFA3bUxJRHRIVXNNU0NFV2xjcUZnNjQKiwgX67PNY96xvb1BAh1zkgw4qSc7hqyk + u+5+/QRBnA/nbXPueTDONIq47D7qNJ4kUw5Bo7o4mrX+iSlBYakVlA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:28:35Z" - mac: ENC[AES256_GCM,data:7Q3lr8efEFlnA89RBeAmRpq+VX/T55Fu/6NJMs3BZC/8TYCNSvMshd+lbKU8vyuWLnE0N0NA7Hnxf4ykvknMETrPDeOMnS250S/9dknp0oTE6VrIN0HJMq8xBKyFh8Y0k8kRkZoICTM6t3kFXRsOG7M0CKN9s60bhVw5K77A0zA=,iv:fanKdbFdVEZrf32Lx2FOVwL/nPEbVh4kicoVcjxP90U=,tag:Rj/zYd/dKTQQRBDdR6rPqw==,type:str] + lastmodified: "2026-08-26T10:28:45Z" + mac: ENC[AES256_GCM,data:d0hxv6NuSR6JmTRPMOTKom3HPqUeb6B2oF+a5yj592m8WelVZ+Ary6nwDXeW4TRn5v8l+loHRM4JQjfsZ9PCBJJlP0HHQCh9RLHCa7p4BeW4fNm11w0g/At9HN7Y9BjJUTw95+xjNhFtaj8k0dGf5T+sKhhHF9DiSG2Gwb3E2l4=,iv:wQfKbOVUERnS+BSTap3Q1ZKqMAP6WGZJPGLDmLpiWVY=,tag:FjGaYs1lidQc5k3I1YPzHA==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/home/apps/kustomization.yaml b/clusters/home/apps/kustomization.yaml index e33f142..414d745 100644 --- a/clusters/home/apps/kustomization.yaml +++ b/clusters/home/apps/kustomization.yaml @@ -14,6 +14,5 @@ resources: - fava.yaml - infcloud.yaml - syncthing.yaml - - nfs-photo.yaml - photo-stats.yaml - immich.yaml \ No newline at end of file diff --git a/clusters/home/apps/nfs-photo.yaml b/clusters/home/apps/nfs-photo.yaml deleted file mode 100644 index 890a480..0000000 --- a/clusters/home/apps/nfs-photo.yaml +++ /dev/null @@ -1,17 +0,0 @@ -apiVersion: kustomize.toolkit.fluxcd.io/v1 -kind: Kustomization -metadata: - name: nfs-photo - namespace: flux-system -spec: - interval: 10m - sourceRef: - kind: GitRepository - name: flux-system - path: ./clusters/base/apps/nfs-photo - prune: true - wait: true - dependsOn: - - name: namespaces - - name: infra - retryInterval: 5s diff --git a/clusters/home/apps/webdav.yaml b/clusters/home/apps/webdav.yaml index 6a6c6cf..cbf073a 100644 --- a/clusters/home/apps/webdav.yaml +++ b/clusters/home/apps/webdav.yaml @@ -14,7 +14,6 @@ spec: dependsOn: - name: namespaces - name: nfs-ganesha - - name: nfs-photo retryInterval: 5s decryption: provider: sops