infcloud added. davical additional ingress at c2.aggtaa.com
This commit is contained in:
azykov@mail.ru
File diff suppressed because one or more lines are too long
@@ -90,6 +90,11 @@ spec:
|
|||||||
# No stripPrefix middleware either: Apache needs to see the /server
|
# No stripPrefix middleware either: Apache needs to see the /server
|
||||||
# prefix itself (via the Alias added in the seed-config initContainer)
|
# prefix itself (via the Alias added in the seed-config initContainer)
|
||||||
# so that DAViCal's self-referential links come out correct.
|
# so that DAViCal's self-referential links come out correct.
|
||||||
|
#
|
||||||
|
# c2.aggtaa.com/server is the same backend, reachable same-origin
|
||||||
|
# from InfCloud (also on c2.aggtaa.com) so its browser-side CalDAV
|
||||||
|
# requests don't need CORS. That ingress owns the cert-manager
|
||||||
|
# annotation for c2.aggtaa.com; this one just reuses its secret.
|
||||||
hosts:
|
hosts:
|
||||||
- host: c.aggtaa.com
|
- host: c.aggtaa.com
|
||||||
paths:
|
paths:
|
||||||
@@ -98,10 +103,20 @@ spec:
|
|||||||
service:
|
service:
|
||||||
identifier: app
|
identifier: app
|
||||||
port: http
|
port: http
|
||||||
|
- host: c2.aggtaa.com
|
||||||
|
paths:
|
||||||
|
- path: /server
|
||||||
|
pathType: Prefix
|
||||||
|
service:
|
||||||
|
identifier: app
|
||||||
|
port: http
|
||||||
tls:
|
tls:
|
||||||
- secretName: radicale-tls
|
- secretName: radicale-tls
|
||||||
hosts:
|
hosts:
|
||||||
- c.aggtaa.com
|
- c.aggtaa.com
|
||||||
|
- secretName: infcloud-tls
|
||||||
|
hosts:
|
||||||
|
- c2.aggtaa.com
|
||||||
|
|
||||||
persistence:
|
persistence:
|
||||||
config:
|
config:
|
||||||
|
|||||||
@@ -4,21 +4,21 @@ metadata:
|
|||||||
name: davical-secrets
|
name: davical-secrets
|
||||||
namespace: pim
|
namespace: pim
|
||||||
stringData:
|
stringData:
|
||||||
PGSQL_ROOT_PASS: ENC[AES256_GCM,data:6Jq0b77PNViMRIjKsIJPUTlWr3x1BJnjXUMm/UJdylDvc25IR9zb0PeN5O+UN3VW,iv:k+v9gxkjr5Y3o4YMBTeSZ6fq2XmcQHq4dbIzZ1aBm8k=,tag:fmOMjx90AvKFR1SBvpOITw==,type:str]
|
PGSQL_ROOT_PASS: ENC[AES256_GCM,data:QGqssqH3ma/i6jKX46QrWT/ibuqxfTBjH8GRZP+EFZ19KgmW2MeUqPHp2b0KcPT9,iv:iwby/dEzV0X2Ca7diTLzUT5V+e3G2z4bxJSDyiblI8U=,tag:67s/Lo4CjjsDEkITKFnq5g==,type:str]
|
||||||
PASSDAVDB: ENC[AES256_GCM,data:FhXHxwd0aW4SzglYBEp5w5a0EXYYoeqSTBK7Samf1wQeNogJp69TqJBtv3pkoR4P,iv:qLFh2Ysah4F2KMowgDYgtHsCXsstSQxn7+pZAEyPOnk=,tag:rWxqEPnEwEmTCOcKewcSuQ==,type:str]
|
PASSDAVDB: ENC[AES256_GCM,data:UiW+Tf5LAQ24mthrB5pYqMt7V3G1oOC8eFnSZkVKHA2JIMEl3ptsO+tesl8Ada1y,iv:NDVa9RXC+uIGwKDUuTa6+nMiH9vpWuEIExzmKQTIS4k=,tag:ZN0aYgvUZX392DWAoV0jyA==,type:str]
|
||||||
ADMINDAVICALPASS: ENC[AES256_GCM,data:4GtUmg0kTbqelWXtRFc4H7XlEgFTDAz4rni1GGNfRO0=,iv:quvQT1uHRMLRo7eTrzgs1xjhkpnDvl/R9No0Q6jGVIk=,tag:4hpt5VvXL8CvjbdL0u2UMA==,type:str]
|
ADMINDAVICALPASS: ENC[AES256_GCM,data:xnZTsq+ba9oCdtYnxuZbnlB4lcniOGpnKZSqqyCcG8w=,iv:vVaO2gg0o3LI6ZtNDPdjjnlm6dyYmeUT1jQRgyJ8Cqw=,tag:ILhGxMaB+Mmv2vyKbPyYaQ==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
|
- recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNlhHS1B1L0JYa2FtYklt
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOcFhiVUNkZVRZU2hHUXhI
|
||||||
UUt2UlJqNVFoZG5rU3laSTl3amtXQ0VnV2hNClhPbzVYejlkVVU1dG1tOU05QTBa
|
RlNzYXdIdElMbSttYVFibUM2NHVObWV4T1ZrCkp3ek9ZdEE0VTdMaWlRdHk3amsx
|
||||||
cEFkZ3ZkbjliZkVRM3ZPZkJkZmhTbXMKLS0tIEk5dHJmaFp1UGJVNFM3SlYwYUsz
|
dmUvblo4ZVM4OEdnOXhkYmV2a2R4dkkKLS0tIHhoVUd4QThTZXVsNDMwVXY1bk4v
|
||||||
RjkyQ3BUQktoK3Q2ejJtYVprTERzRFkKJsBYjpBQ5vrGjCe5UTBwbeGQCb5EImGz
|
U0hLMkd1bllzaUxSVTRVUEk5WDgvZjAKIHfqnZMlM8IA83jIu6Isd+XObtATeUkp
|
||||||
HP7rtwdF+ACy3FBQCRpjR4wSZPmnN5tRth4Ut3SDvIzvpEx7p6gnEA==
|
vFRK/oxl3bV8OgyTFtTDotb16CvhN6IBjKqfC+7CIsrOh9fBwxwuQw==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:24:10Z"
|
lastmodified: "2026-08-26T10:24:17Z"
|
||||||
mac: ENC[AES256_GCM,data:8CXLLLEwaaUqMa1PEwVok88CJsc+0VlsotyaZR+gkW53EnZBLi+jAxNm5j6ISpn/TJw2pLCMXGf8vB164OX4w0YPm5dVPQUhBNxONRcnbD/Cil54PIlG4MGgCIfalKDpB2Je0NpU+81B7KYQlaBezbNb0+G4GgTqwaY04rfs0mw=,iv:bYEiFvVqqiDi42G8oYvfKaHmEfkb2zLjfDJU2PmEZjc=,tag:lHO8xRWvAyh3CSVEB/+l6Q==,type:str]
|
mac: ENC[AES256_GCM,data:gvbGpqeSUj6qHNcDX+FBxJJWGglNQwR61yWUo5wBrVaagxaO342pq/sDF7oDBG8AzIfSNk5kXuWzkWe8KJLFnCxzw4XxoFqBDp2Mlkr1iQfKVptj+Urv2Vrsgd9CN5ctUuDoas8U+oQhu5G4pni/KRLXBUwdO0Z0ZyzzdDaDGSU=,iv:Dc/o2x4dfT4Sx+5nqTIPx7wh5u0/ThO1uduLcGX8byk=,tag:AR716bU6P84AyyOVT8NwzA==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,62 @@
|
|||||||
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||||
|
kind: HelmRelease
|
||||||
|
metadata:
|
||||||
|
name: infcloud
|
||||||
|
namespace: pim
|
||||||
|
spec:
|
||||||
|
interval: 10m
|
||||||
|
chartRef:
|
||||||
|
kind: OCIRepository
|
||||||
|
name: infcloud
|
||||||
|
driftDetection:
|
||||||
|
mode: enabled
|
||||||
|
values:
|
||||||
|
controllers:
|
||||||
|
infcloud:
|
||||||
|
containers:
|
||||||
|
app:
|
||||||
|
image:
|
||||||
|
repository: waja/infcloud
|
||||||
|
tag: "0.13.1-16"
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
enabled: true
|
||||||
|
readiness:
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
service:
|
||||||
|
app:
|
||||||
|
controller: infcloud
|
||||||
|
ports:
|
||||||
|
http:
|
||||||
|
port: 80
|
||||||
|
|
||||||
|
ingress:
|
||||||
|
app:
|
||||||
|
className: traefik
|
||||||
|
# this ingress owns the cert-manager request for c2.aggtaa.com;
|
||||||
|
# davical's ingress adds a second host on the same domain (for the
|
||||||
|
# /server CalDAV path) and just references the secret below.
|
||||||
|
annotations:
|
||||||
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||||
|
hosts:
|
||||||
|
- host: c2.aggtaa.com
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
service:
|
||||||
|
identifier: app
|
||||||
|
port: http
|
||||||
|
tls:
|
||||||
|
- secretName: infcloud-tls
|
||||||
|
hosts:
|
||||||
|
- c2.aggtaa.com
|
||||||
|
|
||||||
|
persistence:
|
||||||
|
config:
|
||||||
|
type: configMap
|
||||||
|
name: infcloud-config
|
||||||
|
globalMounts:
|
||||||
|
- path: /srv/infcloud/config/config.js
|
||||||
|
subPath: config.js
|
||||||
|
readOnly: true
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
apiVersion: source.toolkit.fluxcd.io/v1
|
||||||
|
kind: OCIRepository
|
||||||
|
metadata:
|
||||||
|
name: infcloud
|
||||||
|
namespace: pim
|
||||||
|
spec:
|
||||||
|
interval: 10m
|
||||||
|
url: oci://ghcr.io/bjw-s-labs/helm/app-template
|
||||||
|
ref:
|
||||||
|
tag: "5.0.1"
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
|
kind: Kustomization
|
||||||
|
resources:
|
||||||
|
- helmrepository.yaml
|
||||||
|
- configmap.yaml
|
||||||
|
- helmrelease-infcloud.yaml
|
||||||
@@ -4,21 +4,21 @@ metadata:
|
|||||||
name: markdown-vault-mcp-secrets
|
name: markdown-vault-mcp-secrets
|
||||||
namespace: mcp
|
namespace: mcp
|
||||||
stringData:
|
stringData:
|
||||||
BEARER_TOKEN: ENC[AES256_GCM,data:eX3LFXJXls7MXxfdIp7sWnNy65jT91YkKp+m4OVS9+s+Bgtrig0xfv+pB9DWZ+NfiV3woDi+OvegEQNNNhYjPg==,iv:6bl41MVDCv372UXpSad6hagdFe9ZOWGQ++T4LCOOwgo=,tag:lCQI8vtEmtUKF6lw7aKyaA==,type:str]
|
BEARER_TOKEN: ENC[AES256_GCM,data:D9JoX2e6PcCXcf2GkssbQ3zdvIqmXzq2PoocsZHs1YFH1eKQ5kBANlUqEibNasyZfX2YKMrJ31J5s0obQFBHEw==,iv:IsvqxDWesBgaFV96Gea33/M/bw+sodNDaRJHkDCLuFQ=,tag:mf0uycj9d1MYaBSX9T9dxQ==,type:str]
|
||||||
OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:hK36dHVl3NSUMNv37ASMRTUgzuUw4MbBVWeIaovdpOVZ6J16Q9BPe4ZspeLlMR1YW75TDVN3P9MnZPbzJKR5Vg==,iv:vRiLCm//80VWVL0mxRHhzzo81cbhv8DBtxITa/JBE+Y=,tag:tMkzHd2e6vybF83r23yEkw==,type:str]
|
OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:xfo1Ik3xMlnqgVc7kTuADMnntE/cn+WDDKB2r1+a64p7Rwhes7FLhCj7UpjOC8LGX5Yr38uOrZSQ6+JH1huCOw==,iv:BXUeP1/VYsxtHHEuid1mpDlHoGFmanUuXC3FITPTiDU=,tag:D3gTSQDAS6pd6tOXOTrzKg==,type:str]
|
||||||
OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:eJaVC/+QWW11C9Q7dFIVLFzcyDjOXZ2pMR9iXPOaNc+SEv3Dn7v9lQz5UsexvzW0XlY0dzNfHwvYw+gzbziUfw==,iv:fAVLZeLLoLmQsIoJ5jSoyCA7TWJMoKuIRrSIyR+xu9g=,tag:DsL+QiERH3hgYp1wy8SSmQ==,type:str]
|
OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:NWPiFXeFGpl2GvZ9MiSavm4DUvjSiFT1K7ywtwiEEEyndfugozNLhnh2z7ZX1KpWAo6v99CSkA9rYERVyg0E7A==,iv:/DFgPsM7tfRAw3LI2Aqn8VjGNvUwmDoQ5Aqp6QRyk5Y=,tag:jZnxFXPacNKs3fe9n2WI2w==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
|
- recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1T0dUZWFaTGdWM3NoY1Rl
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZUWZqbXNCWEtuNHY1ZkMr
|
||||||
Q0tDZkJJeVZzdDVmc3JoY05lUmFvYzBVMENRCkVkNnNJbnhrMW1CQWFneGh0MTdV
|
WDY0V3FDdnJJRklvcUdRR1VYSTdDZ3RSZWxvCjYrNWZLL2NvUjNYUWVCaGNQSVJv
|
||||||
TXE2dzNxckg3bnlFKzhSZDN1RXU0cEkKLS0tIGZ1TkdIdzVSYU1zYnRKdVBSOXBK
|
Mkh0VnBza0JZNnRnRjNmMmRGK1NjMHMKLS0tIFdxTHR4U1Z0ZGhqVnBRY21WUHAz
|
||||||
eWFhY0lmRGlZQ1BtTGFoVitnbjl1K28K+fFjGTtlzd/mjuf2XszQzfV0UXk+z3hZ
|
K0o4ck5nczZzSUlTNEJVRjhaa3BRZUkKQYGifS0r9z8wCKU70WGky5BjLkuYuDXh
|
||||||
CiNtjApQWFGJ+l/zaSGqteojoBzCKaLbmqBmzmU9A2vIuMtfiJPFeA==
|
iDoZekixekhIPzVdqL3s9DgqUi39jTR/pHWzCIn7M6NUXYbTn5H1dw==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:24:10Z"
|
lastmodified: "2026-08-26T10:24:18Z"
|
||||||
mac: ENC[AES256_GCM,data:pyaz6atUcXBdLkrvxrPayJPg3YUR30nLWYpKT4l2iOhmHQZl3Q4tR8E9Bg2oCTDPM3ouPMRXJHzfyQV00zFREdJINSyNr932oBRyL+p6on5pLxCTHQ4XBZdH94skRG5kfX8q5GvCcO07p1rUZgnbiUuqQ3nB6fs6g0/F3cxMDtQ=,iv:Ex9Ej8g6EdK1B6036GAkynv0NcEftmKxZ1NrjsDPDos=,tag:KRYYSscfEhAwwnT3q7VvKw==,type:str]
|
mac: ENC[AES256_GCM,data:roCqrT8ovfYWCycLrtIp46DOpP69WAdu6GwqfpUlt73JE/qnvukOLeXPAOUoncDRZ7kcywKxPGVP9O5PJ22YmupKVCY6D0BmZSJHD/NT2NyUVXJTjXTVYi6zVFenhWhVJM8RMBGXZ1n08G9B858EcMznm394m1vRgCB4omeH1pc=,iv:sZvGEuebILKWTAZ48GtC8lEiSeomYjyai6wS9MAFT5Q=,tag:JWLYq5y8u8yWpFYGDUvzWg==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
@@ -4,19 +4,19 @@ metadata:
|
|||||||
name: mosquitto-passwd
|
name: mosquitto-passwd
|
||||||
namespace: mqtt
|
namespace: mqtt
|
||||||
stringData:
|
stringData:
|
||||||
passwd: ENC[AES256_GCM,data:2lqZB/a/ySJzzvI67Lc89hP5iRpBg7WwngV7FoUqekDZTXyNt7EDkFACZ1qYAtPLPkPuJfwSEN6hCD/cuYN15DgPC1uUXDtmAaX9DRF2fKT2aQz4VIOblrB1aWm/sc2QYyp8ER+7h1KbYjU1kkvbDTLFzo/HL6KLZuWze1AA4ezeEozMZgzaRGyb66BXy1HJ7QxYh/Haaz7Ox20G7WdKUFyG4Cg9xa1sKiuQh+OcqFuG2TAdxdROIFbBmoKHgg==,iv:L4/+gG/gHjSL6HNFG9IRUvK5wJDgN+u7ZkRBcb9CJAM=,tag:Xh7M96DjvZMl0aXaOYZUpA==,type:str]
|
passwd: ENC[AES256_GCM,data:q7q6bZ1FbrcFSXP9/2IQYmci/YP0bZ+0fSpEbpKUa4c5U8Xk462gjIA34X5q2pEgglOhzIV5Vb+k194ltXbbETYgq+stu0umJ/w9LHk7Ekctg27odrp/yACTQTGmGJKnQBr3SXORZqO12lFen3aMvvwcXOTxqkQstv0K2F2w/uLZcL/54y+ZANb7/sN/nx3O3UfbnyHWsxsNNA8Y+nHKJAfHEIz2CKIHsK3gOXCHwdXR/srEjiUTUHWgE+gDtA==,iv:aHdOC491M5Tn+ZsLJfxpeZSV1mc1yufjEI81hjlkCGw=,tag:9pXihkRhtfbztjiedVmx7A==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
|
- recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArdmU2akdrejhQL2ZUUG1z
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvQzM1enMwUWQySzRYMnV0
|
||||||
QU8xQ0FJMmdIemJUYnVNZlJZWjM1bkhTS25NCkpjeUlMbnN2QjVWdnFqQmRGOE5C
|
azZMZFozMGdWaVNaRUZYY2V6WXlGVzZTeGlFCi8wRG9pUVRRODVFbHY0YjViMlJu
|
||||||
QUtUeEtra1VZUGhOUkE0ZzkwZmkvMTgKLS0tIG0ySDFvUllDQ05OeHpselE3UnpO
|
Zy8rSDNRbWFwbUs5VjZ1amZjNWpLYVkKLS0tIGVtZkVnci9nQ25BYy95eDJLVXlv
|
||||||
Uk9QZEpvamxVMmw2cEdtbnFQQ0tqYncKbmp8SeIqcSaFty78n/8mm3KlEg4yOB6r
|
TkVHVzVQc082RlVrZmR4UTY4NUVwMUEK4jIqPdk71W2CFjtOJBVd8pLAKo3anQwm
|
||||||
ocPHeL574AHT2IQb+pm/HF/CXxZbmT83rcqZkQOGtUCa025bKM8OyQ==
|
CoGr6pbDTy2EiDAgDGUU7Avc9FohyBiJWtykCO2z8jolu+0xMugj+g==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:24:11Z"
|
lastmodified: "2026-08-26T10:24:19Z"
|
||||||
mac: ENC[AES256_GCM,data:PeL+HIwiDftjvPebs9W/nratKesrqv36VPp5h1fJN/if3odrpDeMhYfa+rQ7agP5cBWcNnhZIqiditmkB650sPN51tkUcrPzvaMYwAMX2x+LTv7a9208UIn8oFYCmX9Qg6jDwWa6Jokg+FNf/Du3MhG9hGkhok5o01X0x0l2CLA=,iv:iKXjMV8TMuf29/M5d+p19pqj4RUiAV6XXiKKfCBEBuA=,tag:bAxPrOZ19ekEsc0KQZqwug==,type:str]
|
mac: ENC[AES256_GCM,data:SZO/oSnvQdTl2JaH72be2ajTiPdfMj51Kyy7xjo2byGYevMEebyp3IhqQdNUe/e0oA6KFfLjXRxHr67i4FtPFqpRxnqhLftfJlUC5nVynxGqcmU0ddiQXHYWAjtYOcbvK3gb59wWG5iRH42AjKbddcZWkiKNBvZgVrvGL0rtSHs=,iv:Coo1XM5Cy4POdkVY51dJ/oU8nM9aR2dwvt/OT6U52EU=,tag:v00+HH7SNHtE7vTZHwQiAw==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
@@ -4,20 +4,20 @@ metadata:
|
|||||||
name: vaultwarden-secrets
|
name: vaultwarden-secrets
|
||||||
namespace: vaultwarden
|
namespace: vaultwarden
|
||||||
stringData:
|
stringData:
|
||||||
#ENC[AES256_GCM,data:OnlA3qrgUaCmRyzl/XMtwSuBDC/Mv4G7CmNDvVgoIi/NIlJI2wZzRTUejh0L3RoLuqMVBkEhT1Pt,iv:XSrUWriJMpLs+VmKzocM6cg7+6d/Omvg6975SOx7lh0=,tag:lcSpJOEFLbuVxz7X/ZLeiQ==,type:comment]
|
#ENC[AES256_GCM,data:TVJK6/rHcQhrTZldlBp2FTJ+YA1sEXT5AuMXXJQ2IY0ltLPxN8cxfloLdDEuYQHfUtzGHk4Z0HvQ,iv:zP9a6ibg6LsAWLMcttHNjgPWcWQg9s4HdZyS0JxIMTc=,tag:c+DTqM68+e30jz6QZ5bkFQ==,type:comment]
|
||||||
ADMIN_TOKEN: ENC[AES256_GCM,data:Ja9UHtEAvRLpN/ZXuZYZp0uYHRjW+7cvhCgFkcrQ75psF+BMVarBQKfLjSJC82n/HCqwZM73AZNphDpeR3ploGBtwRbZq9yC3XlOVF+LcFRCcpGHYrysQjWxw+OL8O9qsqbYyXNqgAWRBri17HOXO3mXfS6yow==,iv:fSk7J/Q+RnZBy+HekkB/uo/lt+QLQ56bxtIG5Sc3C3o=,tag:suyj1ZPexG6K/912/BHmJQ==,type:str]
|
ADMIN_TOKEN: ENC[AES256_GCM,data:nyw2xSbK3M/+ksRYjfK2vGQpGYQfXUudfj0YUIy7duTP98LQxaLfWTyovip0JeI7YO7umZ8vH9aN7iPKDzWaVQYxObKqXop4c9lqOatg2seHHbwtyYh1G4tVYsPX7Hbz/BiY36fG4hb58Vr0pkxp0VExG5M2Vw==,iv:FG7WesrB2zFWqGvw1XJ5C6cTPBvAtgWYxjsWdlOdeTk=,tag:Cn2einme62teZSBI5h6I5Q==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
|
- recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCaGVZOWJiNHNpek8zRFZn
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPWG51MXVBRmhtQWJiL29M
|
||||||
T1hGNXZzUDJiSkZKMWpheDZNNGRjSVJnV1ZVCi9DMXRUM1NDSjhQVU5yVHpyczh4
|
dVhqWkFWRFdaQVBMemJXVTFKVXd4NWhLVGlvCllOdTgrLzZRV29PVEJvbmlkdzZG
|
||||||
TTg2TFg0eWdIYkM5KzB5cG50eUdnMDAKLS0tIDMvTVJoaVoxOEwyWmIxSkVGWFdE
|
SytSUndlNnVZa3Z5S3JDaE1jbU44djQKLS0tIHl5UDM1ZktGZWxnTlpkakJDbXVS
|
||||||
Q1NXaTY2eVAxRmk1YUxvS05BNWUzaWsKT9ISAtkl+imjDPZnHtm0Ky2hAtldD3j9
|
NkVlSEJTWGRjU3hjTHJONXpoSUk3dVEKyd7wJYlUyT+GjyC5kAw4TG8Z0K//lny9
|
||||||
QTW3Vx4nYExvx6azAv5JNjYUpS5BWk8kjiz/YtvCjVHqNGmqMHkR0A==
|
LUl2cVjojvcS26DzM4tkh9d1I+Ixeg6pqpDvO550B0kX7xCioi23OQ==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:24:12Z"
|
lastmodified: "2026-08-26T10:24:20Z"
|
||||||
mac: ENC[AES256_GCM,data:6+jDS7K2m0usyVtFW181dg+1OrcxfAcWRpZl9yC+1GkCVooG4/e5Qu9tyxoM9qNRFVuxutHPwQXGRJeeHCNbTZcpG9BvUBFOCFU8fbhVYdcJBmsKy0pkbWWHwed+sHbgwFwel0qriGyHifuEtUduBuyOoBmXD0/do47+ZJOfenc=,iv:GmgK4NVaFui/KOMJgCstMoErcLBHOWbsKM3sdJuQ+6U=,tag:FZUqutGUP8SfDODX8WtbcA==,type:str]
|
mac: ENC[AES256_GCM,data:teR8A90fQMnIF0yCw4B706sO1McwzS9agnSbOB3z17Oesi4o/rB5H5S+KE4LXwLredyk8Pc7kMhg0XX1ePrV/KzMBIw3ckWmmR5RaF/eBt1o1V0qXe7Vyr9nTwqZ1QC/AIDeBKfZTIOzHINzEZl2pffZUANQ93NPzq6W8XYuRN4=,iv:yOeMGHVYW4SIeHWWo97MsAI1KuD2AZLFMdAd+jq8Mdo=,tag:AeH9Ag1yGBqwU1n26D4cJA==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
@@ -4,20 +4,20 @@ metadata:
|
|||||||
name: webdav-secrets
|
name: webdav-secrets
|
||||||
namespace: webdav
|
namespace: webdav
|
||||||
stringData:
|
stringData:
|
||||||
WEBDAV_USERNAME: ENC[AES256_GCM,data:+Zt3Ko4=,iv:IR4FJMCnr4vQr+xb3VWF3XoiM6hK99523YzUhsE0yVI=,tag:zC0QE5aHC/gl3EHYP+gQuQ==,type:str]
|
WEBDAV_USERNAME: ENC[AES256_GCM,data:1So6j3s=,iv:m349N8krx40gszI3BxkbwvcKrBCIaO3rOEmmSivZrQ8=,tag:2bHQSYRNQW/Bn4H+U5UDbg==,type:str]
|
||||||
WEBDAV_PASSWORD: ENC[AES256_GCM,data:5uV7q8JNoHBCr444ABragJvUMUNyS8UlYnJ7eDiXbcvddvVtjPakhQdTCUuW/XGI,iv:hjma+IILnKD7NPqCkc40Tv4w71/1PyW//M3WYPF1T4s=,tag:Lerzvz9Cqw+ebWAgARWS9g==,type:str]
|
WEBDAV_PASSWORD: ENC[AES256_GCM,data:lh19Vm1Q+UPgxWBDRVQuCMET1VrEf3GzSy/stJEpcmNiWA4eW3IA9UNY6W3y3mRN,iv:VOkdL7pXt+MwvqPd1lMDs3+SZ+cVpSZAkWISodZErEo=,tag:x0wHGWONhWH+WTgTOjCoSA==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
|
- recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkYTc5TjdMQXBsWlJKT0Na
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VE95VkxVRVVNT3UrWWN3
|
||||||
TW5JMms3QTRCaHhXNTdkL3FxOEFQUjBmVUFzClFocGNMbjczR3JNQzMzL2k0by95
|
Zm05aTU0VVIrWTg2c010T1B0Uk9ROUlHUlVBCmU4cExXT2h5eDA5NXBKWlVqUVNC
|
||||||
NG4rL0xFSVhMc2tEV0dPSFZjSVFERlkKLS0tIFgzQ01EVVovYW5pNWNuRGxpaTQy
|
RElBVkZUZEVlMHVWaFVIdThBbVQ5Y1kKLS0tIEZEcDNyM21KVGZVR2dzYlIzN1k0
|
||||||
OTBMQU5pc3I1c0o2R2FtKzhQdnlQL0EKcH6hPJoWV6sYgUCrwiIBFU/v0v+3ZYB2
|
dGJVRXduMFlaN0hMc0ttM0JLcGlPeHMKpfzkjS2Jl7x6P/zrx+Z/mXMDtOu0ocIO
|
||||||
QP4Rk36VoqPd4R0du2Fu/cCtqdLbx1bVdYPektLEww6i9laMdkda1A==
|
VeRY+KwhdHCqier6fgHXMEwBrXBm02UiGYl2eMyeOtV53Zy0KzE/lQ==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:24:13Z"
|
lastmodified: "2026-08-26T10:24:21Z"
|
||||||
mac: ENC[AES256_GCM,data:Vku2JIanl1NW+PnYNZZwF2VjaIqiQ6Q6q/bs8iLKYlYwpu1T6DUFf/EHesX7J47Nrn0V4hyiwzIGsg4kDeNxhzCEgaatFpGCACflUNmKBz5pCoHOuSbgH3SASOpaaVbA9knHRKh+5tD26H7M6Vq5S522xg2ChUE7HZrjsRq0gJM=,iv:0XQDUAk2uNwmTAMJtl9eGhHr1AIzI7p2vGfHmZO1odI=,tag:nYR8bzNGk9yGlwxIPmzzXA==,type:str]
|
mac: ENC[AES256_GCM,data:+PhqTrn7lonm8S75pIdyq0N8A6LrIY6vrZXni8kLLe6YN/UDKbtl+2A6DMFUOQMX1d0RmNyM1A5i7CnRdTQuEduIexSAR7HhuKpyUdOZNo7g42dqLlfhSeIJORTUq2kWFY6tMQaqAToovozgG6VfLJ3S9/xfcNhN0CPZJffEG70=,iv:byPECUH4pTVbdxfzZ20m0jaDIPRXglEwe23t/jvy1KQ=,tag:RnY4i1y5xzN0mQ41HWGjoA==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
@@ -4,19 +4,19 @@ metadata:
|
|||||||
name: zigbee2mqtt-secrets
|
name: zigbee2mqtt-secrets
|
||||||
namespace: zigbee2mqtt
|
namespace: zigbee2mqtt
|
||||||
stringData:
|
stringData:
|
||||||
secret.yaml: ENC[AES256_GCM,data:GqAIjv9DVCBdtrBWESQo1zZLVvWDG894VUSwB6/ZILV+Nb24jLB2uIYinXSKu2fq2jhwrxUbsBIzZGsPL+0NMROx5G/5bjJKXIKJBzg4onnwcsPezr+q7wmt7IvD+gth9jyFCy6UIgUlxh6D8Z67mcz/IAkMBb+3Z+JP9q8=,iv:Gk5vGdk0TCXxK/2QQMWdyociupPe8xeokIKSJnj7+SQ=,tag:/0Khi59y6ZnY+6hIfqB9ow==,type:str]
|
secret.yaml: ENC[AES256_GCM,data:sZAZ/JnQwOEcIBdf+Ha+G/qcfPdU86orJu9KiBEARpW9+UA3Gdz/8yrAriqp6YC36hlYPfMoVpIMbGUXXWfcQldLQpgvFONBcZq5lNP3EP0G+C1eyMu+8tyaYqGU50DqrvCQ/9Yowhpd/rIreANtV+VkviKIJFrvpKwfQLs=,iv:PWhCNK0W1chBCMsFZwtJ2c0tRrByX5hKem9VQXfbwYs=,tag:LfvXx8tbjTIm18OTPjpj4Q==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
|
- recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVMElrSERQSHU4S1A5ZmVy
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjVUZGd0U2eFZrQlcvRkcv
|
||||||
R2c0WFNGd3hOTTZpNEUyd0tXUGFFUldxL21BCmM1Um55aXI3SzdGNWJGYkxlOVFL
|
dzlLTFNhQlpzY1JqQXo2S3g5UmFkVUJxODFVCmQ3S0ZDa3ozaW03NHMyTUR2aloz
|
||||||
OUc1dE8zRkVzaDhxN2JPRE9jQ0dxRFkKLS0tIE1YZTY1TWJuWFZPY0JaKzAwT1lH
|
K1lLL1J3WUxxZlBxdlhLZmpuZEdiMFUKLS0tIGhFby9CbXhMbVArcnJNTm5rbUZC
|
||||||
MWNOT0k4eFFhanRQLzdLMkdvTnVlZkkKH4dCot+sTB2VOscPGdUztpaKxcBnIrOF
|
UXVHdU5aNk43NHhBVURuZnhzcDhtM00KqKteEPZ4OOUWIJgv7FaBUYvxa3MsPhBc
|
||||||
sXiWE2akhi41Ce+JUvha4poESrbwDIZz4krjtvclBukb0uehyLDo8Q==
|
fRNODlsHTozbEKhpgoG7xKLXg7HlUAPa3X8kgyl8L9YcWKUuWAlHcA==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:24:14Z"
|
lastmodified: "2026-08-26T10:24:21Z"
|
||||||
mac: ENC[AES256_GCM,data:dPwLxJT927rIGFgjIFkDA0v/l7JFGg6qUwCClDSIYocqdOb3kMkAwjwXPGJ4/5nHbLBW7LdYLeDF0oPylQHF2NHg76gkE01K1hnsvj3IOsw4B3uYn1bc72zz64iAcOe80fN80czYS2hmbHNxLcHtpszz1qm3zyMj9VUIwKARoiY=,iv:3pRQ+vStRLjzjX5CvODX3yY36mOiyWN/EQZlKt1mTIk=,tag:qdUcNRh/2lvxgIU4IVLxaw==,type:str]
|
mac: ENC[AES256_GCM,data:55ki1WZIC10dHZqfS3CbeDPGaxhz1oZyVedRmkqit+oKReheKBd0JKdzdQMqQc/eEZELBIgDRkG2m3S2n/EPrYLBu0tD/iRcs+9Jp0eec/qkIwssUtY4KpWt03yQSWdmsGPhuWXF+mN5vnBz7uU3EPcSXFTAFcFCBM6ZzM4khYk=,iv:vEifujA4MvUakUtqMsQmuKIeg9w1T8IPl7CVFZthY7E=,tag:0PqOXLjWWblxC2dJ0mAWYw==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
@@ -0,0 +1,21 @@
|
|||||||
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||||
|
kind: Kustomization
|
||||||
|
metadata:
|
||||||
|
name: infcloud
|
||||||
|
namespace: flux-system
|
||||||
|
spec:
|
||||||
|
interval: 10m
|
||||||
|
sourceRef:
|
||||||
|
kind: GitRepository
|
||||||
|
name: flux-system
|
||||||
|
path: ./clusters/base/apps/infcloud
|
||||||
|
prune: true
|
||||||
|
wait: true
|
||||||
|
dependsOn:
|
||||||
|
- name: namespaces
|
||||||
|
- name: infra
|
||||||
|
retryInterval: 5s
|
||||||
|
decryption:
|
||||||
|
provider: sops
|
||||||
|
secretRef:
|
||||||
|
name: sops-age
|
||||||
@@ -12,4 +12,5 @@ resources:
|
|||||||
- markdown-vault-mcp.yaml
|
- markdown-vault-mcp.yaml
|
||||||
- nfs-ganesha.yaml
|
- nfs-ganesha.yaml
|
||||||
- webdav.yaml
|
- webdav.yaml
|
||||||
- fava.yaml
|
- fava.yaml
|
||||||
|
- infcloud.yaml
|
||||||
Reference in New Issue
Block a user