From fb12548ff61716a9035c0d6fb764db0288ade603 Mon Sep 17 00:00:00 2001 From: "azykov@mail.ru" Date: Sat, 25 Jul 2026 07:49:41 +0300 Subject: [PATCH] zigbee2mqtt hidden behind authelia --- clusters/base/apps/authelia/middleware.yaml | 2 +- clusters/base/apps/mosquitto/secret.enc.yaml | 16 ++++++++-------- clusters/base/apps/vaultwarden/secret.enc.yaml | 18 +++++++++--------- .../base/apps/zigbee2mqtt/helmrelease.yaml | 1 + clusters/base/apps/zigbee2mqtt/secret.enc.yaml | 16 ++++++++-------- 5 files changed, 27 insertions(+), 26 deletions(-) diff --git a/clusters/base/apps/authelia/middleware.yaml b/clusters/base/apps/authelia/middleware.yaml index 8d8cb32..2664030 100644 --- a/clusters/base/apps/authelia/middleware.yaml +++ b/clusters/base/apps/authelia/middleware.yaml @@ -5,7 +5,7 @@ metadata: namespace: auth spec: forwardAuth: - address: http://authelia.authelia.svc.cluster.local:9091/api/verify?rd=https://auth.aggtaa.com + address: http://authelia.auth.svc.cluster.local:9091/api/verify?rd=https://auth.aggtaa.com trustForwardHeader: true authResponseHeaders: - Remote-User diff --git a/clusters/base/apps/mosquitto/secret.enc.yaml b/clusters/base/apps/mosquitto/secret.enc.yaml index 7cb0c3e..1a64a7d 100644 --- a/clusters/base/apps/mosquitto/secret.enc.yaml +++ b/clusters/base/apps/mosquitto/secret.enc.yaml @@ -4,19 +4,19 @@ metadata: name: mosquitto-passwd namespace: mqtt stringData: - passwd: ENC[AES256_GCM,data:xQSebjHsknzsxHOfFrpW7P5ARm3WcUlOtAh7L2SmMNOmVkSQInen1KeNs++wI50h2rGJC8ztYB1FshXvynV3SBUGXsYKYGzoJWRuqNyQUO5zotCrMA67MZFR3u8S5QIV+dDZSSq9pi/1gUYJ0wkw4QvM4C+sfDcuyIkpHwKLx1eHAtnJZam91IWUxVC3+pv8pe9I/bzbJuN9ovASYT3zplKI+9OhhrP+tssnmtI837u11PYq7uy103z3dXu3vQ==,iv:eduGICGVh8QnEWKeiz2EPNO45gVSaPKMsoSKIhRwMgU=,tag:v0oyyIGqD79Ow6zw2UzIGw==,type:str] + passwd: ENC[AES256_GCM,data:RTigpyVv0CaN9P2jGTvNJWoLbnLGrYa4aBWCZaGdIU2f2Jgop9f58EXMfvifFweUvOQ7+G3LpLfcO/zIctTNEYhiV4AfIIm1HIou55FgggQt1AuSSB6Fxr1p+o28KH4cou2P41avbQlM0FDwHVE4sLyqbgIXDi9eeVzEh5VvSvocYxVCW8BlVzEvmldcudmlmQuTh7OR8dw5Ra6JPlLVH+Lp5MxU4ZSPO3qHqa1lQPguMYF/I/AxB9wQkwlmsg==,iv:GQny4onyrvxts4xjNoJZ0hWUHWdnErCBMOvntEAFxxM=,tag:pkQfJfvEm0swjbWloEPb/g==,type:str] sops: age: - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTUZqZ3YvcEpxSXBLMG9J - RkJHcmZJS3RwV2tESzhOWUltLzh2VlVJdURJCmd1c1lQS2JQK1hNTVp1UGNYL0Fi - ZWxjL3h1a0lyU3ZDMGZqVHNPeTdTRjAKLS0tIFdCSGt1dDVqUnF3cTNYTmhNemZY - UGo1dDY3MVdsdGFKa0ZPWDVTWVBGTWcKpkUlWJ5gh1Gvc1Je0k9N6OYdNiIuMdWC - 3BRJ9Pj3K2uBHDfXYjzGZZCuhD8WAyLTnvTC4sfm0MqrshUGrjEFbQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtdUhHbk80RXU4OVVaUDA0 + ZSsrT1pIRUdlWjBMUEQwS2RrZ3ZuNm1hVW5BCmFFM3g2TFlVbVo2V1lBMFZiZkdz + THRBZ2YzbUdjUmRUYVB2cEduci9aVEkKLS0tIDdSTnhlQjNsU1ovcjUrVFhGNGJX + Q1FMa2ppalExNENydUpkNG11OXZKeVkK5K7yOWwA5MyW2IdPUtYpEeXGzQ0pVhkm + nwws+IoNQupvoarD5IibzUcM6AOF56i7F0MTSl+K6Lm+QBeG9k4/xg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:19:30Z" - mac: ENC[AES256_GCM,data:FRMpOYTHSJxbiTjWH8X3AYtXrpVBr1GzjPiSCezBgbQ7LtYfnj5/qxTF5kxKRdefvCYRH5+JumGTF4WdwiNJj2zjFv4rcUCG1YstA7sHur8Ya0VIWZTzCKrn6cdatnpKwfrYC5vuik7RuPwWkPm1lUQmiCKFPghm+owpusnZ0mA=,iv:unGqc5h+mIuZPyFMzcwX2+iGmm97JSY7JSJC9OsMzyk=,tag:wzuBFriM4lZwu7k+csCbfQ==,type:str] + lastmodified: "2026-08-26T10:19:35Z" + mac: ENC[AES256_GCM,data:3QF3UD5S7Pj94NFgc+ZdR4hPVeVWJAxh+OyfrJQC4qkVgqRtgHy30MnTq5n5cMBurdLgB9OVd0kCWKzpYW3bt7pqkrofyT5GLbDwzGGGbrv1bNflLG8goXbLO/C38m/tyeKewS4rulYbtY9X69K8xC8JB9LZ/W+KgYLSvhYM5Lw=,iv:ocqHPMwyC9sEgrCROOmKL02ihPqb0vldhtmwXqo1Jt4=,tag:mT0h2Z1Q3lxqb6mYtNe0JQ==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/vaultwarden/secret.enc.yaml b/clusters/base/apps/vaultwarden/secret.enc.yaml index 4236e1d..9a0b9b3 100644 --- a/clusters/base/apps/vaultwarden/secret.enc.yaml +++ b/clusters/base/apps/vaultwarden/secret.enc.yaml @@ -4,20 +4,20 @@ metadata: name: vaultwarden-secrets namespace: vaultwarden stringData: - #ENC[AES256_GCM,data:7z36354PwQmd4kVLiqY2MzCB55M2W1NZaFkE7uL6GUyjLbCMq57zHP3zy3rMAgnlI1r9gKmJvT1M,iv:yEKxT6I/Gm/jAjTrmgZbo1V6Ep2H2J0cz3LwCRME9fc=,tag:+or+hvluMSI2WlAA7Bi5GQ==,type:comment] - ADMIN_TOKEN: ENC[AES256_GCM,data:+0wDgw4aCy9y+lVf3roFK18EfVBiMQk2bdRSK4gONlfPNtaS7OqxLvlUTcf/tX7pqVXUKRj9/KcOzNJsfbSDDq+mDHcHpu1sXBoqSsTE1l5p7T8v4l8HSJZ2CsXPZ050nvmWP/1MfOVMq4Ze7O+lMWmN89DnUw==,iv:3B/ju/wkrG311ld4GksXlFydj3C3bmbzKCE/mrUyo2U=,tag:ZvwXqmnExhF55/4Y4w8nqg==,type:str] + #ENC[AES256_GCM,data:3wxEn1go8nLWA6Kttm96p9xtRP9/g9KlVy9op9TCMCCi8MW4VTIxiOf5ptlRogfEgpueK8R5ZMFH,iv:Ks7BcybpkxiqCMx0Em8Y1mcVGrS+7gsf+jCOm7ibqmQ=,tag:omF6s0SzcvN2ewABICkGgg==,type:comment] + ADMIN_TOKEN: ENC[AES256_GCM,data:+bW1tb3OBq6DaxO4anbtxAf6FGxzWDRmnLTlY9oMI0EyqIjF2nSNtpgtuU4bqZ9JAeVBOJpzfGQH+yZDilEXeRLuZc9puhCiow773J+5zYJOYJS6PUs7IWWKerteAA7NWQGHtl1MMTPdNqqqYAtpHsiRtB0LHg==,iv:6OY5BLInFcmoz6HLw57ZWS+7bKXNRchhxrRtOkrIOto=,tag:oRKnkUEuXSNtTx+VVPspWg==,type:str] sops: age: - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNWlh4ZG5aenhSbi91NnAw - VUs2SXBsaTgrREFFaUFFWE5zcCtBTUQ0MFdzCkhzWWNTUU9ZSWNYME5xUTg4WFp1 - UXY5djlkaFRVOXV5ZitkZDMzQjJxN00KLS0tICtTS3lVTXBLdUtnYk9JckQ1TitY - NXZpZUpGWlI0TXZEc0RqOE16bmdGeXcKDDDpyVm2VOnpk++E8v1mfBJwJn7B/kej - zTXgKaxwxDOEC4fvYTOBL49yoFRMd4idGVlDGXTBrhvrA1MP0yoD2g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiQWtXV0dLMDN4U096c2dj + WGNmSHBTRGI3YTIxOUtIeWFYV3hPaVY1L2tzCjdYSCtqYm9yWWovQiszYmJ3Smxx + U0dkSHpkTlJKcEVFVFVQcGZnMFZ5bFkKLS0tIDB2L2tLR0gvU1Zha1kvenExclFK + UDFDa3dQUWtKWUc4NVdrMERqb09wRjQKiFXKOnWNsuCkDkpGGrOLVlPgKarwQeH8 + 1lSt1mCW17L2YiCngKHtCrBpQWod7qdA0AtO50UR/XFe/tXK/fji3w== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:19:31Z" - mac: ENC[AES256_GCM,data:vjZOoGqVsUWIZYIPEycyUr5bCjbzxQx25SpO5PVncqsdlfy43b2wby498eLHvNmDh6vuMRNdJCJiQZnKy72MAgE5adGDDazpDP8qvvhjdfaQgjvhUSbPOdI+BdyhnYtfcnjybEq13URyZm1wNd/zDgq24gCOPAuRNxpvKdBOMKc=,iv:/5Do7ctC7lDEJuMAQkHU6HCHAWc3fo6HJzK+8G51NFE=,tag:llmtcOFlUMVjQU+X05R75A==,type:str] + lastmodified: "2026-08-26T10:19:36Z" + mac: ENC[AES256_GCM,data:Ihp3P1KqvsmonCuFkoOi7BpnDc3FGP4tOPcaIt5XAGX1f51zaLzOR7grElMCwggwuoJenZW7L2IdzX+YRDdS8zfE51hgXSQH8NzHmmlgEMRv60T97aAD5IzjPzB4GDI6TpcNI81acgrxTfYAPcExdIdMd75+nXMDLKB0Ku2FoOU=,iv:XC9LxbqZaRw0OXRoKA8EL9z5qmtDxUa4sKOwSJZRXLI=,tag:X9uxGb024AnLRjR/Nd8KJg==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/apps/zigbee2mqtt/helmrelease.yaml b/clusters/base/apps/zigbee2mqtt/helmrelease.yaml index 6255a63..8da9505 100644 --- a/clusters/base/apps/zigbee2mqtt/helmrelease.yaml +++ b/clusters/base/apps/zigbee2mqtt/helmrelease.yaml @@ -73,6 +73,7 @@ spec: ingressClassName: traefik annotations: cert-manager.io/cluster-issuer: letsencrypt-prod + traefik.ingress.kubernetes.io/router.middlewares: auth-authelia@kubernetescrd hosts: - host: zigbee2mqtt.aggtaa.com paths: diff --git a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml index 2e0dc1b..cd1b873 100644 --- a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml +++ b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml @@ -4,19 +4,19 @@ metadata: name: zigbee2mqtt-secrets namespace: zigbee2mqtt stringData: - secret.yaml: ENC[AES256_GCM,data:+wzWl7/j4trMG/uaildOcAxmDAlSpHig6F42FvksMq9ZGK04yLKa4Tprsx0QhcIJ9zdZuA92dJuuTsIZvBZVXtARUEiNfEWcqDIf+fD5yZoYv0ZnW2Gi6/hGFefmXoycEYGoR4o6kvDwer37xj/VFtieueDdYlLW3W4iooE=,iv:/e2rWq7jPqtetmP3qmOHz6/y0fekjZA0kbh41Fp/J+0=,tag:Ijhz2S7lcxzvPvukNhi8eg==,type:str] + secret.yaml: ENC[AES256_GCM,data:gyesuhrwYATlknEQYfP1/FooMSTwMoM16qQIxTPNDBcEohACw1FbAC0tbwuil3hvvFr759zgDTB4x7APr8KNmPflnksS88m0lsaHfec2M/N5aKM/b6WIEU+ZG3o93mu8j67rGkabGMSDE3w6PO7D6VT/U2o7L0IaQ6QQ0Ko=,iv:pTNNmgo7s16txjf2vRcYQC2w0w/TrJCYYGTEIAfnaeg=,tag:hitkwIgOma2vbFDyHiZVSQ==,type:str] sops: age: - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCMXBobi9nWmhETnpSUFIw - cXExbGYxRUZMRHc0ODJ1NFNTQlZ2YnJBbVFnCktnZDlFcEhmeStSaGZ3elEvMlJJ - ajRtOHlOWjJSMm5CWWErZjRkeXhCSXMKLS0tIEYzR1FkWEprM2NGaVpWS29Jd1ZX - Y21hR0x5S1VKZU5UamZuTXN3amVNRjAKmCQVcCABiBQtPLtRVe/kV6AJkEQmDp7E - OcIto/QH0wPb97zEEgVIy5/XNittwWMdWxPv5a62TPsIfOIHngN43g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByc21ZL0dmYzdkcFRIQUhC + Vm1wUVRNNGxVZ2tUc2xYdTNhVVZZZjFZYW5jCmNkQW1jc0VYQVlPVWtndHM2Q1Er + U3RRUUdwdWQ2ckhmRHBZdmxaWW5PNjgKLS0tIGVyT2R4K2V2QWVpVjRZUGhBSHd4 + TC9jNVg5NXpsMlJrUW1wNWxjT0FVMmcKJrBwX36CGSMcYZywYPOXj+Soe8AK2KqS + W9VOpxQ3MwxgHSfaGyYTAuSe9jUNQ8OHx3jBbKyRcqH+p/esNRLwcA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:19:32Z" - mac: ENC[AES256_GCM,data:Dq5volCysajK/rCkAD5bIwo1gqDSnNum5nCreQ4NteZV4GbKjRGpFhjKptD8vw6KF1qr7anTjMB///UL/vq45AiGj6TQWPi3a8PCqV4Jw0+NN8ZbU5tPlqYDqveTIAp1OmgxIks92I+0aCJVHXWbIaBU8MFfl3UsyqF95/qnIHc=,iv:jN2O866YMT2lS3+hv1tkT/POJFQkN8ufrelXGwJCWVY=,tag:t4G/ufMdZF8aijqX/uleZw==,type:str] + lastmodified: "2026-08-26T10:19:37Z" + mac: ENC[AES256_GCM,data:4+UMZ6BPLbSB4G924+qzSiw1XJm1xTWu65hqLfmfF1Dwr5mE4qHxVoz4BCNgmFW65CTNUA/LkeDNvbKTe5u9GpiGMnAXP7cJBT+cqUprE7OsyrGWb1R3jRTAEZb4Lj0DZzzIjuiuEqviwNe2y2D3AaNYghVrkebd/60U63Y2w+0=,iv:f+4/ples1ldJeQt7sd1ZLXvjvftskGcQQ52jTFXKovQ=,tag:wFWZjaGHDcDxmzrxpwNqTQ==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0