anton/kube
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

zigbee2mqtt hidden behind authelia

Browse Source
This commit is contained in:
azykov@mail.ru
2026-07-25 07:49:41 +03:00
parent fd4f6e34a5
commit fb12548ff6
5 changed files with 27 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
clusters/base/apps/authelia/middleware.yaml
+1 -1
View File
@@ -5,7 +5,7 @@ metadata:
namespace: auth namespace: auth
spec: spec:
forwardAuth: forwardAuth:
address: http://authelia.authelia.svc.cluster.local:9091/api/verify?rd=https://auth.aggtaa.com address: http://authelia.auth.svc.cluster.local:9091/api/verify?rd=https://auth.aggtaa.com
trustForwardHeader: true trustForwardHeader: true
authResponseHeaders: authResponseHeaders:
- Remote-User - Remote-User
clusters/base/apps/mosquitto/secret.enc.yaml
+8 -8
View File
@@ -4,19 +4,19 @@ metadata:
name: mosquitto-passwd name: mosquitto-passwd
namespace: mqtt namespace: mqtt
stringData: stringData:
passwd: ENC[AES256_GCM,data:xQSebjHsknzsxHOfFrpW7P5ARm3WcUlOtAh7L2SmMNOmVkSQInen1KeNs++wI50h2rGJC8ztYB1FshXvynV3SBUGXsYKYGzoJWRuqNyQUO5zotCrMA67MZFR3u8S5QIV+dDZSSq9pi/1gUYJ0wkw4QvM4C+sfDcuyIkpHwKLx1eHAtnJZam91IWUxVC3+pv8pe9I/bzbJuN9ovASYT3zplKI+9OhhrP+tssnmtI837u11PYq7uy103z3dXu3vQ==,iv:eduGICGVh8QnEWKeiz2EPNO45gVSaPKMsoSKIhRwMgU=,tag:v0oyyIGqD79Ow6zw2UzIGw==,type:str] passwd: ENC[AES256_GCM,data:RTigpyVv0CaN9P2jGTvNJWoLbnLGrYa4aBWCZaGdIU2f2Jgop9f58EXMfvifFweUvOQ7+G3LpLfcO/zIctTNEYhiV4AfIIm1HIou55FgggQt1AuSSB6Fxr1p+o28KH4cou2P41avbQlM0FDwHVE4sLyqbgIXDi9eeVzEh5VvSvocYxVCW8BlVzEvmldcudmlmQuTh7OR8dw5Ra6JPlLVH+Lp5MxU4ZSPO3qHqa1lQPguMYF/I/AxB9wQkwlmsg==,iv:GQny4onyrvxts4xjNoJZ0hWUHWdnErCBMOvntEAFxxM=,tag:pkQfJfvEm0swjbWloEPb/g==,type:str]
sops: sops:
age: age:
- recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTUZqZ3YvcEpxSXBLMG9J YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtdUhHbk80RXU4OVVaUDA0
RkJHcmZJS3RwV2tESzhOWUltLzh2VlVJdURJCmd1c1lQS2JQK1hNTVp1UGNYL0Fi ZSsrT1pIRUdlWjBMUEQwS2RrZ3ZuNm1hVW5BCmFFM3g2TFlVbVo2V1lBMFZiZkdz
ZWxjL3h1a0lyU3ZDMGZqVHNPeTdTRjAKLS0tIFdCSGt1dDVqUnF3cTNYTmhNemZY THRBZ2YzbUdjUmRUYVB2cEduci9aVEkKLS0tIDdSTnhlQjNsU1ovcjUrVFhGNGJX
UGo1dDY3MVdsdGFKa0ZPWDVTWVBGTWcKpkUlWJ5gh1Gvc1Je0k9N6OYdNiIuMdWC Q1FMa2ppalExNENydUpkNG11OXZKeVkK5K7yOWwA5MyW2IdPUtYpEeXGzQ0pVhkm
3BRJ9Pj3K2uBHDfXYjzGZZCuhD8WAyLTnvTC4sfm0MqrshUGrjEFbQ== nwws+IoNQupvoarD5IibzUcM6AOF56i7F0MTSl+K6Lm+QBeG9k4/xg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:19:30Z" lastmodified: "2026-08-26T10:19:35Z"
mac: ENC[AES256_GCM,data:FRMpOYTHSJxbiTjWH8X3AYtXrpVBr1GzjPiSCezBgbQ7LtYfnj5/qxTF5kxKRdefvCYRH5+JumGTF4WdwiNJj2zjFv4rcUCG1YstA7sHur8Ya0VIWZTzCKrn6cdatnpKwfrYC5vuik7RuPwWkPm1lUQmiCKFPghm+owpusnZ0mA=,iv:unGqc5h+mIuZPyFMzcwX2+iGmm97JSY7JSJC9OsMzyk=,tag:wzuBFriM4lZwu7k+csCbfQ==,type:str] mac: ENC[AES256_GCM,data:3QF3UD5S7Pj94NFgc+ZdR4hPVeVWJAxh+OyfrJQC4qkVgqRtgHy30MnTq5n5cMBurdLgB9OVd0kCWKzpYW3bt7pqkrofyT5GLbDwzGGGbrv1bNflLG8goXbLO/C38m/tyeKewS4rulYbtY9X69K8xC8JB9LZ/W+KgYLSvhYM5Lw=,iv:ocqHPMwyC9sEgrCROOmKL02ihPqb0vldhtmwXqo1Jt4=,tag:mT0h2Z1Q3lxqb6mYtNe0JQ==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
clusters/base/apps/vaultwarden/secret.enc.yaml
+9 -9
View File
@@ -4,20 +4,20 @@ metadata:
name: vaultwarden-secrets name: vaultwarden-secrets
namespace: vaultwarden namespace: vaultwarden
stringData: stringData:
#ENC[AES256_GCM,data:7z36354PwQmd4kVLiqY2MzCB55M2W1NZaFkE7uL6GUyjLbCMq57zHP3zy3rMAgnlI1r9gKmJvT1M,iv:yEKxT6I/Gm/jAjTrmgZbo1V6Ep2H2J0cz3LwCRME9fc=,tag:+or+hvluMSI2WlAA7Bi5GQ==,type:comment] #ENC[AES256_GCM,data:3wxEn1go8nLWA6Kttm96p9xtRP9/g9KlVy9op9TCMCCi8MW4VTIxiOf5ptlRogfEgpueK8R5ZMFH,iv:Ks7BcybpkxiqCMx0Em8Y1mcVGrS+7gsf+jCOm7ibqmQ=,tag:omF6s0SzcvN2ewABICkGgg==,type:comment]
ADMIN_TOKEN: ENC[AES256_GCM,data:+0wDgw4aCy9y+lVf3roFK18EfVBiMQk2bdRSK4gONlfPNtaS7OqxLvlUTcf/tX7pqVXUKRj9/KcOzNJsfbSDDq+mDHcHpu1sXBoqSsTE1l5p7T8v4l8HSJZ2CsXPZ050nvmWP/1MfOVMq4Ze7O+lMWmN89DnUw==,iv:3B/ju/wkrG311ld4GksXlFydj3C3bmbzKCE/mrUyo2U=,tag:ZvwXqmnExhF55/4Y4w8nqg==,type:str] ADMIN_TOKEN: ENC[AES256_GCM,data:+bW1tb3OBq6DaxO4anbtxAf6FGxzWDRmnLTlY9oMI0EyqIjF2nSNtpgtuU4bqZ9JAeVBOJpzfGQH+yZDilEXeRLuZc9puhCiow773J+5zYJOYJS6PUs7IWWKerteAA7NWQGHtl1MMTPdNqqqYAtpHsiRtB0LHg==,iv:6OY5BLInFcmoz6HLw57ZWS+7bKXNRchhxrRtOkrIOto=,tag:oRKnkUEuXSNtTx+VVPspWg==,type:str]
sops: sops:
age: age:
- recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5 - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNWlh4ZG5aenhSbi91NnAw YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiQWtXV0dLMDN4U096c2dj
VUs2SXBsaTgrREFFaUFFWE5zcCtBTUQ0MFdzCkhzWWNTUU9ZSWNYME5xUTg4WFp1 WGNmSHBTRGI3YTIxOUtIeWFYV3hPaVY1L2tzCjdYSCtqYm9yWWovQiszYmJ3Smxx
UXY5djlkaFRVOXV5ZitkZDMzQjJxN00KLS0tICtTS3lVTXBLdUtnYk9JckQ1TitY U0dkSHpkTlJKcEVFVFVQcGZnMFZ5bFkKLS0tIDB2L2tLR0gvU1Zha1kvenExclFK
NXZpZUpGWlI0TXZEc0RqOE16bmdGeXcKDDDpyVm2VOnpk++E8v1mfBJwJn7B/kej UDFDa3dQUWtKWUc4NVdrMERqb09wRjQKiFXKOnWNsuCkDkpGGrOLVlPgKarwQeH8
zTXgKaxwxDOEC4fvYTOBL49yoFRMd4idGVlDGXTBrhvrA1MP0yoD2g== 1lSt1mCW17L2YiCngKHtCrBpQWod7qdA0AtO50UR/XFe/tXK/fji3w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:19:31Z" lastmodified: "2026-08-26T10:19:36Z"
mac: ENC[AES256_GCM,data:vjZOoGqVsUWIZYIPEycyUr5bCjbzxQx25SpO5PVncqsdlfy43b2wby498eLHvNmDh6vuMRNdJCJiQZnKy72MAgE5adGDDazpDP8qvvhjdfaQgjvhUSbPOdI+BdyhnYtfcnjybEq13URyZm1wNd/zDgq24gCOPAuRNxpvKdBOMKc=,iv:/5Do7ctC7lDEJuMAQkHU6HCHAWc3fo6HJzK+8G51NFE=,tag:llmtcOFlUMVjQU+X05R75A==,type:str] mac: ENC[AES256_GCM,data:Ihp3P1KqvsmonCuFkoOi7BpnDc3FGP4tOPcaIt5XAGX1f51zaLzOR7grElMCwggwuoJenZW7L2IdzX+YRDdS8zfE51hgXSQH8NzHmmlgEMRv60T97aAD5IzjPzB4GDI6TpcNI81acgrxTfYAPcExdIdMd75+nXMDLKB0Ku2FoOU=,iv:XC9LxbqZaRw0OXRoKA8EL9z5qmtDxUa4sKOwSJZRXLI=,tag:X9uxGb024AnLRjR/Nd8KJg==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
clusters/base/apps/zigbee2mqtt/helmrelease.yaml
+1
View File
@@ -73,6 +73,7 @@ spec:
ingressClassName: traefik ingressClassName: traefik
annotations: annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: auth-authelia@kubernetescrd
hosts: hosts:
- host: zigbee2mqtt.aggtaa.com - host: zigbee2mqtt.aggtaa.com
paths: paths:
clusters/base/apps/zigbee2mqtt/secret.enc.yaml
+8 -8
View File
@@ -4,19 +4,19 @@ metadata:
name: zigbee2mqtt-secrets name: zigbee2mqtt-secrets
namespace: zigbee2mqtt namespace: zigbee2mqtt
stringData: stringData:
secret.yaml: ENC[AES256_GCM,data:+wzWl7/j4trMG/uaildOcAxmDAlSpHig6F42FvksMq9ZGK04yLKa4Tprsx0QhcIJ9zdZuA92dJuuTsIZvBZVXtARUEiNfEWcqDIf+fD5yZoYv0ZnW2Gi6/hGFefmXoycEYGoR4o6kvDwer37xj/VFtieueDdYlLW3W4iooE=,iv:/e2rWq7jPqtetmP3qmOHz6/y0fekjZA0kbh41Fp/J+0=,tag:Ijhz2S7lcxzvPvukNhi8eg==,type:str] secret.yaml: ENC[AES256_GCM,data:gyesuhrwYATlknEQYfP1/FooMSTwMoM16qQIxTPNDBcEohACw1FbAC0tbwuil3hvvFr759zgDTB4x7APr8KNmPflnksS88m0lsaHfec2M/N5aKM/b6WIEU+ZG3o93mu8j67rGkabGMSDE3w6PO7D6VT/U2o7L0IaQ6QQ0Ko=,iv:pTNNmgo7s16txjf2vRcYQC2w0w/TrJCYYGTEIAfnaeg=,tag:hitkwIgOma2vbFDyHiZVSQ==,type:str]
sops: sops:
age: age:
- recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29 - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCMXBobi9nWmhETnpSUFIw YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByc21ZL0dmYzdkcFRIQUhC
cXExbGYxRUZMRHc0ODJ1NFNTQlZ2YnJBbVFnCktnZDlFcEhmeStSaGZ3elEvMlJJ Vm1wUVRNNGxVZ2tUc2xYdTNhVVZZZjFZYW5jCmNkQW1jc0VYQVlPVWtndHM2Q1Er
ajRtOHlOWjJSMm5CWWErZjRkeXhCSXMKLS0tIEYzR1FkWEprM2NGaVpWS29Jd1ZX U3RRUUdwdWQ2ckhmRHBZdmxaWW5PNjgKLS0tIGVyT2R4K2V2QWVpVjRZUGhBSHd4
Y21hR0x5S1VKZU5UamZuTXN3amVNRjAKmCQVcCABiBQtPLtRVe/kV6AJkEQmDp7E TC9jNVg5NXpsMlJrUW1wNWxjT0FVMmcKJrBwX36CGSMcYZywYPOXj+Soe8AK2KqS
OcIto/QH0wPb97zEEgVIy5/XNittwWMdWxPv5a62TPsIfOIHngN43g== W9VOpxQ3MwxgHSfaGyYTAuSe9jUNQ8OHx3jBbKyRcqH+p/esNRLwcA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:19:32Z" lastmodified: "2026-08-26T10:19:37Z"
mac: ENC[AES256_GCM,data:Dq5volCysajK/rCkAD5bIwo1gqDSnNum5nCreQ4NteZV4GbKjRGpFhjKptD8vw6KF1qr7anTjMB///UL/vq45AiGj6TQWPi3a8PCqV4Jw0+NN8ZbU5tPlqYDqveTIAp1OmgxIks92I+0aCJVHXWbIaBU8MFfl3UsyqF95/qnIHc=,iv:jN2O866YMT2lS3+hv1tkT/POJFQkN8ufrelXGwJCWVY=,tag:t4G/ufMdZF8aijqX/uleZw==,type:str] mac: ENC[AES256_GCM,data:4+UMZ6BPLbSB4G924+qzSiw1XJm1xTWu65hqLfmfF1Dwr5mE4qHxVoz4BCNgmFW65CTNUA/LkeDNvbKTe5u9GpiGMnAXP7cJBT+cqUprE7OsyrGWb1R3jRTAEZb4Lj0DZzzIjuiuEqviwNe2y2D3AaNYghVrkebd/60U63Y2w+0=,iv:f+4/ples1ldJeQt7sd1ZLXvjvftskGcQQ52jTFXKovQ=,tag:wFWZjaGHDcDxmzrxpwNqTQ==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0