Hane/fukuops
1
0
Fork 0
forked from catalin/fukuops
Code Pull requests Packages 1 Activity

chore: add and apply yamllint

Browse source
This commit is contained in:
cătălin 2024-03-26 09:04:30 +01:00
commit f65b92fe69
No known key found for this signature in database
50 changed files with 722 additions and 701 deletions
Download patch file Download diff file Expand all files Collapse all files

7
.pre-commit-config.yaml
View file

@ -1,3 +1,4 @@
---
repos:
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v3.2.0
@ -20,3 +21,9 @@ repos:
rev: v1.86.0
hooks:
- id: terraform_fmt
- repo: https://github.com/adrienverge/yamllint.git
rev: v1.35.1
hooks:
- id: yamllint
args: [--format, parsable, --strict]

12
.yamllint.yaml Normal file
View file

@ -0,0 +1,12 @@
---
yaml-files:
- '*.yaml'
- '*.yml'
- '.yamllint'
extends: default
rules:
line-length:
max: 120

3
Makefile
View file

@ -13,7 +13,10 @@ lint--tflint:
lint--scripts:
shellcheck scripts/**.sh
lint:
make lint--pre-commit
make lint--kubeconform
make lint--tflint
make lint--scripts

1
ansible/gitea/gitea-playbook.yml
View file

@ -1,3 +1,4 @@
---
- name: Install gitea
hosts:
- giteas

4
ansible/gitea/roles/gitea/tasks/main.yml
View file

@ -1,8 +1,8 @@
---
- name: Download gitea {{ gitea_version }}
get_url:
url: "https://dl.gitea.io/gitea/{{ gitea_version }}/gitea-{{ gitea_version }}-linux-amd64"
dest: "/usr/local/bin/gitea"
url: https://dl.gitea.io/gitea/{{ gitea_version }}/gitea-{{ gitea_version }}-linux-amd64
dest: /usr/local/bin/gitea
- name: Copy gitea config file app.ini
template:

2
ansible/gitea/roles/gitea/vars/main.yml
View file

@ -15,4 +15,4 @@ gitea_mailer_from: "{{ lookup('env', 'GITEA_MAILER_FROM', default='git@fukurokuj
gitea_mailer_user: "{{ lookup('env', 'GITEA_MAILER_USER') }}"
gitea_mailer_password: "{{ lookup('env', 'GITEA_MAILER_PASSWORD') }}"
gitea_no_reply_address: "{{ lookup('env', 'GITEA_NO_REPLY_ADDRESS', default='git@fukurokuju.dev') }}"
gitea_themes: gitea,arc-green,gitea-modern,catppuccin-latte-rosewater,catppuccin-latte-flamingo,catppuccin-latte-pink,catppuccin-latte-mauve,catppuccin-latte-red,catppuccin-latte-maroon,catppuccin-latte-peach,catppuccin-latte-yellow,catppuccin-latte-green,catppuccin-latte-teal,catppuccin-latte-sky,catppuccin-latte-sapphire,catppuccin-latte-blue,catppuccin-latte-lavender,catppuccin-frappe-rosewater,catppuccin-frappe-flamingo,catppuccin-frappe-pink,catppuccin-frappe-mauve,catppuccin-frappe-red,catppuccin-frappe-maroon,catppuccin-frappe-peach,catppuccin-frappe-yellow,catppuccin-frappe-green,catppuccin-frappe-teal,catppuccin-frappe-sky,catppuccin-frappe-sapphire,catppuccin-frappe-blue,catppuccin-frappe-lavender,catppuccin-macchiato-rosewater,catppuccin-macchiato-flamingo,catppuccin-macchiato-pink,catppuccin-macchiato-mauve,catppuccin-macchiato-red,catppuccin-macchiato-maroon,catppuccin-macchiato-peach,catppuccin-macchiato-yellow,catppuccin-macchiato-green,catppuccin-macchiato-teal,catppuccin-macchiato-sky,catppuccin-macchiato-sapphire,catppuccin-macchiato-blue,catppuccin-macchiato-lavender,catppuccin-mocha-rosewater,catppuccin-mocha-flamingo,catppuccin-mocha-pink,catppuccin-mocha-mauve,catppuccin-mocha-red,catppuccin-mocha-maroon,catppuccin-mocha-peach,catppuccin-mocha-yellow,catppuccin-mocha-green,catppuccin-mocha-teal,catppuccin-mocha-sky,catppuccin-mocha-sapphire,catppuccin-mocha-blue,catppuccin-mocha-lavender
gitea_themes: gitea,arc-green,gitea-modern,catppuccin-latte-rosewater,catppuccin-latte-flamingo,catppuccin-latte-pink,catppuccin-latte-mauve,catppuccin-latte-red,catppuccin-latte-maroon,catppuccin-latte-peach,catppuccin-latte-yellow,catppuccin-latte-green,catppuccin-latte-teal,catppuccin-latte-sky,catppuccin-latte-sapphire,catppuccin-latte-blue,catppuccin-latte-lavender,catppuccin-frappe-rosewater,catppuccin-frappe-flamingo,catppuccin-frappe-pink,catppuccin-frappe-mauve,catppuccin-frappe-red,catppuccin-frappe-maroon,catppuccin-frappe-peach,catppuccin-frappe-yellow,catppuccin-frappe-green,catppuccin-frappe-teal,catppuccin-frappe-sky,catppuccin-frappe-sapphire,catppuccin-frappe-blue,catppuccin-frappe-lavender,catppuccin-macchiato-rosewater,catppuccin-macchiato-flamingo,catppuccin-macchiato-pink,catppuccin-macchiato-mauve,catppuccin-macchiato-red,catppuccin-macchiato-maroon,catppuccin-macchiato-peach,catppuccin-macchiato-yellow,catppuccin-macchiato-green,catppuccin-macchiato-teal,catppuccin-macchiato-sky,catppuccin-macchiato-sapphire,catppuccin-macchiato-blue,catppuccin-macchiato-lavender,catppuccin-mocha-rosewater,catppuccin-mocha-flamingo,catppuccin-mocha-pink,catppuccin-mocha-mauve,catppuccin-mocha-red,catppuccin-mocha-maroon,catppuccin-mocha-peach,catppuccin-mocha-yellow,catppuccin-mocha-green,catppuccin-mocha-teal,catppuccin-mocha-sky,catppuccin-mocha-sapphire,catppuccin-mocha-blue,catppuccin-mocha-lavender # yamllint disable rule:line-length

3
ansible/k3s/playbooks/base.yml
View file

@ -1,3 +1,4 @@
---
- name: Apply base configuration
hosts:
- k3s_agents
@ -5,4 +6,4 @@
roles:
- role: ../roles/base
become: yes
become: true

3
ansible/k3s/playbooks/k3s.yml
View file

@ -1,3 +1,4 @@
---
- name: Install k3s nodes
hosts:
- k3s_masters
@ -5,7 +6,7 @@
roles:
- role: ../roles/k3s
become: yes
become: true
vars:
first_master_hostname: "{{ groups['k3s_masters'][0] }}"
is_first_master: "{{ inventory_hostname in groups['k3s_masters'][0] }}"

14
ansible/k3s/roles/base/tasks/main.yml
View file

@ -1,29 +1,29 @@
---
- name: Set same timezone on every Server
community.general.timezone:
name: "{{ system_timezone }}"
name: '{{ system_timezone }}'
when: (system_timezone is defined) and (system_timezone != "Europe/Madrid")
- name: Enable IPv4 forwarding
ansible.posix.sysctl:
name: net.ipv4.ip_forward
value: "1"
value: '1'
state: present
reload: yes
reload: true
- name: Enable IPv6 forwarding
ansible.posix.sysctl:
name: net.ipv6.conf.all.forwarding
value: "1"
value: '1'
state: present
reload: yes
reload: true
- name: Enable IPv6 router advertisements
ansible.posix.sysctl:
name: net.ipv6.conf.all.accept_ra
value: "2"
value: '2'
state: present
reload: yes
reload: true
- import_tasks: packages.yml
name: Install base packages

2
ansible/k3s/roles/base/tasks/mounts.yml
View file

@ -15,5 +15,5 @@
fstab: /etc/fstab
opts: _netdev,nofail,tcp,bg,retrans=2,timeo=150,rsize=32768,wsize=32768,noresvport
backup: true
become: yes
become: true
become_user: root

7
ansible/k3s/roles/base/tasks/packages.yml
View file

@ -1,8 +1,9 @@
---
- name: Install base packages
apt:
name: "{{ item }}"
name: '{{ item }}'
state: present
update_cache: yes
update_cache: true
loop:
- qemu-guest-agent
- git
@ -14,4 +15,4 @@
- name: Update all packages
apt:
upgrade: dist
update_cache: yes
update_cache: true

2
ansible/k3s/roles/k3s/tasks/agent.yml
View file

@ -14,4 +14,4 @@
mode: 600
- name: Install k3s agent
shell: "bash /tmp/k3s.install.sh agent"
shell: bash /tmp/k3s.install.sh agent

4
ansible/k3s/roles/k3s/tasks/copy-kubeconfig.yml
View file

@ -1,6 +1,6 @@
---
- name: Create .kube directory
become: yes
become: true
file:
path: /home/ci/.kube
state: directory
@ -16,4 +16,4 @@
mode: 0644
owner: ci
group: ci
become: yes
become: true

1
ansible/k3s/roles/k3s/tasks/download.yml
View file

@ -1,5 +1,4 @@
---
- name: Download k3s script
get_url:
url: https://get.k3s.io

1
ansible/k3s/roles/k3s/tasks/main.yml
View file

@ -1,3 +1,4 @@
---
- import_tasks: download.yml
name: Download install script

2
ansible/k3s/roles/k3s/tasks/master.yml
View file

@ -13,7 +13,7 @@
dest: /etc/rancher/k3s/config.yaml
mode: 600
vars:
etcd_snapshot_dir: "/nfs/nas1/backups/{{ short_hostname }}"
etcd_snapshot_dir: /nfs/nas1/backups/{{ short_hostname }}
- name: Install k3s master
command: bash /tmp/k3s.install.sh

2
ansible/k3s/roles/k3s/vars/main.yml
View file

@ -1,4 +1,4 @@
---
k3s_version: "v1.27.4+k3s1"
k3s_version: v1.27.4+k3s1
tls_san: "{{ lookup('env', 'ANSIBLE_TLS_SAN') | mandatory }}"
cluster_token: "{{ lookup('env', 'ANSIBLE_CLUSTER_TOKEN') | mandatory }}"

1
ansible/nextcloud/role-promtail.yml
View file

@ -1,3 +1,4 @@
---
- name: Install promtail
hosts:
- nextclouds

1
ansible/requirements.yml
View file

@ -1,2 +1,3 @@
---
- name: patrickjahns.promtail
version: 1.26.0

7
k8s/argo-apps/argo-workflows.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,11 +7,11 @@ metadata:
spec:
destination:
name: ''
namespace: 'argo-workflows'
server: "https://kubernetes.default.svc"
namespace: argo-workflows
server: https://kubernetes.default.svc
project: management
syncPolicy:
automated: { }
automated: {}
sources:
- chart: argo-workflows
repoURL: https://argoproj.github.io/argo-helm

7
k8s/argo-apps/argo.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,12 +7,12 @@ metadata:
spec:
destination:
name: ''
namespace: 'argocd'
server: 'https://kubernetes.default.svc'
namespace: argocd
server: https://kubernetes.default.svc
sources:
- repoURL: https://git.roboces.dev/catalin/fukuops.git
path: k8s/services/argo
targetRevision: main
project: management
syncPolicy:
automated: { }
automated: {}

9
k8s/argo-apps/authentik.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,8 +7,8 @@ metadata:
spec:
destination:
name: ''
namespace: 'apps-fuku'
server: "https://kubernetes.default.svc"
namespace: apps-fuku
server: https://kubernetes.default.svc
sources:
- chart: authentik
repoURL: https://charts.goauthentik.io/
@ -63,7 +64,7 @@ spec:
servicePortHttps: 9443
annotations:
traefik.ingress.kubernetes.io/service.serversscheme: https
traefik.ingress.kubernetes.io/service.serverstransport: apps-fuku-skipverify-authentik@kubernetescrd
traefik.ingress.kubernetes.io/service.serverstransport: apps-fuku-skipverify-authentik@kubernetescrd # yamllint disable rule:line-length
metrics:
enabled: true
service:
@ -91,4 +92,4 @@ spec:
targetRevision: main
project: fuku
syncPolicy:
automated: { }
automated: {}

9
k8s/argo-apps/dcsi.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,8 +7,8 @@ metadata:
spec:
destination:
name: ''
namespace: 'democratic-csi'
server: 'https://kubernetes.default.svc'
namespace: democratic-csi
server: https://kubernetes.default.svc
sources:
- chart: democratic-csi
repoURL: https://democratic-csi.github.io/charts/
@ -16,7 +17,7 @@ spec:
releaseName: zfs-nfs
valuesObject:
csiDriver:
name: "org.dcsi.nfs"
name: org.dcsi.nfs
driver:
existingConfigSecret: secrets-dcsi
config:
@ -26,4 +27,4 @@ spec:
targetRevision: main
project: management
syncPolicy:
automated: { }
automated: {}

5
k8s/argo-apps/factorio.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,8 +7,8 @@ metadata:
spec:
destination:
name: ''
namespace: 'apps-fuku'
server: 'https://kubernetes.default.svc'
namespace: apps-fuku
server: https://kubernetes.default.svc
sources:
- chart: factorio-server-charts
repoURL: https://sqljames.github.io/factorio-server-charts/

27
k8s/argo-apps/fireflyiii.yaml
View file

@ -1,27 +0,0 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: firefly
namespace: argocd
spec:
destination:
name: ''
namespace: 'apps-roboces'
server: "https://kubernetes.default.svc"
project: roboces
sources:
- chart: firefly-iii-stack
repoURL: https://firefly-iii.github.io/kubernetes
targetRevision: 0.7.2
helm:
valuesObject:
firefly-db:
enabled: false
config:
existingSecret: firefly
env:
TZ: Europe/Madrid
APP_URL: https://moneis.roboces.dev
service:
type: LoadBalancer
port: 8889

7
k8s/argo-apps/kured.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,8 +7,8 @@ metadata:
spec:
destination:
name: ''
namespace: 'apps-fuku'
server: "https://kubernetes.default.svc"
namespace: apps-fuku
server: https://kubernetes.default.svc
project: fuku
source:
chart: kured
@ -23,4 +24,4 @@ spec:
configuration.endTime: 9am
configuration.timeZone: Europe/Madrid
syncPolicy:
automated: { }
automated: {}

9
k8s/argo-apps/loki.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,11 +7,11 @@ metadata:
spec:
destination:
name: ''
namespace: 'monitoring'
server: "https://kubernetes.default.svc"
namespace: monitoring
server: https://kubernetes.default.svc
project: management
syncPolicy:
automated: { }
automated: {}
syncOptions:
- ServerSideApply=true
sources:
@ -53,7 +54,7 @@ spec:
enabled: true
ingressClassName: traefik
annotations:
traefik.ingress.kubernetes.io/router.middlewares: monitoring-loki-auth-middleware@kubernetescrd
traefik.ingress.kubernetes.io/router.middlewares: monitoring-loki-auth-middleware@kubernetescrd # yamllint disable rule:line-length
hosts:
- host: loki.fuku
paths:

7
k8s/argo-apps/miniflux.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,11 +7,11 @@ metadata:
spec:
destination:
name: ''
namespace: 'apps-roboces'
server: 'https://kubernetes.default.svc'
namespace: apps-roboces
server: https://kubernetes.default.svc
source:
path: k8s/services/miniflux
repoURL: 'https://git.roboces.dev/catalin/fukuops.git'
repoURL: https://git.roboces.dev/catalin/fukuops.git
targetRevision: main
sources: []
project: roboces

7
k8s/argo-apps/sealed-secrets.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -6,8 +7,8 @@ metadata:
spec:
destination:
name: ''
namespace: 'kube-system'
server: "https://kubernetes.default.svc"
namespace: kube-system
server: https://kubernetes.default.svc
source:
chart: sealed-secrets
repoURL: https://bitnami-labs.github.io/sealed-secrets
@ -19,4 +20,4 @@ spec:
project: management
sources: []
syncPolicy:
automated: { }
automated: {}

4
k8s/services/argo-workflows/admin-service-account.yaml
View file

@ -5,8 +5,8 @@ metadata:
name: admin-user
namespace: argo-workflows
annotations:
workflows.argoproj.io/rbac-rule: "true"
workflows.argoproj.io/rbac-rule-precedence: "1"
workflows.argoproj.io/rbac-rule: 'true'
workflows.argoproj.io/rbac-rule-precedence: '1'
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding

8
k8s/services/argo-workflows/sealedsecrets.yaml
View file

@ -2,15 +2,15 @@
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
creationTimestamp:
name: secrets-argo-server-sso
namespace: argo-workflows
spec:
encryptedData:
client-id: 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
client-secret: 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
client-id: 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 # yamllint disable rule:line-length
client-secret: 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 # yamllint disable rule:line-length
template:
metadata:
creationTimestamp: null
creationTimestamp:
name: secrets-argo-server-sso
namespace: argo-workflows

3
k8s/services/argo/appgen.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
@ -15,4 +16,4 @@ spec:
repoURL: https://git.roboces.dev/catalin/fukuops.git
targetRevision: main
syncPolicy:
automated: { }
automated: {}

3
k8s/services/argo/argocd-cmd-params-cm.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: v1
kind: ConfigMap
metadata:
@ -7,4 +8,4 @@ metadata:
app.kubernetes.io/name: argocd-cmd-params-cm
app.kubernetes.io/part-of: argocd
data:
server.insecure: "true"
server.insecure: 'true'

1
k8s/services/argo/ingress-route.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:

4
k8s/services/argo/project-management.yaml
View file

@ -19,8 +19,8 @@ spec:
- namespace: argo-workflows
server: https://kubernetes.default.svc
clusterResourceWhitelist:
- group: "*"
kind: "*"
- group: '*'
kind: '*'
sourceRepos:
- https://git.roboces.dev/catalin/fukuops.git
- https://democratic-csi.github.io/charts/

3
k8s/services/authentik/pvc.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
@ -6,7 +7,7 @@ metadata:
spec:
accessModes:
- ReadWriteMany
storageClassName: "truenas-nfs-csi"
storageClassName: truenas-nfs-csi
resources:
requests:
storage: 3Gi

15
k8s/services/authentik/sealedsecrets.yaml
View file

@ -1,19 +1,20 @@
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
creationTimestamp:
name: secrets-authentik
namespace: apps-fuku
spec:
encryptedData:
email_password: AgCzRWtmiBIj6ZD1muwvJROasd+8ls98/5CWdUcQLN18vgW//QNGJUn2kMweQ/p93NpmCay4mvfvCjZrQeB/9gw2VcrXxLoDO6X3AExtFQUw0zr6nqCfKeYKkhu7OqZJZIsu5pBTYxf1zcRFI/Fp7v/dNLUkNFhaOU33zck3dBbHaxWylnyaTdpGC8NQdN/yGRXc+PXi9GLI+XhhMQzTw443B62eSisTc0MA0vMeqHc/whapwjyQtVKOmA/U2IWrtIrze+xn5Wyfzi6w/XLQt67Kcq4m885jf4su5ymXIPswVEp5I1Aq0WK5hoYhQ+S1ipY31cng3Vsg6TOwizw1BDt7uY1DmshVIm0wk/7g8AVlDyr1aNvnWw+flqR68SLR7xSHv2UxAat1bgs3iUmaKHkWnhK5vuoj0hd+iKmeRGCV1v1DRaRKhOGrCbmSACXm01Iq/yNhBtxiFaz4QqnFpt5MmMQrtRYz18Y44LfOMX0jjJT3+RGH+L9f71V3fTK2uBkuWvF/ExzKJUoJ2XKpnR8xLuqCyBYmt1nPLue+/8lT6JRzWWbyT69PpYvvJ2tU21TQVROs1e+OiYrhEvvIkTx1tgomLInJRn3EZ2U0ycfqWRO49kycPhLKojJ2mL8Uu0K1Q6cxcViK3tv7CAidJ+FqcwfMPR0ivc0obu1u1m8QvPgMXayG2tQs6cEDEQtTu0ugKIpcUftuhNStDWFWi7xYnwvTvfN55l7jf9O4
pg_password: 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
pg_username: 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
redis_password: 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
secret_key: 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
email_password: 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 # yamllint disable rule:line-length
pg_password: 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 # yamllint disable rule:line-length
pg_username: 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 # yamllint disable rule:line-length
redis_password: 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 # yamllint disable rule:line-length
secret_key: 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 # yamllint disable rule:line-length
template:
metadata:
creationTimestamp: null
creationTimestamp:
name: secrets-authentik
namespace: apps-fuku
type: Opaque

7
k8s/services/dcsi/sealedsecrets.yaml
View file

@ -1,15 +1,16 @@
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
creationTimestamp:
name: secrets-dcsi
namespace: democratic-csi
spec:
encryptedData:
driver-config-file.yaml: AgAV/PBRKpvUMziktxxW5aPv1ITToe3i2FVqWLL0IbWl94Px8gH9AJCMNVfrW8L45Z2VBFKIscmmmbRK5OvqwEjEzhodeWoc/tEeMq7XawZ4ccS6L+GxoaxYtQiYjO0J/g59+tGzgq4hXQoYfZBZ9ADrzhaHjv/yQt+DeFYYisNksPskYTYWgjZPhR9g6axGU4R+ldYbAv2YXG/Is18lC38Kk45Xtkw7GTEnGjFkVLlXd2zYNNDfYan6T5trMjRV4nHBeJsoefyNV5mUTRr9dMKEiDvRzxfkdRNkyIbGPAIuvzZ7vlrby5DCBII8KbF6txpoAjJpl0YOPOdVzv/jQETIry48wepkQY/+ZWXXRgRMVk9uE0ks+wgUQMnqrTeTBfwSnoWr9z3fPKzmmetuYoWrbt2SY1eF9NpSD/1XgrhahT9Da9F5Yy4s1CamEmm6JU3fYbd6fb4hrZooP04kjtfrKA4aN0czMFm1d+PA1ukwKKCO8gsw5a6NX3yEB8g3uI5XHjsp2skeL6Qn2ow0f6nyK20lMe/GNJusjAs06zL4CMu5Ap/XRmpCek69e5WqZvrmtQqRJ7DsMgahKyPYDpoPlvoylD8cEdoTmQnThI+m2psl7ZEW+DUSFE1hAJbMVXHwCmi57Cr1UqQ6i2WKlXw9Pch2Y08QguxDeUR8No7I88PbzluU2Jx3+otJS+DbjOIUuu5t0ZFAkoqh/B3EMASxMkawK8ugW8sOPtrnACtRlHuqTyzBEeoO6tWBdPO4di8Mie8sZxPR5immCRmFRYJl1XCcG+rDPgnUyOrA0iAAmPbdjkoJuUCsMJ9s9fSQD5BlyDij40LgcWiqvHAgtirkUrWnuVNL9fIO/WIdsSZ80zcq4LWmdfDXJF0v+AYzABbLnBlXJv0yfxo0Zy5sGA8FDF4sGdTVjVbWq88aPhuKgKKVTqGoPTn6YdQ0pO8XY+r4WvGi71uc+/M/lnuEk5xrUt6G3n/xaUqi8ctj7XR5qObAHUYv42sOJAAh7yIloLR0A2FuMTwOu2pg6ScPTCikpNK3VDjesSUePdmdKL3DSabtDKZG4mvY3VhXH2iDyRZ07c8iObwb+/a0Q89rXBHa/ZQnOSR3nQI5tv7SUJqJt4M2NadlRtv0I6HxO2cOpw5D2O9Yak0q9brwoE1HvSAvMqwNdFNOXimbwIuf3Y7BVo4gXVWzR3TbWLn5nA4TXnf3+yuW8eI/8wy7foU+C6USEm4jb3hhWdWtnfJw//WdVM8A2JYr1vBDejfULlfCnXNMVBqhhYA/Mcjxcl+FtD3ho5HAgA5BWQoKlsi4d0JOLeKALxEHWJ5RX9Z4+CBJMOlxehggfa17ap+HOfIVO+tYhY0ZZoiW5oMpM0mwBcwr/CZZ9fm7qpCgojs8Tkrl00QXoGNiGgn3/ksPuAwNE1EU0EWe7+0VX9zJ5m3JsIAgCCwkorNwdZH2AK9FcpGWJZOTec2f7MW1Td5kkhQwTQQ0iFxJnGTt4qJv+lqH6LH5yR/v0GnIt4Y+Bs5pcsSU+uv7t4+k4ZDo+aN0imcQXTucxeRXpYlSspVCIOnxtb4e
driver-config-file.yaml: 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 # yamllint disable rule:line-length
template:
metadata:
creationTimestamp: null
creationTimestamp:
name: secrets-dcsi
namespace: democratic-csi
type: Opaque

13
k8s/services/factorio/sealedsecrets.yaml
View file

@ -1,17 +1,18 @@
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
creationTimestamp:
name: secrets-factorio
namespace: apps-fuku
spec:
encryptedData:
game_password: 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
password: AgCTY4hn/wTGipH9oX7SgS44PE6wEe34AB2Pz9IeB5KcISZVGgWAUMtcffexV31jcNwz5TrztNam22Ys7qYbsZZVNOWm27/KZP3U04Jrq1cIPhY+xE1xF3vMqCd54r+kaeMO4hlDhBlE7Hs6BHdURTpPz8ocqihT2bft+Q8p2Myf3vPHXcDwoUyQj/AFYJdJJhyVfD5NDdacFhOmPTB/tUE4AW1Rz9oND6sy0x7NaP44vswVbhREpMA9wkltJRugRKUwXdfC6kOrfKa1R88aNOwkqc22F1U1PhcqUSAMYQxOA+zz3xMjrP8o70V1/FBKxnTBYVIpdHuwl2RpvC/TewJYVEu1xzp3texfgkTn6XXMp9InxfA6y1wpSVpMPYK5zPRCnmuyPTdSd+DrD6C6y2rstrHvvHxnLPtqo5REVjkfTGkEilmQ1+SllPMPk/6hKivahdmORixoI2MtOz4k4d+7rdPrrsRscMHAheyJTNdKC3wGoKFqbm+0zFV3GFaxM65K0USlYhPwyKG3FlHGj0t8HmXOr+M2cQKd4vqIrq8betRp08YPGMOT0Ea1KIvoP3z4yiJg2Z64d8d0Brof/h4fFd4kKgfMYm/CvkNh5zjFzEYi+K/6G/G99RBxwl7kK3eMB6CiuOnLITCw/Ok/LiRcdnIcAe7yobHG6FWHas4KPL5t4dPTxo12catoWtuJG7L20AIl3171+gO3jS0e4zAvZ+7S
token: AgByS4w6xSn0/FzWkgNazh7hyZjKTTmg9WtQ3oyKQUVF6FYg+qvPYYLuNu7rTwQOa4LGw3Cvf/yYT0+WU93BjfNCSVMfes1lE2dQzukK4+zEeDhZ4MSpBOBgYYwHJkrFyHpvVSAQkaPi40T0M8iJmFv+Oq1s8zRWmx84LMllaJuRGH/t9jMfmR3rF6JBcSmEmkmB7N8cD+ytPPtZKXGJXaWE0qvuNKNveqirLRt7E+B7z7yvhroaEHahHEseOQnJ6dKY83KzH1riHBTUNOVcI62hSkiYEbbZXAzxznxMKDs04w/BpOksTeg3OWD/RzwuRdX5M2zb3wrrqbF9r9yoLUbWBMS2bdUbUyLiqvfzKUWKAd8eZsS4+P8N5fbPrLgXmB+xRz5xiCQ+r/ZL4Nj9pfuSZMDKytIglldB6BT5gtnodiaCgAPrtLz2OMtBvvojpWOaaBbYWxbrnMhCG2YYU7Kd4UFXEttL/MVs7YkZow12AIngKqzz7vXo3K2iwRYoi2CjOwv3NeXSWk9LdTrTxs00iO8RT55wbAcg9HiNkYZFtrI+6sygvnHhDmNhYG0z7yHCpx13KIjoFEtVEcx2F9bbMftxBmZoOFaGtBhFSgH323CLGoFecdhv41cH9F5HHzpc13Pc5dShm6ZPgWrWG88w0Q4WIT6hiXlriSnd9xw0At4kl7wRBqusZgwDVTBCFbtKS6Gg9msBZnZzADI/aeljY3QXGg2YT/2Ra2c3quY=
template:
game_password: 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 # yamllint disable rule:line-length
password: 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 # yamllint disable rule:line-length
token: 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 # yamllint disable rule:line-length
template: # yamllint disable rule:line-length
metadata:
creationTimestamp: null
creationTimestamp:
name: secrets-factorio
namespace: apps-fuku
type: Opaque

14
k8s/services/loki/sealedsecrets.yaml
View file

@ -2,30 +2,30 @@
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
creationTimestamp:
name: secret-grafana-smtp
namespace: monitoring
spec:
encryptedData:
password: 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
user: AgCZBx77cHwdvxd1wHIR7ztq1PJtbpuH9B90KbiwHmTa2MB66+tBkAPNltCucmLikI9v5k9CtOV7V5tcmhcNGHEyU0Y8rfpcXUsojw2ljNH5nS/lqvxPq80R7rJJA4rbvJFDR/TE8dHhft5OiClb5HGzy99oLfzpXGRq0D90sraedCJea3O9nlZLbgaryQG8mfPONic1P5i4RHYOyB2F2dzdX8vuQNCzMS3n9bnfFDPiGwrYJHkkilXy62xfzEoWj1LTpcvs2tzQf5m8PeTaV+X5c5AKEpvTlHrZTonPsS3LZQ1qghuvgbROhMQspdqlVOajscnZxqbh14B8EiLChGuMsKK2MJoxZbIu+g2PwyGM7Ss4fVKIJJ8IkQCozUC036GssSk6tfNiTYDJkXJPr8e7ylj9dhbAV9nuFh0VW01f6TAbK68ll3QfqCHn60muNc1/fUQ3tQtCFfNHwAmV2GOLkrQXM9fvqyxXXu5CC5ddfNhjvbwtJfvssLdF7MiOWEz9+bXIf2bJhCnnjhzKnqq+hCAbjRTQ5ivFACYSOIoQE0KiN1GFPpYUrzcSLvces5o2oi+23v/iX5hW2Wuxuw2Tf6SxLemBtKUILkKrETkUcB52OIfYOk7Q/0Gpsy+0MIrVPb/eX7IAfhsrCyl8MgL1Db6bPr3YcnLXcKKxJD0sq2WlecOSO3J1bWzRIIIHYrSESoqS5IbQWW8vphCDSRDY/gza6sQ=
password: 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 # yamllint disable rule:line-length
user: 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 # yamllint disable rule:line-length
template:
metadata:
creationTimestamp: null
creationTimestamp:
name: secret-grafana-smtp
namespace: monitoring
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
creationTimestamp:
name: loki-auth-secret
namespace: monitoring
spec:
encryptedData:
users: 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
users: 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 # yamllint disable rule:line-length
template:
metadata:
creationTimestamp: null
creationTimestamp:
name: loki-auth-secret
namespace: monitoring

1
k8s/services/loki/traefik-auth-middleware.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:

23
k8s/services/miniflux/deployment.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: apps/v1
kind: Deployment
metadata:
@ -68,27 +69,27 @@ spec:
name: miniflux
env:
- name: RUN_MIGRATIONS
value: "1"
value: '1'
- name: CREATE_ADMIN
value: "1"
value: '1'
- name: OAUTH2_PROVIDER
value: "oidc"
value: oidc
- name: OAUTH2_REDIRECT_URL
value: "https://feeds.roboces.dev/oauth2/oidc/callback"
value: https://feeds.roboces.dev/oauth2/oidc/callback
- name: OAUTH2_OIDC_DISCOVERY_ENDPOINT
value: "https://auth.fukurokuju.dev/application/o/miniflux/"
value: https://auth.fukurokuju.dev/application/o/miniflux/
- name: OAUTH2_USER_CREATION
value: "1"
value: '1'
- name: FETCH_YOUTUBE_WATCH_TIME
value: "1"
value: '1'
- name: WORKER_POOL_SIZE
value: "1"
value: '1'
- name: POLLING_FREQUENCY
value: "120"
value: '120'
- name: BATCH_SIZE
value: "25"
value: '25'
- name: METRICS_COLLECTOR
value: "1"
value: '1'
- name: METRICS_ALLOWED_NETWORKS
value: 10.42.1.0/16
restartPolicy: Always

1
k8s/services/miniflux/poddisruptionbudget.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:

14
k8s/services/miniflux/sealedsecrets.yaml
View file

@ -2,18 +2,18 @@
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
creationTimestamp:
name: miniflux
namespace: apps-roboces
spec:
encryptedData:
ADMIN_PASSWORD: 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
ADMIN_USERNAME: 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
DATABASE_URL: AgCbCyCwXzkW/6gd4XWo+/xyentimc1ERwBXyutbdwW6zT5Z9HqljwGC9u2I3wScAmE1X9IiBvQU2n6+ESqAHtlXpnIJBWEs9muppSR3BhIEhaLtfHCpX7DqxWYPKg0gdWtKK7wbizjRWffHmg1cO/xavjefseAMpvgWS6zaQu5GTXPC0jXgSpiD7kNrge5Fk5wHcJqilj8oTKgHqbAZfhkTMDzqhbxJ49VsI+ItfdGG/dPRXuDvJ9YAeD1/2vHjUBSffcSdAFf/Zgn/XI/YLOyw/zVrPRtm3Plyti0/9yPvHbh9K30uvAlf2H4+mwZkpiDKxrId1/VU1suHu3N7pB8CrmlgXsowJr95juzoF8lTvGSrg7kE4mQaIhE3hAQ5B3OiWnoaN9uHa0Htb4GhjTrsdWVwMxHfsRFVdSwWtITzm3miMuWbQfQ1SGZEI3TU0lexc8UYzbQBHCY5GgU92GTmEQAl84jLMeo+wyVYBIDdTL0sHmFZfv/omiW0lzScZChaKEkJGxRBsju3XG5f7MqLrohWg5uBm+riApEu46a4DGZUV3nNJZPdwnZbProvPTjb0VvAz7jfAFiznxVouS2+CKEH7/FMxkBKDnwagxfd7KAr0gE/RxmuFSq+G9nNoaBTWoEc2V3ViNUCrSlRW8yf19Ow0vP+MfHLWkZ09QjDRLKdxBZpOrda/mxrxFSeqYmK+XA6/uZAigdX3O0Rr8RHYNPLjDCfce37gquD04269Fk2goLS4xEzhiODpADMWFRxPFzw5KDLICXZL3BTEiHNhdYiEOEm53uz7aIG
OAUTH2_CLIENT_ID: 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
OAUTH2_CLIENT_SECRET: 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
ADMIN_PASSWORD: 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 # yamllint disable rule:line-length
ADMIN_USERNAME: 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 # yamllint disable rule:line-length
DATABASE_URL: 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 # yamllint disable rule:line-length
OAUTH2_CLIENT_ID: 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 # yamllint disable rule:line-length
OAUTH2_CLIENT_SECRET: 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 # yamllint disable rule:line-length
template:
metadata:
creationTimestamp: null
creationTimestamp:
name: miniflux
namespace: apps-roboces

1
k8s/services/miniflux/service.yaml
View file

@ -1,3 +1,4 @@
---
apiVersion: v1
kind: Service
metadata: