feat: migrate vaultwarden to k8s

k8s/argo-apps/vaultwarden.yaml

@@ -0,0 +1,64 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: vaultwarden
+  namespace: argocd
+spec:
+  destination:
+    name: ''
+    namespace: apps-roboces
+    server: https://kubernetes.default.svc
+  sources:
+    - path: k8s/charts/vaultwarden
+      repoURL: https://git.roboces.dev/catalin/fukuops.git
+      targetRevision: main
+      helm:
+        valuesObject:
+          conf:
+            db:
+              enable_db_wal: true
+              connection_retries: 15
+              timeout: 30
+            web_vault:
+              enabled: true
+              folder: "web-vault/"
+
+          replicaCount: 1
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: false
+            runAsUser: 10000
+            runAsGroup: 10000
+            capabilities:
+              drop:
+                - all
+          service:
+            type: LoadBalancer
+          ingress:
+            enabled: true
+            className: "traefik"
+            hosts:
+              - host: vault.roboces.dev
+                paths:
+                  - path: /
+                    pathType: Prefix
+          resources:
+            requests:
+              cpu: 250m
+              memory: 256Mi
+            limits:
+              cpu: 500m
+              memory: 512Mi
+          persistence:
+            enabled: true
+            storageClass: "truenas-nfs-csi"
+            accessMode: ReadWriteMany
+            size: 5Gi
+          secret:
+            existingSecretName: vaultwarden-secrets
+  project: roboces
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true