Skip to content

Commit

Permalink
Add kutt to production
Browse files Browse the repository at this point in the history
  • Loading branch information
Serubin committed Mar 22, 2024
1 parent 8530ed4 commit fd187ad
Show file tree
Hide file tree
Showing 6 changed files with 96 additions and 5 deletions.
1 change: 1 addition & 0 deletions apps/prod/kustomization.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ resources:
- ../base/prometheus
- authelia
- dysautonomia-web
- kutt
- lemonhope
- serubin-net
- vaultwarden
Expand Down
9 changes: 9 additions & 0 deletions apps/prod/kutt/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../base/kutt
- kutt.sops.yaml
patches:
- path: kutt.hr.yaml
target:
kind: HelmRelease
35 changes: 35 additions & 0 deletions apps/prod/kutt/kutt.hr.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta2
kind: HelmRelease
metadata:
name: kutt
namespace: default
spec:
values:
ingress:
hosts:
- host: s-r.io
paths:
- path: /
pathType: Prefix
- host: seru.us
paths:
- path: /
pathType: Prefix
kutt:
google:
existingSecret: kutt-secrets
recaptcha:
existingSecret: kutt-secrets
jwt:
existingSecret: kutt-secrets
mail:
from: "${NOREPLY_SEND_EMAIL}"
username: "${NOREPLY_AUTH_EMAIL}"
password: "${NOREPLY_PASSWORD}"
reportEmail: "${ADMIN_EMAIL}"
postgresql:
auth:
existingSecret: kutt-secrets
redis:
auth:
password: "${KUTT_REDIS_PASSWORD}"
46 changes: 46 additions & 0 deletions apps/prod/kutt/kutt.sops.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,46 @@
apiVersion: v1
kind: Secret
metadata:
name: kutt-secrets
namespace: default
stringData:
password: ENC[AES256_GCM,data:6DNJhdTL/jIWc0S8SebeIZ0ikWIKoxdoi58G+2z5By1ZWpzD0o19fmumUbuoCU+t8/7bhhClV17mEpJbFfGJDA==,iv:LVPLJ/SoS1OYxopmgzWfzYzf+rT9ipvYCfRskM1BZI0=,tag:rESAYz/eTsy9zlDO1Y1MtQ==,type:str]
postgres-password: ENC[AES256_GCM,data:EjGRGMaxwjQgLcBb+T0ZBTeFVfLfnE8XLfl6l8/V396HGYvnT/cbDH0aepoPokEjJuWg9dqr8jtx6jsJxi5JaQ==,iv:Zr2debSOZjLQcMavTopO35hJLluR1vnIKck0I5JiI7A=,tag:j8N4ssEpGpc3LAlcA+9duA==,type:str]
JWT_SECRET: ENC[AES256_GCM,data:IJfxlG8bTDekrFckbsQHEWYkuCmGi0hzzgXCz5TIoKZJWW/TWZZocka083G0zK5FRaI78bhT75/gCwHECwhr5p4DQ5qzeY+mKKz0hjpmNJ7Poqi8stAy6++bRyWA37NeBn+XRpjN4sPMQXnTBjmg8RIUJFC0jzDVsbX4UtuZBKc=,iv:X9i20+xF5z0BcazoIODmqzbxfxWDKfkgZzDmt7d4YOM=,tag:wxNJhwgatprhVD1FDl9RbQ==,type:str]
#ENC[AES256_GCM,data:wQvvpP3nvQ==,iv:HJCqfNIHUt3d4EdRmzBg6FtPg2wV0HVEUYrOdvtj1rE=,tag:qjtIGXtXgrme+9Y3C0DEWQ==,type:comment]
GOOGLE_SAFE_BROWSING_KEY: ENC[AES256_GCM,data:RVR4mMlRhNTgRo4Ak7KbeGFWVfwglAyD3npgJEf807J4/EP5+lB7,iv:NJvd0nXCfVfjU6ZnBdu21KhghvFf4cd3g2P32jq3gT0=,tag:1ICAgb+t0+gcUCdfmzLMVA==,type:str]
RECAPTCHA_SITE_KEY: ENC[AES256_GCM,data:Nubxm7wz6HVAl9FlpqeuL0IQuNdeN4Z0hGnrHVR1BG3DMxUDfKC8jA==,iv:0JINsKtHjthyH55Kaa3RcIY6EBbMfjD8WJBbZoe4Dbc=,tag:2Uxo9GFIb6SimN3JRvYB4A==,type:str]
RECAPTCHA_SECRET_KEY: ENC[AES256_GCM,data:xTj5nfXHPeRjw2ji9juhLmpFJWCbeVarbQ0w9sgMpkwYREsGI5SukA==,iv:sYFOa2pFW+4ip40XloFCbC9BKloLtyuyFXuMNhyamrQ=,tag:Fcg/RTNvkF68tN9YbFcVpg==,type:str]
GOOGLE_ANALYTICS: ENC[AES256_GCM,data:dDzhDCgUHN6Jm4AK,iv:NOvMBCWIEyqdbZ4qu1bPxdpbEozbAxwT+Rk8dwLp9bs=,tag:kwKT1ttQl1KxVthBPb3I7Q==,type:str]
GOOGLE_ANALYTICS_UNIVERSAL: ENC[AES256_GCM,data:k/wbGBqj8bX1eDGg,iv:rXJxfRf8dnMjgX8OQOcem32hDMVeO8dtD/OHh1IBF5w=,tag:HuvPJxJKEmlZz0zapsCmnQ==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age: []
lastmodified: "2024-03-22T15:44:49Z"
mac: ENC[AES256_GCM,data:7+SAv1FV532fv6ynEn93uiQSWiXTHpi/U9dDfZLr8R9EhfX7LEMsYEOeq4ulhiZbMIq4JlHysIeydhOT9/8AZkQVpu2sEv6GWqfzm3LFNYt7yWCAUxEjE8D8zx449hqZoF2ULGI5NuvcU8brwl1ImQJj8AUp6ZH9pmRgr9q/xFo=,iv:p0idC/AjbKz5L1HU99BAhCgQq4czyQCvSpjq8LMSspQ=,tag:pp7aOazO8/ox3wdN3DZCpw==,type:str]
pgp:
- created_at: "2024-03-10T20:10:41Z"
enc: |-
-----BEGIN PGP MESSAGE-----
hQIMA1aihG1drcqCARAAoW2bkY2vZM1yrJGeTt1cSbWUK9lq3tdHjeqg2Ze2cOqG
QEUMwJqhjKy16ug3e8I/tJ/fRv/y69fTcrVwG77pUdHu2Xvo/L4REcRYF34EhV8F
JYsE7Hemj5ODtmICCChrvU3wlVw1T1iAKdoWm635vq2YZRu6UNZrG4JeMnVlWeXK
DThlc8UFBrALcDkczHJA/RLZ6boKqgCAuTejrEB/j1fqINmKLyvs2LTOL4LMFuUb
2mNfZb05IdeNL8Kfqn2L4jogmCtu0bz14vpNB9KTrtt+XHjA2ey6eJA2hWmsa+4h
P3VcZgM0ZRWJ7MI8eByEWtGnprUTWsMbN7CCpoL/+Vh6VilnuudMKNzsI5u2lJ6r
EcHnX5XGwzK9AVTJhk44CBYL1Oz9Q6qaoJzFKFT/rF+0syhSaAzoyYoVRetrNcBR
TH2MRpYmLuNWGkaScf0FnOO39E1esgb/udqD9Of1Wl56w0sJ9cJ9Z5AsUOwvJirZ
lC4cDFIYsdFbontmN1nF64qSKfLf3yPFLNcJTI5E0na+TeeccegSoICX4tVGaJR1
SpU/iRpH03zHdHA3Fs7aKMRLrSRN3Wl/uCdLWf5PXKHDbAvHfs7TShhASAcidv3I
aTxNXTNNn2C6rnRuTHo4ABdEn+5R/1UH6wVmD7kVnOcP9hf0116YVpFJAGQAUmDS
XgGH+3dAHa7ikxgyMFIPAoqqnLh1N1KZ8lUgE2+0kDAvrdYuxl1L/kflVUrO38yi
7456ryN49J9RJLKP1wdWReon28RATDhH/JarGuAFqDxm1aloG9dwBORZK2pVhVc=
=iR1W
-----END PGP MESSAGE-----
fp: DE531CB90D5130B090569D4A3EAE9A3DA4F76EBD
encrypted_regex: ^(data|stringData)$
version: 3.8.1
2 changes: 1 addition & 1 deletion apps/staging/kutt/kutt.hr.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta2
kind: HelmRelease
metadata:
name: polr
name: kutt
namespace: default
spec:
values:
Expand Down
8 changes: 4 additions & 4 deletions configs/prod/cluster-secrets.sops.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,9 +19,9 @@ stringData:
YUBICO_CLIENT_ID: ENC[AES256_GCM,data:QvXyBhc=,iv:N6kVwY/p4YKo7pA9rWjHgq9ZZxp0pl66ArUo7p7DBVc=,tag:Iw1S7piFh++MDHQcvGNJPQ==,type:str]
YUBICO_SECRET_KEY: ENC[AES256_GCM,data:3qiPlKEL22vxYLCQEQsDzXDK0k5NQ2Ood8ks2A==,iv:BYqbhvx1L2wZhiJRO0AsNc1y/d9KjMGIJWwazAxXScg=,tag:1t53GLC1BPiwI3YEpFVFCw==,type:str]
#ENC[AES256_GCM,data:s2puD11GehsXgw==,iv:w1PuGjogQO5Zkbl6y2H/rV7Bxz1Ie/zDuifmXNux7h0=,tag:6hKCWiDJiRtKgvPWTpjZzg==,type:comment]
TANDOOR_DB_PASSWORD: ENC[AES256_GCM,data:bApWLqocAkplQEbE+vNvPpgaShXLYjYbwplqmpnQCYQs8F78runLHm+c5xayVIdi4ZyZbFHz3z9y2+UhgqEmpw==,iv:isT6j0jljcZQ55vCfz9KgYFz2HoBD2AtZhmVDxiujl4=,tag:3kDTNxekoXeCRytlvU8y2g==,type:str]
TANDOOR_DB_PASSWORD: ENC[AES256_GCM,data:fNMaDuBv1n/p5DlLw2lPsKDACL3R3Tr9VYuUJUGFxy1IcZoTfSbKmMUg7AWROB2DxS/6ePpYcxCReTyMYzeokw==,iv:JGX1hJHGyUzBNiDdhCegDOJgKYRfeWWfodev/AbeMb4=,tag:43MZjQPimehZtaGfZ5fKaQ==,type:str]
#ENC[AES256_GCM,data:PU/ZZts=,iv:MgDAo48hEJbvo2YeQdjahF7h7PUL2QGm8Uowuvif9CI=,tag:aE2pkoO8ZE/PWnoU+nSrOg==,type:comment]
KUTT_REDIS_PASSWORD: ENC[AES256_GCM,data:MbEbhXeNGWQwF3I7geoMmzteC7t9MkYi7UyOfvPpbMwhB9UeZOLLNN6TO1EcQRliyXChV/2sG1zf94PlH/qGJQ==,iv:mx33XmpI/G8eLcfAaz8deL2NlClmYxcVbwqDDjPy4mI=,tag:pzeALPyAKJpeyDTPbWDglA==,type:str]
KUTT_REDIS_PASSWORD: ENC[AES256_GCM,data:g6ykAdLnYx0lw+xHs8GdprsJGrvVIVeaRrlxqyioabO17YTmnmSblKwH52kMfKPQj+Rgzy375hL7h3vg3ccBWA==,iv:891bLQtiP6/so/GD5MwiAF2BX0Ah//VHhS11P5MkRRE=,tag:3lw/WIsTVLtJb9vmZEyLZQ==,type:str]
#ENC[AES256_GCM,data:8uW2ap7OC4Slpmfx4w==,iv:i9E6DaZXhKgjfXw4yY7uxS8nxc1tFhI9e9KID4QIjnA=,tag:qM0jWRffuk7PwSOVZ6AdoQ==,type:comment]
OIDC_GRAFANA_CLIENT_DIGEST: ENC[AES256_GCM,data:8fOkDJWSe8tstyD54/QB46Aeq0qTRm16rNjLyHtsDHnMYbCLR+nBCADCS8SJaB9dfQxTZuqeI72YSZDAPRThkZrVnKmBUZ+3ZpmzXwhLP5QO4mwsFtE4UxxYy3V2oHIF+MzEV3x7i9erhkCWguL4Y1PJ63VXpOEGF8vI9cVmVgivWPA=,iv:wajfP/CKUvPuuHZGr9fmoWqAgp/Y2saelttVry7MMfg=,tag:BToKGyBgj9CQinImg1g/DA==,type:str]
OIDC_GRAFANA_CLIENT_SECRET: ENC[AES256_GCM,data:zx3vRBV0pLM9FOajSvw0bzQBh3BIqGWVQ9FmsFozAdeKXiDDG17FpUIAZFyIOwK46YoWU43M8cYYPOOdk6vCDG6nGe/QEs6medYcgUnVFXRDPQt/JgyEnTghVSBKU4dnVgb9OLYhMpr6hhbe5Q6LEpy+TqRtbFKdNer+HUreYYo=,iv:1udGrvbliIMug9Xp2VU7ws3PLmG8Mn/wCq4IdxQ8HTI=,tag:jpd+LK1NFWC7O3sfDxR55g==,type:str]
Expand All @@ -31,8 +31,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
lastmodified: "2024-03-20T21:08:34Z"
mac: ENC[AES256_GCM,data:Db6SereQ+YjgQOGQaS5a91ZhrEfCXy+C3lrwvQ0W5pt48tRdzkHsu2Zi4rsQnstqbuZxXvbFi1LyXzM9iYT4Gx39Eoj2inwbLdDQ9+DSozN+gFd6XmIW4cJRJ7BiTf1WNGPIWU9nNQATrbFFxKuOk/f5XSjP6Ym2b/NWS9zly/s=,iv:ohCDuJ/k/I2cNvOmClLD9fSzNKx7oXBkaHBOhCeg5Zs=,tag:/XgRZp83aGi8nWXsq3m3Dw==,type:str]
lastmodified: "2024-03-22T15:46:50Z"
mac: ENC[AES256_GCM,data:zPMwFEPX7TJh3sdKDXdzvcPB9jUZeAVwAuHRO9yUFFNBdMs/NB805Z/aK4nBv0A/kWOIL4Y5nwd9b2+V4/kdZP+1f+xhzPnNMzAnRM0/RF7H+4nb9WQm39KsYYowHcXmvBBq8LmYa5QAHLLRPzLwxaPyxmm2qHAe+sOBQDgKNrg=,iv:7oK+6YU8Tdj3nsZwAnKQ+4BS3skjhGYumtgSUbP6OD4=,tag:/hsCOhBO7HonmWreK7/AYg==,type:str]
pgp:
- created_at: "2024-02-26T23:49:52Z"
enc: |-
Expand Down

0 comments on commit fd187ad

Please sign in to comment.