Compare commits

..

2 commits

Author SHA1 Message Date
8a57dfc0e0 appflowy/service.yaml hinzugefügt
Some checks failed
ci/woodpecker/push/yamllint Pipeline failed
2024-11-03 18:14:31 +01:00
d083f9313a appflowy/namespace.yaml hinzugefügt
Some checks failed
ci/woodpecker/push/yamllint Pipeline failed
2024-11-03 17:25:02 +01:00
16 changed files with 83 additions and 53 deletions

View file

@ -29,7 +29,7 @@ spec:
sources:
- chart: woodpecker
repoURL: https://woodpecker-ci.org/
targetRevision: 1.6.2
targetRevision: 1.6.0
helm:
releaseName: woodpecker
valueFiles:

View file

@ -9,7 +9,7 @@ spec:
sources:
- repoURL: https://traefik.github.io/charts
chart: traefik
targetRevision: 33.0.0
targetRevision: 32.1.1
helm:
releaseName: traefik
valueFiles:
@ -39,7 +39,7 @@ spec:
sources:
- repoURL: https://argoproj.github.io/argo-helm
chart: argo-cd
targetRevision: 7.7.5
targetRevision: 7.6.12
helm:
releaseName: argo
valueFiles:
@ -106,7 +106,7 @@ spec:
sources:
- chart: kube-prometheus-stack
repoURL: https://prometheus-community.github.io/helm-charts
targetRevision: 66.1.1
targetRevision: 65.0.0
helm:
releaseName: prometheus
valueFiles:
@ -157,7 +157,7 @@ spec:
sources:
- chart: cilium
repoURL: https://helm.cilium.io/
targetRevision: 1.16.4
targetRevision: 1.16.3
helm:
releaseName: cilium-cni
valueFiles:
@ -280,7 +280,7 @@ spec:
sources:
- chart: loki
repoURL: https://grafana.github.io/helm-charts
targetRevision: 6.21.0
targetRevision: 6.18.0
helm:
releaseName: loki
valueFiles:
@ -401,7 +401,7 @@ spec:
sources:
- repoURL: https://charts.jetstack.io
chart: cert-manager
targetRevision: v1.16.2
targetRevision: v1.16.1
helm:
releaseName: cert-manager
valueFiles:

7
appflowy/namespace.yaml Normal file
View file

@ -0,0 +1,7 @@
---
apiVersion: v1
kind: Namespace
metadata:
labels:
app.kubernetes.io/instance: appflowy
name: appflowy

30
appflowy/service.yaml Normal file
View file

@ -0,0 +1,30 @@
---
apiVersion: v1
kind: Service
metadata:
labels:
app: appflowy-gotrue
name: appflowy-gotrue
namespace: appflowy
spec:
ports:
- name: goetrue
port: 9999
selector:
app: appflowy
type: ClusterIP
---
apiVersion: v1
kind: Service
metadata:
labels:
app: appflowy-cloud
name: appflowy-cloud
namespace: appflowy
spec:
ports:
- name: cloud
port: 8000
selector:
app: appflowy
type: ClusterIP

View file

@ -92,7 +92,7 @@ spec:
secretKeyRef:
key: authentik_host_insecure
name: authentik-outpost-api
image: ghcr.io/goauthentik/proxy:2024.10.4
image: ghcr.io/goauthentik/proxy:2024.8.3
name: proxy
ports:
- containerPort: 9000

View file

@ -5,5 +5,5 @@ kind: Kustomization
images:
- name: git.ar21.de/yolokube/dashboard
newName: git.ar21.de/yolokube/dashboard
newTag: "207"
newTag: "187"
namespace: dashboard

View file

@ -5,7 +5,7 @@ kind: Kustomization
images:
- name: git.ar21.de/yolokube/dashboard
newName: git.ar21.de/yolokube/dashboard
newTag: staging-205
newTag: staging-186
namespace: dashboard-staging
patches:
- patch: |-

View file

@ -32,10 +32,10 @@ spec:
protocol: TCP
resources:
limits:
cpu: 1000m
cpu: 800m
memory: 128Mi
requests:
cpu: 400m
cpu: 200m
memory: 32Mi
volumeMounts:
- mountPath: /var/run/fail2ban/fail2ban.sock

View file

@ -10,8 +10,8 @@ kind: Kustomization
images:
- name: git.ar21.de/yolokube/country-geo-locations
newName: git.ar21.de/yolokube/country-geo-locations
newTag: "37"
newTag: "29"
- name: git.ar21.de/yolokube/fail2ban-prometheus-exporter
newName: git.ar21.de/yolokube/fail2ban-prometheus-exporter
newTag: "70"
newTag: "48"
namespace: fail2ban-prometheus

View file

@ -6,7 +6,7 @@ metadata:
namespace: longhorn-system
spec:
cron: "40 * * * *"
task: "snapshot"
task: "backup"
retain: 12
concurrency: 2
---

View file

@ -6,13 +6,13 @@ metadata:
namespace: longhorn-system
type: Opaque
data:
AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:4kZPRNprd1eQe4tqGkVYs5lgGI6JLkdtxkW85g==,iv:AQ6Z8X8VeqvlQfSOp2RX9X+blPclrJ1MUDGRvlGH3EI=,tag:p0vao7xV3DOb8TMZ7MnOEA==,type:str]
AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:0hXGgxGA84hu+KpCKbLVkd+ghup9ZPb77XjRl5Ouy7MWAskQVvovvy+j8tl2L329ckPdgYxfGdo=,iv:H5pzOdD4i1c57zWMMSTdo+cW+tqO6kyNlt7w/5cv4/k=,tag:6xDkVvTxfw6JlhnO/bfZbg==,type:str]
# ENC[AES256_GCM,data:Vx/DzAeiBwPH6UR8uJWzEqKkyPcrhHBAtNbme9gCiXIqkJuwyL7XDVv0LxbZ6EUTeeKUbCEFDwgCUv3VlQqLZy76pWhQ7UHg6YsoegAVh3U9UYlD4ySJAVLO3+EruUFbBpu+Z0KuNhrXQDluns8WIOzZGdgRgCTM2FDcrgpuiElxFTh1WF7bFRs1bmCiH3jNun4udnZ5aYaiqNlUzzv+P76IdDKWHO8Hhx/WBE/G0gbrGgK+SAa1gU3WYFXqzsipuU1LYKwJ2fpHxPNWei6m5lWHPc+IjdnSNASKW5E1NpXagYGby8nvorbIc6ncGbchc+mC4DKm7CAofvHGIKDkOvUKi4KYAAtpuxoUUwAcdXdqaR9Quxx+358Ax1qh0q+3A+U6kOaIeD/8KCia3vp/Xjem7H0iEutyVmglR05eypqMcBvwx1XWEw==,iv:Nd4MtiUT1zNQJWIjACnNal8URcqNFkV+rscnOBTjkqs=,tag:YFo/xMz4sIFI0fPENXTQnw==,type:comment]
AWS_ENDPOINTS: ENC[AES256_GCM,data:PU28KCvIGZ1zDlCDITP8DD7zInsof5Greb05yzCUeY0VtH4NQVFWNOdNeBbuQl+Z,iv:3jO/fnHdjEKXvd+JecBgxrMfBCOeAgGRcVjIw42OUOg=,tag:Cx56308yFW1gcKwuwvJy9Q==,type:str]
# ENC[AES256_GCM,data:aRsCbIvtGR7oXsa784OZviwTYKTKrRnzurgbgDpxeWa5LeUbODJoEtYZ7EDd9q+7T4GUT0doN4NADT3tfrpkcVF1/me0cJP8SAPPzdyRnFkWYwHdcFwpaug4dhjdTVhH3AnmR7tY9odrpXu8oh80Ug4V4kFtgObBa2Sb85x3p2Apn6PGRor8p56G95EE6AHy51bRK/0924AFNJYHHgdlUbftTP79owBwGxqfDtTsA2iF2K5oyZBCzfFRevDYGZv4VkyxM+Jn70JubMvC+25SwwmSLraJeaiCGGXIWut0lo9U9SKxoAkhhsbypSduKiupYdV+tknetEuN0xlWEip3kO584d5sQ77ZQZU0NkO/scQEGQ5cNWlCvpsURSuCsQYtN8kZ2wnNx2CYIVK1+iRFyr14naXAnpLqJhYGRa5U9g0nMDUQmLa5e6R5K0KlgfPQWH8AN6ZG9jlKu/3RwuUYHTM/6+SQ+GMwvA7zLPlBwxYq0f+uPxhcGLh2rlY=,iv:V32ZLstCviLMljxlBUyrlXYhXd1oA9wGtzu1o3+pdmk=,tag:6dyCf2hhfXqDwQyzRX+iNA==,type:comment]
# ENC[AES256_GCM,data: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,iv:FgI1Xwb5jotVCZOZWAAA+1LfGdYHqz6nBtjY6VjuPgE=,tag:HXr4uv0tFMKqnqf+5Fd3TQ==,type:comment]
# ENC[AES256_GCM,data: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,iv:M/6W8wStPgv5NQKH8rkXHRBobk/7UkjuoHbJarjAF+Y=,tag:L5iGKql3zhbYNqPXkx+3MQ==,type:comment]
AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:78iskasj0MX32r8qp4LCmTsf5q8r3W5nCs7BrA==,iv:dQFU/Pm+bQQKWfWKq7c63XTW2+czjOeIZuoL2mrPKbM=,tag:we+rZ+YoMpeiAve7zcH6pg==,type:str]
AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:zR3LNrmweWn9ONkpOlgNGfJ0ERJeNgNsurvBcsX7JZox/vyaZRb6lt4VEjdBDMdTZ+dWRvtvHUw=,iv:CCLoHHixnzVaT0SX3uOjyb7SCNyAe5H30acmMEIgubI=,tag:c7nWPRTZQXqgp8jVgtU57g==,type:str]
# ENC[AES256_GCM,data:p1aNW086iJ/xbZGc3A9VFitml4AB0ly8BOyJztOoIBd9I7Ld,iv:5um8w4PL9EfHcCHlfIW0Yr6aqvgs5FVh4Y54RDQDOLY=,tag:17ELSDORVx0aj2hzFDaxUA==,type:comment]
AWS_ENDPOINTS: ENC[AES256_GCM,data:Cm4ISXx3mosAwVCzFqK5461gFIAqWtSwazvhfe/01blpOLOGpEW7b7S00fnRMviR,iv:Zflw/1JEQjcKarQPOrpBSpCprdL/2Ry6FH74K3/NfFo=,tag:l6idxnQStu2ycr0og2/otw==,type:str]
# ENC[AES256_GCM,data:0QVDgxSYpM+pFAiXf2+xcAnZath1zSzyZDy/zS8L36kZrSQnBSDN91OwAKLYpOb1m+cbex6lWN9OYFRYcIhUjA==,iv:Cm7bwYZS6F4XkRFaqUcBehXUQXmUI/48l+cDBPjlao8=,tag:jBUadTKqWJbPqpljshBoRg==,type:comment]
# ENC[AES256_GCM,data:oxfKvt9xbus8la9hJGLOCVBfyQMCP4wpD4QZcEIw/SFWysMm2NaFzUHtUH39QAG2kCw1C5gKtTQ5EhJ1C2bgxVB6qlC6DUhO5uwlIoXtDqNsfhnsyWuIvJMH5jnPwAfO8Y+plLk2g4dV3aMmYt8Hfg==,iv:Ai/0l0GDbJzTaVy7Xhp1offyaqKD/Ge/oU9YDiGXC28=,tag:wIGYy7TBnCZYrbKDd1y7xQ==,type:comment]
# ENC[AES256_GCM,data:6IieK5gwtUr+u3PjRjOXs5fJafO3N14yLmDCxBdU5VBfgOpIV4P5nX07DJ5jXw9BJgr6nqsQA0tlgeddT0vnO/cQNKJFBeQXVCzjxLHlrNv7JLg6EbtXZoO/eNow0XBGCLyg6Mq+6S83J2p8pix4tEae4YQrwveQ+dD0A15hK7n5gWOdFz50qE5IImbZsm9aR3ymxs1o9fjkZYTNycsneWe069SNCdb2gFtf4Q==,iv:N30tKPf2ajQT2s0/GYZPV8ipy1Qkkfh+dAlJ4pdGm9M=,tag:qtfr6TY8nyAoMykRONC3kQ==,type:comment]
sops:
kms: []
gcp_kms: []
@ -22,32 +22,32 @@ sops:
- recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOQmhEOFlmNGpCUys4c2Zl
K29RdUpxbCtkbEdqWGhjcW1xTGp6c09lUFM4ClliK1hLQzVtQ0RpZW4zLzhWeDAz
SkNNdUtCQ0JxYXZ6aGZTeEpYTVk0bGcKLS0tIHFKRzdFdlR5dlRrVFhtZzFVazBa
c1l4enNuc0QwZTMycjVYdm5CWmxYWW8KeIfVkmMC+YBSpX1SYQyCtwRNWaOpQgXE
WN/hCyWaxiG7gwYuolUmeZVgN71WWyJFymdQUwTMNPe795lSqWx33A==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIUUV2UTR2dUpxWlpKWjNM
WDI2NVRUK0EvZkdjZ3N0OXFNclNJdzlIRXlZCmZBOUErb2pZUHZlNVpGLzhTUlRK
N21nSjM3RzRRdXR4QStyakdYRExCOHMKLS0tIHdJczRmNnBDMmJjNm9WeXlvU1cx
U1lFckFhTWloSmI0LzJoWDJDSExnbHcK4Sz2SU5czvG58HiQtn4AJbltSwfikS3A
JUKhzPja3ZgHhmed+Bs9SLyKcQ1gm+ou1JLjqJ2/0s2MEAoTnQ9aCw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1s9nvc4rxj3kaj4apmzzn8fmjrudrvdhgu70rg04we9hyse5aadsq7kmckn
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRRy9PZnZFZXlqeitndHc2
V1djOXdmanZuSTVuc0U1TTJuSmNETnpORHpvCmZYL1pPRng1Z0lHRE5Pby9MTDNj
VWZVbjBkSjZtWmRpNVFjTGFDdHlUeXMKLS0tIGk2aFdiLzcyKzZSQnhuVTBLK2Fp
c3EvQWJaVCsxMkphSm5JTnN3cHl0NVEKYMAk1Nb5tG9kHvaLmybQkp17HDlDRZgT
qaq3KD9GxhlR3zieW0SPxNAaxiOegZy2qsftARRhFq5a42nEaXH2Qg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5OEVaTk9IUzR1bkNneitF
dGtadHJjRUJUYTREV0J2M3Z2dzJCSnpEREZNCkpZZnFxNE1QMU5UUXNITXJpV2Rt
dUcvaUw4aC9iQzhIRXVmYmlpUmhqRm8KLS0tIDUxRGxsQldqWWlFeXJITXg2RkhX
bkwvRVlsSDYyZGJkbU94bFUxdnN2VkkKg9LB1b0aD/GqpbRIZD1hIcNaRWr4eybL
17orZ6j01e84zMutrinpOP1sTMyqCEBYG2FrEAnRaTxRkOW7SaVHIw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2SXpqL3MxUlBleWN0bGta
MWpoZGlXT1p3V2hWSzJCdzF0ZnV5VTJLKzN3CnQxSnZmR0dpVEZMdTJSSGIyME1h
THlmakVzdUNGczVqYnh3NkkyT0dmbGsKLS0tIGh4MjZvWlN4VGIyMWlpUmo4bTZr
enM5VUpmUFlodUY0YkI5ZE1PTHNzamsKZ9wzXs9tmGBztTVsFjO8BVOJGSQVYSXy
46BrF45tbufUGXlqSlRkxo5TYY3NLbHZkBxawNIqlLiaAnQc2qaZDg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArZ3FUMlpFRVdrVVZxdXdo
b2pJZ0lValNUMUlZcGRVb296QjlPM1JPZUFrCkVDWlhZNEYxaVRnd2FTWFRtSHcr
eTN0ZERFSWpPa0lyczF2TEk5dTB4d00KLS0tIHZ2MzdpUTd1eHdicHduQzJsRzAr
SU5ibzRiK3Q2RnVNRUhjVm5YSFNmc0UKNA0uHFT1L8RuQR6TmiopYCgLBxsLp0bU
vsS68gQieQI94bBiMOsJQTzLSWBc9juvuBdHhRoyYhkzJ75TAifNVQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-11-06T01:22:24Z"
mac: ENC[AES256_GCM,data:2uNXiOi1RduF2dqAR41eakZxdiqpTPk7B+AAuCppDbUNsL0JAMB3VKexyc4oNLN1kjuH1JN2mQWLXOY3mfbGwZfL2u0TqZU6IavNsRwJhyHLmZ+Smd0oNWk6Ff06B90zo2wQmRHQYPMtUdgi9vF72qKOGxuDmuB4XI6pPkmDhxo=,iv:Yxs56ofaHkzo8NERxU6YllfwknirVHb3mFebRqeFT+A=,tag:0rV6kPjRTYi5XYBrR4y34Q==,type:str]
lastmodified: "2024-09-30T19:48:48Z"
mac: ENC[AES256_GCM,data:cu2bF925hVUs69HmKzs3sc61rN3hNWwN0x6VyBhoobNDF7IJ65Aw/iSYSh80EdoDy4WQq0lfr4SO8sayqs3vxgTwFpujcjnQ16rgq0q00V8e+iDlR78h/SbYp+cuFiu6QBKSl9a/vHfRSTSOAOt0zF+cPYl25Htas5L7S12xJ68=,iv:wDkA8egy2ONoRaUYXV915ID6JX+myOmStxdXXtC66sw=,tag:UxoGQpiB023vcwSc3es21Q==,type:str]
pgp: []
encrypted_regex: ^(data|stringData)$
version: 3.9.1
version: 3.9.0

View file

@ -14,7 +14,7 @@ persistence:
]'
defaultSettings:
defaultDataPath: /storage1
backupTarget: "s3://yolokube-backups@weur/"
backupTarget: "s3://yolokube-backup@weur/"
backupTargetCredentialSecret: longhorn-backup-target
replicaAutoBalance: best-effort
defaultLonghornStaticStorageClass: longhorn

View file

@ -1,12 +1,9 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"dependencyDashboard": true,
"enabledManagers": [
"argocd",
"kubernetes"
],
"enabledManagers": ["argocd"],
"argocd": {
"fileMatch": ["^app-files/.*\\.yaml$"]
"fileMatch": ["^app-files/core-deployments\\.yaml$"]
},
"kubernetes": {
"enabled": true,

View file

@ -85,11 +85,11 @@ spec:
timeoutSeconds: 30
resources:
requests:
cpu: 200m
cpu: 100m
memory: 256Mi
limits:
cpu: 750m
memory: 500Mi
cpu: 500m
memory: 256Mi
volumeMounts:
- name: objstore
mountPath: /conf/objstore.yml

View file

@ -33,9 +33,6 @@ updateStrategy:
maxSurge: 0
providers:
kubernetesIngress:
publishedService:
enabled: false
kubernetesCRD:
allowCrossNamespace: true

View file

@ -36,4 +36,3 @@ agent:
env:
WOODPECKER_MAX_WORKFLOWS: 2
WOODPECKER_BACKEND_K8S_STORAGE_CLASS: 'longhorn-local'
WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 2G