alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 8 Actions Packages Projects Releases Wiki Activity

add applications

Browse Source
This commit is contained in:
Alex Lebens
2025-03-06 22:39:47 -06:00
parent e8409f595d
commit 60682fc97c
40 changed files with 1842 additions and 1756 deletions
Download Patch File Download Diff File Expand all files Collapse all files

116
clusters/cl01tl/applications/calibre-web-automated/templates/external-secret.yaml
View File

@@ -22,61 +22,61 @@ spec:
metadataPolicy: None metadataPolicy: None
property: gmail.json property: gmail.json
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: calibre-web-automated-config-backup-secret name: calibre-web-automated-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: calibre-web-automated-config-backup-secret app.kubernetes.io/name: calibre-web-automated-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/calibre-web-automated/calibre-web-automated-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/calibre-web-automated/calibre-web-automated-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key

60
clusters/cl01tl/applications/calibre-web-automated/templates/replication-source.yaml
View File

@@ -1,30 +1,30 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: calibre-web-automated-config-backup-source name: calibre-web-automated-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: calibre-web-automated-config-backup-source app.kubernetes.io/name: calibre-web-automated-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: calibre-web-automated-config sourcePVC: calibre-web-automated-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: calibre-web-automated-config-backup-secret repository: calibre-web-automated-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 1000 runAsUser: 1000
# runAsGroup: 100 runAsGroup: 100
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

116
clusters/cl01tl/applications/freshrss/templates/external-secret.yaml
View File

@@ -100,64 +100,64 @@ spec:
metadataPolicy: None metadataPolicy: None
property: token property: token
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: freshrss-data-backup-secret name: freshrss-data-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: freshrss-data-backup-secret app.kubernetes.io/name: freshrss-data-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/freshrss/freshrss-data" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/freshrss/freshrss-data"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

74
clusters/cl01tl/applications/freshrss/templates/replication-source.yaml
View File

@@ -1,37 +1,37 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: freshrss-data-backup-source name: freshrss-data-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: freshrss-data-backup-source app.kubernetes.io/name: freshrss-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: freshrss-data sourcePVC: freshrss-data
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: freshrss-data-backup-secret repository: freshrss-data-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 568 runAsUser: 568
# runAsGroup: 568 runAsGroup: 568
# fsGroup: 568 fsGroup: 568
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# supplementalGroups: supplementalGroups:
# - 44 - 44
# - 100 - 100
# - 109 - 109
# - 65539 - 65539
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

116
clusters/cl01tl/applications/hoarder/templates/external-secret.yaml
View File

@@ -104,61 +104,61 @@ spec:
metadataPolicy: None metadataPolicy: None
property: token property: token
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: hoarder-data-backup-secret name: hoarder-data-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: hoarder-data-backup-secret app.kubernetes.io/name: hoarder-data-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/hoarder/hoarder-data" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/hoarder/hoarder-data"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key

54
clusters/cl01tl/applications/hoarder/templates/replication-source.yaml
View File

@@ -1,27 +1,27 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: hoarder-data-backup-source name: hoarder-data-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: hoarder-data-backup-source app.kubernetes.io/name: hoarder-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: hoarder-data sourcePVC: hoarder-data
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: hoarder-data-backup-secret repository: hoarder-data-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/jellyfin/templates/external-secret.yaml
View File

@@ -1,57 +1,57 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: jellyfin-config-backup-secret name: jellyfin-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: jellyfin-config-backup-secret app.kubernetes.io/name: jellyfin-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/jellyfin/jellyfin-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/jellyfin/jellyfin-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key

54
clusters/cl01tl/applications/jellyfin/templates/replication-source.yaml
View File

@@ -1,27 +1,27 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: jellyfin-config-backup-source name: jellyfin-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: jellyfin-config-backup-source app.kubernetes.io/name: jellyfin-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: jellyfin-config sourcePVC: jellyfin-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: jellyfin-config-backup-secret repository: jellyfin-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

116
clusters/cl01tl/applications/jellystat/templates/external-secret.yaml
View File

@@ -36,64 +36,64 @@ spec:
metadataPolicy: None metadataPolicy: None
property: password property: password
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: jellystat-data-backup-secret name: jellystat-data-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: jellystat-data-backup-secret app.kubernetes.io/name: jellystat-data-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/jellystat/jellystat-data" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/jellystat/jellystat-data"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

54
clusters/cl01tl/applications/jellystat/templates/replication-source.yaml
View File

@@ -1,27 +1,27 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: jellystat-data-backup-source name: jellystat-data-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: jellystat-data-backup-source app.kubernetes.io/name: jellystat-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: jellystat-data sourcePVC: jellystat-data
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: jellystat-data-backup-secret repository: jellystat-data-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/lidarr/templates/external-secret.yaml
View File

@@ -1,60 +1,60 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: lidarr-config-backup-secret name: lidarr-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: lidarr-config-backup-secret app.kubernetes.io/name: lidarr-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/lidarr2/lidarr2-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/lidarr2/lidarr2-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

60
clusters/cl01tl/applications/lidarr/templates/replication-source.yaml
View File

@@ -1,30 +1,30 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: lidarr-config-backup-source name: lidarr-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: lidarr-config-backup-source app.kubernetes.io/name: lidarr-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: lidarr-config sourcePVC: lidarr-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: lidarr-config-backup-secret repository: lidarr-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 1000 runAsUser: 1000
# runAsGroup: 1000 runAsGroup: 1000
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/overseerr/templates/external-secret.yaml
View File

@@ -1,57 +1,57 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: overseerr-main-backup-secret name: overseerr-main-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: overseerr-main-backup-secret app.kubernetes.io/name: overseerr-main-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/overseerr/overseerr-main" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/overseerr/overseerr-main"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key

54
clusters/cl01tl/applications/overseerr/templates/replication-source.yaml
View File

@@ -1,27 +1,27 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: overseerr-main-backup-source name: overseerr-main-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: overseerr-main-backup-source app.kubernetes.io/name: overseerr-main-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: overseerr-main sourcePVC: overseerr-main
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: overseerr-main-backup-secret repository: overseerr-main-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/prowlarr/templates/external-secret.yaml
View File

@@ -1,57 +1,57 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: prowlarr-config-backup-secret name: prowlarr-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: prowlarr-config-backup-secret app.kubernetes.io/name: prowlarr-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/prowlarr/prowlarr-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/prowlarr/prowlarr-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key

74
clusters/cl01tl/applications/prowlarr/templates/replication-source.yaml
View File

@@ -1,37 +1,37 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: prowlarr-config-backup-source name: prowlarr-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: prowlarr-config-backup-source app.kubernetes.io/name: prowlarr-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: prowlarr-config sourcePVC: prowlarr-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: prowlarr-config-backup-secret repository: prowlarr-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 568 runAsUser: 568
# runAsGroup: 568 runAsGroup: 568
# fsGroup: 568 fsGroup: 568
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# supplementalGroups: supplementalGroups:
# - 44 - 44
# - 100 - 100
# - 109 - 109
# - 65539 - 65539
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block-delete storageClassName: ceph-block-delete
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/radarr-4k/templates/external-secret.yaml
View File

@@ -1,60 +1,60 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: radarr-4k-config-backup-secret name: radarr-4k-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: radarr-4k-config-backup-secret app.kubernetes.io/name: radarr-4k-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-4k/radarr5-4k-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-4k/radarr5-4k-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

64
clusters/cl01tl/applications/radarr-4k/templates/replication-source.yaml
View File

@@ -1,32 +1,32 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: radarr-4k-config-backup-source name: radarr-4k-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: radarr-4k-config-backup-source app.kubernetes.io/name: radarr-4k-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: radarr-4k-config sourcePVC: radarr-4k-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: radarr-4k-config-backup-secret repository: radarr-4k-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 1000 runAsUser: 1000
# runAsGroup: 1000 runAsGroup: 1000
# fsGroup: 1000 fsGroup: 1000
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/radarr-anime/templates/external-secret.yaml
View File

@@ -1,60 +1,60 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: radarr-anime-config-backup-secret name: radarr-anime-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: radarr-anime-config-backup-secret app.kubernetes.io/name: radarr-anime-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-anime/radarr5-anime-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-anime/radarr5-anime-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

60
clusters/cl01tl/applications/radarr-anime/templates/replication-source.yaml
View File

@@ -1,30 +1,30 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: radarr-anime-config-backup-source name: radarr-anime-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: radarr-anime-config-backup-source app.kubernetes.io/name: radarr-anime-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: radarr-anime-config sourcePVC: radarr-anime-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: radarr-anime-config-backup-secret repository: radarr-anime-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# fsGroup: 1000 fsGroup: 1000
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/radarr-standup/templates/external-secret.yaml
View File

@@ -1,60 +1,60 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: radarr-standup-config-backup-secret name: radarr-standup-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: radarr-standup-config-backup-secret app.kubernetes.io/name: radarr-standup-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-standup/radarr5-standup-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-standup/radarr5-standup-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

64
clusters/cl01tl/applications/radarr-standup/templates/replication-source.yaml
View File

@@ -1,32 +1,32 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: radarr-standup-config-backup-source name: radarr-standup-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: radarr-standup-config-backup-source app.kubernetes.io/name: radarr-standup-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: radarr-standup-config sourcePVC: radarr-standup-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: radarr-standup-config-backup-secret repository: radarr-standup-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 1000 runAsUser: 1000
# runAsGroup: 1000 runAsGroup: 1000
# fsGroup: 1000 fsGroup: 1000
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/radarr/templates/external-secret.yaml
View File

@@ -1,60 +1,60 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: radarr-config-backup-secret name: radarr-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: radarr-config-backup-secret app.kubernetes.io/name: radarr-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5/radarr5-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5/radarr5-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

64
clusters/cl01tl/applications/radarr/templates/replication-source.yaml
View File

@@ -1,32 +1,32 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: radarr-config-backup-source name: radarr-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: radarr-config-backup-source app.kubernetes.io/name: radarr-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: radarr-config sourcePVC: radarr-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: radarr-config-backup-secret repository: radarr-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# runAsUser: 1000 runAsUser: 1000
# runAsGroup: 1000 runAsGroup: 1000
# fsGroup: 1000 fsGroup: 1000
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

116
clusters/cl01tl/applications/roundcube/templates/external-secret.yaml
View File

@@ -22,64 +22,64 @@ spec:
metadataPolicy: None metadataPolicy: None
property: DES_KEY property: DES_KEY
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: roundcube-data-backup-secret name: roundcube-data-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: roundcube-data-backup-secret app.kubernetes.io/name: roundcube-data-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/roundcube/roundcube-data" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/roundcube/roundcube-data"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

54
clusters/cl01tl/applications/roundcube/templates/replication-source.yaml
View File

@@ -1,27 +1,27 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: roundcube-data-backup-source name: roundcube-data-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: roundcube-data-backup-source app.kubernetes.io/name: roundcube-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: roundcube-data sourcePVC: roundcube-data
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: roundcube-data-backup-secret repository: roundcube-data-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

59
clusters/cl01tl/applications/searxng/templates/external-secret.yaml
View File

@@ -28,3 +28,62 @@ spec:
key: /cl01tl/searxng/api/config key: /cl01tl/searxng/api/config
metadataPolicy: None metadataPolicy: None
property: limiter.toml property: limiter.toml
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: searxng-browser-data-backup-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: searxng-browser-data-backup-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: backup
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/searxng/searxng-browser-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
metadataPolicy: None
property: S3_BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
metadataPolicy: None
property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: access_key
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: secret_key

27
clusters/cl01tl/applications/searxng/templates/replication-source.yaml Normal file
View File

@@ -0,0 +1,27 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: searxng-browser-data-backup-source
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: searxng-browser-data-backup-source
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: backup
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
sourcePVC: searxng-browser-data
trigger:
schedule: 0 4 * * *
restic:
pruneIntervalDays: 7
repository: searxng-browser-data-backup-secret
retain:
hourly: 1
daily: 3
weekly: 2
monthly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/sonarr-4k/templates/external-secret.yaml
View File

@@ -1,60 +1,60 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: sonarr-4k-config-backup-secret name: sonarr-4k-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: sonarr-4k-config-backup-secret app.kubernetes.io/name: sonarr-4k-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4-4k/sonarr4-4k-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4-4k/sonarr4-4k-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

70
clusters/cl01tl/applications/sonarr-4k/templates/replication-source.yaml
View File

@@ -1,35 +1,35 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: sonarr-4k-config-backup-source name: sonarr-4k-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: sonarr-4k-config-backup-source app.kubernetes.io/name: sonarr-4k-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: sonarr-4k-config sourcePVC: sonarr-4k-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: sonarr-4k-config-backup-secret repository: sonarr-4k-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# fsGroup: 1000 fsGroup: 1000
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# supplementalGroups: supplementalGroups:
# - 44 - 44
# - 100 - 100
# - 109 - 109
# - 65539 - 65539
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/sonarr-anime/templates/external-secret.yaml
View File

@@ -1,60 +1,60 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: sonarr-anime-config-backup-secret name: sonarr-anime-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: sonarr-anime-config-backup-secret app.kubernetes.io/name: sonarr-anime-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4-anime/sonarr4-anime-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4-anime/sonarr4-anime-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

70
clusters/cl01tl/applications/sonarr-anime/templates/replication-source.yaml
View File

@@ -1,35 +1,35 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: sonarr-anime-config-backup-source name: sonarr-anime-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: sonarr-anime-config-backup-source app.kubernetes.io/name: sonarr-anime-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: sonarr-anime-config sourcePVC: sonarr-anime-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: sonarr-anime-config-backup-secret repository: sonarr-anime-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# fsGroup: 1000 fsGroup: 1000
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# supplementalGroups: supplementalGroups:
# - 44 - 44
# - 100 - 100
# - 109 - 109
# - 65539 - 65539
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/sonarr/templates/external-secret.yaml
View File

@@ -1,60 +1,60 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: sonarr-config-backup-secret name: sonarr-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: sonarr-config-backup-secret app.kubernetes.io/name: sonarr-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4/sonarr4-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4/sonarr4-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

70
clusters/cl01tl/applications/sonarr/templates/replication-source.yaml
View File

@@ -1,35 +1,35 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: sonarr-config-backup-source name: sonarr-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: sonarr-config-backup-source app.kubernetes.io/name: sonarr-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: sonarr-config sourcePVC: sonarr-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: sonarr-config-backup-secret repository: sonarr-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# moverSecurityContext: moverSecurityContext:
# fsGroup: 1000 fsGroup: 1000
# fsGroupChangePolicy: OnRootMismatch fsGroupChangePolicy: OnRootMismatch
# supplementalGroups: supplementalGroups:
# - 44 - 44
# - 100 - 100
# - 109 - 109
# - 65539 - 65539
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

114
clusters/cl01tl/applications/tautulli/templates/external-secret.yaml
View File

@@ -1,57 +1,57 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: tautulli-config-backup-secret name: tautulli-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: tautulli-config-backup-secret app.kubernetes.io/name: tautulli-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/tautulli/tautulli-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/tautulli/tautulli-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key

54
clusters/cl01tl/applications/tautulli/templates/replication-source.yaml
View File

@@ -1,27 +1,27 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: tautulli-config-backup-source name: tautulli-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: tautulli-config-backup-source app.kubernetes.io/name: tautulli-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: tautulli-config sourcePVC: tautulli-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: tautulli-config-backup-secret repository: tautulli-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

230
clusters/cl01tl/applications/tdarr/templates/external-secret.yaml
View File

@@ -1,116 +1,116 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: tdarr-config-backup-secret name: tdarr-config-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: tdarr-config-backup-secret app.kubernetes.io/name: tdarr-config-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/tdarr/tdarr-config" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/tdarr/tdarr-config"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: tdarr-server-backup-secret name: tdarr-server-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: tdarr-server-backup-secret app.kubernetes.io/name: tdarr-server-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/tdarr/tdarr-server" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/tdarr/tdarr-server"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key

110
clusters/cl01tl/applications/tdarr/templates/replication-source.yaml
View File

@@ -1,56 +1,56 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: tdarr-config-backup-source name: tdarr-config-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: tdarr-config-backup-source app.kubernetes.io/name: tdarr-config-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: tdarr-config sourcePVC: tdarr-config
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: tdarr-config-backup-secret repository: tdarr-config-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot
# --- ---
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: tdarr-server-backup-source name: tdarr-server-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: tdarr-server-backup-source app.kubernetes.io/name: tdarr-server-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: tdarr-server sourcePVC: tdarr-server
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: tdarr-server-backup-secret repository: tdarr-server-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot

116
clusters/cl01tl/applications/vaultwarden/templates/external-secret.yaml
View File

@@ -22,64 +22,64 @@ spec:
metadataPolicy: None metadataPolicy: None
property: token property: token
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: vaultwarden-data-backup-secret name: vaultwarden-data-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: vaultwarden-data-backup-secret app.kubernetes.io/name: vaultwarden-data-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/vaultwarden/vaultwarden-data" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/vaultwarden/vaultwarden-data"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

54
clusters/cl01tl/applications/vaultwarden/templates/replication-source.yaml
View File

@@ -1,27 +1,27 @@
# apiVersion: volsync.backube/v1alpha1 apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource kind: ReplicationSource
# metadata: metadata:
# name: vaultwarden-data-backup-source name: vaultwarden-data-backup-source
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: vaultwarden-data-backup-source app.kubernetes.io/name: vaultwarden-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# sourcePVC: vaultwarden-data sourcePVC: vaultwarden-data
# trigger: trigger:
# schedule: 0 0 */3 * * schedule: 0 4 * * *
# restic: restic:
# pruneIntervalDays: 14 pruneIntervalDays: 7
# repository: vaultwarden-data-backup-secret repository: vaultwarden-data-backup-secret
# retain: retain:
# hourly: 1 hourly: 1
# daily: 1 daily: 3
# weekly: 1 weekly: 2
# monthly: 2 monthly: 2
# yearly: 4 yearly: 4
# copyMethod: Snapshot copyMethod: Snapshot
# storageClassName: ceph-block storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot