alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 12 Actions Activity

chore: Update manifests after change

Browse Source
This commit is contained in:
Gitea
2026-03-11 22:42:30 +00:00
parent 22a4f1c4a5
commit ae84e0ac28
40 changed files with 925 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

58
clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-config-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postiz-config-backup-secret-remote
namespace: postiz
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: postiz
app.kubernetes.io/part-of: postiz
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: postiz-config-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/postiz/postiz-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-uploads-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postiz-uploads-backup-secret-remote
namespace: postiz
labels:
helm.sh/chart: volsync-target-upload-0.8.0
app.kubernetes.io/instance: postiz
app.kubernetes.io/part-of: postiz
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: postiz-uploads-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/postiz/postiz-uploads"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-config-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: postiz-config
trigger:
schedule: 56 9 * * *
schedule: 52 10 * * *
restic:
pruneIntervalDays: 7
repository: postiz-config-backup-secret-external

2
clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-config-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: postiz-config
trigger:
schedule: 56 8 * * *
schedule: 52 8 * * *
restic:
pruneIntervalDays: 7
repository: postiz-config-backup-secret-local

29
clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-config-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: postiz-config-backup-source-remote
namespace: postiz
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: postiz
app.kubernetes.io/part-of: postiz
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: postiz-config-backup
spec:
sourcePVC: postiz-config
trigger:
schedule: 52 9 * * *
restic:
pruneIntervalDays: 7
repository: postiz-config-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

2
clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-uploads-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: postiz-uploads
trigger:
schedule: 58 9 * * *
schedule: 54 10 * * *
restic:
pruneIntervalDays: 7
repository: postiz-uploads-backup-secret-external

2
clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-uploads-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: postiz-uploads
trigger:
schedule: 58 8 * * *
schedule: 54 8 * * *
restic:
pruneIntervalDays: 7
repository: postiz-uploads-backup-secret-local

29
clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-uploads-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: postiz-uploads-backup-source-remote
namespace: postiz
labels:
helm.sh/chart: volsync-target-upload-0.8.0
app.kubernetes.io/instance: postiz
app.kubernetes.io/part-of: postiz
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: postiz-uploads-backup
spec:
sourcePVC: postiz-uploads
trigger:
schedule: 54 9 * * *
restic:
pruneIntervalDays: 7
repository: postiz-uploads-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi