From d762c84b241f4b391710542a1616ea69b1e6c530 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Wed, 17 Dec 2025 16:44:47 +0000 Subject: [PATCH] Automated Manifest Update (#2675) This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2675 Co-authored-by: gitea-bot Co-committed-by: gitea-bot --- ...lidarr-config-backup-secret-external.yaml} | 21 ++++--- ...ret-lidarr-config-backup-secret-local.yaml | 58 +++++++++++++++++++ ...et-lidarr-config-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...lidarr-config-backup-source-external.yaml} | 18 ++++-- ...rce-lidarr-config-backup-source-local.yaml | 34 +++++++++++ ...ce-lidarr-config-backup-source-remote.yaml | 34 +++++++++++ ...idatube-config-backup-secret-external.yaml | 58 +++++++++++++++++++ ...t-lidatube-config-backup-secret-local.yaml | 58 +++++++++++++++++++ ...-lidatube-config-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...idatube-config-backup-source-external.yaml | 34 +++++++++++ ...e-lidatube-config-backup-source-local.yaml | 34 +++++++++++ ...-lidatube-config-backup-source-remote.yaml | 34 +++++++++++ ...cret-listenarr-backup-secret-external.yaml | 58 +++++++++++++++++++ ...lSecret-listenarr-backup-secret-local.yaml | 58 +++++++++++++++++++ ...Secret-listenarr-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...urce-listenarr-backup-source-external.yaml | 34 +++++++++++ ...nSource-listenarr-backup-source-local.yaml | 34 +++++++++++ ...Source-listenarr-backup-source-remote.yaml | 34 +++++++++++ ...trix-hookshot-backup-secret-external.yaml} | 22 ++++--- ...t-matrix-hookshot-backup-secret-local.yaml | 58 +++++++++++++++++++ ...-matrix-hookshot-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...atrix-synapse-backup-secret-external.yaml} | 19 +++--- ...et-matrix-synapse-backup-secret-local.yaml | 58 +++++++++++++++++++ ...t-matrix-synapse-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...utrix-discord-backup-secret-external.yaml} | 22 ++++--- ...t-mautrix-discord-backup-secret-local.yaml | 58 +++++++++++++++++++ ...-mautrix-discord-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...utrix-whatsapp-backup-secret-external.yaml | 58 +++++++++++++++++++ ...-mautrix-whatsapp-backup-secret-local.yaml | 58 +++++++++++++++++++ ...mautrix-whatsapp-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...atrix-hookshot-backup-source-external.yaml | 29 ++++++++++ ...e-matrix-hookshot-backup-source-local.yaml | 29 ++++++++++ ...-matrix-hookshot-backup-source-remote.yaml | 29 ++++++++++ ...atrix-synapse-backup-source-external.yaml} | 14 +++-- ...ce-matrix-synapse-backup-source-local.yaml | 29 ++++++++++ ...e-matrix-synapse-backup-source-remote.yaml | 29 ++++++++++ ...utrix-discord-backup-source-external.yaml} | 16 +++-- ...e-mautrix-discord-backup-source-local.yaml | 32 ++++++++++ ...-mautrix-discord-backup-source-remote.yaml | 32 ++++++++++ ...trix-whatsapp-backup-source-external.yaml} | 16 +++-- ...-mautrix-whatsapp-backup-source-local.yaml | 32 ++++++++++ ...mautrix-whatsapp-backup-source-remote.yaml | 32 ++++++++++ ...rnalSecret-n8n-backup-secret-external.yaml | 58 +++++++++++++++++++ ...xternalSecret-n8n-backup-secret-local.yaml | 58 +++++++++++++++++++ ...ternalSecret-n8n-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...tionSource-n8n-backup-source-external.yaml | 29 ++++++++++ ...icationSource-n8n-backup-source-local.yaml | 29 ++++++++++ ...cationSource-n8n-backup-source-remote.yaml | 29 ++++++++++ .../stack/Application-stack-cl01tl.yaml | 2 + 49 files changed, 1884 insertions(+), 58 deletions(-) rename clusters/cl01tl/manifests/lidarr/{ExternalSecret-lidarr-config-backup-secret.yaml => ExternalSecret-lidarr-config-backup-secret-external.yaml} (69%) create mode 100644 clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-remote.yaml rename clusters/cl01tl/manifests/lidarr/{ReplicationSource-lidarr-config-backup-source.yaml => ReplicationSource-lidarr-config-backup-source-external.yaml} (60%) create mode 100644 clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-remote.yaml create mode 100644 clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-external.yaml create mode 100644 clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-remote.yaml create mode 100644 clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-external.yaml create mode 100644 clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-remote.yaml create mode 100644 clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-external.yaml create mode 100644 clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-remote.yaml create mode 100644 clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-external.yaml create mode 100644 clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-remote.yaml rename clusters/cl01tl/manifests/matrix-synapse/{ExternalSecret-mautrix-discord-data-backup-secret.yaml => ExternalSecret-matrix-hookshot-backup-secret-external.yaml} (69%) create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-remote.yaml rename clusters/cl01tl/manifests/matrix-synapse/{ExternalSecret-matrix-synapse-backup-secret.yaml => ExternalSecret-matrix-synapse-backup-secret-external.yaml} (73%) create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-remote.yaml rename clusters/cl01tl/manifests/matrix-synapse/{ExternalSecret-mautrix-whatsapp-data-backup-secret.yaml => ExternalSecret-mautrix-discord-backup-secret-external.yaml} (70%) create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-remote.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-external.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-remote.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-external.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-remote.yaml rename clusters/cl01tl/manifests/matrix-synapse/{ReplicationSource-matrix-synapse-backup-source.yaml => ReplicationSource-matrix-synapse-backup-source-external.yaml} (62%) create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-remote.yaml rename clusters/cl01tl/manifests/matrix-synapse/{ReplicationSource-mautrix-discord-data-backup-source.yaml => ReplicationSource-mautrix-discord-backup-source-external.yaml} (65%) create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-remote.yaml rename clusters/cl01tl/manifests/matrix-synapse/{ReplicationSource-mautrix-whatsapp-data-backup-source.yaml => ReplicationSource-mautrix-whatsapp-backup-source-external.yaml} (65%) create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-remote.yaml create mode 100644 clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-external.yaml create mode 100644 clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-remote.yaml create mode 100644 clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-external.yaml create mode 100644 clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-remote.yaml diff --git a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret.yaml b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-external.yaml similarity index 69% rename from clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret.yaml rename to clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-external.yaml index 1a4ded980..913456114 100644 --- a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret.yaml +++ b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-external.yaml @@ -1,12 +1,15 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: lidarr-config-backup-secret + name: lidarr-config-backup-secret-external namespace: lidarr labels: - app.kubernetes.io/name: lidarr-config-backup-secret + helm.sh/chart: volsync-target-config-0.5.0 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidarr-config-backup-secret-external spec: secretStoreRef: kind: ClusterSecretStore @@ -16,27 +19,27 @@ spec: mergePolicy: Merge engineVersion: v2 data: - RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidarr2/lidarr2-config" + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidarr/lidarr-config" data: - secretKey: BUCKET_ENDPOINT remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None - property: S3_BUCKET_ENDPOINT + property: BUCKET_ENDPOINT - secretKey: RESTIC_PASSWORD remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None property: RESTIC_PASSWORD - secretKey: AWS_DEFAULT_REGION remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None property: AWS_DEFAULT_REGION - secretKey: AWS_ACCESS_KEY_ID @@ -45,11 +48,11 @@ spec: decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: access_key + property: AWS_ACCESS_KEY_ID - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: conversionStrategy: Default decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: secret_key + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-local.yaml b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-local.yaml new file mode 100644 index 000000000..aea1a113e --- /dev/null +++ b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: lidarr-config-backup-secret-local + namespace: lidarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidarr + app.kubernetes.io/part-of: lidarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidarr-config-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidarr/lidarr-config" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-remote.yaml b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-remote.yaml new file mode 100644 index 000000000..88438ace6 --- /dev/null +++ b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: lidarr-config-backup-secret-remote + namespace: lidarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidarr + app.kubernetes.io/part-of: lidarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidarr-config-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidarr/lidarr-config" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source.yaml b/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-external.yaml similarity index 60% rename from clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source.yaml rename to clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-external.yaml index 1cccd9658..c9843fbf1 100644 --- a/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source.yaml +++ b/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-external.yaml @@ -1,28 +1,34 @@ apiVersion: volsync.backube/v1alpha1 kind: ReplicationSource metadata: - name: lidarr-config-backup-source + name: lidarr-config-backup-source-external namespace: lidarr labels: - app.kubernetes.io/name: lidarr-config-backup-source + helm.sh/chart: volsync-target-config-0.5.0 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidarr-config-backup spec: sourcePVC: lidarr-config trigger: schedule: 0 4 * * * restic: pruneIntervalDays: 7 - repository: lidarr-config-backup-secret + repository: lidarr-config-backup-secret-external retain: - hourly: 1 daily: 3 - weekly: 2 + hourly: 1 monthly: 2 + weekly: 2 yearly: 4 moverSecurityContext: - runAsUser: 1000 + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch runAsGroup: 1000 + runAsUser: 1000 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-local.yaml b/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-local.yaml new file mode 100644 index 000000000..362426fab --- /dev/null +++ b/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-local.yaml @@ -0,0 +1,34 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: lidarr-config-backup-source-local + namespace: lidarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidarr + app.kubernetes.io/part-of: lidarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidarr-config-backup +spec: + sourcePVC: lidarr-config + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: lidarr-config-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-remote.yaml b/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-remote.yaml new file mode 100644 index 000000000..0d31fe323 --- /dev/null +++ b/clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-remote.yaml @@ -0,0 +1,34 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: lidarr-config-backup-source-remote + namespace: lidarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidarr + app.kubernetes.io/part-of: lidarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidarr-config-backup +spec: + sourcePVC: lidarr-config + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: lidarr-config-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-external.yaml b/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-external.yaml new file mode 100644 index 000000000..136585852 --- /dev/null +++ b/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: lidatube-config-backup-secret-external + namespace: lidatube + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidatube + app.kubernetes.io/part-of: lidatube + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidatube-config-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidatube/lidatube-config" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-local.yaml b/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-local.yaml new file mode 100644 index 000000000..ffca2a0fc --- /dev/null +++ b/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: lidatube-config-backup-secret-local + namespace: lidatube + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidatube + app.kubernetes.io/part-of: lidatube + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidatube-config-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidatube/lidatube-config" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-remote.yaml b/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-remote.yaml new file mode 100644 index 000000000..b7896caa8 --- /dev/null +++ b/clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: lidatube-config-backup-secret-remote + namespace: lidatube + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidatube + app.kubernetes.io/part-of: lidatube + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidatube-config-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidatube/lidatube-config" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-external.yaml b/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-external.yaml new file mode 100644 index 000000000..6188fe46b --- /dev/null +++ b/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-external.yaml @@ -0,0 +1,34 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: lidatube-config-backup-source-external + namespace: lidatube + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidatube + app.kubernetes.io/part-of: lidatube + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidatube-config-backup +spec: + sourcePVC: lidatube-config + trigger: + schedule: 0 4 * * * + restic: + pruneIntervalDays: 7 + repository: lidatube-config-backup-secret-external + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-local.yaml b/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-local.yaml new file mode 100644 index 000000000..0358a79f9 --- /dev/null +++ b/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-local.yaml @@ -0,0 +1,34 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: lidatube-config-backup-source-local + namespace: lidatube + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidatube + app.kubernetes.io/part-of: lidatube + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidatube-config-backup +spec: + sourcePVC: lidatube-config + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: lidatube-config-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-remote.yaml b/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-remote.yaml new file mode 100644 index 000000000..3efbd0912 --- /dev/null +++ b/clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-remote.yaml @@ -0,0 +1,34 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: lidatube-config-backup-source-remote + namespace: lidatube + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: lidatube + app.kubernetes.io/part-of: lidatube + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lidatube-config-backup +spec: + sourcePVC: lidatube-config + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: lidatube-config-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-external.yaml b/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-external.yaml new file mode 100644 index 000000000..48ad9f010 --- /dev/null +++ b/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: listenarr-backup-secret-external + namespace: listenarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: listenarr + app.kubernetes.io/part-of: listenarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: listenarr-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/listenarr/listenarr" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-local.yaml b/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-local.yaml new file mode 100644 index 000000000..4dfbd6a56 --- /dev/null +++ b/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: listenarr-backup-secret-local + namespace: listenarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: listenarr + app.kubernetes.io/part-of: listenarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: listenarr-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/listenarr/listenarr" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-remote.yaml b/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-remote.yaml new file mode 100644 index 000000000..c46b29dfe --- /dev/null +++ b/clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: listenarr-backup-secret-remote + namespace: listenarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: listenarr + app.kubernetes.io/part-of: listenarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: listenarr-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/listenarr/listenarr" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-external.yaml b/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-external.yaml new file mode 100644 index 000000000..50ae1ed00 --- /dev/null +++ b/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-external.yaml @@ -0,0 +1,34 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: listenarr-backup-source-external + namespace: listenarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: listenarr + app.kubernetes.io/part-of: listenarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: listenarr-backup +spec: + sourcePVC: listenarr + trigger: + schedule: 0 4 * * * + restic: + pruneIntervalDays: 7 + repository: listenarr-backup-secret-external + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-local.yaml b/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-local.yaml new file mode 100644 index 000000000..fe0cb7e7b --- /dev/null +++ b/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-local.yaml @@ -0,0 +1,34 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: listenarr-backup-source-local + namespace: listenarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: listenarr + app.kubernetes.io/part-of: listenarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: listenarr-backup +spec: + sourcePVC: listenarr + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: listenarr-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-remote.yaml b/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-remote.yaml new file mode 100644 index 000000000..1ca7169f1 --- /dev/null +++ b/clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-remote.yaml @@ -0,0 +1,34 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: listenarr-backup-source-remote + namespace: listenarr + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: listenarr + app.kubernetes.io/part-of: listenarr + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: listenarr-backup +spec: + sourcePVC: listenarr + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: listenarr-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-data-backup-secret.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-external.yaml similarity index 69% rename from clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-data-backup-secret.yaml rename to clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-external.yaml index 405911b7f..e9a4738e1 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-data-backup-secret.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-external.yaml @@ -1,11 +1,15 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: mautrix-discord-data-backup-secret + name: matrix-hookshot-backup-secret-external namespace: matrix-synapse labels: - app.kubernetes.io/name: matrix-synapse + helm.sh/chart: volsync-target-hookshot-0.5.0 app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-hookshot-backup-secret-external spec: secretStoreRef: kind: ClusterSecretStore @@ -15,27 +19,27 @@ spec: mergePolicy: Merge engineVersion: v2 data: - RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-discord-data" + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-hookshot" data: - secretKey: BUCKET_ENDPOINT remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None - property: S3_BUCKET_ENDPOINT + property: BUCKET_ENDPOINT - secretKey: RESTIC_PASSWORD remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None property: RESTIC_PASSWORD - secretKey: AWS_DEFAULT_REGION remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None property: AWS_DEFAULT_REGION - secretKey: AWS_ACCESS_KEY_ID @@ -44,11 +48,11 @@ spec: decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: access_key + property: AWS_ACCESS_KEY_ID - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: conversionStrategy: Default decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: secret_key + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-local.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-local.yaml new file mode 100644 index 000000000..85e434463 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: matrix-hookshot-backup-secret-local + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-hookshot-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-hookshot-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-hookshot" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-remote.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-remote.yaml new file mode 100644 index 000000000..7fb4bdda9 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: matrix-hookshot-backup-secret-remote + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-hookshot-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-hookshot-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-hookshot" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-external.yaml similarity index 73% rename from clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret.yaml rename to clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-external.yaml index 6f711296b..c0edfa2c7 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-external.yaml @@ -1,12 +1,15 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: matrix-synapse-backup-secret + name: matrix-synapse-backup-secret-external namespace: matrix-synapse labels: - app.kubernetes.io/name: matrix-synapse-backup-secret + helm.sh/chart: volsync-target-synapse-0.5.0 app.kubernetes.io/instance: matrix-synapse app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-synapse-backup-secret-external spec: secretStoreRef: kind: ClusterSecretStore @@ -22,21 +25,21 @@ spec: remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None - property: S3_BUCKET_ENDPOINT + property: BUCKET_ENDPOINT - secretKey: RESTIC_PASSWORD remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None property: RESTIC_PASSWORD - secretKey: AWS_DEFAULT_REGION remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None property: AWS_DEFAULT_REGION - secretKey: AWS_ACCESS_KEY_ID @@ -45,11 +48,11 @@ spec: decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: access_key + property: AWS_ACCESS_KEY_ID - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: conversionStrategy: Default decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: secret_key + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-local.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-local.yaml new file mode 100644 index 000000000..ebf4f949c --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: matrix-synapse-backup-secret-local + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-synapse-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-synapse-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-synapse" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-remote.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-remote.yaml new file mode 100644 index 000000000..ed7713857 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: matrix-synapse-backup-secret-remote + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-synapse-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-synapse-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-synapse" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-data-backup-secret.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-external.yaml similarity index 70% rename from clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-data-backup-secret.yaml rename to clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-external.yaml index 489fa31fa..a02a462ee 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-data-backup-secret.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-external.yaml @@ -1,11 +1,15 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: mautrix-whatsapp-data-backup-secret + name: mautrix-discord-backup-secret-external namespace: matrix-synapse labels: - app.kubernetes.io/name: matrix-synapse + helm.sh/chart: volsync-target-discord-0.5.0 app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-discord-backup-secret-external spec: secretStoreRef: kind: ClusterSecretStore @@ -15,27 +19,27 @@ spec: mergePolicy: Merge engineVersion: v2 data: - RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-whatsapp-data" + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-discord" data: - secretKey: BUCKET_ENDPOINT remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None - property: S3_BUCKET_ENDPOINT + property: BUCKET_ENDPOINT - secretKey: RESTIC_PASSWORD remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None property: RESTIC_PASSWORD - secretKey: AWS_DEFAULT_REGION remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None property: AWS_DEFAULT_REGION - secretKey: AWS_ACCESS_KEY_ID @@ -44,11 +48,11 @@ spec: decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: access_key + property: AWS_ACCESS_KEY_ID - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: conversionStrategy: Default decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: secret_key + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-local.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-local.yaml new file mode 100644 index 000000000..f06132103 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: mautrix-discord-backup-secret-local + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-discord-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-discord-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-discord" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-remote.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-remote.yaml new file mode 100644 index 000000000..adc193bc8 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: mautrix-discord-backup-secret-remote + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-discord-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-discord-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-discord" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-external.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-external.yaml new file mode 100644 index 000000000..e051af757 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: mautrix-whatsapp-backup-secret-external + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-whatsapp-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-whatsapp-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-whatsapp" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-local.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-local.yaml new file mode 100644 index 000000000..d09b7cb6a --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: mautrix-whatsapp-backup-secret-local + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-whatsapp-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-whatsapp-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-whatsapp" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-remote.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-remote.yaml new file mode 100644 index 000000000..1cace444d --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: mautrix-whatsapp-backup-secret-remote + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-whatsapp-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-whatsapp-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-whatsapp" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-external.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-external.yaml new file mode 100644 index 000000000..35c253ce8 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-external.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: matrix-hookshot-backup-source-external + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-hookshot-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-hookshot-backup +spec: + sourcePVC: matrix-hookshot + trigger: + schedule: 0 4 * * * + restic: + pruneIntervalDays: 7 + repository: matrix-hookshot-backup-secret-external + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-local.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-local.yaml new file mode 100644 index 000000000..42ed87942 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: matrix-hookshot-backup-source-local + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-hookshot-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-hookshot-backup +spec: + sourcePVC: matrix-hookshot + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: matrix-hookshot-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-remote.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-remote.yaml new file mode 100644 index 000000000..0189cf7ff --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: matrix-hookshot-backup-source-remote + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-hookshot-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-hookshot-backup +spec: + sourcePVC: matrix-hookshot + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: matrix-hookshot-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-external.yaml similarity index 62% rename from clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source.yaml rename to clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-external.yaml index 8e3d67a6b..214ec6053 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-external.yaml @@ -1,25 +1,29 @@ apiVersion: volsync.backube/v1alpha1 kind: ReplicationSource metadata: - name: matrix-synapse-backup-source + name: matrix-synapse-backup-source-external namespace: matrix-synapse labels: - app.kubernetes.io/name: matrix-synapse-backup-source + helm.sh/chart: volsync-target-synapse-0.5.0 app.kubernetes.io/instance: matrix-synapse app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-synapse-backup spec: sourcePVC: matrix-synapse trigger: schedule: 0 4 * * * restic: pruneIntervalDays: 7 - repository: matrix-synapse-backup-secret + repository: matrix-synapse-backup-secret-external retain: - hourly: 1 daily: 3 - weekly: 2 + hourly: 1 monthly: 2 + weekly: 2 yearly: 4 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-local.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-local.yaml new file mode 100644 index 000000000..a81fc9792 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: matrix-synapse-backup-source-local + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-synapse-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-synapse-backup +spec: + sourcePVC: matrix-synapse + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: matrix-synapse-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-remote.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-remote.yaml new file mode 100644 index 000000000..ba782f7d9 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: matrix-synapse-backup-source-remote + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-synapse-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-synapse-backup +spec: + sourcePVC: matrix-synapse + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: matrix-synapse-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-data-backup-source.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-external.yaml similarity index 65% rename from clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-data-backup-source.yaml rename to clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-external.yaml index 764983dee..bb29b7801 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-data-backup-source.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-external.yaml @@ -1,28 +1,32 @@ apiVersion: volsync.backube/v1alpha1 kind: ReplicationSource metadata: - name: mautrix-discord-data-backup-source + name: mautrix-discord-backup-source-external namespace: matrix-synapse labels: - app.kubernetes.io/name: mautrix-discord-data-backup-source + helm.sh/chart: volsync-target-discord-0.5.0 app.kubernetes.io/instance: matrix-synapse app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-discord-backup spec: sourcePVC: mautrix-discord trigger: schedule: 0 4 * * * restic: pruneIntervalDays: 7 - repository: mautrix-discord-data-backup-secret + repository: mautrix-discord-backup-secret-external retain: - hourly: 1 daily: 3 - weekly: 2 + hourly: 1 monthly: 2 + weekly: 2 yearly: 4 moverSecurityContext: - runAsUser: 1337 runAsGroup: 1337 + runAsUser: 1337 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-local.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-local.yaml new file mode 100644 index 000000000..251b6ad7f --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-local.yaml @@ -0,0 +1,32 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: mautrix-discord-backup-source-local + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-discord-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-discord-backup +spec: + sourcePVC: mautrix-discord + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: mautrix-discord-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + runAsGroup: 1337 + runAsUser: 1337 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-remote.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-remote.yaml new file mode 100644 index 000000000..a5a923cdd --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-remote.yaml @@ -0,0 +1,32 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: mautrix-discord-backup-source-remote + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-discord-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-discord-backup +spec: + sourcePVC: mautrix-discord + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: mautrix-discord-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + runAsGroup: 1337 + runAsUser: 1337 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-data-backup-source.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-external.yaml similarity index 65% rename from clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-data-backup-source.yaml rename to clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-external.yaml index ba23abf1f..955cb55ea 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-data-backup-source.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-external.yaml @@ -1,28 +1,32 @@ apiVersion: volsync.backube/v1alpha1 kind: ReplicationSource metadata: - name: mautrix-whatsapp-data-backup-source + name: mautrix-whatsapp-backup-source-external namespace: matrix-synapse labels: - app.kubernetes.io/name: mautrix-whatsapp-data-backup-source + helm.sh/chart: volsync-target-whatsapp-0.5.0 app.kubernetes.io/instance: matrix-synapse app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-whatsapp-backup spec: sourcePVC: mautrix-whatsapp trigger: schedule: 0 4 * * * restic: pruneIntervalDays: 7 - repository: mautrix-whatsapp-data-backup-secret + repository: mautrix-whatsapp-backup-secret-external retain: - hourly: 1 daily: 3 - weekly: 2 + hourly: 1 monthly: 2 + weekly: 2 yearly: 4 moverSecurityContext: - runAsUser: 1337 runAsGroup: 1337 + runAsUser: 1337 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-local.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-local.yaml new file mode 100644 index 000000000..e4bc8b896 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-local.yaml @@ -0,0 +1,32 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: mautrix-whatsapp-backup-source-local + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-whatsapp-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-whatsapp-backup +spec: + sourcePVC: mautrix-whatsapp + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: mautrix-whatsapp-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + runAsGroup: 1337 + runAsUser: 1337 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-remote.yaml b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-remote.yaml new file mode 100644 index 000000000..945a3cde6 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-remote.yaml @@ -0,0 +1,32 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: mautrix-whatsapp-backup-source-remote + namespace: matrix-synapse + labels: + helm.sh/chart: volsync-target-whatsapp-0.5.0 + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/part-of: matrix-synapse + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-whatsapp-backup +spec: + sourcePVC: mautrix-whatsapp + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: mautrix-whatsapp-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + runAsGroup: 1337 + runAsUser: 1337 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-external.yaml b/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-external.yaml new file mode 100644 index 000000000..48a555ad9 --- /dev/null +++ b/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: n8n-backup-secret-external + namespace: n8n + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: n8n + app.kubernetes.io/part-of: n8n + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: n8n-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/n8n/n8n" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-local.yaml b/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-local.yaml new file mode 100644 index 000000000..b6827d5fe --- /dev/null +++ b/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: n8n-backup-secret-local + namespace: n8n + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: n8n + app.kubernetes.io/part-of: n8n + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: n8n-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/n8n/n8n" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-remote.yaml b/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-remote.yaml new file mode 100644 index 000000000..f566edbc0 --- /dev/null +++ b/clusters/cl01tl/manifests/n8n/ExternalSecret-n8n-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: n8n-backup-secret-remote + namespace: n8n + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: n8n + app.kubernetes.io/part-of: n8n + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: n8n-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/n8n/n8n" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-external.yaml b/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-external.yaml new file mode 100644 index 000000000..21b193653 --- /dev/null +++ b/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-external.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: n8n-backup-source-external + namespace: n8n + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: n8n + app.kubernetes.io/part-of: n8n + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: n8n-backup +spec: + sourcePVC: n8n + trigger: + schedule: 0 4 * * * + restic: + pruneIntervalDays: 7 + repository: n8n-backup-secret-external + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-local.yaml b/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-local.yaml new file mode 100644 index 000000000..9da83efdf --- /dev/null +++ b/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: n8n-backup-source-local + namespace: n8n + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: n8n + app.kubernetes.io/part-of: n8n + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: n8n-backup +spec: + sourcePVC: n8n + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: n8n-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-remote.yaml b/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-remote.yaml new file mode 100644 index 000000000..910db8fcb --- /dev/null +++ b/clusters/cl01tl/manifests/n8n/ReplicationSource-n8n-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: n8n-backup-source-remote + namespace: n8n + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: n8n + app.kubernetes.io/part-of: n8n + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: n8n-backup +spec: + sourcePVC: n8n + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: n8n-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/stack/Application-stack-cl01tl.yaml b/clusters/cl01tl/manifests/stack/Application-stack-cl01tl.yaml index 01784c22a..a68cc1edd 100644 --- a/clusters/cl01tl/manifests/stack/Application-stack-cl01tl.yaml +++ b/clusters/cl01tl/manifests/stack/Application-stack-cl01tl.yaml @@ -9,6 +9,8 @@ metadata: app.kubernetes.io/part-of: argocd finalizers: - resources-finalizer.argocd.argoproj.io + annotations: + argocd.argoproj.io/compare-options: ServerSideDiff=false spec: project: default source: