diff --git a/clusters/homelab/garmin.yaml b/clusters/homelab/garmin.yaml new file mode 100644 index 0000000..71f9a82 --- /dev/null +++ b/clusters/homelab/garmin.yaml @@ -0,0 +1,16 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: garmin + namespace: flux-system +spec: + interval: 10m0s + path: ./clusters/homelab/garmin + prune: true + sourceRef: + kind: GitRepository + name: flux-system + decryption: + provider: sops + secretRef: + name: sops-age diff --git a/clusters/homelab/garmin/cnpg-cluster.yaml b/clusters/homelab/garmin/cnpg-cluster.yaml new file mode 100644 index 0000000..8e04355 --- /dev/null +++ b/clusters/homelab/garmin/cnpg-cluster.yaml @@ -0,0 +1,26 @@ +apiVersion: postgresql.cnpg.io/v1 +kind: Cluster +metadata: + name: garmin-db + namespace: garmin +spec: + instances: 3 + storage: + size: 2Gi + storageClass: longhorn + backup: + barmanObjectStore: + destinationPath: s3://cnpg-backups/garmin + endpointURL: http://192.168.2.107:9010 + s3Credentials: + accessKeyId: + name: minio-cnpg-credentials + key: ACCESS_KEY_ID + secretAccessKey: + name: minio-cnpg-credentials + key: ACCESS_SECRET_KEY + retentionPolicy: "30d" + bootstrap: + initdb: + database: garmin + owner: garmin diff --git a/clusters/homelab/garmin/cnpg-scheduledbackup.yaml b/clusters/homelab/garmin/cnpg-scheduledbackup.yaml new file mode 100644 index 0000000..975aff9 --- /dev/null +++ b/clusters/homelab/garmin/cnpg-scheduledbackup.yaml @@ -0,0 +1,10 @@ +apiVersion: postgresql.cnpg.io/v1 +kind: ScheduledBackup +metadata: + name: garmin-db-backup + namespace: garmin +spec: + schedule: "0 3 * * *" + backupOwnerReference: self + cluster: + name: garmin-db diff --git a/clusters/homelab/garmin/configmap.yaml b/clusters/homelab/garmin/configmap.yaml new file mode 100644 index 0000000..572c870 --- /dev/null +++ b/clusters/homelab/garmin/configmap.yaml @@ -0,0 +1,68 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: garmin-sync-script + namespace: garmin +data: + sync.py: | + import os + import json + from datetime import date, timedelta + import psycopg2 + from garminconnect import Garmin + + email = os.environ["GARMIN_EMAIL"] + password = os.environ["GARMIN_PASSWORD"] + db_url = os.environ["DATABASE_URL"] + + client = Garmin(email, password) + client.login() + + today = date.today() + start = today - timedelta(days=7) + + activities = client.get_activities_by_date( + start.isoformat(), today.isoformat() + ) + + conn = psycopg2.connect(db_url) + cur = conn.cursor() + + cur.execute(""" + CREATE TABLE IF NOT EXISTS activities ( + id BIGINT PRIMARY KEY, + name TEXT, + type TEXT, + start_time TIMESTAMP, + duration_seconds FLOAT, + distance_meters FLOAT, + avg_hr INTEGER, + avg_pace FLOAT + ) + """) + + for a in activities: + cur.execute(""" + INSERT INTO activities + (id, name, type, start_time, duration_seconds, distance_meters, avg_hr, avg_pace) + VALUES (%s, %s, %s, %s, %s, %s, %s, %s) + ON CONFLICT (id) DO UPDATE SET + duration_seconds = EXCLUDED.duration_seconds, + distance_meters = EXCLUDED.distance_meters, + avg_hr = EXCLUDED.avg_hr, + avg_pace = EXCLUDED.avg_pace + """, ( + a.get("activityId"), + a.get("activityName"), + a.get("activityType", {}).get("typeKey"), + a.get("startTimeLocal"), + a.get("duration"), + a.get("distance"), + a.get("averageHR"), + a.get("averageSpeed"), + )) + + conn.commit() + cur.close() + conn.close() + print(f"Synced {len(activities)} activities") diff --git a/clusters/homelab/garmin/cronjob.yaml b/clusters/homelab/garmin/cronjob.yaml new file mode 100644 index 0000000..25b346c --- /dev/null +++ b/clusters/homelab/garmin/cronjob.yaml @@ -0,0 +1,42 @@ +apiVersion: batch/v1 +kind: CronJob +metadata: + name: garmin-sync + namespace: garmin +spec: + schedule: "0 6 * * *" + jobTemplate: + spec: + template: + spec: + restartPolicy: OnFailure + containers: + - name: garmin-sync + image: python:3.12-slim + command: + - /bin/sh + - -c + - pip install garminconnect psycopg2-binary -q && python /scripts/sync.py + env: + - name: GARMIN_EMAIL + valueFrom: + secretKeyRef: + name: garmin-credentials + key: GARMIN_EMAIL + - name: GARMIN_PASSWORD + valueFrom: + secretKeyRef: + name: garmin-credentials + key: GARMIN_PASSWORD + - name: DATABASE_URL + valueFrom: + secretKeyRef: + name: garmin-db-app + key: uri + volumeMounts: + - name: script + mountPath: /scripts + volumes: + - name: script + configMap: + name: garmin-sync-script diff --git a/clusters/homelab/garmin/kustomization.yaml b/clusters/homelab/garmin/kustomization.yaml new file mode 100644 index 0000000..9384bfc --- /dev/null +++ b/clusters/homelab/garmin/kustomization.yaml @@ -0,0 +1,10 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - namespace.yaml + - secret.sops.yaml + - minio-secret.sops.yaml + - cnpg-cluster.yaml + - cnpg-scheduledbackup.yaml + - configmap.yaml + - cronjob.yaml diff --git a/clusters/homelab/garmin/minio-secret.sops.yaml b/clusters/homelab/garmin/minio-secret.sops.yaml new file mode 100644 index 0000000..c03ba0a --- /dev/null +++ b/clusters/homelab/garmin/minio-secret.sops.yaml @@ -0,0 +1,28 @@ +apiVersion: ENC[AES256_GCM,data:Z+E=,iv:s5oNyI0XlSXsFLErru+nedf1XkwjzLa0EXPdIKKImTU=,tag:jOYganJRY5wxHeziVIWviQ==,type:str] +kind: ENC[AES256_GCM,data:3nGNMh6N,iv:zChp2+PgDYY8JOXoSKFXOVcdmxdGligjVmKLVQhw1H4=,tag:bp0jUjxecmEKHad95x4KpA==,type:str] +metadata: + name: ENC[AES256_GCM,data:BDX6UJqWFAvx7El2CKjty91X1hVHhA==,iv:thunhaXcbmrF6ouK8japy/lqpdKR1JBYJqPM+OnF51M=,tag:74hjHNaKy2fe+nbnnNqU3w==,type:str] + namespace: ENC[AES256_GCM,data:A/6+2tK5,iv:Igr/xTqQpy1bMpqL/y1lC5x/Hv698Odx1ovYu9LiTB8=,tag:h/JcM6Ebbv7zFqOJFiaSOw==,type:str] +stringData: + ACCESS_KEY_ID: ENC[AES256_GCM,data://2GXrleuzafPvyvnKx9igySGo4=,iv:HDrjUwReYFlKz4wWNxl7mfBoOZTx//uMse4sfARWiZ4=,tag:xqL0KaMlXIAGJhxKODkWIQ==,type:str] + ACCESS_SECRET_KEY: ENC[AES256_GCM,data:fqpGihux4bW2WweC3tDaPPpONAR4vEpQuELm7okcn61k6t52CPwENg==,iv:473qln0DWKxmtapYp6HyEfo9Egwzu2MK6O9QSFAnM7w=,tag:/EcT9aZQo1kObRujfouwJQ==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmWWlnNDE2TVJ5dmdMSmFG + cVl5ZW9wSmV4cnRsSlpjeTRSMVRKdnZ2Z2pJCnhpcUh2UmNQUFFSejdjTThCSEpU + M0Z5bXI3OFBBcldxUEZvbU93WmIvUmMKLS0tIEV4Z3VIeG43QWRJb1J2OExvTUUy + N2E2UlNoOGNQeWdrOWtrOEFPTUpBbDQKfjjKmMUNtUArbjWrXA157oz4sSAOtxSz + waAp6jBFxFhfeqofsyxGm+tuMPBraOMjPt7gapqZvScbzPFcdFnCgQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-03-18T12:00:34Z" + mac: ENC[AES256_GCM,data:Sk2j/XuenQ8OkJffVZ0OcuSRoDM8vs6umWsrrE5jSETryRkKAX9HFOi7oLQxJThDFAWbOj1XIjvO9r6fF9pOCWQ2fRh4qe6WOUOZy62OqaxvWIDN1awhXCPw6XHUhnWZSpxjtQO0a/eKmh0milqPDTtvfRw9U4eA+YXLJWHTIwY=,iv:62tgxegzUO+27jU+Tx4gzPAav/mEsD3dWVtfnICmGjA=,tag:dIn00ZjZXoLiROeF+SUcSw==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.4 diff --git a/clusters/homelab/garmin/namespace.yaml b/clusters/homelab/garmin/namespace.yaml new file mode 100644 index 0000000..ed62f22 --- /dev/null +++ b/clusters/homelab/garmin/namespace.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: garmin diff --git a/clusters/homelab/garmin/secret.sops.yaml b/clusters/homelab/garmin/secret.sops.yaml new file mode 100644 index 0000000..f8cf6d0 --- /dev/null +++ b/clusters/homelab/garmin/secret.sops.yaml @@ -0,0 +1,28 @@ +apiVersion: ENC[AES256_GCM,data:sII=,iv:g+wQL/f/TAshn5D0Fco0eF20w1P2eOJ0zsxtgjYM/Lc=,tag:a+0S4IugN1++7htvKFg0Jw==,type:str] +kind: ENC[AES256_GCM,data:+s59fX/0,iv:+Z2Jf2Kl64lDEgdO9oHToZbxyJxG3IEpk6vYM3mPpL0=,tag:7NTh5IFYMO54axRxa7C8PQ==,type:str] +metadata: + name: ENC[AES256_GCM,data:h6atn6druXA6N4Xv+RJKP27n,iv:DGQ69bfvNKMU7L0y0ghbnz2AiLOAqdHcJyDfllh5f7o=,tag:fKJnlQEpigb+A+8nQulI8A==,type:str] + namespace: ENC[AES256_GCM,data:U5sCmJud,iv:FEyWcZY4bH84kzauYzfvHYW9k/cmQf2Wu0TSuofBG/4=,tag:WuWAxZUX8goCMeAZYBLtAw==,type:str] +stringData: + GARMIN_EMAIL: ENC[AES256_GCM,data:vS7QCpsJniELtietOQaIXX+jZUlDnllq,iv:TW4fQKMeqDZSADm5mqbL+rPrKJPk31r+PK05wiw6b90=,tag:dyKWXCCFF0o4y57ls7+bvw==,type:str] + GARMIN_PASSWORD: ENC[AES256_GCM,data:/HT3FhgU3dxxdplh,iv:MUTXoxBKvbPMX3cYpO5Px/mTwOCRfXmbyZVdvYAYrEM=,tag:5DhXU9NoSpQAJ1wqzHsKVQ==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVmtUdzEvZ0w2MTJmV2d0 + bW9UVEd4VG5UOVI1SG5FeXE0TUpuL0YvZUhBCmVRb3dQdEw2WEhMaHYwM00zWVB5 + UzByUUFhNWJVb0RaOGJIQ2R3REhZSDQKLS0tIDE1Y1J4S0ZrWnlLMUg3Y001UHRJ + VndGaTNkSFViMmp4ZWFGcjJRd2pnZE0KN+OSWclMuPTebmqIPHJcKpyftIOIpNya + N+Hj2Te0wbHQD57LHeW0G0yZxUksBwq2td+Bl0DVO8dj7jG+DS/y5A== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-03-18T11:57:27Z" + mac: ENC[AES256_GCM,data:WR8sjzIKDGhuAZHuHQvu+VeHURSxaip7BSDNp6HLK/Zv175erLI2AAPRv585dYw0l4dmvbWZqzjjQs2YanqxUTMqWMGX0+PgHV/+Aca2NQmch4WAA73R/WQ+mE9+iHErnpWlOQ0SNHAQzvx2RevEFz8qIo9CQXnhqYVvS6i+yK8=,iv:iluHLbgeuDVhhabwRMMGpgNhkjfjMMzd4rF9jNOlOPE=,tag:+XZsmzZBBhyJCB63zQcmNw==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.4