feat: add garmin sync cronjob with cnpg

clusters/homelab/garmin.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: garmin
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./clusters/homelab/garmin
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age

clusters/homelab/garmin/cnpg-cluster.yaml

@@ -0,0 +1,26 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: garmin-db
+  namespace: garmin
+spec:
+  instances: 3
+  storage:
+    size: 2Gi
+    storageClass: longhorn
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://cnpg-backups/garmin
+      endpointURL: http://192.168.2.107:9010
+      s3Credentials:
+        accessKeyId:
+          name: minio-cnpg-credentials
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio-cnpg-credentials
+          key: ACCESS_SECRET_KEY
+    retentionPolicy: "30d"
+  bootstrap:
+    initdb:
+      database: garmin
+      owner: garmin

clusters/homelab/garmin/cnpg-scheduledbackup.yaml

@@ -0,0 +1,10 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: garmin-db-backup
+  namespace: garmin
+spec:
+  schedule: "0 3 * * *"
+  backupOwnerReference: self
+  cluster:
+    name: garmin-db

clusters/homelab/garmin/configmap.yaml

@@ -0,0 +1,68 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: garmin-sync-script
+  namespace: garmin
+data:
+  sync.py: |
+    import os
+    import json
+    from datetime import date, timedelta
+    import psycopg2
+    from garminconnect import Garmin
+
+    email = os.environ["GARMIN_EMAIL"]
+    password = os.environ["GARMIN_PASSWORD"]
+    db_url = os.environ["DATABASE_URL"]
+
+    client = Garmin(email, password)
+    client.login()
+
+    today = date.today()
+    start = today - timedelta(days=7)
+
+    activities = client.get_activities_by_date(
+        start.isoformat(), today.isoformat()
+    )
+
+    conn = psycopg2.connect(db_url)
+    cur = conn.cursor()
+
+    cur.execute("""
+        CREATE TABLE IF NOT EXISTS activities (
+            id BIGINT PRIMARY KEY,
+            name TEXT,
+            type TEXT,
+            start_time TIMESTAMP,
+            duration_seconds FLOAT,
+            distance_meters FLOAT,
+            avg_hr INTEGER,
+            avg_pace FLOAT
+        )
+    """)
+
+    for a in activities:
+        cur.execute("""
+            INSERT INTO activities
+                (id, name, type, start_time, duration_seconds, distance_meters, avg_hr, avg_pace)
+            VALUES (%s, %s, %s, %s, %s, %s, %s, %s)
+            ON CONFLICT (id) DO UPDATE SET
+                duration_seconds = EXCLUDED.duration_seconds,
+                distance_meters = EXCLUDED.distance_meters,
+                avg_hr = EXCLUDED.avg_hr,
+                avg_pace = EXCLUDED.avg_pace
+        """, (
+            a.get("activityId"),
+            a.get("activityName"),
+            a.get("activityType", {}).get("typeKey"),
+            a.get("startTimeLocal"),
+            a.get("duration"),
+            a.get("distance"),
+            a.get("averageHR"),
+            a.get("averageSpeed"),
+        ))
+
+    conn.commit()
+    cur.close()
+    conn.close()
+    print(f"Synced {len(activities)} activities")

clusters/homelab/garmin/cronjob.yaml

@@ -0,0 +1,42 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: garmin-sync
+  namespace: garmin
+spec:
+  schedule: "0 6 * * *"
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          restartPolicy: OnFailure
+          containers:
+            - name: garmin-sync
+              image: python:3.12-slim
+              command:
+                - /bin/sh
+                - -c
+                - pip install garminconnect psycopg2-binary -q && python /scripts/sync.py
+              env:
+                - name: GARMIN_EMAIL
+                  valueFrom:
+                    secretKeyRef:
+                      name: garmin-credentials
+                      key: GARMIN_EMAIL
+                - name: GARMIN_PASSWORD
+                  valueFrom:
+                    secretKeyRef:
+                      name: garmin-credentials
+                      key: GARMIN_PASSWORD
+                - name: DATABASE_URL
+                  valueFrom:
+                    secretKeyRef:
+                      name: garmin-db-app
+                      key: uri
+              volumeMounts:
+                - name: script
+                  mountPath: /scripts
+          volumes:
+            - name: script
+              configMap:
+                name: garmin-sync-script

clusters/homelab/garmin/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - secret.sops.yaml
+  - minio-secret.sops.yaml
+  - cnpg-cluster.yaml
+  - cnpg-scheduledbackup.yaml
+  - configmap.yaml
+  - cronjob.yaml

clusters/homelab/garmin/minio-secret.sops.yaml

@@ -0,0 +1,28 @@
+apiVersion: ENC[AES256_GCM,data:Z+E=,iv:s5oNyI0XlSXsFLErru+nedf1XkwjzLa0EXPdIKKImTU=,tag:jOYganJRY5wxHeziVIWviQ==,type:str]
+kind: ENC[AES256_GCM,data:3nGNMh6N,iv:zChp2+PgDYY8JOXoSKFXOVcdmxdGligjVmKLVQhw1H4=,tag:bp0jUjxecmEKHad95x4KpA==,type:str]
+metadata:
+    name: ENC[AES256_GCM,data:BDX6UJqWFAvx7El2CKjty91X1hVHhA==,iv:thunhaXcbmrF6ouK8japy/lqpdKR1JBYJqPM+OnF51M=,tag:74hjHNaKy2fe+nbnnNqU3w==,type:str]
+    namespace: ENC[AES256_GCM,data:A/6+2tK5,iv:Igr/xTqQpy1bMpqL/y1lC5x/Hv698Odx1ovYu9LiTB8=,tag:h/JcM6Ebbv7zFqOJFiaSOw==,type:str]
+stringData:
+    ACCESS_KEY_ID: ENC[AES256_GCM,data://2GXrleuzafPvyvnKx9igySGo4=,iv:HDrjUwReYFlKz4wWNxl7mfBoOZTx//uMse4sfARWiZ4=,tag:xqL0KaMlXIAGJhxKODkWIQ==,type:str]
+    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:fqpGihux4bW2WweC3tDaPPpONAR4vEpQuELm7okcn61k6t52CPwENg==,iv:473qln0DWKxmtapYp6HyEfo9Egwzu2MK6O9QSFAnM7w=,tag:/EcT9aZQo1kObRujfouwJQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmWWlnNDE2TVJ5dmdMSmFG
+            cVl5ZW9wSmV4cnRsSlpjeTRSMVRKdnZ2Z2pJCnhpcUh2UmNQUFFSejdjTThCSEpU
+            M0Z5bXI3OFBBcldxUEZvbU93WmIvUmMKLS0tIEV4Z3VIeG43QWRJb1J2OExvTUUy
+            N2E2UlNoOGNQeWdrOWtrOEFPTUpBbDQKfjjKmMUNtUArbjWrXA157oz4sSAOtxSz
+            waAp6jBFxFhfeqofsyxGm+tuMPBraOMjPt7gapqZvScbzPFcdFnCgQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-03-18T12:00:34Z"
+    mac: ENC[AES256_GCM,data:Sk2j/XuenQ8OkJffVZ0OcuSRoDM8vs6umWsrrE5jSETryRkKAX9HFOi7oLQxJThDFAWbOj1XIjvO9r6fF9pOCWQ2fRh4qe6WOUOZy62OqaxvWIDN1awhXCPw6XHUhnWZSpxjtQO0a/eKmh0milqPDTtvfRw9U4eA+YXLJWHTIwY=,iv:62tgxegzUO+27jU+Tx4gzPAav/mEsD3dWVtfnICmGjA=,tag:dIn00ZjZXoLiROeF+SUcSw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.4

clusters/homelab/garmin/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: garmin

clusters/homelab/garmin/secret.sops.yaml

@@ -0,0 +1,28 @@
+apiVersion: ENC[AES256_GCM,data:sII=,iv:g+wQL/f/TAshn5D0Fco0eF20w1P2eOJ0zsxtgjYM/Lc=,tag:a+0S4IugN1++7htvKFg0Jw==,type:str]
+kind: ENC[AES256_GCM,data:+s59fX/0,iv:+Z2Jf2Kl64lDEgdO9oHToZbxyJxG3IEpk6vYM3mPpL0=,tag:7NTh5IFYMO54axRxa7C8PQ==,type:str]
+metadata:
+    name: ENC[AES256_GCM,data:h6atn6druXA6N4Xv+RJKP27n,iv:DGQ69bfvNKMU7L0y0ghbnz2AiLOAqdHcJyDfllh5f7o=,tag:fKJnlQEpigb+A+8nQulI8A==,type:str]
+    namespace: ENC[AES256_GCM,data:U5sCmJud,iv:FEyWcZY4bH84kzauYzfvHYW9k/cmQf2Wu0TSuofBG/4=,tag:WuWAxZUX8goCMeAZYBLtAw==,type:str]
+stringData:
+    GARMIN_EMAIL: ENC[AES256_GCM,data:vS7QCpsJniELtietOQaIXX+jZUlDnllq,iv:TW4fQKMeqDZSADm5mqbL+rPrKJPk31r+PK05wiw6b90=,tag:dyKWXCCFF0o4y57ls7+bvw==,type:str]
+    GARMIN_PASSWORD: ENC[AES256_GCM,data:/HT3FhgU3dxxdplh,iv:MUTXoxBKvbPMX3cYpO5Px/mTwOCRfXmbyZVdvYAYrEM=,tag:5DhXU9NoSpQAJ1wqzHsKVQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVmtUdzEvZ0w2MTJmV2d0
+            bW9UVEd4VG5UOVI1SG5FeXE0TUpuL0YvZUhBCmVRb3dQdEw2WEhMaHYwM00zWVB5
+            UzByUUFhNWJVb0RaOGJIQ2R3REhZSDQKLS0tIDE1Y1J4S0ZrWnlLMUg3Y001UHRJ
+            VndGaTNkSFViMmp4ZWFGcjJRd2pnZE0KN+OSWclMuPTebmqIPHJcKpyftIOIpNya
+            N+Hj2Te0wbHQD57LHeW0G0yZxUksBwq2td+Bl0DVO8dj7jG+DS/y5A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-03-18T11:57:27Z"
+    mac: ENC[AES256_GCM,data:WR8sjzIKDGhuAZHuHQvu+VeHURSxaip7BSDNp6HLK/Zv175erLI2AAPRv585dYw0l4dmvbWZqzjjQs2YanqxUTMqWMGX0+PgHV/+Aca2NQmch4WAA73R/WQ+mE9+iHErnpWlOQ0SNHAQzvx2RevEFz8qIo9CQXnhqYVvS6i+yK8=,iv:iluHLbgeuDVhhabwRMMGpgNhkjfjMMzd4rF9jNOlOPE=,tag:+XZsmzZBBhyJCB63zQcmNw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.4