add n8n w/ encrypted secret

2026-03-18 21:23:19 +01:00
parent ff26a20b2a
commit 7cdfa7ab8c
6 changed files with 90 additions and 0 deletions
@@ -0,0 +1,16 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: n8n
+  namespace: flux-system
+spec:
+  interval: 10m
+  path: ./clusters/homelab/apps/n8n
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
@@ -0,0 +1,28 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: n8n
+  namespace: n8n
+spec:
+  interval: 1h
+  chart:
+    spec:
+      chart: n8n
+      version: ">=0.1.0"
+      sourceRef:
+        kind: HelmRepository
+        name: n8n
+        namespace: n8n
+  values:
+    main:
+      config:
+        generic:
+          timezone: "Europe/Berlin"
+      existingSecret:
+        name: n8n-secret
+        keys:
+          encryptionKey: N8N_ENCRYPTION_KEY
+      persistence:
+        enabled: true
+        storageClass: longhorn
+        size: 2Gi
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: n8n
+  namespace: n8n
+spec:
+  interval: 1h
+  url: https://8gears.container-registry.com/chartrepo/library
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - secret.sops.yaml
+  - helmrepository.yaml
+  - helmrelease.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: n8n
@@ -0,0 +1,27 @@
+apiVersion: ENC[AES256_GCM,data:TXM=,iv:kMnjXA6mjoW7Nt2S/KpIBaTTd58P/f/yt2YPUB88eX8=,tag:DgL5kDdHMEsIF/2PyfF8jA==,type:str]
+kind: ENC[AES256_GCM,data:mcE3qreT,iv:FR0cbdgUk9zYTbQWmk5hCz4veNu76k7zAK9GUQ41mWw=,tag:t1LByyoWyEI5CiQdYpRwZw==,type:str]
+metadata:
+    name: ENC[AES256_GCM,data:1G0DBhxrGBgVQg==,iv:bRQm1Ln/OSb+MxcxxothTfG9jFiF4VCgW1F9laNxoq0=,tag:HbH10nM8rw/74AeqpTKAwQ==,type:str]
+    namespace: ENC[AES256_GCM,data:ch1x,iv:KZ1QuNnJbCdDs408HV83bMN+S1c74lw/1iY3+c65Yhw=,tag:kiHmZelv2tBAC/spKbDD8w==,type:str]
+stringData:
+    N8N_ENCRYPTION_KEY: ENC[AES256_GCM,data:qT66evyBp0g=,iv:zyK2jHmJJCzCy+9HMDBqBAnWYPtH+3KJ+5+QhnMRTAo=,tag:37hvY/kYIH4DtUVtnFIQ1A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4aW00Z05ZbktsS2o1SXhm
+            TTRYQ0tnaFRJb2ozQ3VzTFhBMU83ZlV6aHprCmFWRWlZYXE4RlFlZTkyb2g0OXQ2
+            K3JGWWtVKzNVZ3NxMHFLakI4c3BlWGcKLS0tIDZFeW9JNGloRjcvRWdhV1FBaDF5
+            S2wwSDBmU0pBTHZVUkNwc0dJVmVEYW8K7H5tNBCb8oVLSnHmBL6u05Z306t5682a
+            sl91GuzQOIsWp+5gxYLmPidyeV2RBa+lvBk6WSOspAwweoy/sj8Fyw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-03-18T20:21:37Z"
+    mac: ENC[AES256_GCM,data:JwRPM+EUoOd5mCwlJQY+FUbcSl3phAKKAgfa4xvaKnX2PCfEXwRnZY7yHy5/3nTwa00FoRlmm1BAj/RPtcFx2KedDbkuMG366WRPfuSeh+9pt2wlHICy+Sq8N4xSZ8SjXm2PFHtAE7MegBOCxngCebYKUvl+2JGjjvdK9UtLlTE=,iv:TzlDv5QRQotKCOEIh1mu5dKe/gFVOdWdvBXcbTIktEo=,tag:dK5whDYwLvwNjUBw/jKXFg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.4