changed miniflux to cnpg on postgress-db

2026-06-15 00:01:56 +02:00
parent baddbe9343
commit 961a0e7e46
7 changed files with 165 additions and 20 deletions
@@ -0,0 +1,26 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: mas-db
+  namespace: synapse
+spec:
+  instances: 3
+  storage:
+    size: 2Gi
+    storageClass: longhorn
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://cnpg-backups/mas
+      endpointURL: http://192.168.2.107:9010
+      s3Credentials:
+        accessKeyId:
+          name: minio-cnpg-credentials
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio-cnpg-credentials
+          key: ACCESS_SECRET_KEY
+    retentionPolicy: "30d"
+  bootstrap:
+    initdb:
+      database: mas
+      owner: mas
@@ -0,0 +1,26 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: synapse-db
+  namespace: synapse
+spec:
+  instances: 3
+  storage:
+    size: 5Gi
+    storageClass: longhorn
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://cnpg-backups/synapse
+      endpointURL: http://192.168.2.107:9010
+      s3Credentials:
+        accessKeyId:
+          name: minio-cnpg-credentials
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio-cnpg-credentials
+          key: ACCESS_SECRET_KEY
+    retentionPolicy: "30d"
+  bootstrap:
+    initdb:
+      database: synapse
+      owner: synapse
@@ -0,0 +1,39 @@
+# Encrypt with: sops -e -i clusters/homelab/apps/miniflux/secret.sops.yaml
+# Decrypt with: sops -d -i clusters/homelab/apps/miniflux/secret.sops.yaml
+#
+# Vor dem Verschlüsseln alle Werte befüllen, dann:
+#   sops -e -i secret.sops.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+    name: miniflux-secret
+    namespace: miniflux
+type: Opaque
+stringData:
+    ADMIN_USERNAME: ENC[AES256_GCM,data:f/FgSD8=,iv:bB+GaY/1MN8aG4TCYCHAmavFozwrWQ/+0bC/LTvJhD8=,tag:NEMkgfRnoB2i/NSHJx4MGg==,type:str]
+    #ENC[AES256_GCM,data:Ma1jDNjpHkobl4r9/wIbsZVZqqr7Iessv3Q+UQkjxg==,iv:MJ6yKRL1Gn7VV7X1KWmRXN9yvPaIKy2CN0p5/TrVHhM=,tag:wxu3F5vdP04QSqjfCroNxg==,type:comment]
+    ADMIN_PASSWORD: ENC[AES256_GCM,data:Z7hoDI/Keno=,iv:I0AETeStVt5LJ9psk40jnWZPh8oiKFfezdhZL5iM9WM=,tag:USvnhlecC09Pc0ku/dhx/Q==,type:str]
+    #ENC[AES256_GCM,data:T7SPFoVLeSAqaFpbRFRS58rduAiLNrlS8VH3BMcFbQ==,iv:/jN8TQbRJfoJ5KJOMv9a/hJz1FUyzjShmim9geCgz3c=,tag:VDMwkIeaINRHbnhIVHEofA==,type:comment]
+    DATABASE_PASSWORD: ENC[AES256_GCM,data:C+mU6Wb/ms4=,iv:1ttWYChCSEBPIIFcEUuuDQvQ5GE+HqimD8yXbhlVaTI=,tag:5EE8U08A10HCrbMbO6UkXQ==,type:str]
+    DATABASE_URL: ENC[AES256_GCM,data:T8DQXi8F2Fo2Jb0sVE+/Mp9oqXYogRgU+ksjG9lh0rkLu5RczgUWFezAJQaae3RIZgbNpa0Mdmgfwkkj8KSH0GRWLEHSw8922w==,iv:QZ+gqCf9o6Mt037YBh70BWXxiR5279CnwwJ1daFkSMA=,tag:x7ygf+iAJ93cfsppO1UsZg==,type:str]
+    #ENC[AES256_GCM,data:AZlOZfM0wkF4IxH7qemubgBE4QVG2X9yE1atfI2TLb4CF8ZWbBeVpxdoLLSfufzCUhRWTjmYe1rO,iv:88tOImH0NWa3AnqVsgo7+wFsie2pY7h1Qp9if6XQhGU=,tag:bQ1QRlmxS6Q3nW3+sL7TMQ==,type:comment]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtZ3hxczlSQk5TQUNUQlBv
+            aTh0UE52aXlLOFFkS2xKb3RMN1BwNk1IMmprCnQvV2pJdVNPRFkrSkp5NktabjNs
+            cDdySTdiSysrS3IzV0dKZGhMOXUrdXcKLS0tIHVMaGE4UFdEbGlHdzdnRmVqQ0ZG
+            RE1JVFY4SzZnVWk3K2JOcHpwSDdySEkK5y19Pb4c0s0PNWWAQU8VQFukM5Uz19pD
+            MSY6AJELaCv8DniZfm3v9OHWvvOE3HKaSfV3UDbCujn6JJmJnd7Bdg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-06-14T21:55:36Z"
+    mac: ENC[AES256_GCM,data:BnESpyLJwxlLXa++K/zuJJuoGN/gBcvVPwjt5cNcGJUgyvwzYW9326JWQIWHzn3zX5J06oB6FzOJPbt/QpuI4IQ5U6EM6UOPC3tSzZdtTr0l2WH3Jrhm/3mqUA7dl4uFr6QdAjaYL0Jmsozb4T5rTelGbe+Bjpj8JhGh3ljcF2o=,iv:yiHHmjDxAtn3SgPoDenCoInQOQKQgW6NCnjtYGmboKU=,tag:OlBzltHcDgJHRpcdOYKfqA==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.4