ci: deploy forgejo via helm (git.patanix.de, 40GiB PVC, PostgreSQL, SOPS)

2025-05-26 07:39:38 +02:00 · 2025-05-26 07:39:38 +02:00 · 1b82287923
commit 1b82287923
parent 5a0c1949f4
11 changed files with 201 additions and 0 deletions
--- a/apps/forgejo/postgres-secret.yaml
+++ b/apps/forgejo/postgres-secret.yaml
@ -0,0 +1,37 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: forgejo-postgres
+    namespace: forgejo
+type: Opaque
+stringData:
+    postgres-password: ENC[AES256_GCM,data:da6nuHh8My8a+hlAaEbFb3DqNw==,iv:UJndoTUbG9rgI9dCQGBUzQXWLBbmBv7BRk/sbpMpo7I=,tag:3X8eSFmg8zCoJKgFqw4oTg==,type:str]
+    postgres-user: ENC[AES256_GCM,data:7QqScpInuQ==,iv:l7HWnyMMRv3Hke1lV+wrDDUrxfbB/ZID9cZmh/DIDBg=,tag:qXlk+DsUIh/z11c9G6VMKQ==,type:str]
+    postgres-db: ENC[AES256_GCM,data:CgJLPv5kfQ==,iv:dBXw0tIg43rIj2avzPXt+sbBpV7M+hAAItCU4kka+vY=,tag:TX+yA3MSOs0w5ZLxe4zLrg==,type:str]
+sops:
+    lastmodified: "2025-05-26T05:35:45Z"
+    mac: ENC[AES256_GCM,data:GgEuhTjp5VzSXEHQEfgzcYQBNx7nWySaMrf7eLWA5U+1UHUPzgQndFEocgdSnh1juRCN3zEiBwEM4DozQfuxQ2MOHlVEyiaCxQlg0sxd+vXFNT5T5mGr31jvnY/cOb2tnLFRH+Lnfbfnrgm9yugJOQ9JGqblhIoBM5XmPiRifTA=,iv:OFDVIWaQUZf1ey7WYWiPjjcEi+TOwOJD4qVVhfdaoy4=,tag:3MjEU1JuUsIjEUCdYjJMVw==,type:str]
+    pgp:
+        - created_at: "2025-05-26T05:35:45Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAxd/Yh1BfDklAQ/+JuqL1zpDzfWEa5pDwbyQHAMLt00be1cbnyYS+eYclRv3
+            LQjlsOBfB0rArezdXwIA+nf11+OB4zht66Rgdh0RC/nZ58CkOwsAaRTB3QCabaD+
+            3eY0M8sCW7ySS2zCZ7ucNjdtvOoWeQApy5mBM5+MvR22jJE6LO9RfAxMOO+ce45Q
+            GsTJqN8CcjHLaJ+1NMZWx9gmp+KwbHb8K79GPHY6t4r/c7JJQbWV3b45xgjpEhuh
+            fobXUjfg5uDqPhhEqGpJcRb1sR9kjJm3eRa4inVgLVMjhk5DZscV6Fzegi2+c0Ct
+            3BgEOLWoOPZcqDLhuy7FL2dDWMV/akf4tuYYRSx9Rtw2Q3rE0wjnPgaSlawokx9r
+            R2DfzXU6zRRJme5yEjxTnUL56pV1cfZFzowFKk2J5VcnO/kURov6td6P4mdWRze4
+            eWhguNjYQemhJ36orLIamF9ZqJTvlSmKhc4tWWLwHx//Wownn/1qtsZZ8+YSsnBR
+            Cw4ZR1rVMS89S/4utdPHduIvxZBBNvgILhdcJxv4aPo7yIf63ES+rOT8b0cGkBkC
+            40UQb4b3Fhh48x1N/VXzl/I4pgrWZZbXyXjYEnItMAJDtPEaLY8dmWl8HfnzeQBb
+            ARMO/Ns2HJU/IcsOAbmWQ9tUrA+l3mif1r5+8ICOEFd8zJX97uQEMMw+plgXix3U
+            aAEJAhA2kcPvufw+4CwWQTQdOigXEr0aVgSJsb7p6x2RlgnDDmrHXTEdQh3LDE14
+            fF4E58D6py5KFcpWaiSqjQe75OywolHg0DVwIpbQ340RA+jCrwtkEn5kMiHkm8mO
+            l4bc3613t0Ud
+            =/Q9T
+            -----END PGP MESSAGE-----
+          fp: F20CF3DE0B4ACDFCAF07A9D76399FB237185E764
+    encrypted_regex: ^(data|stringData)$
+    version: 3.10.2