diff --git a/docker/personal/tandoor/.env b/docker/personal/tandoor/.env index ce999f0..d80edff 100644 --- a/docker/personal/tandoor/.env +++ b/docker/personal/tandoor/.env @@ -1,18 +1,18 @@ -#ENC[AES256_GCM,data:McLrgYcpS7p3ms96atDIdQz1EvRTTrxnjgg3+niZezmHtn5c7vDHaECBhDI8cLsbJkSEncyGK4oFgrb54OGn8tFY1cxHY4hiL+FNigIHkhXap+xNwg==,iv:LPffOvVa+J0nDjUz0B2eDIsTB41SCuASX536xxwTtRg=,tag:TfSaqdB48O5D80CYhb2bAw==,type:comment] -SECRET_KEY=ENC[AES256_GCM,data:BUvuXiJPZJV56ALUeKWq5gmDY2Hve9tD6hXlqFZXKzJRRAp1oybwOZqXr7HfVtHjgTM=,iv:FydKIi3gx/5F+vOxd6GvqCLnCfV9+xpesSUoGyKV0D0=,tag:v+1ojpS3UoHK6CTEb4PFiA==,type:str] -#ENC[AES256_GCM,data:t2BD8Nj3mOD/pYOjdwShOqSDAYN/mdQ7yv43DzIpOKfaydq6whD7TCUYPNLXpTSNqaY+QSED17eUDUCSKT7gp11d1OTpIkKtbOoKle5D94jgRCS6HUka84qVc720TUw6uBWdIqi5qoZcYNppSqGdzeFjXBu+xny4Gg==,iv:NCF934MP0sB4l1X45T2DyUApNTWISUSDPlAT4MIf7Xo=,tag:YqU362U4QLlKLKy0xpgDdA==,type:comment] -#ENC[AES256_GCM,data:kYEb3ObKEpFnjE6mV97TJw1Jz8AzV+uIp2W7oQ==,iv:4gskHM+6K+4qT+YPVenobKJmrmZwtZ8tpw2QsOXbGRA=,tag:tXE5v+enpEmGsgq9Lx81Lg==,type:comment] -#ENC[AES256_GCM,data:WdV87OWsjDOrdDPyt28AD546dXxpyfmnQtBROns+Hfccn+WSpywbFfkkFvFOThT7fXOnSJy/oqIHCNx/UNgWH0fVJ2KB6O2YaBpH8ugHMWA6QU5RLbhQ+IPxbEbFb6+QHyLhskkvv0THXZpFS9vwy8k=,iv:81XF3gyUlCxlHE5NQek2BFUeLgYz5JoDCdJitzyegUM=,tag:vZ8VCPw/GH1Cqom6GLmXdw==,type:comment] -DB_ENGINE=ENC[AES256_GCM,data:63kZARUuU/Yx6btpGO60wBpqRa9YVvlr2yuC2GI=,iv:7jKuMPAbqekalQBdLIJnsJgKP4Pqw6MuPF0BZ4xPNVA=,tag:URaQKLQMw6+I65PBXgn6aQ==,type:str] -POSTGRES_HOST=ENC[AES256_GCM,data:nAtp1R6ZtJSiSg==,iv:CaVg+y7NAoWB5eZGo/EICR0HG6b82SzbSzfSVPsVOUI=,tag:DaCDvht1J0qjNv7F7WdWQg==,type:str] -POSTGRES_DB=ENC[AES256_GCM,data:kA1G1L6Euv0=,iv:Ryd0ofaJvfC+Cm+X359SW/UfZ327sVRsALnJnbcf+nw=,tag:PNsUvAO1p4mBjHiuuZLmXQ==,type:str] -POSTGRES_PORT=ENC[AES256_GCM,data:UdiRTw==,iv:U9sK0KbJ4dXxkZO60icqWAmhZRrqM2KWFesC/rJ1jcQ=,tag:JbNEq5J773SoFYLpruOfHw==,type:str] -POSTGRES_USER=ENC[AES256_GCM,data:q6/Q8q2dU+qeag==,iv:RdiUcZGMAJh5F8+M1vWsyrLYa8t7O0W0Y0YRnr//SFk=,tag:TsM2YxnUqIjPeLJHEVHm/w==,type:str] -POSTGRES_PASSWORD=ENC[AES256_GCM,data:iG1AO16KopJBAo/qk7rA3g==,iv:DIEwEDPhiOX90ihg8geE4HysdxTMLVDuXpJ4w1haWek=,tag:OyrlrkHM041NmkP9i/7kEQ==,type:str] -sops_lastmodified=2025-09-16T19:22:01Z -sops_mac=ENC[AES256_GCM,data:o4Vlo1V71CJzxsav8k7J2lxWO6awChXmMb3j7HQAp/MLtm8oRLz1ydHHIVpd59stDJjqIHsuMjI8KC/YkmzyX6tbC+9pHMO+nNSzENLW3x4g57VW30iZlwnObZ9Ba+80GtLdpYWxITW6cyvZtpGSVCIR6Wizm/20hEbld+FxDqI=,iv:/rCSPqnEfD+dZic6L2/6L+sO45QWcplUIzzLIQzYXCE=,tag:aP06jS4XP0tB2pT4GUKzPA==,type:str] -sops_pgp__list_0__map_created_at=2025-09-16T19:22:01Z -sops_pgp__list_0__map_enc=-----BEGIN PGP MESSAGE-----\n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\n=XyaE\n-----END PGP MESSAGE----- +#ENC[AES256_GCM,data:nDJXRHo16C9LLtA8cRUD7Pu6G9k3z/JPMQyWh/sXmrYig78ocFi36KzRNut8u4gRDml/ykgHlLm94y1K5Gg4eHsaAi5Stk4CrPyPus/hDgd6nB61BA==,iv:y4BEf1FBUG5QSa4edDYFYczU9WUi4V9gqnC1NLcOYtU=,tag:revz/um+XirnUUxEY/hyOA==,type:comment] +SECRET_KEY=ENC[AES256_GCM,data:OmutGAIPHz4l3oLil7LNGdY8Cv82B7dNrkZFoQn2GNsYzSOZoj7nge+0SieKSTqyob0=,iv:NiifR5odKEgXkfsRjU91hP0wrcLf7n10XiekDkKSnTQ=,tag:yZZ3LNr6FA6Xv1t+bwBJJg==,type:str] +#ENC[AES256_GCM,data:4DaWj6Y1scTKoOZwkGcU9GmnXvhzxRJO3PyJvkfzlO0WkjpprRjYo5P95ZdlnZrk0M8gGHZ2zuxwm8MNxVlw8dKwdAFubTPbeTpasa/XoAFZciZgXBWmv5DLLyQ/yXP/e70mSWKYpmj8nQ7JkBoYSXwMR1mntbRSPQ==,iv:hBRikHT2RFxo488HO2WF5M8AiTHhQw/eTZoQqaFzH8U=,tag:RqwEf0QmbFfiXsMf9tZdiA==,type:comment] +#ENC[AES256_GCM,data:FjSYK3tDKa2BeY/FUBye5wcXUjEJaAxQj7Q=,iv:+rkQmUPVOte+9W1r0RzcZl3vwCva6ONUPGwl8HdwgSY=,tag:wox8uewK5jGxBSDT87NBzQ==,type:comment] +#ENC[AES256_GCM,data:O/Utl77r6zCAyZpOwvXEsuNCvUN9/Uw/bz1OOHqYI23CHJxjU8bPUgnGq2F/1Y9eC+1NheMATcgEOsx8wZVNm6707SwylRXbBLWASAJY/U4oLgm2tKLcMLd8yU9Sulp65S2Iwu+LwK8f8PYMWFZRCAo=,iv:IoI9vA3PfT/GQRQn2GRpLF7WMSdFZ44z9Tci646jm0E=,tag:IVddJQwMQ8HQ0aiPEzQcZA==,type:comment] +DB_ENGINE=ENC[AES256_GCM,data:YCZKf7/riM43EVwI+OC7ZK3zhSB+o1KPsZjML6E=,iv:+MVjA3706QwHE60PrnlmV5TZauZ4oiMQ2szY7d4BH4c=,tag:uR3+At7DpSi5lXxL1jGAMw==,type:str] +POSTGRES_HOST=ENC[AES256_GCM,data:MEeYiNliMe0QPg==,iv:MGrySxMuVId7TUSHlMxTWfZCwQkWe/7Uzb05je+z9AY=,tag:R+neZ6AV1PmunX8SpEE+nw==,type:str] +POSTGRES_DB=ENC[AES256_GCM,data:Oj/x13nKqww=,iv:CRX+KCvdrtMBuyQoM6lYp2jPoX3ynpEQvNvG8vVDER0=,tag:hHTZs7nyRHYbKPcwkpkLbA==,type:str] +POSTGRES_PORT=ENC[AES256_GCM,data:xG6OMA==,iv:RAaZMnIraUD21fz850vSrAAKr2Px8XDWT/w0j1I2KNk=,tag:SoOCZcumwJpp/OdmGnt2LQ==,type:str] +POSTGRES_USER=ENC[AES256_GCM,data:CNr2sdWsOW9Rjw==,iv:OyyxMOqSfY7VGgw8gvKetbKsz711rqsx7q2q2NCgzEk=,tag:wee12iH0niPk28HhKLmRxg==,type:str] +POSTGRES_PASSWORD=ENC[AES256_GCM,data:mSUfMvGV/iInGeQmsu9TQg==,iv:XbV/XUHwKOm7khLibuTbz8P8KfnEz6YMHPWZndqzXs8=,tag:YDL1qbNq2b9WX1cmDyt88w==,type:str] +sops_lastmodified=2025-09-23T20:49:33Z +sops_mac=ENC[AES256_GCM,data:mlwYhfyGIxuupvhRT5eGP+QcVoI99uw69s9ud/QYogCu8WstXsJAIsKjBZu1dlxfs1pvTN4ehX966yFfSkRNeT+UcIPHbN0UK9Gnv7CnO3AdF9IxJy4RJ607LAFeZVVobY0E7LjNyeD9Gt9UiAb1U+v5yF4XVm7A+2OTvSgBUos=,iv:Y7Vmy92yfahN0o+kNuAhGD79acY1adq859rU8hfYVMk=,tag:srfdmpfsDL7o+Su+F4zTSA==,type:str] +sops_pgp__list_0__map_created_at=2025-09-23T20:49:33Z +sops_pgp__list_0__map_enc=-----BEGIN PGP MESSAGE-----\n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\n=grEF\n-----END PGP MESSAGE----- sops_pgp__list_0__map_fp=DC6910268E657FF70BA7EC289974494E76938DDC sops_unencrypted_suffix=_unencrypted sops_version=3.10.2 diff --git a/infra/pve/docker.tf b/infra/pve/docker.tf index bd552f8..b63f72e 100644 --- a/infra/pve/docker.tf +++ b/infra/pve/docker.tf @@ -38,8 +38,8 @@ resource "proxmox_virtual_environment_file" "docker-machine-cloud-config" { - docker swarm init - git clone https://github.com/vhaudiquet/homeprod /root/homeprod - mkdir /app - - echo "truenas.local:/mnt/fast_app_data/docker-homeprod /app nfs defaults,_netdev 0 0" >>/etc/fstab - - mount -t nfs truenas.local:/mnt/fast_app_data/docker-homeprod /app + - echo "truenas.lan:/mnt/fast_app_data/docker-homeprod /app nfs defaults,_netdev 0 0" >>/etc/fstab + - mount -t nfs truenas.lan:/mnt/fast_app_data/docker-homeprod /app - echo "${var.sops_private_key}" | gpg --import EOF file_name = "docker-machine-cloud-config.yaml" diff --git a/kubernetes/system/csi-driver-nfs/values.yaml b/kubernetes/system/csi-driver-nfs/values.yaml index 499ed9d..e30cd59 100644 --- a/kubernetes/system/csi-driver-nfs/values.yaml +++ b/kubernetes/system/csi-driver-nfs/values.yaml @@ -4,7 +4,7 @@ storageClass: annotations: storageclass.kubernetes.io/is-default-class: "true" parameters: - server: truenas.local + server: truenas.lan share: /mnt/fast_app_data/kube/ subDir: ${pvc.metadata.namespace}/${pvc.metadata.name} reclaimPolicy: Delete @@ -16,34 +16,28 @@ driver: feature: enableFSGroupPolicy: true sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: [] - lastmodified: "2025-03-22T13:26:31Z" - mac: ENC[AES256_GCM,data:ceN4v+5tV5iCU3jld/INz689kJpF/v7ChIVObD+4FL5KiaRb0DToygiAzgo5BvbmCL9cudrZ1qtXLSe47PMxBrS2DOzuFfp3nlBfhIc1vyl9IwMJJrdM3VWmTKMQUcjbMpb0bnD0P6S230+DU+lB9Sx+2prCzRpGl1tTEkXjrYo=,iv:dEMp7H/5Ry/uQR5OuweSwUF6h4Cbjm3Dq+ZD2rCxvGI=,tag:NF1wMICn+c2SXoI15ugsdg==,type:str] + lastmodified: "2025-09-23T20:49:33Z" + mac: ENC[AES256_GCM,data:PzR0Bd7Zri4gjpaSaeouJxSJbUP8f3dHuzuNlXm7q0B3SgTExHAYWT+YQ4S1QZPibE7LcPMln8Al+ac2TtVaIYD+voISUMt1+w6bqA2RmO0ZbF0mOqMiMTnWtbvCI5b/8g5+lYQRWt+5k6Lwtl5qxbdEeaBKa9qYpNw/DoEDwlM=,iv:T2XcsYVdQUGrjbleoAfcZXmS/m+kh1VcdMpU6TAMnX8=,tag:eWpR8XjOdSujxaz5aeWz2Q==,type:str] pgp: - - created_at: "2025-03-22T13:26:31Z" + - created_at: "2025-09-23T20:49:33Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA7uy4qQr71wiAQ/+PxuU+B8+VPXqQ8jHkIxCN3cplCGMbyv+lgaiBGUSb3Dl - pfwircBKOYUwobYeCBKL8aGVkvE0AtJ3oAE0sGcLCk5vTggAzU3UctiS79cYCJlu - MoCzfLUonYgG9UBMWhNURE6BPXw8kj5YAmoyFx67pVlgc+6DfloH8crcm7puIMAe - qNcKKDw4H6VY3mBJqKElbRwHdPDMQuOXyViZYGTNbtQTpO9P9wlGNjOrL5weYT/q - t/WDIUjBYO133KDrbBGUq/jPfk0NnGICBYqF7qoEG+1G+Brw8VnRgNNH8UvvqA4/ - rGKtvkXFYf563qVPNVeoYvnQG6YSTr4VYfiW1Ru8SvSpsZVJu2Xqhg0ga9JVuLn8 - 6qFp0Dd2UmskEoHz7HOk9jV712/EzATvEGY8o/LFIR/EVNlLaOQug10GQxQ9MFX4 - qfVnnFkNlNW288n6f5fEpCrn1vOllftMbQDeev20qJUXTwVxsammdGUMDoWW7t2U - bf42OIJicrJ+msOSohN1zFafwb09njnpiAP3jJ9kwBACByRaSp9I6p0w1CU2xN0x - J31hRI5ByDQ4ZcTLDNPQmE9bpTy3sfVEiv0EalPAqevxR70CkQEFJZoxIuKxBAaC - O49TIuEfudcL6431m6W29EEW7V944ojKMvEWSx9HgJIfJ8wqU8S4wBcDFy1SoJTU - ZgEJAhB0f09p6f5t6umTqrzGKiHGPrAwlvErbdUTwH3gdk6j3YJCyYR1xzZCFdzW - lMa4kXu3v3wndGU1FteUE3HKkoRPttBg4sf1ekJvICv4HXfADCRar5Hf0CtbHVzB - sH6aWEmtVQ== - =1kP6 + hQIMA7uy4qQr71wiAQ/+IMPmEpFfZkMC65azxf/qhbBg6z2rVC5Yjb2x0F9vhiCS + nbyrAe1jTi5sLXBFAeB3NSR4NAdmuicJMIVcCTBbIQFOdGgE9zh62ZK3nR32JabJ + cPIiQLI0N3Mk3Jgmll2m2Zfj4FoanDYm3rJ2mAaKRhqN+txjHCv6bfTMcWfx09FZ + QjZbtU3frO+5dbSv7SAvQGpk2ehZJ/zcbhnwMv/wD8uMj9fjRLdhP4yBqDDapiL5 + IvHkEZhm0egy6dYx2KsM17j31GbA+b74GU1+2+OiZI8CVym8ZqYjHTwMGYjSQrmF + v5DqpNrmmq0iumkRkjwYD1z6VCRJTWaSgUplfUoJnXGx8Grgmh7TqTBzAH2LlkR/ + lqqOo1+GydP1H292AQ21JMTEUoTjbVSJgYDZo+FgfbWIWQMa3DfPx5byC1cL1iQY + kIJHkJ5k6NyPzJAF88Wah0dGlUx7IQ8wVZ8T43hf7VaeU1KoLucQfBiSau068cUn + zekMh0apT3PadC3w5t5yia+gl4acy6PdpyqFdqEE1CahsIxr8PzFIa3c9lyzkr+E + /naeDLQT0akEnRUnvSFLYEwo9TD+pA63eGAMg0fxNtvBpn0l7T9ygyw70ERqyOGk + RixYAOwemlFKm4vsJa8Om3vE8chZ70z9e50/bx+kybGgTWKR6251AWU/yCxQd5HS + XgFgCrzXAVInmOTNqpafadWJloLrMh9ukeDS2eNIeTe+rbRL9z1iWnBWnJSJ0RBr + RYagnwWcQTdxi13qUQcxFGynYZGa703r2/yvCnE0iDVU44IJvWr2B9PW0wnjOSI= + =NHP9 -----END PGP MESSAGE----- fp: DC6910268E657FF70BA7EC289974494E76938DDC - encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*secret.*|key|.*Password|.*\.ya?ml)$ - version: 3.9.4 + encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$ + version: 3.10.2