diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6827e09..0bf8d6f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -49,6 +49,7 @@ updates: - "/kubernetes/home/home-assisant" - "/kubernetes/infrastructure/authentik" - "/kubernetes/personal/linkwarden" + - "/kubernetes/personal/notesnook" - "/kubernetes/personal/photoprism" - "/kubernetes/system/csi-driver-nfs" - "/kubernetes/system/external-dns" diff --git a/kubernetes/personal/notesnook/kustomization.yaml b/kubernetes/personal/notesnook/kustomization.yaml new file mode 100644 index 0000000..1d988f5 --- /dev/null +++ b/kubernetes/personal/notesnook/kustomization.yaml @@ -0,0 +1,13 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: notesnook +resources: + - namespace.yaml + - repository.yaml + - release.yaml +secretGenerator: + - name: notesnook-values + files: + - values.yaml=values.yaml +configurations: + - kustomizeconfig.yaml diff --git a/kubernetes/personal/notesnook/kustomizeconfig.yaml b/kubernetes/personal/notesnook/kustomizeconfig.yaml new file mode 100644 index 0000000..3365acc --- /dev/null +++ b/kubernetes/personal/notesnook/kustomizeconfig.yaml @@ -0,0 +1,6 @@ +nameReference: +- kind: Secret + version: v1 + fieldSpecs: + - path: spec/valuesFrom/name + kind: HelmRelease diff --git a/kubernetes/personal/notesnook/namespace.yaml b/kubernetes/personal/notesnook/namespace.yaml new file mode 100644 index 0000000..abd9fc9 --- /dev/null +++ b/kubernetes/personal/notesnook/namespace.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: notesnook diff --git a/kubernetes/personal/notesnook/release.yaml b/kubernetes/personal/notesnook/release.yaml new file mode 100644 index 0000000..1c8e9a0 --- /dev/null +++ b/kubernetes/personal/notesnook/release.yaml @@ -0,0 +1,19 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: notesnook + namespace: notesnook +spec: + interval: 1m + chart: + spec: + sourceRef: + kind: HelmRepository + name: notesnook + namespace: notesnook + chart: notesnook + version: '1.0.5' + interval: 1m + valuesFrom: + - kind: Secret + name: notesnook-values diff --git a/kubernetes/personal/notesnook/repository.yaml b/kubernetes/personal/notesnook/repository.yaml new file mode 100644 index 0000000..cbec640 --- /dev/null +++ b/kubernetes/personal/notesnook/repository.yaml @@ -0,0 +1,8 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: notesnook + namespace: notesnook +spec: + interval: 1m + url: https://gitlab.ibaraki.app/api/v4/projects/130/packages/helm/stable diff --git a/kubernetes/personal/notesnook/values.yaml b/kubernetes/personal/notesnook/values.yaml new file mode 100644 index 0000000..5095abb --- /dev/null +++ b/kubernetes/personal/notesnook/values.yaml @@ -0,0 +1,65 @@ +instance: + name: vhaudiquet-notesnook +api: + secret: ENC[AES256_GCM,data:Awl8G231jX8RkJyhzoinH1blCueM0Do65VivZOc7Kq+4HPYqJiPXCTT98f3DOB4Z,iv:Ikjxar57yVVNVW74wduTga+GQwuinGX1h/Ig9aiuAMY=,tag:cm/NvVJr+bKGFHOzAOfrQQ==,type:str] + knownProxies: 10.0.0.0/8 + disableSignups: true +publicUrls: + app: https://app.notesnook.com + auth: https://auth.nook.vhaudiquet.fr + monograph: https://n.vhaudiquet.fr + attachments: http://localhost:9000 +smtp: + username: ENC[AES256_GCM,data:iB9Q5CXiS/ESIeKbMW9O+MmC8/0=,iv:6EbYqQhqLbrLb6U7QJOXHclSlGDyEQuww7HJjZQtaw0=,tag:mD/fmFCECQhTicPUIZDIOw==,type:str] + password: ENC[AES256_GCM,data:8RKHLENgL5y1JorgdMk=,iv:RSkVPaj6jfrjiTuk8R16I5vKqOtbdE2JE5PojsZren8=,tag:dTiR/4GSsw2iOS8XyQrdrA==,type:str] + host: mail.vhaudiquet.fr + port: 465 +ingress: + enabled: true + hosts: + identity: + - host: auth.nook.vhaudiquet.fr + paths: + - path: / + pathType: ImplementationSpecific + notesnook: + - host: nook.vhaudiquet.fr + paths: + - path: / + pathType: ImplementationSpecific + sse: + - host: sse.nook.vhaudiquet.fr + paths: + - path: / + pathType: ImplementationSpecific + monograph: + - host: n.vhaudiquet.fr + paths: + - path: / + pathType: ImplementationSpecific +sops: + lastmodified: "2025-12-26T17:59:27Z" + mac: ENC[AES256_GCM,data:opl6kc4fv2r/GAtwWPA7m2oHe63zcIlA0jesYMCe+HW5k9Dko9IlRMGbCrFJB44FQyC7/eUZissy11a8PDUvmf6wM25ZV9FEIc2TPUQmsDj93egRReg2awoZ87MMrubVfWJU6k9eCfExKPkyeBQy+iLKTm21vL48TM1ChwOu65s=,iv:3lKvBZ9hdgQFeie37QTuO/hk+GZJ2DtuPBdQ2BSYJEA=,tag:pjCLaQxehwcr4vlrXwbgIA==,type:str] + pgp: + - created_at: "2025-12-26T17:59:27Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMA7uy4qQr71wiARAArVfgUVyDksn4oA9XbK/VuClDkLs1v5DG35u5tM36tvHr + 56QgkKvF0a6V56utnufToXqvwWhEOpe0UzszHz92vP+GaNWpYtuTvP3+nGV+wEcy + yMhctmGWO2Gn1MhFIS4w09GocrSuGLElEntBu4ETaMjrk2+FdqeULrF7KXlGhD/k + C1xqkRKRk/UqgaJmnKSmuQCJ7zzrzo9B+FYIiTo1i4IUCc94YkCgvR/m+fyofLLy + zsNeVwLpSW2JayG2DQSTCyAbEsg/J13BSq+tvusENiehj8nwKJnRrUf9JhrWbOBz + fDB+9Rg6shyl7hxtPAk+v4lKoGzoaXN9Vi+cyC2Cg6YOtn2vylW0UiB+76M+C1fc + FD6JpLVhEYoaMEjtcSPSC9byEUQ/LHlboigd6QHi8aOTC2A1wWZabLO/h7e2jpTm + 0biPqxina+7tjl49Y6299RPiOTkqtbBMVjZtbWi4P5BYu6NFq+wH1pVKiWx7MUtZ + 4i+GuyAcI07Alz8BOS8VjdB2ZyKwn7X5oApiKA+G5yHmOkeUtyMS1r1Y1CLH2eDG + lJzGEx5x2kCKkIOLyEADyrafQRRTcqN4OlWhPeJdL71Svlf+NHoXkunXLc8n9Kgi + tIpQduEE47tLwJDaUCK5+ZppIE4JIgGWNn/wXIQL2DwtTkoImF6Z5H9+GAj+o2rS + XAFU4ERMR3K8CwXOSpjB2fW+S8XWbaq2Nr+YgYte8v5Md93YngL+AQyMJVmHdrEv + LPgvuR7r89fFWN/i/a2jTfRjqxTtV5yh++id3+epjtNZCsaeflLzzv1cCdJA + =nZr3 + -----END PGP MESSAGE----- + fp: DC6910268E657FF70BA7EC289974494E76938DDC + encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$ + version: 3.10.2