18 Commits

Author SHA1 Message Date
0c4c3997b4 Merge pull request #261 from vhaudiquet/dependabot/docker_compose/docker/home/n8n/n8nio/n8n-2.1.4
build(deps): bump n8nio/n8n from 2.0.3 to 2.1.4 in /docker/home/n8n
2025-12-26 19:41:51 +01:00
9e0c64cd0e Merge pull request #262 from vhaudiquet/dependabot/docker_compose/docker/infrastructure/mail/stalwart/stalwartlabs/stalwart-v0.15.2
build(deps): bump stalwartlabs/stalwart from v0.15.1 to v0.15.2 in /docker/infrastructure/mail/stalwart
2025-12-26 19:41:41 +01:00
310a23d3f3 Merge pull request #263 from vhaudiquet/dependabot/docker_compose/docker/personal/media/films-series/jackett/hotio/jackett-release-0.24.545
build(deps): bump hotio/jackett from release-0.24.498 to release-0.24.545 in /docker/personal/media/films-series/jackett
2025-12-26 19:41:32 +01:00
3e4f8ecc3d Merge pull request #264 from vhaudiquet/dependabot/docker_compose/docker/personal/media/films-series/jellyfin/jellyfin/jellyfin-2025122205
build(deps): bump jellyfin/jellyfin from 2025121505 to 2025122205 in /docker/personal/media/films-series/jellyfin
2025-12-26 19:41:22 +01:00
c5e3117096 Merge pull request #259 from vhaudiquet/dependabot/docker_compose/docker/home/esphome/esphome/esphome-2025.12.2
build(deps): bump esphome/esphome from 2025.12.1 to 2025.12.2 in /docker/home/esphome
2025-12-26 19:41:06 +01:00
43705e396c Merge pull request #257 from vhaudiquet/dependabot/docker_compose/docker/production/buildpath/mongo-8.2.3
build(deps): bump mongo from 8.0.1 to 8.2.3 in /docker/production/buildpath
2025-12-26 19:40:55 +01:00
dependabot[bot]
58812e353a build(deps): bump mongo in /docker/production/buildpath
Bumps mongo from 8.0.1 to 8.2.3.

---
updated-dependencies:
- dependency-name: mongo
  dependency-version: 8.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-26 18:28:02 +00:00
ec9ecd6031 notesnook: (docker) remove notesnook, bye! 2025-12-26 19:26:58 +01:00
71bb2b8bea notesnook: (kube) disable signups 2025-12-26 19:18:01 +01:00
72baa684b9 notesnook: (kube) change ingress 2025-12-26 19:13:50 +01:00
c05b18e4d8 notesnook: (kube) allow signups 2025-12-26 19:04:47 +01:00
dependabot[bot]
a45e7d5c7a build(deps): bump jellyfin/jellyfin
Bumps jellyfin/jellyfin from 2025121505 to 2025122205.

---
updated-dependencies:
- dependency-name: jellyfin/jellyfin
  dependency-version: '2025122205'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-26 18:01:46 +00:00
dependabot[bot]
15c5bb6965 build(deps): bump hotio/jackett
Bumps [hotio/jackett](https://github.com/hotio/jackett) from release-0.24.498 to release-0.24.545.
- [Commits](https://github.com/hotio/jackett/commits)

---
updated-dependencies:
- dependency-name: hotio/jackett
  dependency-version: release-0.24.545
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-26 18:01:19 +00:00
dependabot[bot]
3b834ea2ae build(deps): bump stalwartlabs/stalwart
Bumps stalwartlabs/stalwart from v0.15.1 to v0.15.2.

---
updated-dependencies:
- dependency-name: stalwartlabs/stalwart
  dependency-version: v0.15.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-26 18:01:01 +00:00
dependabot[bot]
32fb1231e0 build(deps): bump n8nio/n8n from 2.0.3 to 2.1.4 in /docker/home/n8n
Bumps [n8nio/n8n](https://github.com/n8n-io/n8n) from 2.0.3 to 2.1.4.
- [Release notes](https://github.com/n8n-io/n8n/releases)
- [Commits](https://github.com/n8n-io/n8n/compare/n8n@2.0.3...n8n@2.1.4)

---
updated-dependencies:
- dependency-name: n8nio/n8n
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-26 18:00:59 +00:00
dependabot[bot]
40a2c15491 build(deps): bump esphome/esphome in /docker/home/esphome
Bumps [esphome/esphome](https://github.com/esphome/esphome) from 2025.12.1 to 2025.12.2.
- [Release notes](https://github.com/esphome/esphome/releases)
- [Commits](https://github.com/esphome/esphome/compare/2025.12.1...2025.12.2)

---
updated-dependencies:
- dependency-name: esphome/esphome
  dependency-version: 2025.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-26 18:00:43 +00:00
7db693de04 Merge branch 'main' of https://github.com/vhaudiquet/homeprod
* 'main' of https://github.com/vhaudiquet/homeprod: (22 commits)
  gramps: more time for healthcheck
  build(deps): bump mongo from 8.0.15 to 8.2.3 in /docker/tools/notesnook
  build(deps): bump tomsquest/docker-radicale in /docker/personal/radicale
  build(deps): bump paperless-ngx/paperless-ngx
  build(deps): bump jellyfin/jellyfin
  build(deps): bump hotio/jackett
  build(deps): bump gramps-project/grampsweb in /docker/personal/gramps
  build(deps): bump roundcube/roundcubemail
  build(deps): bump stalwartlabs/stalwart
  build(deps): bump n8nio/n8n from 1.123.5 to 2.0.3 in /docker/home/n8n
  build(deps): bump esphome/esphome in /docker/home/esphome
  build(deps): bump paperless-ngx/paperless-ngx
  build(deps): bump wizarrrr/wizarr
  build(deps): bump jellyfin/jellyfin
  build(deps): bump hotio/jackett
  build(deps): bump n8nio/n8n from 1.122.5 to 1.123.5 in /docker/home/n8n
  build(deps): bump esphome/esphome in /docker/home/esphome
  build(deps): bump tomsquest/docker-radicale in /docker/personal/radicale
  build(deps): bump deluan/navidrome
  build(deps): bump hotio/jackett
  ...
2025-12-26 19:00:04 +01:00
c4b28f7ce4 notesnook: deploy to kube
Trying a Helm chart for Notesnook to tryfix current issues
2025-12-26 18:59:54 +01:00
16 changed files with 122 additions and 260 deletions

View File

@@ -36,7 +36,6 @@ updates:
- "/docker/production/semeryfr"
- "/docker/production/vhaudiquetfr"
- "/docker/tools/excalidraw"
- "/docker/tools/notesnook"
- "/docker/tools/obsidian-livesync"
- "/docker/tools/stirling-pdf"
- package-ecosystem: "helm"
@@ -49,6 +48,7 @@ updates:
- "/kubernetes/home/home-assisant"
- "/kubernetes/infrastructure/authentik"
- "/kubernetes/personal/linkwarden"
- "/kubernetes/personal/notesnook"
- "/kubernetes/personal/photoprism"
- "/kubernetes/system/csi-driver-nfs"
- "/kubernetes/system/external-dns"

View File

@@ -163,13 +163,6 @@ excalidraw:
branch: main
compose_file: docker/tools/excalidraw/docker-compose.yml
notesnook:
repo: homeprod
branch: main
compose_file: docker/tools/notesnook/docker-compose.yml
sops_files:
- docker/tools/notesnook/.env
obsidian-livesync:
repo: homeprod
branch: main

View File

@@ -1,6 +1,6 @@
services:
esphome:
image: ghcr.io/esphome/esphome:2025.12.1
image: ghcr.io/esphome/esphome:2025.12.2
ports:
- "6052"
networks:

View File

@@ -1,6 +1,6 @@
services:
n8n:
image: docker.n8n.io/n8nio/n8n:2.0.3
image: docker.n8n.io/n8nio/n8n:2.1.4
environment:
- TZ=Europe/Paris
- N8N_SECURE_COOKIE=false

View File

@@ -1,6 +1,6 @@
services:
stalwart:
image: stalwartlabs/stalwart:v0.15.1
image: stalwartlabs/stalwart:v0.15.2
container_name: stalwart
networks:
- default

View File

@@ -1,7 +1,7 @@
services:
jackett:
container_name: jackett
image: ghcr.io/hotio/jackett:release-0.24.498
image: ghcr.io/hotio/jackett:release-0.24.545
ports:
- "9117"
networks:

View File

@@ -1,6 +1,6 @@
services:
jellyfin:
image: jellyfin/jellyfin:2025121505
image: jellyfin/jellyfin:2025122205
container_name: jellyfin
networks:
- default

View File

@@ -1,7 +1,7 @@
services:
mongo:
hostname: mongo
image: mongo:8.0.1
image: mongo:8.2.3
restart: always
user: 2000:2000
volumes:

View File

@@ -1,22 +0,0 @@
WEBRISK_API_URI=
INSTANCE_NAME=ENC[AES256_GCM,data:qEEZGdAX83nTP2isYB1sVSUlfLiv6Xw=,iv:vdLcvAbaCd2bEpHfQVv2CQEHO3cFdvLfgEGIMS/lA2w=,tag:uPUhfd/nuuxegH2RXkADSA==,type:str]
NOTESNOOK_API_SECRET=ENC[AES256_GCM,data:o9/2+nDeoBAXFE8R,iv:8Lzz6Flltia+pr6CmdaGaba8x/+KnIjhKdwJOkgX3ys=,tag:hHI3VZj/uOrmSMmhh+T4yA==,type:str]
DISABLE_SIGNUPS=ENC[AES256_GCM,data:w1MjyQ==,iv:NKjhnLyPeOakGSMwVmOft7WtK6ggDYx0OucmUZId4Dc=,tag:wk5GpTs5xOMQ2S6w1MLjQA==,type:str]
SMTP_USERNAME=ENC[AES256_GCM,data:N6/huGyOvYbkb580YyZ+5u3chhA=,iv:pyglhbFMwyRxI1k9bmMS0sr/x+5RXn/I+fKavdNUSCc=,tag:/XgQDqYugazoFb0NQJGjSg==,type:str]
SMTP_PASSWORD=ENC[AES256_GCM,data:L2FG6mz9BlhuFfLNDa0=,iv:1P6ABsBleUYAn+Yz6qC3MbD2bR85HTrxM0aH8eRLVNY=,tag:IAggPwIHY5hobYobIGm8Qw==,type:str]
SMTP_HOST=ENC[AES256_GCM,data:3NSiYgn8jooDDZLTuTgj8Jah,iv:k0sz5H35fv9xzgfyV/NyE9CUVJySFvgbIoKuq7s+VF4=,tag:W7Ce8BUIz5bULaPOwIcv/Q==,type:str]
SMTP_PORT=ENC[AES256_GCM,data:AxM/,iv:tsQ8RA8f6YhxACcgUaHE3RgADcXB0hAd3dIkEtch0Bc=,tag:fxInjB435fi9XzLqdoOJwg==,type:str]
NOTESNOOK_APP_PUBLIC_URL=ENC[AES256_GCM,data:DCTjjJBUapunw5wZpQEWZscUtOZiAoWJFw==,iv:e192t2+LDSh6YokJso2I2hD3Z2yRJ4g0QwUyRSnACBo=,tag:ULInUTM5qbGJlCrVpkDxIg==,type:str]
AUTH_SERVER_PUBLIC_URL=ENC[AES256_GCM,data:9Nt/sTzOZwQZoaErm7epTw+buoWXQXQ8jZtlVZzLoiGDh7mjx9x9jQ==,iv:d0MvX6CWvEyx7YwIgGo3SIXV3hmZA3KqU5255gRhVAo=,tag:doKLa1njr4bK0lTy2i53DA==,type:str]
NOTESNOOK_APP_PUBLIC_URL=ENC[AES256_GCM,data:tzfOXeT0jBubJnvcx+EHmHQJhXXyJjkgMw==,iv:HM5ykxZ9E5BwLOU1+6pY9777Tz7CmPS+JyrBLbIj7BA=,tag:/1NhvVLkq4w+yWWWs338bA==,type:str]
MONOGRAPH_PUBLIC_URL=ENC[AES256_GCM,data:nTvb9xckE3Dwb8e3ngQimwbbEqu37kUgEQVJ9dKDAIAPkU7HumXMn3Y=,iv:QDjvaxuLWR80VL05C/lL17EVUpMsb8TF/9WRLw6fAPk=,tag:rdrAZlpJ5kY1O9QgmErBDQ==,type:str]
ATTACHMENTS_SERVER_PUBLIC_URL=ENC[AES256_GCM,data:SxJr4/nJRij39l6EACQz83dg8IPiSe9PjD7i6l9xAkpyvA==,iv:rrj951k7KQ8+FbU8cenkBv3ESBB7B6dpcX8aLeVjtNk=,tag:nVQyawlBhd69f+3MIk/Ftg==,type:str]
NOTESNOOK_CORS_ORIGINS=ENC[AES256_GCM,data:DOUsLeX882mGUKz1NcMhBRPydhoBYlxoyoSTSe6NEIiF9YM1TZwOBaJqw9zbdjy45zxzuvXxZmAFt+CL91/8oVHUMX2kBi1cT88W2nZU5g==,iv:sPUEYWPfTTR5o8Dm4rtFyD1rjkTkV9GgGlbZJPMPZGM=,tag:qNxvouzH/lgRZXWQtAGxsA==,type:str]
NOTESNOOK_CORS=ENC[AES256_GCM,data:H4pMn0DbumkeWxLjbKqvd//hTKav7Yucz9QT/Nnvu0sLLOiDMg3exKQy33VEWFuGs3F4CuqzcT2tKmi3viXbGQ9CnNsZp6EhBv1eWBQ21g==,iv:RI8hq0B/HJ98HTKg5y9TAZGzTulokqeqghXej/J6UHA=,tag:cvm+i+oNND7/340fV/VdsQ==,type:str]
sops_lastmodified=2025-10-15T14:21:43Z
sops_mac=ENC[AES256_GCM,data:+1PYCITFsGvfXDUAFAaDW6gBqfi/cE8Hrp9yw/wuS6E2Q1iw1GGEiFzeK/IL57MUvAZSdQkmv2bNrnboeDBYhHhADdqJdqht1SNui50aEYdLaHHUFADx54b157Op6HLYSccG1J6Hm7riBeurCDUxpC0hJ1whLva2V/T73LnzAf0=,iv:fsmU91jFjSDNjDfaki1c00cS2cya4jcVwd3pbSl/VBs=,tag:SOitwcXraXgrJVmfuLkDKg==,type:str]
sops_pgp__list_0__map_created_at=2025-10-15T14:21:43Z
sops_pgp__list_0__map_enc=-----BEGIN PGP MESSAGE-----\n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\n=qFED\n-----END PGP MESSAGE-----
sops_pgp__list_0__map_fp=DC6910268E657FF70BA7EC289974494E76938DDC
sops_unencrypted_suffix=_unencrypted
sops_version=3.10.2

View File

@@ -1,224 +0,0 @@
services:
notesnook-db:
image: mongo:8.2.3
hostname: notesnookdb
user: mongodb:mongodb
volumes:
- dbdata:/data/db
- dbdata:/data/configdb
networks:
- notesnook
command: --replSet rs0 --bind_ip_all
healthcheck:
test: echo 'db.runCommand("ping").ok' | mongosh mongodb://localhost:27017 --quiet
interval: 40s
timeout: 30s
retries: 3
start_period: 60s
notesnook-s3:
image: minio/minio:RELEASE.2024-07-29T22-14-52Z
# ports:
# - 9000:9000
networks:
- notesnook
- proxy
volumes:
- s3data:/data/s3
environment:
MINIO_BROWSER: "on"
env_file: .env
command: server /data/s3 --console-address :9090
healthcheck:
test: timeout 5s bash -c ':> /dev/tcp/127.0.0.1/9000' || exit 1
interval: 40s
timeout: 30s
retries: 3
start_period: 60s
labels:
- "traefik.enable=true"
- "traefik.http.routers.notesnook-s3.rule=Host(`notesnook.vhaudiquet.fr`) && PathPrefix(`/s3`)"
- "traefik.http.routers.notesnook-s3.middlewares=notesnook-s3"
- "traefik.http.middlewares.notesnook-s3.stripprefix.prefixes=/s3"
- "traefik.docker.network=proxy"
- "traefik.http.routers.notesnook-s3.entrypoints=http"
identity-server:
image: streetwriters/identity:v1.0-beta.5
ports:
- 8264
networks:
- notesnook
- proxy
env_file: .env
depends_on:
- notesnook-db
healthcheck:
test: wget --tries=1 -nv -q http://localhost:8264/health -O- || exit 1
interval: 40s
timeout: 30s
retries: 3
start_period: 60s
environment:
NOTESNOOK_SERVER_PORT: 5264
NOTESNOOK_SERVER_HOST: notesnook-server
IDENTITY_SERVER_PORT: 8264
IDENTITY_SERVER_HOST: identity-server
SSE_SERVER_PORT: 7264
SSE_SERVER_HOST: sse-server
SELF_HOSTED: 1
IDENTITY_SERVER_URL: https://notesnook.vhaudiquet.fr/identity
NOTESNOOK_APP_HOST: https://app.notesnook.com
MONGODB_CONNECTION_STRING: mongodb://notesnookdb:27017/identity?replSet=rs0
MONGODB_DATABASE_NAME: identity
labels:
- "traefik.enable=true"
- "traefik.http.routers.identity-server.rule=Host(`notesnook.vhaudiquet.fr`) && PathPrefix(`/identity`)"
- "traefik.http.routers.identity-server.middlewares=identity-server,notesnook-server-cors"
- "traefik.http.middlewares.identity-server.stripprefix.prefixes=/identity"
- "traefik.docker.network=proxy"
- "traefik.http.routers.identity-server.entrypoints=http"
- "traefik.http.services.identity-server.loadbalancer.server.port=8264"
notesnook-server:
image: streetwriters/notesnook-sync:v1.0-beta.5
ports:
- 5264
networks:
- notesnook
- proxy
env_file: .env
depends_on:
- notesnook-s3
- identity-server
healthcheck:
test: wget --tries=1 -nv -q http://localhost:5264/health -O- || exit 1
interval: 40s
timeout: 30s
retries: 3
start_period: 60s
environment:
NOTESNOOK_SERVER_PORT: 5264
NOTESNOOK_SERVER_HOST: notesnook-server
IDENTITY_SERVER_PORT: 8264
IDENTITY_SERVER_HOST: identity-server
SSE_SERVER_PORT: 7264
SSE_SERVER_HOST: sse-server
SELF_HOSTED: 1
IDENTITY_SERVER_URL: https://notesnook.vhaudiquet.fr/identity
NOTESNOOK_APP_HOST: https://app.notesnook.com
MONGODB_CONNECTION_STRING: mongodb://notesnookdb:27017/?replSet=rs0
MONGODB_DATABASE_NAME: notesnook
S3_INTERNAL_SERVICE_URL: "http://notesnook-s3:9000"
S3_INTERNAL_BUCKET_NAME: "attachments"
S3_ACCESS_KEY_ID: "${MINIO_ROOT_USER:-minioadmin}"
S3_ACCESS_KEY: "${MINIO_ROOT_PASSWORD:-minioadmin}"
S3_SERVICE_URL: "${ATTACHMENTS_SERVER_PUBLIC_URL}"
S3_REGION: "us-east-1"
S3_BUCKET_NAME: "attachments"
labels:
- "traefik.enable=true"
- "traefik.http.routers.notesnook-server.rule=Host(`notesnook.vhaudiquet.fr`)"
- "traefik.http.services.notesnook-server.loadbalancer.server.port=5264"
- "traefik.docker.network=proxy"
- "traefik.http.routers.notesnook-server.entrypoints=http"
- "traefik.http.routers.notesnook-server.middlewares=notesnook-server-cors"
- "traefik.http.middlewares.notesnook-server-cors.headers.accesscontrolalloworiginlist=*"
- "traefik.http.middlewares.notesnook-server-cors.headers.accesscontrolallowmethods=*"
- "traefik.http.middlewares.notesnook-server-cors.headers.accesscontrolallowheaders=*"
- "traefik.http.middlewares.notesnook-server-cors.headers.accesscontrolallowcredentials=true"
sse-server:
image: streetwriters/sse:v1.0-beta.5
ports:
- 7264
env_file: .env
depends_on:
- identity-server
- notesnook-server
networks:
- notesnook
- proxy
labels:
- "traefik.enable=true"
- "traefik.http.routers.sse-server.rule=Host(`notesnook.vhaudiquet.fr`) && PathPrefix(`/sse`)"
- "traefik.http.services.sse-server.loadbalancer.server.port=7264"
- "traefik.http.routers.sse-server.middlewares=sse-server,notesnook-server-cors"
- "traefik.http.middlewares.sse-server.stripprefix.prefixes=/sse"
- "traefik.docker.network=proxy"
- "traefik.http.routers.sse-server.entrypoints=http"
healthcheck:
test: wget --tries=1 -nv -q http://localhost:7264/health -O- || exit 1
interval: 40s
timeout: 30s
retries: 3
start_period: 60s
environment:
NOTESNOOK_SERVER_PORT: 5264
NOTESNOOK_SERVER_HOST: notesnook-server
IDENTITY_SERVER_PORT: 8264
IDENTITY_SERVER_HOST: identity-server
SSE_SERVER_PORT: 7264
SSE_SERVER_HOST: sse-server
SELF_HOSTED: 1
IDENTITY_SERVER_URL: https://notesnook.vhaudiquet.fr/identity
NOTESNOOK_APP_HOST: https://app.notesnook.com
monograph-server:
image: streetwriters/monograph:1.2.4
# ports:
# - 6264:3000
env_file: .env
depends_on:
- notesnook-server
networks:
- notesnook
- proxy
healthcheck:
test: wget --tries=1 -nv -q http://localhost:3000/api/health -O- || exit 1
interval: 40s
timeout: 30s
retries: 3
start_period: 60s
environment:
NOTESNOOK_SERVER_PORT: 5264
NOTESNOOK_SERVER_HOST: notesnook-server
IDENTITY_SERVER_PORT: 8264
IDENTITY_SERVER_HOST: identity-server
SSE_SERVER_PORT: 7264
SSE_SERVER_HOST: sse-server
SELF_HOSTED: 1
IDENTITY_SERVER_URL: https://notesnook.vhaudiquet.fr/identity
NOTESNOOK_APP_HOST: https://app.notesnook.com
API_HOST: http://notesnook-server:5264
MONOGRAPH_PUBLIC_URL: https://notesnook.vhaudiquet.fr/monograph
PUBLIC_URL: https://notesnook.vhaudiquet.fr/monograph
labels:
- "traefik.enable=true"
- "traefik.http.routers.monograph-server.rule=Host(`notesnook.vhaudiquet.fr`) && PathPrefix(`/monograph`)"
- "traefik.http.routers.monograph-server.middlewares=monograph-server,notesnook-server-cors"
- "traefik.http.middlewares.monograph-server.stripprefix.prefixes=/monograph"
- "traefik.docker.network=proxy"
- "traefik.http.routers.monograph-server.entrypoints=http"
- "traefik.http.services.monograph-server.loadbalancer.server.port=3000"
networks:
notesnook:
proxy:
name: proxy
external: true
volumes:
dbdata:
driver: local
driver_opts:
type: 'none'
o: 'bind'
device: '/app/notesnook/dbdata/_data'
s3data:
driver: local
driver_opts:
type: 'none'
o: 'bind'
device: '/app/notesnook/s3data/_data'

View File

@@ -0,0 +1,13 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: notesnook
resources:
- namespace.yaml
- repository.yaml
- release.yaml
secretGenerator:
- name: notesnook-values
files:
- values.yaml=values.yaml
configurations:
- kustomizeconfig.yaml

View File

@@ -0,0 +1,6 @@
nameReference:
- kind: Secret
version: v1
fieldSpecs:
- path: spec/valuesFrom/name
kind: HelmRelease

View File

@@ -0,0 +1,4 @@
apiVersion: v1
kind: Namespace
metadata:
name: notesnook

View File

@@ -0,0 +1,19 @@
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: notesnook
namespace: notesnook
spec:
interval: 1m
chart:
spec:
sourceRef:
kind: HelmRepository
name: notesnook
namespace: notesnook
chart: notesnook
version: '1.0.5'
interval: 1m
valuesFrom:
- kind: Secret
name: notesnook-values

View File

@@ -0,0 +1,8 @@
apiVersion: source.toolkit.fluxcd.io/v1
kind: HelmRepository
metadata:
name: notesnook
namespace: notesnook
spec:
interval: 1m
url: https://gitlab.ibaraki.app/api/v4/projects/130/packages/helm/stable

View File

@@ -0,0 +1,65 @@
instance:
name: vhaudiquet-notesnook
api:
secret: ENC[AES256_GCM,data:C3mpoEG6y6IShpX1+o9eNn8NACaKy8s1xw5tY1/ncBzqaKrK3YiE7K0rl4d6Bq6q,iv:rGWxSmV98ef8Qx1jkVbQEKPkFmGEaCOXXFFZ4I1US7s=,tag:VBDOhPRTRRhFu5cU024Sqg==,type:str]
knownProxies: 10.0.0.0/8
disableSignups: true
publicUrls:
app: https://app.notesnook.com
auth: https://auth-nook.vhaudiquet.fr
monograph: https://n.vhaudiquet.fr
attachments: http://localhost:9000
smtp:
username: ENC[AES256_GCM,data:C4dTnVaJCwxqTdevLJ+a9eJOWPk=,iv:9iHoQzZjHjmOuaoOWdedPHuv06MqtXZXJhWGiTdzhwE=,tag:xDL+WInm/Ms/LuZi53JuHA==,type:str]
password: ENC[AES256_GCM,data:tIkKqwVBy94oqFJH0V8=,iv:cOKiwDhngz6mnZlD+XSfWFg1KZa+UCkhXKBgjK7IdnE=,tag:91d/aUlfeHbJqtRWPmTskQ==,type:str]
host: mail.vhaudiquet.fr
port: 465
ingress:
enabled: true
hosts:
identity:
- host: auth-nook.vhaudiquet.fr
paths:
- path: /
pathType: ImplementationSpecific
notesnook:
- host: nook.vhaudiquet.fr
paths:
- path: /
pathType: ImplementationSpecific
sse:
- host: sse-nook.vhaudiquet.fr
paths:
- path: /
pathType: ImplementationSpecific
monograph:
- host: n.vhaudiquet.fr
paths:
- path: /
pathType: ImplementationSpecific
sops:
lastmodified: "2025-12-26T18:18:01Z"
mac: ENC[AES256_GCM,data:Xy9P+Ifuz18apN7GoYdehc2bzTjUKMJAT7f8HZNTnvV/wkZEt4EUGJL2WGex12nYQyj6Ut+I9pwFwwX5m0oLO82s1zS2DK3BiaxFa6LFJ2VDUthKt8h9ZTNeT+2P5S5cOvEMvS6tljX8y8/HCUwVMCXGMNCIl8RtWo1Q9CgLjrw=,iv:6MdJwJh3xVrXX6sKCQMAEIpdOD8E0V6+305xcaQnnMI=,tag:5JE9M09u6ukPoQBzT9g0sA==,type:str]
pgp:
- created_at: "2025-12-26T18:18:01Z"
enc: |-
-----BEGIN PGP MESSAGE-----
hQIMA7uy4qQr71wiAQ/+KZ6WDFaDTZVt6n+pu1hwxhNC9ShCSSLkiHlZjtX9DW8O
eizwH6GAG8LQeKYr61aXXVwxsqDdM9gx/i0ynDO4fflqEQniEjlFzBeVhsqOf3CX
rL5WImv0LSe9KjFNAZvfBhtUVENfN/Tu6RGagNb98ChOoH10MvmrzQ5t754AKPVM
hB2f5kmOn0evFQQftYyXkQqzLvhlqdGGfBnCutXDoLz67RQwB37npzXx/c+GtlOX
Msmp4wiYqlX9v97vjLHUX/ZeBtzm38DzUw+OTcnDPbsdZpeUMqYnpkIl8GIgSd2D
2jZUJU4wYyOCYCnfw0+zXu3O5/1bzZ9fdc5FH6A+OlJUFbMLPXx7n9uhVOztxQ1g
5ajZKkszSWk58IvaTueDL2QjxhJLop1y4JITgzOhiSPserXrizGn765bVEAtY8kR
zgULAG5f41zeoJzzdMyuCFUlIJec4DFigbe7fRul4sJEjeeHtDdyINWuUXCnS4ZX
e8/ZZ0+z98IMm7Lstb75rUezTUdlIxfJ+EtAX3L1Bdb4yJZ3i3E1VTQKWxaZWrcc
zF5nOIZsHgD22Um8fA4mDlhX5/ygiKMHxZe2pdwps4F7H0rRzVLlM5n4g+71WeMe
0eT4atgKPICzMNkyRJ/KWrtk4c6Kq7sSqpQKlcFsRLMga1ZBt0LQwFW+G7PU30vS
XAFljxtoFrbdc8Yl37cQh9XCBqXMqUXSNd9t1hsgv+Vsrmv6ntPVStep8Fod/n16
nCACAKTOe//z0OmwUXxdUCIqT/N+XEA8tOrHS+HsbB5MCfnexLDul/yUfviZ
=yK0X
-----END PGP MESSAGE-----
fp: DC6910268E657FF70BA7EC289974494E76938DDC
encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
version: 3.10.2