homeprod/kubernetes/personal/notes/notesnook/values.yaml

instance:
    name: vhaudiquet-notesnook
api:
    secret: ENC[AES256_GCM,data:dnQM9XEnpWzZlvMxgB2dSvGclfKuZEe3HskH3PbczTOfNJ7GNF4dwg+mKPmpyqHl,iv:ytJPlLR1rsOf25JxKqo8jqnAlsZg7YwYv9JaAEmbh1M=,tag:botHVzQE3XhXbJxHH/FWfg==,type:str]
    disableSignups: true
publicUrls:
    app: https://app.notesnook.com
    auth: https://auth-nook.vhaudiquet.fr
    monograph: https://n.vhaudiquet.fr
    attachments: http://localhost:9000
smtp:
    username: ENC[AES256_GCM,data:i8M3noHu0CJ08RwypBn9h5liAkQ=,iv:znRqbQojmQyoDbyisv9axjjBj4V81Kp57/XovvmRaCc=,tag:iS91+lTTuZ70VXLO6XTEqw==,type:str]
    password: ENC[AES256_GCM,data:NQ6r2DqoHw5B8523HYw=,iv:cYzXDQExlRtExl1z8wpdJ+i9CDdhceBIOgzu1Ak+flk=,tag:0/2wjdMDlWx8X0kr7TM++w==,type:str]
    host: mail.vhaudiquet.fr
    port: 465
ingress:
    enabled: true
    hosts:
        identity:
            - host: auth-nook.vhaudiquet.fr
              paths:
                - path: /
                  pathType: ImplementationSpecific
        notesnook:
            - host: nook.vhaudiquet.fr
              paths:
                - path: /
                  pathType: ImplementationSpecific
        sse:
            - host: sse-nook.vhaudiquet.fr
              paths:
                - path: /
                  pathType: ImplementationSpecific
        monograph:
            - host: n.vhaudiquet.fr
              paths:
                - path: /
                  pathType: ImplementationSpecific
        inboxApi:
            - host: inbox-nook.vhaudiquet.fr
              paths:
                - path: /
                  pathType: ImplementationSpecific
        minio:
            - host: minio-nook.vhaudiquet.fr
              paths:
                - path: /
                  pathType: ImplementationSpecific
inboxApi:
    enabled: true
# Failover tolerations + affinity — allow scheduling on p330 during r740 outage
# Applied to all notesnook components (identity, notesnook, sse, monograph, minio)
tolerations:
    - key: ENC[AES256_GCM,data:wldwW6mx5HbX,iv:9udc0ZhxCNppTSvzubYTA+Z09lClmeY6OcK6wQ07TeU=,tag:EWTcPAzDXH4DsO8WgQhIzg==,type:str]
      operator: Equal
      value: ENC[AES256_GCM,data:Neyp+5Xww/A=,iv:w4jRsuTb1Nw7BqOTuVL+ZbLw8oGSS1l6C6VEmL68PXQ=,tag:Xb7cX15t7sUXUwdIPesR2Q==,type:str]
      effect: NoSchedule
    - key: ENC[AES256_GCM,data:ZX5pg78QqhoRaOv7Q0chYdKVRyGFXjDmdfwvbVpbjZn/a90R8w==,iv:1AzH/Ho0cVorHlV9Qmj5W/r5H9fuW1HtcosjBJDyIxo=,tag:qU4dQtewVr1QuKPMpEe7cg==,type:str]
      operator: Exists
      effect: NoSchedule
affinity:
    nodeAffinity:
        preferredDuringSchedulingIgnoredDuringExecution:
            - weight: 100
              preference:
                matchExpressions:
                    - key: ENC[AES256_GCM,data:GTjhxF6YvV/x5Lw1OM3TwvpBrm4=,iv:whhLf3Kpa3GbQNfjjW6LCO4cShQZVFJ/FRNRI56hZ+s=,tag:K2I9HPSBUfHFxGOU6UhhNQ==,type:str]
                      operator: NotIn
                      values:
                        - "true"
# Subchart tolerations — mongodb must also tolerate p330
mongodb:
    tolerations:
        - key: ENC[AES256_GCM,data:mzVAVxpHcnq6,iv:81VOdlIyQIdVB8uNuV1JsQKC2tpTlFVPhLFoFqwJ05s=,tag:bh56/58UQMWwOTGIqin/IQ==,type:str]
          operator: Equal
          value: ENC[AES256_GCM,data:AU51GRhOXqQ=,iv:XlZrHPkzrn8q+S86VpDggrZITIDWOnX+0pOlgmCH8fE=,tag:eyacewWQOevfU+8bNDQtLA==,type:str]
          effect: NoSchedule
        - key: ENC[AES256_GCM,data:jpfWPim/wZarapIpwmhrgVQVKlJjKL4bRHYAKNiv56OGr/szTQ==,iv:h5ddBHAkERT/qRtNEk05lVk4+25c0cg82DHnFTKqA0Q=,tag:XTcbIcdL0koJ7TtQ1lq7TQ==,type:str]
          operator: Exists
          effect: NoSchedule
    affinity:
        nodeAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
                - weight: 100
                  preference:
                    matchExpressions:
                        - key: ENC[AES256_GCM,data:N6BxudigJCJ4sbwAl1UU4AfqHi0=,iv:cSSRzSvKFg92PfxIHn2KfcJ65r6isXrB1MW00JVaGBI=,tag:rGWzaXJAjhOXHYscAkptYg==,type:str]
                          operator: NotIn
                          values:
                            - "true"
sops:
    lastmodified: "2026-08-26T19:28:04Z"
    mac: ENC[AES256_GCM,data:E+JIPaHx+C0aJhvnuc/LwzEH84GfQVgaSHSM4GQw4h9tnPRsD4Zlmi8R5UBr9BOqw0PhigI+imVRSWSN9rLhzXtM60GLprCa5TwM9ufaAsX8Ti0u/HBpmKWNZWAVhQwbhn2VhYsz8BStszzxDWOAiY+ogZCy7wWU+lohyk0Myx8=,iv:tQhQn1Gh9icwIfdIgWu6bmrPaVtRcpSKrEL0LHGpbq8=,tag:bZBrS2SqrZtZejWmt2/obg==,type:str]
    pgp:
        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiARAAqx7RtTLhCdR3P3xNH3/BVBD/i09b8jBNkznlBe31tUjZ
            Re9sPCD3bkiryTUPgMIMOVBRyDpSEa3TuAk5T5/O8zrhR2bqxk7Nqp8ZI4c2kRdT
            TxELspBzK7gcYZURarJ94f8YhMX8XXPYu6yA36velm7kVO7tc+GWUPbSgNzDc8eN
            vOzGqQhn4ZZJ773fsjqzTp8aYmC6YKXboNjmEw6GYPlhD8OwO45/zNG2Yj9BOsaK
            r9L87gm3ZSYw5C/U58eaknpgLSl4ZAITIgt7cbUaJrv5XsSJk4ogeJknRbB3sZSl
            L87X2XC9iAhZYpm7Pe9IKPfEjb8oculFIXqoF6eo++0QMahALKT49aNTnWlWO4OZ
            hGUYqM8qzKNv+20XEo+82YENvNuTBpMXjgTpd8BZOCjyvYdkI8+5kfhaQP9O/kYJ
            L15nyG2/HZaJ1Hv9myFNqkyAi2fTndCBT58Dk3UqWveM0QAtOgFeRDnELNP/Y7WT
            FwolNY6YkbZZpxUfMlxpU1HqH2jjHD7Ashr1o+sM1GFiCsF1/FSKd6tgEsC2RZ0w
            5PCaFygvus1MHMX1g8h298SHgLNGfy+0lMLIuZuvEfbySfvg6JZPKQdp7jo1T79V
            sj92v24FpGUGgHghXXk0ZzLeoMBS0pqlscdPftzwV3WgybMKkZiTfBfaQ0m7utjS
            XgHCvGBVOfF8rfYZT2lD8ws6dd8hsDz2hZScO5wFPNfC6NNhTu9MgKkp7CvyXw01
            pY04UDXm4b86giw4DOiL4fi1aFEaV/cjq+zF7Z+z+otaYV4yO96lsZmrtQzFYfo=
            =E/8A
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
    mac_only_encrypted: true
    version: 3.10.2