mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-10-19 21:10:35 +00:00
49 lines
2.7 KiB
YAML
49 lines
2.7 KiB
YAML
# get.rhema.rs, the rhema distribution (chart rhema-dist, repo
|
|
# vhaudiquet/rhema.rs). One single-node Garage, one bucket, the
|
|
# saggar-dist shape: the S3 API stays cluster-internal (chart default,
|
|
# s3.ingress.enabled=false — release uploads come from the in-cluster
|
|
# runners) and the bucket serves as a public read-only website.
|
|
# The host MUST be <bucket>.<root domain> — Garage resolves the bucket
|
|
# from the Host's first label — so bucket `get` on get.rhema.rs.
|
|
bucket: get
|
|
garage:
|
|
# Single-node store: skip the hourly self-sync cycles — while a
|
|
# full sync runs, S3 auth lookups transiently answer
|
|
# InvalidAccessKeyId (see get-saggar). Weekly.
|
|
fullSyncInterval: 604800
|
|
web:
|
|
ingress:
|
|
className: traefik
|
|
host: get.rhema.rs
|
|
# TLS terminates at Caddy with the cert-manager get.rhema.rs
|
|
# cert; Caddy proxies to Traefik by host, so no tls block here.
|
|
tls:
|
|
enabled: false
|
|
sops:
|
|
lastmodified: "2026-10-15T20:28:51Z"
|
|
mac: ENC[AES256_GCM,data:+lYkUZ+5erultYuI0ejlAUiVnPhwZ7wwlB3IqDP2M5YAXln7kqu7xMptvrgWGEHPavdmZwBvbBLf3FC1i1Zkio04iFpZ/zLTb/msomSjf7e2lQhk5VLHgqzS/Cd/ZvEvlXfuVPTKrWDdlKKdozY+Ge+WspGSL26Hf7/9rMqKvpM=,iv:6Rh6Ues/OHxDkgOkGIylz490m3kNX1TGQP5bH/UFjRg=,tag:w2oXRK2twjXN3IhnKf0uow==,type:str]
|
|
pgp:
|
|
- created_at: "2026-10-15T20:28:50Z"
|
|
enc: |-
|
|
-----BEGIN PGP MESSAGE-----
|
|
|
|
hQIMA7uy4qQr71wiARAAgirAbNH6NDN+dAcsGAR48/S2Vt3gLLjsL/pHSC0hb7S4
|
|
oDF/FMLTyUQMG+KTZBEas3KhO/Y1weay9wQEx1M4Jk809fbARjXl2gJFcdtlO28f
|
|
MVh9kBq5xY4YtFlRm1bKffTNaxFwNh0Exjl6yAKrUsPwH9eFEBlehK/prDXjmyAv
|
|
tHwW4GuPRBFMlZAtxvkTNZfnBKfimIirjDHurgHxmaNmH7B+UKGIb3NHI2f5QQug
|
|
VtDZoEuGovGcegIQfWorq1pzSX0PF2pOn+bgn/DZ7BWbeLRArD6prnlzbrAL3NeL
|
|
V+fofYig1SNCuqBKxzfsPYnhLe7Ylg3oYzGqn7N6G9ub0xF3FVpRksoluHtMTECf
|
|
2Oiab48jHrQCHA0+Br6OxO8TQK3sWHGQuUhBbE7tugeGg+v8lfyHPghmNrPBFL2n
|
|
fpOnLCid+FZII7d4LFVQr3kE/+DMGVzGYBIPgBlPovTME6MJeox2Tq3+qh2QUCzF
|
|
Chue14+oHuzw2lnqltG62t52LRLKrNlI/1+D0mWz4VWU4O/3wiJwUYxA9dVni05J
|
|
d8DW6Q8600cJLRtvVvh+r+7DmVPeg8h/yBfsSbtiPPLpTkL93JNhHfx7pD1++e7x
|
|
oagv9f2DQ0Vc6EGhnk96T6bvPQqgeZJMJtdDl4/nyxA9Y4DpBFzue+qzZxkgldnS
|
|
XgF3M4q96nyp5d9JwcYvUlF9XWxSCyc3IMRDV3QQo7BJKH/EBXiMSFg23LBBbdRH
|
|
Rwtt2sPE1u0d2wRZEIS5YU6dmQ55lhK0NBLyTVqm0IACQS67GeQrPpAvD1QOjng=
|
|
=zBGK
|
|
-----END PGP MESSAGE-----
|
|
fp: DC6910268E657FF70BA7EC289974494E76938DDC
|
|
encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml|token)$
|
|
mac_only_encrypted: true
|
|
version: 3.10.2
|