feat: overhaul

kubernetes/apps/default/ghostfolio/app/externalsecret.yaml

@@ -4,7 +4,6 @@ apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
   name: ghostfolio
-  namespace: default
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -14,18 +13,26 @@ spec:
     template:
       engineVersion: v2
       data:
-        # App
         ACCESS_TOKEN_SALT: "{{ .GHOSTFOLIO_ACCESS_TOKEN_SALT }}"
-        DATABASE_URL: postgresql://{{ .POSTGRES_USERNAME }}:{{ .POSTGRES_PASSWORD }}@postgres16-rw.database.svc.cluster.local:5432/ghostfolio
         JWT_SECRET_KEY: "{{ .GHOSTFOLIO_JWT_SECRET_KEY }}"
-        # Postgres Init
-        INIT_POSTGRES_DBNAME: ghostfolio
-        INIT_POSTGRES_HOST: postgres16-rw.database.svc.cluster.local
-        INIT_POSTGRES_USER: "{{ .POSTGRES_USERNAME }}"
-        INIT_POSTGRES_PASS: "{{ .POSTGRES_PASSWORD }}"
-        INIT_POSTGRES_SUPER_PASS: "{{ .POSTGRES_SUPER_PASS }}"
   dataFrom:
-    - extract:
-        key: cloudnative-pg
     - extract:
         key: ghostfolio
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: ghostfolio-db
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: crunchy-pgo-secrets
+  target:
+    name: ghostfolio-db-secret
+    template:
+      engineVersion: v2
+      data:
+        DATABASE_URL: postgresql://{{ index . "user" }}:{{ index . "password" }}@{{ index . "host" }}:{{ index . "port" }}/{{ index . "dbname" }}
+  dataFrom:
+    - extract:
+        key: postgres-pguser-ghostfolio

kubernetes/apps/default/ghostfolio/app/helmrelease.yaml

@@ -4,7 +4,6 @@ apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: &app ghostfolio
-  namespace: default
 spec:
   interval: 30m
   chart:
@@ -33,14 +32,7 @@ spec:
         strategy: RollingUpdate
         annotations:
           reloader.stakater.com/auto: "true"
-        initContainers:
-          init-db:
-            image:
-              repository: ghcr.io/onedr0p/postgres-init
-              tag: 16
-            envFrom: &envFrom
-              - secretRef:
-                  name: ghostfolio-secret
+          secret.reloader.stakater.com/reload: ghostfolio-db-secret
         containers:
           app:
             image:
@@ -50,7 +42,11 @@ spec:
               NODE_ENV: production
               REDIS_HOST: dragonfly.database.svc.cluster.local.
               REDIS_PORT: 6379
-            envFrom: *envFrom
+            envFrom:
+              - secretRef:
+                  name: ghostfolio-secret
+              - secretRef:
+                  name: ghostfolio-db-secret
             probes:
               liveness: &probes
                 enabled: true
@@ -79,12 +75,12 @@ spec:
     ingress:
       app:
         enabled: true
-        className: nginx
+        className: internal
         annotations:
           hajimari.io/icon: mdi:cash-multiple
           gethomepage.dev/enabled: "true"
           gethomepage.dev/name: Ghostfolio
-          gethomepage.dev/description: NVR with realtime local object detection for IP cameras
+          gethomepage.dev/description: Open Source Wealth Management Software
           gethomepage.dev/group: Applications
           gethomepage.dev/icon: ghostfolio.png
           gethomepage.dev/pod-selector: >-

kubernetes/apps/default/ghostfolio/app/kustomization.yaml

@@ -2,7 +2,6 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: default
 resources:
   - ./externalsecret.yaml
   - ./helmrelease.yaml