From 6ff2afbc855e83af82321a01d6043a45b5569362 Mon Sep 17 00:00:00 2001
From: auricom <github@xpander.eml.cc>
Date: Wed, 13 Jan 2021 09:20:27 +0100
Subject: [PATCH] add wg-access-server

---
 .../wg-access-server.yaml                     | 10 ++++
 cluster/data/wg-access-server.yaml            | 49 +++++++++++++++++++
 .../helmrelease-data-wg-access-server.yaml    | 36 ++++++++++++++
 3 files changed, 95 insertions(+)
 create mode 100644 cluster/_helm-chart-repositories/wg-access-server.yaml
 create mode 100644 cluster/data/wg-access-server.yaml
 create mode 100644 secrets/helmrelease-data-wg-access-server.yaml

diff --git a/cluster/_helm-chart-repositories/wg-access-server.yaml b/cluster/_helm-chart-repositories/wg-access-server.yaml
new file mode 100644
index 000000000..a2df51b48
--- /dev/null
+++ b/cluster/_helm-chart-repositories/wg-access-server.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: wg-access-server
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://place1.github.io/wg-access-server
+  timeout: 3m
diff --git a/cluster/data/wg-access-server.yaml b/cluster/data/wg-access-server.yaml
new file mode 100644
index 000000000..add94a37f
--- /dev/null
+++ b/cluster/data/wg-access-server.yaml
@@ -0,0 +1,49 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: wg-access-server
+  namespace: data
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://place1.github.io/wg-access-server
+      chart: wg-access-server
+      version: v0.4.6
+      sourceRef:
+        kind: HelmRepository
+        name: wg-access-server
+        namespace: flux-system
+      interval: 5m
+  values:
+    image:
+      repository: place1/wg-access-server
+      pullPolicy: IfNotPresent
+    web:
+      service:
+        annotations:
+          prometheus.io/probe: "true"
+          prometheus.io/protocol: http
+
+    wireguard:
+      service:
+        annotations:
+          prometheus.io/probe: "true"
+          prometheus.io/protocol: tcp
+        type: LoadBalancer
+        loadBalancerIP: 192.168.9.210
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+    persistence:
+      config:
+        enabled: false
+    resources:
+      requests:
+        cpu: 50m
+        memory: 256Mi
+  valuesFrom:
+  - kind: ConfigMap
+    name: helmrelease-data-wg-access-server
diff --git a/secrets/helmrelease-data-wg-access-server.yaml b/secrets/helmrelease-data-wg-access-server.yaml
new file mode 100644
index 000000000..589cad437
--- /dev/null
+++ b/secrets/helmrelease-data-wg-access-server.yaml
@@ -0,0 +1,36 @@
+apiVersion: v1
+data:
+    values.yaml: ENC[AES256_GCM,data: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,iv:hI/iLQCQEH8gQ13syjH1EsRhQenokaic/uMvG5OBSQ0=,tag:/e/iDLUr0xKmW8jHDj5dAg==,type:str]
+kind: ConfigMap
+metadata:
+    creationTimestamp: null
+    name: helmrelease-data-wg-access-server
+    namespace: data
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    lastmodified: '2021-01-13T12:26:33Z'
+    mac: ENC[AES256_GCM,data:yek2ML5aj9138Zjf0pO8B5smcO6HFz8Jq14kqHW+OQnxh4Ej+Z84o4YH/VrYCTumDm72eeXjnRyf9c4pVXFE8Qj81fH5/5voaZGJ+OvVrMs5ng0IOorXcw3fd/GBTCuvT6D+fHQaxLpR5O+nBO4odA2bfiO22cmiL2PI9uLbwtA=,iv:lc7Jh1hA5o2lQ3bbz9XAftTH5JxXxzgdKpPmtx4rgsA=,tag:9HiVs/SM+UgQRLrM4gHAfg==,type:str]
+    pgp:
+    -   created_at: '2021-01-13T12:26:33Z'
+        enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQGMA/JorPHm1g9XAQv+LBX5hg0YeQOfHT42qLVyyO5Jhlq+WoRZaRhumm8fi/xg
+            Cj0P7ynQmFlIjCXOLoN3m8Oz5WjEn2O7J0HQToZWjZqiLlBxeq6VLdDllf85crIL
+            u9evyT/p6D17u0qie95KtZ2YpulevVWLQiPhKwCdnnT9uQCgaz3YZEW+uGc73mel
+            ChICQ8dcIV5vzrPDjW+PclqdVcbj2tluPZNoQnB3hRRh8pI/4CTLcMCcLHSUeopB
+            7mXq+FaR86rWZfceDsZjpmWKpR5x7+nUJpywukUffCLLVHQFnUSgLuxk5AcUKqE/
+            Kwm/MLEHDD5VUv22NvshP/mDNU7qZ5kgRly+Fnqbes8slIomdscNr1L64t9jmrxd
+            noRihF4w6QHfK+nMpNFX0U7m1yMtGJAfLfmgZyA/auF0priq0FBSfrW2lYb67Nuv
+            vXTWphgc4Db2+A55ubvE0x76xKke8XE0BZJjP5qkOaqQCr39JuVB6Hc6x03szgnN
+            lnCUlN0DnvY7MFfFUdpt0l4BBsPspJZBWJP2G4+0srI/zI7ghC97bcHMDMSRROqT
+            gAGP6gBp9D7+WpG0Q+poWHYJPJkOBDKPx1MuI8irFqk0iOkSDYixyihtElPuBYoW
+            Te6AXhsKqin+A1g97slr
+            =f76W
+            -----END PGP MESSAGE-----
+        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+    encrypted_regex: ^(data|stringData)$
+    version: 3.6.1