new gitops template

cluster/apps/data/bitwardenrs/helm-release.yaml

@@ -0,0 +1,58 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: bitwardenrs
+  namespace: data
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://k8s-at-home.com/charts/
+      chart: bitwardenrs
+      version: 2.1.5
+      sourceRef:
+        kind: HelmRepository
+        name: k8s-at-home-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    image:
+      repository: bitwardenrs/server
+      tag: 1.20.0
+      pullPolicy: IfNotPresent
+    env:
+      SIGNUPS_ALLOWED: "false"
+      DOMAIN: "https://bitwarden.${SECRET_CLUSTER_DOMAIN}/"
+      DATABASE_URL: ${SECRET_BITWARDENRS_DB_URL}
+    bitwardenrs:
+      domain: ""
+      signupsAllowed: false
+      websockets:
+        enabled: false
+      admin:
+        enabled: true
+        disableAdminToken: false
+        existingSecret:
+          enabled: false
+          name: ""
+          tokenKey: ""
+    service:
+      port: 80
+      annotations:
+        prometheus.io/probe: "true"
+        prometheus.io/protocol: http
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: bitwarden.${SECRET_CLUSTER_DOMAIN}
+          paths:
+            - /
+      tls:
+        - hosts:
+            - "bitwarden.${SECRET_CLUSTER_DOMAIN}"
+    persistence:
+      enabled: true
+      existingClaim: bitwardenrs-config

cluster/apps/data/bitwardenrs/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
+  - volume.yaml

cluster/apps/data/bitwardenrs/volume.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bitwardenrs-config
+  namespace: data
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 1Gi