♻️ apply kube templates

kubernetes/apps/default/vikunja/app/externalsecret.yaml

@@ -19,6 +19,7 @@ spec:
         VIKUNJA_DATABASE_DATABASE: &dbName vikunja
         VIKUNJA_DATABASE_USER: &dbUser "{{ .VIKUNJA_POSTGRES_USER }}"
         VIKUNJA_DATABASE_PASSWORD: &dbPass "{{ .VIKUNJA_POSTGRES_PASS }}"
+        VIKUNJA_DATABASE_SSLMODE: require
         VIKUNJA_DATABASE_TYPE: postgres
         VIKUNJA_SERVICE_JWTSECRET: "{{ .VIKUNJA_SERVICE_JWTSECRET }}"
         # Postgres Init

kubernetes/apps/default/vikunja/app/gatus.yaml

@@ -1,22 +0,0 @@
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: vikunja-gatus-ep
-  namespace: default
-  labels:
-    gatus.io/enabled: "true"
-data:
-  config.yaml: |
-    endpoints:
-      - name: vikunja
-        group: external
-        url: https://vikunja.${SECRET_CLUSTER_DOMAIN}
-        interval: 1m
-        client:
-          dns-resolver: tcp://1.1.1.1:53
-          insecure: true
-        conditions:
-          - "[STATUS] == 200"
-        alerts:
-          - type: pushover

kubernetes/apps/default/vikunja/app/helmrelease.yaml

@@ -29,7 +29,6 @@ spec:
   values:
     controllers:
       main:
-        type: statefulset
         annotations:
           reloader.stakater.com/auto: "true"
           configmap.reloader.stakater.com/reload: "lidarr-pushover"
@@ -65,14 +64,6 @@ spec:
             image:
               repository: caddy
               tag: 2.7.6-alpine
-        statefulset:
-          volumeClaimTemplates:
-            - name: config
-              accessMode: ReadWriteOnce
-              size: 1Gi
-              storageClass: rook-ceph-block
-              globalMounts:
-                - path: /app/vikunja/files
     service:
       main:
         ports:
@@ -97,6 +88,11 @@ spec:
           - hosts:
               - *host
     persistence:
+      config:
+        enabled: true
+        existingClaim: *app
+        globalMounts:
+          - path: /app/vikunja/files
       caddy-config:
         type: configMap
         name: vikunja-configmap

kubernetes/apps/default/vikunja/app/kustomization.yaml

@@ -5,9 +5,9 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
-  - ./gatus.yaml
   - ./helmrelease.yaml
-  - ./volsync.yaml
+  - ../../../../templates/gatus/external
+  - ../../../../templates/volsync
 configMapGenerator:
   - name: vikunja-configmap
     files:

kubernetes/apps/default/vikunja/app/volsync.yaml

@@ -1,48 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: vikunja-restic
-  namespace: default
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: vikunja-restic-secret
-    template:
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/vikunja'
-        RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
-        AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
-        AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
-  dataFrom:
-    - extract:
-        key: volsync-restic-template
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: vikunja
-  namespace: default
-spec:
-  sourcePVC: vikunja-files
-  trigger:
-    schedule: "0 7 * * *"
-  restic:
-    copyMethod: Snapshot
-    pruneIntervalDays: 7
-    repository: vikunja-restic-secret
-    cacheCapacity: 20Gi
-    volumeSnapshotClassName: csi-ceph-blockpool
-    storageClassName: rook-ceph-block
-    moverSecurityContext:
-      runAsUser: 1000
-      runAsGroup: 1000
-      fsGroup: 1000
-    retain:
-      daily: 7
-      within: 3d