new cluster

README.md

@@ -1,6 +1,7 @@
 <img src="https://camo.githubusercontent.com/5b298bf6b0596795602bd771c5bddbb963e83e0f/68747470733a2f2f692e696d6775722e636f6d2f7031527a586a512e706e67" align="left" width="144px" height="144px"/>
 
 ### My home Kubernetes cluster :sailboat:
+
 _... managed by Flux and serviced with RenovateBot_ :robot:
 
 <br/>
@@ -8,11 +9,10 @@ _... managed by Flux and serviced with RenovateBot_ :robot:
 <br/>
 
 [![Discord](https://img.shields.io/badge/discord-chat-7289DA.svg?maxAge=60&style=for-the-badge)](https://discord.gg/AvJxRMRf6H)
-[![k3s](https://img.shields.io/badge/k3s-v1.19.2-orange?style=for-the-badge)](https://k3s.io/)
+[![k3s](https://img.shields.io/badge/k3s-v1.20.4-orange?style=for-the-badge)](https://k3s.io/)
 [![pre-commit](https://img.shields.io/badge/pre--commit-enabled-brightgreen?logo=pre-commit&logoColor=white&style=for-the-badge)](https://github.com/pre-commit/pre-commit)
 [![renovate](https://img.shields.io/badge/renovate-enabled-success?style=for-the-badge&logo=data:image/svg+xml;base64,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)](https://github.com/renovatebot/renovate)
 
-
 ### Bootstrap Flux
 
 ```bash
@@ -24,6 +24,7 @@ flux bootstrap github \
   --personal \
   --network-policy=false
 ```
+
 ### SOPS secret from GPG key
 
 ```bash
@@ -40,28 +41,23 @@ sops --encrypt --pgp=<GPG_KEY_ID> --encrypted-regex '^(data|stringData)$' --in-p
 
 ```bash
 
-kubectl taint node k3os-server k3s-controlplane=true:NoSchedule
+kubectl taint node k3s-server k3s-controlplane=true:NoSchedule
 
-kubectl label node k3os-worker1 node-role.kubernetes.io/worker=true
+kubectl label node k3s-worker1 node-role.kubernetes.io/worker=true
-kubectl label node k3os-worker2 node-role.kubernetes.io/worker=true
+kubectl label node k3s-worker2 node-role.kubernetes.io/worker=true
-kubectl label node k3os-worker3 node-role.kubernetes.io/worker=true
+kubectl label node k3s-worker3 node-role.kubernetes.io/worker=true
 
-kubectl annotate node k3os-worker1 node.longhorn.io/default-node-tags='["storage","fast"]'
+kubectl annotate node k3s-worker1 node.longhorn.io/default-node-tags='["storage","fast"]'
-kubectl annotate node k3os-worker2 node.longhorn.io/default-node-tags='["storage","fast"]'
+kubectl annotate node k3s-worker2 node.longhorn.io/default-node-tags='["storage","fast"]'
-kubectl annotate node k3os-worker3 node.longhorn.io/default-node-tags='["storage","fast"]'
+kubectl annotate node k3s-worker3 node.longhorn.io/default-node-tags='["storage","fast"]'
 
-kubectl annotate node k3os-worker1 node.longhorn.io/create-default-disk='config'
+kubectl annotate node k3s-worker1 node.longhorn.io/create-default-disk='config'
-kubectl annotate node k3os-worker2 node.longhorn.io/create-default-disk='config'
+kubectl annotate node k3s-worker2 node.longhorn.io/create-default-disk='config'
-kubectl annotate node k3os-worker3 node.longhorn.io/create-default-disk='config'
+kubectl annotate node k3s-worker3 node.longhorn.io/create-default-disk='config'
 
-kubectl annotate node k3os-worker1 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]
+kubectl annotate node k3s-worker1 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]
-kubectl annotate node k3os-worker2 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]
+kubectl annotate node k3s-worker2 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]
-kubectl annotate node k3os-worker3 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]
+kubectl annotate node k3s-worker3 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]
-
-#kubectl label node k3os-server plan.upgrade.cattle.io/k3os-latest=true
-#kubectl label node k3os-worker1 plan.upgrade.cattle.io/k3os-latest=true
-#kubectl label node k3os-worker2 plan.upgrade.cattle.io/k3os-latest=true
-#kubectl label node k3os-worker3 plan.upgrade.cattle.io/k3os-latest=true
 ```
 
-https://github.com/rancher/k3s/issues/1401 for k3os-system deployment
+https://github.com/rancher/k3s/issues/1401 for k3s-system deployment

cluster/_helm-chart-repositories/coredns-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: coredns-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://coredns.github.io/helm
+  timeout: 3m

cluster/auth/authelia.yaml

@@ -48,25 +48,13 @@ spec:
             - name: config
               mountPath: /config
           resources:
-            limits:
-              cpu: 500m
-              memory: 2000Mi
             requests:
-              cpu: 100m
+              cpu: 500m
               memory: 1500Mi
       dnsConfig:
         options:
           - name: ndots
             value: "1"
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: node-role.kubernetes.io/worker
-                    operator: In
-                    values:
-                      - "true"
       volumes:
         - name: config
           emptyDir: {}
@@ -99,6 +87,29 @@ spec:
       protocol: TCP
       port: 80
       targetPort: 9091
-  externalTrafficPolicy: Local
+---
-  type: LoadBalancer
+apiVersion: networking.k8s.io/v1
-  loadBalancerIP: 192.168.9.204
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+  labels:
+    app.kubernetes.io/instance: authelia
+    app.kubernetes.io/name: authelia
+  name: authelia
+  namespace: auth
+spec:
+  tls:
+    - hosts:
+        - login.k3s.xpander.ovh
+  rules:
+    - host: login.k3s.xpander.ovh
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: authelia
+                port:
+                  number: 80

cluster/data/_volumes.yaml

@@ -53,19 +53,6 @@ spec:
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
-metadata:
-  name: bitwarden-config
-  namespace: data
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: longhorn-backups
-  resources:
-    requests:
-      storage: 1Gi
----
-apiVersion: v1
-kind: PersistentVolumeClaim
 metadata:
   name: freshrss-config
   namespace: data
@@ -79,19 +66,6 @@ spec:
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
-metadata:
-  name: unifi-config
-  namespace: data
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: longhorn-backups
-  resources:
-    requests:
-      storage: 10Gi
----
-apiVersion: v1
-kind: PersistentVolumeClaim
 metadata:
   name: recipes-media
   namespace: data

cluster/data/archivebox.yaml

@@ -74,7 +74,7 @@ spec:
       port: 8000
   selector:
     app: archivebox
-  type: LoadBalancer
+  type: ClusterIP
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress

cluster/data/bitwardenrs.yaml

@@ -23,6 +23,7 @@ spec:
       pullPolicy: IfNotPresent
     env:
       SIGNUPS_ALLOWED: "false"
+      DOMAIN: "https://bitwarden.k3s.xpander.ovh/"
     bitwardenrs:
       domain: ""
       signupsAllowed: false
@@ -44,9 +45,16 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: bitwarden.k3s.xpander.ovh
+          paths:
+            - /
+      tls:
+        - hosts:
+            - "bitwarden.k3s.xpander.ovh"
     persistence:
-      enabled: true
+      enabled: false
       existingClaim: bitwarden-config
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-data-bitwardenrs
+      name: bitwardenrs-helmrelease

cluster/data/bookstack.yaml

@@ -22,6 +22,8 @@ spec:
       pullPolicy: IfNotPresent
       # Overrides the image tag whose default is the chart appVersion.
       tag: "v0.31.8-ls126"
+    env:
+      APP_URL: https://bookstack.k3s.xpander.ovh/
     service:
       port:
         port: 80
@@ -33,11 +35,19 @@ spec:
       annotations:
         kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/whitelist-source-range: 0.0.0.0/0
+      hosts:
+        - host: bookstack.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "bookstack.k3s.xpander.ovh"
     persistence:
       config:
         enabled: true
         mountPath: /config
         existingClaim: bookstack-config
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-data-bookstack
+      name: bookstack-helmrelease

cluster/data/freshrss.yaml

@@ -27,6 +27,7 @@ spec:
     env:
       TZ: Europe/Paris
       CRON_MIN: "18,48"
+      DOMAIN: "https://freshrss.k3s.xpander.ovh/"
     service:
       port:
         port: 80
@@ -37,6 +38,14 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: freshrss.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "freshrss.k3s.xpander.ovh"
     persistence:
       config:
         enabled: true
@@ -46,6 +55,3 @@ spec:
       requests:
         cpu: 50m
         memory: 256Mi
-  valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-data-freshrss

cluster/data/homer.yaml

@@ -36,6 +36,17 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+      nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+    hosts:
+      - host: homer.k3s.xpander.ovh
+        paths:
+          - path: /
+            pathType: Prefix
+    tls:
+      - hosts:
+          - "homer.k3s.xpander.ovh"
+
     persistence:
       config:
         enabled: false
@@ -315,6 +326,3 @@ spec:
       - name: assets-taskcafe
         configMap:
           name: homer-taskcafe.png
-  valuesFrom:
-    - kind: ConfigMap
-      name: helmrelease-data-homer

cluster/data/joplin-server.yaml

@@ -37,6 +37,7 @@ spec:
         prometheus.io/protocol: tcp
 
     env:
+      APP_BASE_URL: https://joplin.k3s.xpander.ovh
       APP_PORT: 22300
       DB_CLIENT: pg
 
@@ -52,7 +53,15 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: joplin.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "joplin.k3s.xpander.ovh"
 
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-data-joplin-server
+      name: joplin-server-helmrelease

cluster/data/recipes.yaml

@@ -44,6 +44,14 @@ spec:
       annotations:
         kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/client-body-buffer-size: "10m"
+      hosts:
+        - host: recipes.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "recipes.k3s.xpander.ovh"
     persistence:
       config:
         enabled: false
@@ -72,4 +80,4 @@ spec:
             readOnly: true
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-data-recipes
+      name: recipes-helmrelease

cluster/data/resilio-sync.yaml

@@ -218,4 +218,43 @@ spec:
     app.kubernetes.io/instance: resilio-sync
     app.kubernetes.io/name: resilio-sync
   type: LoadBalancer
-  loadBalancerIP: 192.168.9.207
+  externalIPs:
+    - 192.168.169.106
+  externalTrafficPolicy: Local
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+  labels:
+    app.kubernetes.io/instance: resilio-sync
+    app.kubernetes.io/name: resilio-sync
+  name: resilio-sync
+  namespace: data
+spec:
+  rules:
+    - host: resilio-sync-claude.k3s.xpander.ovh
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: resilio-sync
+                port:
+                  number: 8888
+    - host: resilio-sync-helene.k3s.xpander.ovh
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: resilio-sync
+                port:
+                  number: 8889
+  tls:
+    - hosts:
+        - resilio-sync-claude.k3s.xpander.ovh
+        - resilio-sync-helene.k3s.xpander.ovh

cluster/data/searx.yaml

@@ -28,10 +28,22 @@ spec:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
+    searx:
+      baseUrl: https://searx.k3s.xpander.ovh
     ingress:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+      hosts:
+        - host: searx.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "searx.k3s.xpander.ovh"
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-data-searx
+      name: searx-helmrelease

cluster/data/sharry.yaml

@@ -17,7 +17,6 @@ spec:
         namespace: flux-system
       interval: 5m
   values:
-
     image:
       repository: eikek0/sharry
       tag: 1.6.0
@@ -38,9 +37,10 @@ spec:
         prometheus.io/protocol: http
 
     args:
-    - "/opt/sharry.conf"
+      - "/opt/sharry.conf"
 
     sharry:
+      baseUrl: "https://sharry.k3s.xpander.ovh"
       chunkSize: "512K"
       maxSize: "1.5G"
       maxValidity: "31 days"
@@ -55,13 +55,13 @@ spec:
     podAnnotations: {}
 
     additionalVolumes:
-    - name: sharry-config
+      - name: sharry-config
-      configMap:
+        configMap:
-        name: sharry-config
+          name: sharry-config
     additionalVolumeMounts:
-    - name: sharry-config
+      - name: sharry-config
-      mountPath: /opt/sharry.conf
+        mountPath: /opt/sharry.conf
-      subPath: sharry.conf
+        subPath: sharry.conf
 
     ingress:
       enabled: true
@@ -71,7 +71,15 @@ spec:
         # -- Nginx Proxy Body Size
         nginx.ingress.kubernetes.io/proxy-body-size: "2048m"
         nginx.ingress.kubernetes.io/proxy-buffering: "off"
+      hosts:
+        - host: sharry.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "sharry.k3s.xpander.ovh"
 
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-data-sharry
+      name: sharry-helmrelease

cluster/data/tinyfilemanager.yaml

@@ -80,3 +80,29 @@ spec:
     app.kubernetes.io/instance: tinyfilemanager
     app.kubernetes.io/name: tinyfilemanager
   type: ClusterIP
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+  labels:
+    app.kubernetes.io/instance: tinyfilemanager
+    app.kubernetes.io/name: tinyfilemanager
+  name: tinyfilemanager
+  namespace: data
+spec:
+  rules:
+    - host: tinyfilemanager.k3s.xpander.ovh
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: tinyfilemanager
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - tinyfilemanager.k3s.xpander.ovh

cluster/data/vikunja.yaml

@@ -56,7 +56,15 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: vikunja.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "vikunja.k3s.xpander.ovh"
 
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-data-vikunja
+      name: vikunja-helmrelease

cluster/development/docker-registry.yaml

@@ -30,11 +30,16 @@ spec:
         nginx.ingress.kubernetes.io/proxy-body-size: "0"
         nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
         nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
+      hosts:
+        - registry.k3s.xpander.ovh
+      tls:
+        - hosts:
+            - registry.k3s.xpander.ovh
     service:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
   valuesFrom:
     - kind: ConfigMap
-      name: "helmrelease-development-docker-registry"
+      name: docker-registry-helmrelease
       optional: false

cluster/development/drone-kubernetes-secrets.yaml

@@ -22,6 +22,6 @@ spec:
     env:
       KUBERNETES_NAMESPACE: development
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: "helmrelease-development-drone-kubernetes-secrets"
+      name: drone-kubernetes-secrets-helmrelease
-    optional: false
+      optional: false

cluster/development/drone-runner-kube.yaml

@@ -30,5 +30,5 @@ spec:
         - development
   valuesFrom:
     - kind: ConfigMap
-      name: "helmrelease-development-drone-runner-kube"
+      name: drone-runner-kube-helmrelease
       optional: false

cluster/development/drone.yaml

@@ -25,7 +25,26 @@ spec:
     persistentVolume:
       enabled: true
       existingClaim: drone-config
+    env:
+      DRONE_SERVER_PROTO: https
+      DRONE_GIT_ALWAYS_AUTH: true
+      DRONE_LOGS_TEXT: true
+      DRONE_LOGS_PRETTY: true
+      DRONE_LOGS_COLOR: true
+      DRONE_SERVER_HOST: drone.k3s.xpander.ovh
+      DRONE_GITEA_SERVER: https://gitea.k3s.xpander.ovh
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+        prometheus.io/probe: "true"
+      hosts:
+        - host: drone.k3s.xpander.ovh
+          paths: ["/"]
+      tls:
+        - hosts:
+            - drone.k3s.xpander.ovh
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: "helmrelease-development-drone"
+      name: drone-helmrelease
-    optional: false
+      optional: false

cluster/development/gitea.yaml

@@ -27,6 +27,11 @@ spec:
         kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/proxy-body-size: 128m
         prometheus.io/probe: "true"
+      hosts:
+        - "gitea.k3s.xpander.ovh"
+      tls:
+        - hosts:
+            - "gitea.k3s.xpander.ovh"
     service:
       http:
         port: 3000
@@ -38,7 +43,7 @@ spec:
         port: 22
         externalTrafficPolicy: Local
         externalIPs:
-          - 192.168.9.209
+          - 192.168.169.104
     gitea:
       config:
         APP_NAME: "Homelab Gitea"
@@ -73,4 +78,4 @@ spec:
         port: 11211
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-development-gitea
+      name: gitea-helmrelease

cluster/development/pgadmin.yaml

@@ -32,9 +32,16 @@ spec:
       annotations:
         kubernetes.io/ingress.class: "nginx"
         prometheus.io/probe: "true"
+      hosts:
+        - host: pgadmin.k3s.xpander.ovh
+          paths:
+            - /
+      tls:
+        - hosts:
+            - pgadmin.k3s.xpander.ovh
     persistentVolume:
       enabled: true
       existingClaim: pgadmin-config
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: "helmrelease-development-pgadmin"
+      name: pgadmin-helmrelease

cluster/home/home-assistant.yaml

@@ -29,14 +29,18 @@ spec:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
-      type: LoadBalancer
-      externalIPs:
-        - 192.168.9.203
-      externalTrafficPolicy: Local
     ingress:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: hass.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "hass.k3s.xpander.ovh"
     prometheus:
       serviceMonitor:
         enabled: false
@@ -69,6 +73,14 @@ spec:
           enabled: true
           annotations:
             kubernetes.io/ingress.class: "nginx"
+          hosts:
+            - host: hass-config.k3s.xpander.ovh
+              paths:
+                - path: /
+                  pathType: Prefix
+          tls:
+            - hosts:
+                - hass-config.k3s.xpander.ovh
         volumeMounts:
           - name: config
             mountPath: /config
@@ -82,4 +94,4 @@ spec:
       enabled: false
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-home-hass
+      name: hass-helmrelease

cluster/home/travelstories.yaml

@@ -1,4 +1,46 @@
 ---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: travelstories
+  namespace: home
+  labels:
+    app.kubernetes.io/instance: travelstories
+    app.kubernetes.io/name: travelstories
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: travelstories
+      app.kubernetes.io/name: travelstories
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: travelstories
+        app.kubernetes.io/name: travelstories
+    spec:
+      imagePullSecrets:
+        - name: regcred
+      containers:
+        - name: travelstories
+          image: registry.k3s.xpander.ovh/homelab/travelstories:1.0.1
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 80
+              name: http
+          volumeMounts:
+            - name: caddyfile
+              mountPath: /etc/caddy/Caddyfile
+              subPath: Caddyfile
+      volumes:
+        - name: caddyfile
+          configMap:
+            name: travelstories-caddyfile
+      dnsConfig:
+        options:
+          - name: ndots
+            value: "1"
+---
 apiVersion: v1
 kind: ConfigMap
 metadata:
@@ -32,3 +74,29 @@ spec:
     app.kubernetes.io/instance: travelstories
     app.kubernetes.io/name: travelstories
   type: ClusterIP
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+  labels:
+    app.kubernetes.io/instance: travelstories
+    app.kubernetes.io/name: travelstories
+  name: travelstories
+  namespace: home
+spec:
+  rules:
+    - host: travelstories.k3s.xpander.ovh
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: travelstories
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - travelstories.k3s.xpander.ovh

cluster/kube-system/ingress-nginx.yaml

@@ -22,7 +22,7 @@ spec:
       service:
         type: LoadBalancer
         externalIPs:
-        - 192.168.9.200
+          - 192.168.169.101
         externalTrafficPolicy: Local
       publishService:
         enabled: true
@@ -48,13 +48,13 @@ spec:
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
-          - labelSelector:
+            - labelSelector:
-              matchExpressions:
+                matchExpressions:
-              - key: app.kubernetes.io/name
+                  - key: app.kubernetes.io/name
-                operator: In
+                    operator: In
-                values:
+                    values:
-                - ingress-nginx-external
+                      - ingress-nginx-external
-            topologyKey: "kubernetes.io/hostname"
+              topologyKey: "kubernetes.io/hostname"
     #defaultBackend:
     #  enabled: true
     #  image:

cluster/kube-system/metallb.yaml

@@ -1,45 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: metallb
-  namespace: kube-system
-spec:
-  interval: 5m
-  chart:
-    spec:
-      # renovate: registryUrl=https://charts.bitnami.com/bitnami
-      chart: metallb
-      version: 2.3.2
-      sourceRef:
-        kind: HelmRepository
-        name: bitnami-charts
-        namespace: flux-system
-      interval: 5m
-  values:
-    configInline:
-        address-pools:
-        - name: default
-          protocol: layer2
-          addresses:
-          - 192.168.9.200-192.168.9.254
-    controller:
-      image:
-        registry: docker.io
-        repository: bitnami/metallb-controller
-        tag: 0.9.5-debian-10-r5
-      tolerations:
-      - effect: NoExecute
-        operator: Exists
-      - effect: NoSchedule
-        operator: Exists
-    speaker:
-      image:
-        registry: docker.io
-        repository: bitnami/metallb-speaker
-        tag: 0.9.5-debian-10-r4
-      tolerations:
-      - effect: NoExecute
-        operator: Exists
-      - effect: NoSchedule
-        operator: Exists

cluster/longhorn-system/longhorn.yaml

@@ -45,6 +45,3 @@ spec:
         nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
       host: longhorn.k3s.xpander.ovh
       tls: false
-  valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-longhorn-system-longhorn

cluster/longhorn-system/storageClass.yaml

@@ -1,19 +1,6 @@
 ---
 kind: StorageClass
 apiVersion: storage.k8s.io/v1
-metadata:
-  name: longhorn-hdd
-provisioner: driver.longhorn.io
-allowVolumeExpansion: true
-parameters:
-  numberOfReplicas: "1"
-  staleReplicaTimeout: "2880"
-  fromBackup: ""
-  diskSelector: "hdd,slow"
-  nodeSelector: "storage,slow"
----
-kind: StorageClass
-apiVersion: storage.k8s.io/v1
 metadata:
   name: longhorn-backups
 provisioner: driver.longhorn.io

cluster/media/_volumes.yaml

@@ -209,20 +209,6 @@ spec:
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
-metadata:
-  name: local-hdd
-  namespace: media
-spec:
-  storageClassName: local-path
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Ti
-  volumeName: local-hdd
----
-apiVersion: v1
-kind: PersistentVolumeClaim
 metadata:
   name: flood-config
   namespace: media
@@ -246,3 +232,17 @@ spec:
   resources:
     requests:
       storage: 2Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: qbittorrent-cache
+  namespace: media
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local
+  volumeName: qbittorrent-cache
+  resources:
+    requests:
+      storage: 600Gi

cluster/media/bazarr.yaml

@@ -33,12 +33,12 @@ spec:
         enabled: true
         existingClaim: bazarr-config
     additionalVolumeMounts:
-    - name: nfs-video
+      - name: nfs-video
-      mountPath: "/mnt/storage/video"
+        mountPath: "/mnt/storage/video"
     additionalVolumes:
-    - name: nfs-video
+      - name: nfs-video
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: nfs-video
+          claimName: nfs-video
     service:
       annotations:
         prometheus.io/probe: "true"
@@ -49,6 +49,17 @@ spec:
         cpu: 500m
       limits:
         memory: 1500Mi
-  valuesFrom:
+    ingress:
-  - kind: ConfigMap
+      enabled: true
-    name: helmrelease-media-bazarr
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+      hosts:
+        - host: bazarr.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "bazarr.k3s.xpander.ovh"

cluster/media/flood.yaml

@@ -34,6 +34,16 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+      hosts:
+        - host: flood.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "flood.k3s.xpander.ovh"
     persistence:
       data:
         enabled: true
@@ -50,4 +60,4 @@ spec:
         prometheus.io/protocol: http
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-media-flood
+      name: flood-helmrelease

cluster/media/jackett.yaml

@@ -20,7 +20,7 @@ spec:
     controllerType: deployment
     image:
       repository: ghcr.io/k8s-at-home/jackett
-      tag: v0.17.743
+      tag: v0.17.764
       pullPolicy: IfNotPresent
     env:
       TZ: "Europe/Paris"
@@ -42,6 +42,17 @@ spec:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
-  valuesFrom:
+    ingress:
-  - kind: ConfigMap
+      enabled: true
-    name: helmrelease-media-jackett
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+      hosts:
+        - host: jackett.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "jackett.k3s.xpander.ovh"

cluster/media/jellyfin.yaml

@@ -34,28 +34,37 @@ spec:
         enabled: true
         existingClaim: jellyfin-config
     additionalVolumeMounts:
-    - name: nfs-music
+      - name: nfs-music
-      mountPath: "/mnt/storage/music"
+        mountPath: "/mnt/storage/music"
-    - name: nfs-video
+      - name: nfs-video
-      mountPath: "/mnt/storage/video"
+        mountPath: "/mnt/storage/video"
-    - name: nfs-photo
+      - name: nfs-photo
-      mountPath: "/mnt/storage/photo"
+        mountPath: "/mnt/storage/photo"
     additionalVolumes:
-    - name: nfs-music
+      - name: nfs-music
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: nfs-music
+          claimName: nfs-music
-    - name: nfs-video
+      - name: nfs-video
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: nfs-video
+          claimName: nfs-video
-    - name: nfs-photo
+      - name: nfs-photo
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: nfs-photo
+          claimName: nfs-photo
     resources:
       requests:
         memory: 4Gi
         cpu: 1
       limits:
         gpu.intel.com/i915: 1
-  valuesFrom:
+    ingress:
-  - kind: ConfigMap
+      enabled: true
-    name: helmrelease-media-jellyfin
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: jellyfin.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "jellyfin.k3s.xpander.ovh"

cluster/media/lidarr.yaml

@@ -33,17 +33,17 @@ spec:
         enabled: true
         existingClaim: lidarr-config
     additionalVolumeMounts:
-    - name: nfs-music
+      - name: nfs-music
-      mountPath: "/mnt/storage/music"
+        mountPath: "/mnt/storage/music"
-    - name: local-hdd
+      - name: qbittorrent-cache
-      mountPath: "/downloads"
+        mountPath: "/downloads"
     additionalVolumes:
-    - name: nfs-music
+      - name: nfs-music
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: nfs-music
+          claimName: nfs-music
-    - name: local-hdd
+      - name: qbittorrent-cache
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: local-hdd
+          claimName: qbittorrent-cache
     resources:
       requests:
         memory: 500Mi
@@ -54,15 +54,17 @@ spec:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
-    affinity:
+    ingress:
-      nodeAffinity:
+      enabled: true
-        requiredDuringSchedulingIgnoredDuringExecution:
+      annotations:
-          nodeSelectorTerms:
+        kubernetes.io/ingress.class: "nginx"
-          - matchExpressions:
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
-            - key: kubernetes.io/hostname
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
-              operator: In
+      hosts:
-              values:
+        - host: lidarr.k3s.xpander.ovh
-              - k3os-worker3
+          paths:
-  valuesFrom:
+            - path: /
-  - kind: ConfigMap
+              pathType: Prefix
-    name: helmrelease-media-lidarr
+      tls:
+        - hosts:
+            - "lidarr.k3s.xpander.ovh"

cluster/media/lychee.yaml

@@ -33,6 +33,14 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: lychee.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "lychee.k3s.xpander.ovh"
     env:
       PHP_TZ: Europe/Paris
       DB_CONNECTION: pgsql
@@ -54,5 +62,5 @@ spec:
         mountPath: /mnt/storage/photo
         existingClaim: nfs-photo
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-media-lychee
+      name: lychee-helmrelease

cluster/media/navidrome.yaml

@@ -33,6 +33,14 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: navidrome.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "navidrome.k3s.xpander.ovh"
     env:
       ND_SCANINTERVAL: 15m
       ND_LOGLEVEL: info
@@ -48,6 +56,3 @@ spec:
         enabled: true
         mountPath: /mnt/storage/music/
         existingClaim: nfs-music
-  valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-media-navidrome

cluster/media/pyload.yaml

@@ -29,12 +29,12 @@ spec:
         enabled: true
         existingClaim: pyload-config
     additionalVolumeMounts:
-    - name: nfs-downloads
+      - name: nfs-downloads
-      mountPath: "/mnt/storage/downloads"
+        mountPath: "/mnt/storage/downloads"
     additionalVolumes:
-    - name: nfs-downloads
+      - name: nfs-downloads
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: nfs-downloads
+          claimName: nfs-downloads
     resources:
       requests:
         memory: 1Gi
@@ -45,15 +45,17 @@ spec:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
-    affinity:
+    ingress:
-      nodeAffinity:
+      enabled: true
-        requiredDuringSchedulingIgnoredDuringExecution:
+      annotations:
-          nodeSelectorTerms:
+        kubernetes.io/ingress.class: "nginx"
-          - matchExpressions:
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
-            - key: kubernetes.io/hostname
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
-              operator: In
+      hosts:
-              values:
+        - host: pyload.k3s.xpander.ovh
-              - k3os-worker3
+          paths:
-  valuesFrom:
+            - path: /
-  - kind: ConfigMap
+              pathType: Prefix
-    name: helmrelease-media-pyload
+      tls:
+        - hosts:
+            - "pyload.k3s.xpander.ovh"

cluster/media/qbittorrent.yaml

@@ -26,17 +26,17 @@ spec:
       TZ: "Europe/Paris"
     service:
       additionalServices:
-      - enabled: true
+        - enabled: true
-        nameSuffix: bittorrent
+          nameSuffix: bittorrent
-        type: LoadBalancer
+          type: LoadBalancer
-        externalIPs:
+          externalIPs:
-        - 192.168.9.206
+            - 192.168.169.105
-        port:
+          port:
-          port: 50413
+            port: 50413
-          name: bittorrent
+            name: bittorrent
-          protocol: TCP
+            protocol: TCP
-          targetPort: 6881
+            targetPort: 6881
-        externalTrafficPolicy: Local
+          externalTrafficPolicy: Local
       service:
         annotations:
           prometheus.io/probe: "true"
@@ -50,21 +50,30 @@ spec:
         enabled: true
         existingClaim: qbittorrent-config
     additionalVolumeMounts:
-    - name: local-hdd
+      - name: qbittorrent-cache
-      mountPath: "/downloads"
+        mountPath: "/downloads"
-    - name: nfs-downloads
+      - name: nfs-downloads
-      mountPath: "/mnt/storage/downloads"
+        mountPath: "/mnt/storage/downloads"
     additionalVolumes:
-    - name: local-hdd
+      - name: qbittorrent-cache
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: local-hdd
+          claimName: qbittorrent-cache
-    - name: nfs-downloads
+      - name: nfs-downloads
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: nfs-downloads
+          claimName: nfs-downloads
     resources:
       requests:
         memory: 4Gi
         cpu: 500m
-  valuesFrom:
+    ingress:
-  - kind: ConfigMap
+      enabled: true
-    name: helmrelease-media-qbittorrent
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: qbittorrent.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "qbittorrent.k3s.xpander.ovh"

cluster/media/radarr.yaml

@@ -33,17 +33,17 @@ spec:
         enabled: true
         existingClaim: radarr-config
     additionalVolumeMounts:
-    - name: nfs-video
+      - name: nfs-video
-      mountPath: "/mnt/storage/video"
+        mountPath: "/mnt/storage/video"
-    - name: local-hdd
+      - name: qbittorrent-cache
-      mountPath: "/downloads"
+        mountPath: "/downloads"
     additionalVolumes:
-    - name: nfs-video
+      - name: nfs-video
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: nfs-video
+          claimName: nfs-video
-    - name: local-hdd
+      - name: qbittorrent-cache
-      persistentVolumeClaim:
+        persistentVolumeClaim:
-        claimName: local-hdd
+          claimName: qbittorrent-cache
     resources:
       requests:
         memory: 500Mi
@@ -54,15 +54,18 @@ spec:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
-    affinity:
+    ingress:
-      nodeAffinity:
+      enabled: true
-        requiredDuringSchedulingIgnoredDuringExecution:
+      annotations:
-          nodeSelectorTerms:
+        kubernetes.io/ingress.class: "nginx"
-          - matchExpressions:
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
-            - key: kubernetes.io/hostname
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
-              operator: In
+        prometheus.io/probe: "true"
-              values:
+      hosts:
-              - k3os-worker3
+        - host: radarr.k3s.xpander.ovh
-  valuesFrom:
+          paths:
-  - kind: ConfigMap
+            - path: /
-    name: helmrelease-media-radarr
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "radarr.k3s.xpander.ovh"

cluster/media/sonarr.yaml

@@ -36,18 +36,28 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+      hosts:
+        - host: sonarr.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "sonarr.k3s.xpander.ovh"
     additionalVolumeMounts:
       - name: nfs-video
         mountPath: "/mnt/storage/video"
-      - name: local-hdd
+      - name: qbittorrent-cache
         mountPath: "/downloads"
     additionalVolumes:
       - name: nfs-video
         persistentVolumeClaim:
           claimName: nfs-video
-      - name: local-hdd
+      - name: qbittorrent-cache
         persistentVolumeClaim:
-          claimName: local-hdd
+          claimName: qbittorrent-cache
     resources:
       requests:
         memory: 500Mi
@@ -58,6 +68,3 @@ spec:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
-  valuesFrom:
-    - kind: ConfigMap
-      name: helmrelease-media-sonarr

cluster/media/tdarr-service.yaml

@@ -17,4 +17,6 @@ spec:
     app.kubernetes.io/instance: tdarr
     app.kubernetes.io/name: tdarr
   type: LoadBalancer
-  loadBalancerIP: 192.168.9.240
+  externalIPs:
+    - 192.168.169.110
+  externalTrafficPolicy: Local

cluster/media/tdarr.yaml

@@ -83,7 +83,11 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
-
+      hosts:
-  valuesFrom:
+        - host: tdarr.k3s.xpander.ovh
-    - kind: ConfigMap
+          paths:
-      name: helmrelease-media-tdarr
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "tdarr.k3s.xpander.ovh"

cluster/monitoring/blackbox-exporter.yaml

@@ -17,10 +17,6 @@ spec:
         namespace: flux-system
       interval: 5m
   values:
-    ingress:
-      enabled: true
-      annotations:
-        kubernetes.io/ingress.class: "nginx"
     allowIcmp: true
     config:
       modules:
@@ -46,27 +42,62 @@ spec:
           release: prometheus
         interval: 2m
         scrapeTimeout: 30s
+      targets:
+        - name: truenas
+          url: truenas
+          module: icmp
+        - name: truenas-remote
+          url: truenas-remote
+          module: icmp
+        - name: borgbackup
+          url: 192.168.9.20
+          module: icmp
+        - name: postgresql
+          url: postgresql
+          module: icmp
+        - name: rpizw1
+          url: rpizw1
+          module: icmp
+        - name: k3os-server
+          url: k3os-server
+          module: icmp
+        - name: k3os-worker1
+          url: k3os-worker1
+          module: icmp
+        - name: k3os-worker2
+          url: k3os-worker2
+          module: icmp
+        - name: k3os-worker3
+          url: k3os-worker3
+          module: icmp
     prometheusRule:
       enabled: true
       additionalLabels:
         app: prometheus-operator
         release: prometheus
       rules:
-      - alert: HostDown
+        - alert: HostDown
-        expr: probe_success == 0
+          expr: probe_success == 0
-        for: 10m
+          for: 10m
-        labels:
+          labels:
-          severity: critical
+            severity: critical
-        annotations:
+          annotations:
-          message: The host {{"{{ $labels.target }}"}} is currently unreachable
+            message: The host {{"{{ $labels.target }}"}} is currently unreachable
-      - alert: SlowResponseTime
+        - alert: SlowResponseTime
-        annotations:
+          annotations:
-          message: The response time for {{"{{ $labels.target }}"}} has been greater than 30 seconds for 5 minutes.
+            message: The response time for {{"{{ $labels.target }}"}} has been greater than 30 seconds for 5 minutes.
-        expr: probe_duration_seconds > 30
+          expr: probe_duration_seconds > 30
-        for: 15m
+          for: 15m
-        labels:
+          labels:
-          severity: warning
+            severity: warning
-  valuesFrom:
+    ingress:
-  - kind: ConfigMap
+      enabled: true
-    name: "helmrelease-monitoring-blackbox-exporter"
+      annotations:
-    optional: false
+        kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+      hosts:
+        - "blackbox.k3s.xpander.ovh"
+      tls:
+        - hosts:
+            - "blackbox.k3s.xpander.ovh"

cluster/monitoring/botkube.yaml

@@ -26,14 +26,14 @@ spec:
       settings:
         clustername: k3s
       resources:
-        - name: v1/pods                # Name of the resources e.g pod, deployment, ingress, etc. (Resource name must be in singular form)
+        - name: v1/pods # Name of the resources e.g pod, deployment, ingress, etc. (Resource name must be in singular form)
           namespaces:
             include:
               - all
-            ignore:                 # List of namespaces to be ignored (omitempty), used only with include: all
+            ignore: # List of namespaces to be ignored (omitempty), used only with include: all
-              - longhorn-system     # example : include [all], ignore [x,y,z]
+              - longhorn-system # example : include [all], ignore [x,y,z]
               - kube-system
-          events:                   # List of lifecycle events you want to receive, e.g create, update, delete, error OR all
+          events: # List of lifecycle events you want to receive, e.g create, update, delete, error OR all
             - create
             - delete
         - name: v1/services
@@ -179,5 +179,5 @@ spec:
         notiftype: short
   valuesFrom:
     - kind: ConfigMap
-      name: "helmrelease-monitoring-botkube"
+      name: botkube-helmrelease
       optional: false

cluster/monitoring/goldilocks.yaml

@@ -24,6 +24,15 @@ spec:
       tag: v3.1.4
     dashboard:
       replicaCount: 1
-  valuesFrom:
+    ingress:
-  - kind: ConfigMap
+      enabled: true
-    name: helmrelease-monitoring-goldilocks
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+      hosts:
+        - host: goldilocks.k3s.xpander.ovh
+          paths: ["/"]
+      tls:
+        - hosts:
+            - goldilocks.k3s.xpander.ovh

cluster/monitoring/healthchecks.yaml

@@ -17,7 +17,6 @@ spec:
         namespace: flux-system
       interval: 5m
   values:
-
     image:
       repository: linuxserver/healthchecks
       tag: v1.19.0-ls79
@@ -59,7 +58,15 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: healthchecks.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "healthchecks.k3s.xpander.ovh"
 
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-monitoring-healthchecks
+      name: healthchecks-helmrelease

cluster/monitoring/influxdb.yaml

@@ -19,7 +19,9 @@ spec:
   values:
     service:
       type: LoadBalancer
-      loadBalancerIP: 192.168.9.205
+      externalIPs:
+        - 192.168.169.107
+      externalTrafficPolicy: Local
     persistence:
       enabled: true
       size: 30Gi
@@ -56,4 +58,4 @@ spec:
         memory: 2Gi
         cpu: 100m
       limits:
-        memory: 4Gi
+        memory: 4Gi

cluster/monitoring/kube-prometheus-stack.yaml

@@ -28,6 +28,33 @@ spec:
     prometheusOperator:
       createCustomResource: true
     alertmanager:
+      ingress:
+        enabled: true
+        annotations:
+          kubernetes.io/ingress.class: "nginx"
+          nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+          nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+        hosts: [alert-manager.k3s.xpander.ovh]
+        tls:
+          - hosts:
+              - alert-manager.k3s.xpander.ovh
+      config:
+        global:
+          resolve_timeout: 5m
+        route:
+          receiver: "pushover"
+          routes:
+            - match:
+                alertname: Watchdog
+              receiver: "null"
+            - receiver: "pushover"
+        inhibit_rules:
+          - source_match:
+              severity: "critical"
+            target_match:
+              severity: "warning"
+            # Apply inhibition if the alertname is the same.
+            equal: ["alertname", "namespace"]
       alertmanagerSpec:
         storage:
           volumeClaimTemplate:
@@ -39,19 +66,19 @@ spec:
     nodeExporter:
       serviceMonitor:
         relabelings:
-        - action: replace
+          - action: replace
-          regex: (.*)
+            regex: (.*)
-          replacement: $1
+            replacement: $1
-          sourceLabels:
+            sourceLabels:
-          - __meta_kubernetes_pod_node_name
+              - __meta_kubernetes_pod_node_name
-          targetLabel: kubernetes_node
+            targetLabel: kubernetes_node
     kubelet:
       serviceMonitor:
         metricRelabelings:
-        - action: replace
+          - action: replace
-          sourceLabels:
+            sourceLabels:
-          - node
+              - node
-          targetLabel: instance
+            targetLabel: instance
     grafana:
       dashboards:
         default:
@@ -76,23 +103,23 @@ spec:
         GF_DISABLE_SANITIZE_HTML: true
         GF_PANELS_DISABLE_SANITIZE_HTML: true
       plugins:
-      - natel-discrete-panel
+        - natel-discrete-panel
-      - pr0ps-trackmap-panel
+        - pr0ps-trackmap-panel
-      - grafana-piechart-panel
+        - grafana-piechart-panel
-      - vonage-status-panel
+        - vonage-status-panel
-      - https://github.com/panodata/grafana-map-panel/releases/download/0.9.0/grafana-map-panel-0.9.0.zip;grafana-worldmap-panel-ng
+        - https://github.com/panodata/grafana-map-panel/releases/download/0.9.0/grafana-map-panel-0.9.0.zip;grafana-worldmap-panel-ng
       dashboardProviders:
         dashboardproviders.yaml:
           apiVersion: 1
           providers:
-          - name: 'default'
+            - name: "default"
-            orgId: 1
+              orgId: 1
-            folder: ''
+              folder: ""
-            type: file
+              type: file
-            disableDeletion: false
+              disableDeletion: false
-            editable: true
+              editable: true
-            options:
+              options:
-              path: /var/lib/grafana/dashboards/default
+                path: /var/lib/grafana/dashboards/default
       sidecar:
         datasources:
           enabled: true
@@ -101,38 +128,40 @@ spec:
           enabled: true
           searchNamespace: ALL
       additionalDataSources:
-      - name: Prometheus
+        - name: Prometheus
-        type: prometheus
+          type: prometheus
-        access: proxy
+          access: proxy
-        url: http://thanos-query-http:10902/
+          url: http://thanos-query-http:10902/
-        isDefault: true
+          isDefault: true
-      - name: loki
+        - name: loki
-        type: loki
+          type: loki
-        access: proxy
+          access: proxy
-        url: http://loki.logging.svc.cluster.local:3100/
+          url: http://loki:3100/
-      - name: influxdb-pfsense
+        - name: influxdb-pfsense
-        type: influxdb
+          type: influxdb
-        acces: server
+          acces: server
-        url: http://influxdb:8086/
+          url: http://influxdb:8086/
-        database: pfsense
+          database: pfsense
-        user: pfsense
+          user: pfsense
-      - name: influxdb-rpi-os
+        - name: influxdb-rpi-os
-        type: influxdb
+          type: influxdb
-        acces: server
+          acces: server
-        url: http://influxdb:8086/
+          url: http://influxdb:8086/
-        database: rpi-os
+          database: rpi-os
-        user: rpi-os
+          user: rpi-os
-      - name: influxdb-graphite
+        - name: influxdb-graphite
-        type: influxdb
+          type: influxdb
-        database: graphite
+          database: graphite
-        acces: server
+          acces: server
-        url: http://influxdb:8086/
+          url: http://influxdb:8086/
-      - name: influxdb-home_assistant
+        - name: influxdb-home_assistant
-        type: influxdb
+          type: influxdb
-        acces: server
+          acces: server
-        url: http://influxdb:8086/
+          url: http://influxdb:8086/
-        database: home_assistant
+          database: home_assistant
       grafana.ini:
+        server:
+          root_url: https://grafana.k3s.xpander.ovh
         paths:
           data: /var/lib/grafana/data
           logs: /var/log/grafana
@@ -146,6 +175,16 @@ spec:
           url: https://grafana.net
         smtp:
           enabled: false
+      ingress:
+        enabled: true
+        annotations:
+          kubernetes.io/ingress.class: "nginx"
+          nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+          nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+        hosts: [grafana.k3s.xpander.ovh]
+        tls:
+          - hosts:
+              - grafana.k3s.xpander.ovh
     kubeEtcd:
       enabled: false
     kubeControllerManager:
@@ -155,6 +194,16 @@ spec:
     kubeProxy:
       enabled: false
     prometheus:
+      ingress:
+        enabled: true
+        annotations:
+          kubernetes.io/ingress.class: "nginx"
+          nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+          nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+        hosts: [prometheus.k3s.xpander.ovh]
+        tls:
+          - hosts:
+              - prometheus.k3s.xpander.ovh
       prometheusSpec:
         replicas: 2
         replicaExternalLabelName: "replica"
@@ -183,90 +232,100 @@ spec:
             name: thanos
             key: object-store.yaml
         additionalScrapeConfigs:
-        # Example scrape config for probing ingresses via the Blackbox Exporter.
+          # Example scrape config for probing ingresses via the Blackbox Exporter.
-        #
+          #
-        # The relabeling allows the actual ingress scrape endpoint to be configured
+          # The relabeling allows the actual ingress scrape endpoint to be configured
-        # via the following annotations:
+          # via the following annotations:
-        #
+          #
-        # * `prometheus.io/probe`: Only probe ingresses that have a value of `true`
+          # * `prometheus.io/probe`: Only probe ingresses that have a value of `true`
-        - job_name: 'kubernetes-ingresses'
+          - job_name: "kubernetes-ingresses"
-          metrics_path: /probe
+            metrics_path: /probe
-          scrape_interval: 60s
+            scrape_interval: 60s
-          params:
+            params:
-            module: [http_2xx]
+              module: [http_2xx]
-          kubernetes_sd_configs:
+            kubernetes_sd_configs:
-          - role: ingress
+              - role: ingress
-          relabel_configs:
+            relabel_configs:
-          - source_labels: [__meta_kubernetes_ingress_annotation_prometheus_io_probe]
+              - source_labels:
-            action: keep
+                  [__meta_kubernetes_ingress_annotation_prometheus_io_probe]
-            regex: true
+                action: keep
-          - source_labels: [__meta_kubernetes_ingress_scheme, __address__, __meta_kubernetes_ingress_path]
+                regex: true
-            regex: (.+);(.+);(.+)
+              - source_labels:
-            replacement: ${1}://${2}${3}
+                  [
-            target_label: __param_target
+                    __meta_kubernetes_ingress_scheme,
-          - target_label: __address__
+                    __address__,
-            replacement: blackbox-exporter-prometheus-blackbox-exporter:9115
+                    __meta_kubernetes_ingress_path,
-          - source_labels: [__param_target]
+                  ]
-            target_label: instance
+                regex: (.+);(.+);(.+)
-          - action: labelmap
+                replacement: ${1}://${2}${3}
-            regex: __meta_kubernetes_ingress_label_(.+)
+                target_label: __param_target
-          - source_labels: [__meta_kubernetes_namespace]
+              - target_label: __address__
-            target_label: kubernetes_namespace
+                replacement: blackbox-exporter-prometheus-blackbox-exporter:9115
-          - source_labels: [__meta_kubernetes_ingress_name]
+              - source_labels: [__param_target]
-            target_label: kubernetes_name
+                target_label: instance
-        - job_name: 'kubernetes-services-http'
+              - action: labelmap
-          metrics_path: /probe
+                regex: __meta_kubernetes_ingress_label_(.+)
-          scrape_interval: 60s
+              - source_labels: [__meta_kubernetes_namespace]
-          params:
+                target_label: kubernetes_namespace
-            module: [http_2xx]
+              - source_labels: [__meta_kubernetes_ingress_name]
-          kubernetes_sd_configs:
+                target_label: kubernetes_name
-          - role: service
+          - job_name: "kubernetes-services-http"
-          relabel_configs:
+            metrics_path: /probe
-          - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_probe]
+            scrape_interval: 60s
-            action: keep
+            params:
-            regex: true
+              module: [http_2xx]
-          - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_protocol]
+            kubernetes_sd_configs:
-            action: keep
+              - role: service
-            regex: http
+            relabel_configs:
-          - source_labels: [__address__]
+              - source_labels:
-            target_label: __param_target
+                  [__meta_kubernetes_service_annotation_prometheus_io_probe]
-          - target_label: __address__
+                action: keep
-            replacement: blackbox-exporter-prometheus-blackbox-exporter:9115
+                regex: true
-          - source_labels: [__param_target]
+              - source_labels:
-            target_label: instance
+                  [__meta_kubernetes_service_annotation_prometheus_io_protocol]
-          - action: labelmap
+                action: keep
-            regex: __meta_kubernetes_service_label_(.+)
+                regex: http
-          - source_labels: [__meta_kubernetes_namespace]
+              - source_labels: [__address__]
-            target_label: kubernetes_namespace
+                target_label: __param_target
-          - source_labels: [__meta_kubernetes_service_name]
+              - target_label: __address__
-            target_label: kubernetes_name
+                replacement: blackbox-exporter-prometheus-blackbox-exporter:9115
-        - job_name: 'kubernetes-services-tcp'
+              - source_labels: [__param_target]
-          metrics_path: /probe
+                target_label: instance
-          scrape_interval: 60s
+              - action: labelmap
-          params:
+                regex: __meta_kubernetes_service_label_(.+)
-            module: [tcp_connect]
+              - source_labels: [__meta_kubernetes_namespace]
-          kubernetes_sd_configs:
+                target_label: kubernetes_namespace
-          - role: service
+              - source_labels: [__meta_kubernetes_service_name]
-          relabel_configs:
+                target_label: kubernetes_name
-          - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_probe]
+          - job_name: "kubernetes-services-tcp"
-            action: keep
+            metrics_path: /probe
-            regex: true
+            scrape_interval: 60s
-          - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_protocol]
+            params:
-            action: keep
+              module: [tcp_connect]
-            regex: tcp
+            kubernetes_sd_configs:
-          - source_labels: [__address__]
+              - role: service
-            target_label: __param_target
+            relabel_configs:
-          - target_label: __address__
+              - source_labels:
-            replacement: blackbox-exporter-prometheus-blackbox-exporter:9115
+                  [__meta_kubernetes_service_annotation_prometheus_io_probe]
-          - source_labels: [__param_target]
+                action: keep
-            target_label: instance
+                regex: true
-          - action: labelmap
+              - source_labels:
-            regex: __meta_kubernetes_service_label_(.+)
+                  [__meta_kubernetes_service_annotation_prometheus_io_protocol]
-          - source_labels: [__meta_kubernetes_namespace]
+                action: keep
-            target_label: kubernetes_namespace
+                regex: tcp
-          - source_labels: [__meta_kubernetes_service_name]
+              - source_labels: [__address__]
-            target_label: kubernetes_name
+                target_label: __param_target
+              - target_label: __address__
+                replacement: blackbox-exporter-prometheus-blackbox-exporter:9115
+              - source_labels: [__param_target]
+                target_label: instance
+              - action: labelmap
+                regex: __meta_kubernetes_service_label_(.+)
+              - source_labels: [__meta_kubernetes_namespace]
+                target_label: kubernetes_namespace
+              - source_labels: [__meta_kubernetes_service_name]
+                target_label: kubernetes_name
 
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-monitoring-prometheus-stack
+      name: prometheus-stack-helmrelease

cluster/monitoring/kubernetes-dashboard.yaml

@@ -21,7 +21,8 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
-  valuesFrom:
+      hosts: ["kubernetes-dashboard.k3s.xpander.ovh"]
-  - kind: ConfigMap
+      paths: ["/"]
-    name: "helmrelease-monitoring-kubernetes-dashboard"
+      tls:
-    optional: false
+        - hosts:
+            - "kubernetes-dashboard.k3s.xpander.ovh"

cluster/monitoring/loki-stack.yaml

@@ -46,19 +46,19 @@ spec:
           # You can use a headless k8s service for all distributor,
           # ingester and querier components.
           join_members:
-          - loki-stack-headless:7946
+            - loki-stack-headless:7946
           # max_join_backoff: 1m
           # max_join_retries: 10
           # min_join_backoff: 1s
         schema_config:
           configs:
-          - from: 2020-05-15
+            - from: 2020-05-15
-            store: boltdb-shipper
+              store: boltdb-shipper
-            object_store: s3
+              object_store: s3
-            schema: v11
+              schema: v11
-            index:
+              index:
-              prefix: index_
+                prefix: index_
-              period: 24h
+                period: 24h
         storage_config:
           boltdb_shipper:
             active_index_directory: /data/loki/index
@@ -70,10 +70,10 @@ spec:
           reject_old_samples: true
           reject_old_samples_max_age: 168h
       extraPorts:
-      - port: 7956
+        - port: 7956
-        protocol: TCP
+          protocol: TCP
-        name: loki-gossip-ring
+          name: loki-gossip-ring
-        targetPort: 7946
+          targetPort: 7946
       serviceMonitor:
         enabled: true
       podAnnotations:
@@ -143,7 +143,9 @@ spec:
         enabled: true
         type: LoadBalancer
         port: 1514
-        loadBalancerIP: 192.168.9.208
+        externalIPs:
+          - 192.168.169.109
+        externalTrafficPolicy: Local
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-monitoring-loki-stack
+      name: loki-stack-helmrelease

cluster/monitoring/syslog-ng.yaml

@@ -24,35 +24,36 @@ spec:
         app.kubernetes.io/name: syslog-ng
     spec:
       containers:
-      - image: balabit/syslog-ng:3.29.1
+        - image: balabit/syslog-ng:3.29.1
-        imagePullPolicy: Always
+          imagePullPolicy: Always
-        name: syslog-ng
+          name:
-          #          securityContext:
+            syslog-ng
-          #            capabilities:
+            #          securityContext:
-          #              drop:
+            #            capabilities:
-          #                - ALL
+            #              drop:
-          #            readOnlyRootFilesystem: true
+            #                - ALL
-          #            runAsNonRoot: true
+            #            readOnlyRootFilesystem: true
-          #            runAsUser: 1001
+            #            runAsNonRoot: true
-        ports:
+            #            runAsUser: 1001
-        - containerPort: 514
+          ports:
-          name: pfsense-syslog
+            - containerPort: 514
-        volumeMounts:
+              name: pfsense-syslog
-        - name: config
+          volumeMounts:
-          mountPath: /etc/syslog-ng/syslog-ng.conf
+            - name: config
-          subPath: syslog-ng.conf
+              mountPath: /etc/syslog-ng/syslog-ng.conf
-        livenessProbe:
+              subPath: syslog-ng.conf
-          exec:
+          livenessProbe:
-            command:
+            exec:
-            - cat
+              command:
+                - cat
       volumes:
-      - name: config
+        - name: config
-        configMap:
+          configMap:
-          name: syslog-ng-config
+            name: syslog-ng-config
       dnsConfig:
         options:
-        - name: ndots
+          - name: ndots
-          value: "1"
+            value: "1"
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -89,12 +90,14 @@ metadata:
   namespace: monitoring
 spec:
   ports:
-  - name: pfsense-syslog
+    - name: pfsense-syslog
-    port: 514
+      port: 514
-    protocol: UDP
+      protocol: UDP
-    targetPort: 514
+      targetPort: 514
   selector:
     app.kubernetes.io/instance: syslog-ng
     app.kubernetes.io/name: syslog-ng
   type: LoadBalancer
-  loadBalancerIP: 192.168.9.202
+  externalIPs:
+    - 192.168.169.108
+  externalTrafficPolicy: Local

cluster/monitoring/thanos.yaml

@@ -18,6 +18,16 @@ spec:
       interval: 5m
   values:
     query:
+      http:
+        ingress:
+          enabled: true
+          annotations:
+            kubernetes.io/ingress.class: "nginx"
+            nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+            nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+          hosts: ["thanos.k3s.xpander.ovh"]
+          tls:
+            - hosts: ["thanos.k3s.xpander.ovh"]
       replicaCount: 3
       replicaLabels:
         - replica
@@ -37,5 +47,5 @@ spec:
           enable: false
         part_size: 0
   valuesFrom:
-  - kind: ConfigMap
+    - kind: ConfigMap
-    name: helmrelease-monitoring-thanos
+      name: thanos-helmrelease

cluster/network/_namespace.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: network
+  labels:
+    goldilocks.fairwinds.com/enabled: "true"

cluster/network/_volumes.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: unifi-config
+  namespace: network
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 10Gi

cluster/network/k8s_gateway.yaml

@@ -0,0 +1,129 @@
+# see: https://github.com/ori-edge/k8s_gateway/blob/master/examples/install-clusterwide.yml
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: excoredns
+  namespace: network
+---
+# Source: coredns/templates/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: excoredns
+  namespace: network
+data:
+  Corefile: |-
+    .:53 {
+        errors
+        log
+        ready
+        k8s_gateway k3s.xpander.ovh
+        {
+          resources Ingress Service
+          ttl 10
+          apex dns1
+        }
+        forward . /etc/resolv.conf
+        cache 30
+        loop
+        reload
+        loadbalance
+    }
+---
+# Source: coredns/templates/clusterrole.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: excoredns
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - services
+      - namespaces
+    verbs:
+      - list
+      - watch
+  - apiGroups:
+      - extensions
+      - networking.k8s.io
+    resources:
+      - ingresses
+    verbs:
+      - list
+      - watch
+---
+# Source: coredns/templates/clusterrolebinding.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: excoredns
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: excoredns
+subjects:
+  - kind: ServiceAccount
+    name: excoredns
+    namespace: network
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: external-dns
+  namespace: network
+spec:
+  selector:
+    k8s-app: "excoredns"
+  ports:
+    - name: udp-53
+      port: 53
+      protocol: UDP
+  type: LoadBalancer
+  externalIPs:
+    - 192.168.169.100
+  externalTrafficPolicy: Local
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: excoredns
+  namespace: network
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      k8s-app: "excoredns"
+  template:
+    metadata:
+      labels:
+        k8s-app: "excoredns"
+    spec:
+      serviceAccountName: excoredns
+      dnsPolicy: ClusterFirst
+      containers:
+        - name: "coredns"
+          image: "quay.io/oriedge/k8s_gateway:v0.1.4"
+          imagePullPolicy: IfNotPresent
+          args: ["-conf", "/etc/coredns/Corefile"]
+          volumeMounts:
+            - name: config-volume
+              mountPath: /etc/coredns
+          resources:
+            limits:
+              cpu: 100m
+              memory: 128Mi
+            requests:
+              cpu: 100m
+              memory: 128Mi
+          ports:
+            - { containerPort: 53, protocol: UDP, name: udp-53 }
+            - { containerPort: 53, protocol: TCP, name: tcp-53 }
+      volumes:
+        - name: config-volume
+          configMap:
+            name: excoredns
+            items:
+              - key: Corefile
+                path: Corefile

cluster/network/unifi.yaml

@@ -3,7 +3,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
   name: unifi
-  namespace: data
+  namespace: network
 spec:
   interval: 5m
   chart:
@@ -35,34 +35,44 @@ spec:
         kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
         nginx.ingress.kubernetes.io/proxy-body-size: 10m
+      hosts:
+        - unifi.k3s.xpander.ovh
+      tls:
+        - hosts:
+            - unifi.k3s.xpander.ovh
     guiService:
       type: LoadBalancer
-      loadBalancerIP: 192.168.9.201
+      externalIPs:
+        - 192.168.169.103
+      externalTrafficPolicy: Local
       annotations:
         metallb.universe.tf/allow-shared-ip: unifi
         prometheus.io/probe: "true"
         prometheus.io/protocol: tcp
     controllerService:
       type: LoadBalancer
-      loadBalancerIP: 192.168.9.201
+      externalIPs:
+        - 192.168.169.103
+      externalTrafficPolicy: Local
       annotations:
         metallb.universe.tf/allow-shared-ip: unifi
         prometheus.io/probe: "true"
         prometheus.io/protocol: tcp
     stunService:
       type: LoadBalancer
-      loadBalancerIP: 192.168.9.201
+      externalIPs:
+        - 192.168.169.103
+      externalTrafficPolicy: Local
       annotations:
         metallb.universe.tf/allow-shared-ip: unifi
     discoveryService:
       type: LoadBalancer
-      loadBalancerIP: 192.168.9.201
+      externalIPs:
+        - 192.168.169.103
+      externalTrafficPolicy: Local
       annotations:
         metallb.universe.tf/allow-shared-ip: unifi
     resources:
       requests:
         memory: 2Gi
         cpu: 100m
-  valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-data-unifi

cluster/volumes.yaml

@@ -167,3 +167,26 @@ spec:
   nfs:
     server: truenas
     path: "/mnt/storage/home/helene"
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: qbittorrent-cache
+spec:
+  capacity:
+    storage: 600Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Delete
+  storageClassName: local
+  local:
+    path: /mnt/ssd1/qbittorrent
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - k3s-worker3

secrets/auth/authelia-secrets.yaml

@@ -1,53 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  annotations:
-    kubernetes.io/ingress.class: nginx
-  labels:
-    app.kubernetes.io/instance: authelia
-    app.kubernetes.io/name: authelia
-  name: authelia
-  namespace: auth
-spec:
-  tls:
-    - hosts:
-        - ENC[AES256_GCM,data:eJ+DiQjaE5/5WogS7kiB3vTwmXoX,iv:jnuJ3gMr9sEmGSIcDHoie+c2VEbKiNLjBqr8tjKPerk=,tag:9BEaQLLqpbizpBbrID/UOw==,type:str]
-  rules:
-    - host: ENC[AES256_GCM,data:O/hVLi3wQh7JM+mzPI/bxWX4NXr/,iv:r83r4UQ7CtlXiF9/c6RYhx+E2oTUz9IwFjfVe7DoT8o=,tag:BwLjqcm2i9AN5COfoOiGTg==,type:str]
-      http:
-        paths:
-          - path: ENC[AES256_GCM,data:pQ==,iv:YYwQLcOzj6tWQweomLJAeRXxN8ERAQCSwwwlRgt1qME=,tag:XAYXVCvdunG9ZFI1bdBtzw==,type:str]
-            pathType: ENC[AES256_GCM,data:EmMHVx7B,iv:dVoJ/nYpvxIWwKIZUWsywjQlOMe665lJYNAVGLx+aUE=,tag:h6Yvon7Jl1iTSAs2EXCaNg==,type:str]
-            backend:
-              service:
-                name: ENC[AES256_GCM,data:twbMoQBPnK8=,iv:A7LUZHcZKvRK89vlBIuBjohXoluwaD1AmwKkFVzVBcs=,tag:ZXCZv6sVHWaaMi8ISIpIpQ==,type:str]
-                port:
-                  number: ENC[AES256_GCM,data:WU8=,iv:DhTZ8anZY+UEanE7NfTbWdmTNUe8n8dBrSwJqCmOLRU=,tag:MWOS2qH3UsDNIpf5jDDfxg==,type:int]
-sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  lastmodified: "2021-03-17T16:01:45Z"
-  mac: ENC[AES256_GCM,data:ldGZxkr0gkOtjlLcCtnOtvqSKQPFei9OSaLk4T7rLTlLUzhkSnOS0xMm1S5maGg+2vu1L6WyRzdFnoRi2lnBbA3ZZf7ieBRDRxE6VBU+UILLoNSh6lMngn2Tps4IO3UjBWUiSr0CdzhMaWZtzsxVEqXyJqaOnp9IgGVzSOony+I=,iv:eo+Z/zeAyC7jJz9qWvwjIka6F8ML9O5aMRttUtYvgEg=,tag:VFtKdZ1RlpDrI5OGyz8OJg==,type:str]
-  pgp:
-    - created_at: "2021-03-17T16:01:44Z"
-      enc: |
-        -----BEGIN PGP MESSAGE-----
-
-        hQGMA/JorPHm1g9XAQv8CaCSaMUrEEZIotPAIjwJrctpm4xHLaGei+/WfHgrfGnE
-        Nho/KVR2SlzClTxhYJ/yd87zf6/AnoTaxZKn7TC9jbrRsZNyECwRYr2QvL1jRbWv
-        17PX0DU5EBDsPFm/8g3QLXon3IB43u6KOTxai0UZRASFL5leEa56t2estzKPe4Cb
-        itSFobq0mzGqi2CxgVccLREchve46DDSOglk0238LWOUMB+4JW9SWBq+WE91vE4a
-        bba0vO8V7lRtGGLN6YMC7JnsPLoabVsWUz57ui23GOy3PDMZjv2+50MMwe0g6GG2
-        avdTa3kjFl7Qacc2HfiBDXUirHwkPw0h3Qdn23MqwgVGk39hnf3TtuYV4tooPRn3
-        CHvNVm1EMr0vDcequA14kJ5ui1W6C8y6FJ5rkBzwNs4Vl/qsJWx/W/WCSToda0Bu
-        OkSLhL8Gb+si2XcUV+vMup1sGrQZ4NBbqeLS14lUmTHYuQGTzRiy/7QP893Vr4yM
-        L6GxDp7PX6ZrBmf/Ogz80lwB6qpplFYxIlUff7pXklutl2deWvUCo6jDsbokDBMy
-        A9jIkPCMkPlwelhKSxuky423WDGuJ59BZE/l/vDXDZr2vKOy9Crc7sxAvSg1fBXo
-        83Sj3WvoUgz4wRfKcQ==
-        =Qdxa
-        -----END PGP MESSAGE-----
-      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-  encrypted_regex: ^(spec|stringData)$
-  version: 3.6.1

secrets/data/bitwardenrs.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data:BjlqSydFIFRQsWnuFfHDLYuS16O5N119A93YCH25WL5vT99jpqnt3grQ6zXBfcHSGNXmJ3Q5n5QBIM6N3va9AsQvJhqjLDk5XPFKGNy1mq0W75ywkkwis00Vx224NjAAEjOvdJ7vUC8Z3yM+PGv5McFnIZ1wyR6l/2wFkRF8fffOTjS1DLv63nDTFUy+his6368eDlE2WFxJV6gsWN5KoBH5HdmZKh6YzYplFtygUfQc7kpJWZFK0ojWaD5nWn/CiepWdZlrCk/9n+4kywxUkAIGZADMk2ZPBsAaiGSPy7bwv4ZgPsG0O3DzdGXyh99QfqTjzUxflygv5GRXQYimcM4yF1emIDprDs08E00lWSZ4JTQXKU+G46A=,iv:+XkcJV7NHKPhRjUStaWpzhauHQFzoJthi6LJGH1C+E0=,tag:N3xxcZ+MtoRGElduYP63fw==,type:str]
+  values.yaml: ENC[AES256_GCM,data:SRVFoajNgW7BcjwW7g9r7I46j7bOUpTVyERjZnpWVQM7aBA2NoujQlKDuiixkb2qn+ioUxh4WNOb4TONBmuw7oD0U7kfxhHHoBeBa5BTi4y7MBUga02MhmdOv1YR7Su4XrBjKcM=,iv:qGJWW4PyqbfNyHw8C7S+mlBxS+JZqob4pJ8GhDkvF+c=,tag:oM39pT696vX14f01cJtu1w==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-data-bitwardenrs
+  name: bitwardenrs-helmrelease
-    namespace: data
+  namespace: data
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2020-12-12T02:12:00Z'
+  lastmodified: "2021-03-21T22:30:50Z"
-    mac: ENC[AES256_GCM,data:eLeDZCMj1LJbpIIQG0CknDELoTBFpEyubj9KmfyFL8nxbyOhbBwm41XAb96eyG+4FahOt1WFSVWdve4emoyXdV3hsXwtadkbfqLcpc0fsNO2VBWJXAd+sfttdC+drg00zK1kEjWXl+/3+Hp72CBZs4NK4tU6Rggy80ppUMW499A=,iv:CFbn6Txum5nVdQtAeOrICm5W3t0Iuf9SP5CQrwH8X48=,tag:oCOTekxmYDYBSCoo+rcgoQ==,type:str]
+  mac: ENC[AES256_GCM,data:9h86S+7lvZZhh+jPLjJJnQAmJ9D47x6GSkmqDwr40Ni5jtut9blT5d9PIYYNAwioeOTtCwDLTEpaDiTYRiVImOIh+xyg/6kC/MNBX2wmlY8B33/zkNuLN130HVjeVay5yWxTZdZPBSp9Y5cCRuPVs4eWAqJxVzJLGmGt9fnd78U=,iv:qxaJM9ZzUFnksd/qHK7wJN9O/gbhXqphbV7ZRxbwG+A=,tag:DvDJYFi3AzkBKQDLUaFiUw==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2020-12-12T02:12:00Z'
+    - created_at: "2021-03-21T22:30:50Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQwAoIrKFERFx3klVdaZBAxsqKoBIUZq98Qtsdp5b9FwCCMi
+        hQGMA/JorPHm1g9XAQwAjyfbjWAcUU2sUaFMYMVQsClxOaMnACHzknY+zpMfgXe+
-            NXaILCGla+3FD0TQGUw+yhv6+n+GONJjFZyYiQj+N0m+00h/2xW/4KQ7FqdQ+RAp
+        oS+cuqm1eDm9nnDaznEGDBvCZBm5WNzOqoW7TgHVvYOtgoI8fmleEvqAk9KQY+Uk
-            W6v2NAvCkHoFAzqMseQxn/RcJ4PsbL0A3zEnRuDBVDuj29Nmc/QFYksL9Jx9jy70
+        MYBWZlLbO6SuDzAvYnkMvnXi+sLvx6MwN2VQldwfp/rdxlV9eG/IiLAAPqR6iEAi
-            blvYztc91+RyO2vrTMaVq0RignrB0Czy9c9twBL49bvqRi8xldJjkypHxZgMZPU+
+        lZoUIXzrBqWbMdOrtQ8zznXwzRXha4K/4gWcKkKG7KGMjGEUtglBY5nWbfm/zsT2
-            FtTZp4Wgj1x4LgDjg0sWd+XcOFQmJnoY0R8V/WRSvw752479Q0T72aAB7iFiccUP
+        WCdMSrMfSsjA9wEM1RmClkdbcwfKK/rzkLmODk4CIIOjzDPeIQ7k6oEAnjKaKK8s
-            ArgcHnp1E4OLx2deZQ8k7yLKy3qoQa33/sXQQ62Y37ErVYwrZAIteFCh06srMV6Q
+        vgBXBjIGTo3OTuIDSKU/HuXUb3XETVFG1kMIQfzpJTYnvxCmq/jHHpGsKbuCSSri
-            gbaZRZcMpXlgZD1X8WnR86z8WCHM7zP2o9Umwf9ES/U6s9M3RJm8n5smAUh9HbPA
+        Vz8TpcXsvQdIyRJFU3OqPNiDDoNXkTHf04vuo4LKEiwk3xxgE+SO6Uj2an49Zxfc
-            Yif6QkxWaPNljpirLlx40kZIY1SepwrwTZiPQmvQ2uBgfrs893PUqmKS6g/K/mCZ
+        VYsJV3XtTgL9H/daxPHH817Nh3h1o1GisGX6fOYcD0M7aLchsb4oYnoXy/zy19RE
-            vocBtYmd2ImXU0uKfcmx0l4BEOZeI0ZSSHM8IWRg+xT+zG3RbGLfDNUaS0iJae5z
+        xmuzcBLC4ZaaaDENQ56W0lwB1nUubXMIGmXB/j2NgIEvseLFdifoTIjDqVWN7DMz
-            kkxIMcQ/3INYwTSdYGrdUlQ5IKxQbl11D4KC2eWzyjl/mFVIQjQ3BQn0u9JLQfBt
+        8E1jZc5MZ8fHM+2lDSu+uSyp0V3wwqt+rpWoqKND8cm+OMk5YxSacQOb9wBxskrb
-            IRQAM/0fZxDsoPGGeFYo
+        5Ufy6vw07zsE7S4J0w==
-            =Z9Vq
+        =nkPf
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/data/bookstack.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data:VrXNgzjTOgWXK9ncvpOklmq7X1MvdVSPqJYN6ieJLx9bUNzK9IPzMXgab51JVqzVqLpMlls8QqHnLO+Cd+7X5ZtytZFD+YAjBnL3ADzfW3Ca37bHB/K5g9uyIrf0aHOOWNwT4kSVUEuBr9XT8hJsh5Nturcuvl9qmQeniitLJlqMHdRI0rQjRYvwjYGwcEjPK04xPLjBX3U38NKuRGE0Bdj7AbDAQ/oFSW7SJ0SHgk5fVt8kUNo0FNEL9ed6doQBwtom3pKslUMukBW909WylqIJW7DAzp5/XXt2KEAGcu68zYpslzWywlrnDgIf7uPofX6XGaZxDTPQ1G3oVI9mdnbaibtP7FLBWBNl4G2PO+/bche3CFsF4hvn7e60AlU4KbjRdwQa4RHy1pPt9v4jV2Z3F/G6UfHOgIXMrBnA,iv:/sl12OZuH28ZgNneCOkRRDaXrhXTe7B7/iHAXRpq2MI=,tag:s/sFa7tdauC9OlJ3y7A01g==,type:str]
+  values.yaml: ENC[AES256_GCM,data:fLJ5/0sBvMb2h+7Jl0QNad/ysLnUWxeBq/YnT2db4oOcdOAbEnKceKCPIxG+35g23UPWY0KiYaBatrhyo/vApbg7J1heqdJzRY+3WFKmAzZnREM9QusjMs4Vxx+t/MwWi6BFVFI/AQy7R1UD6OpLzC71PIQyPg==,iv:gTyMU1CAdRWoOfFKxPlsqz8D90JI9VZF3BMkzOpz+N4=,tag:ifVGS4nRIf7/YfLgZEmlEQ==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-data-bookstack
+  name: bookstack-helmrelease
-    namespace: data
+  namespace: data
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2021-03-16T01:17:19Z'
+  lastmodified: "2021-03-21T22:30:05Z"
-    mac: ENC[AES256_GCM,data:MzuuVxqV7oAeqyl06HhWO2r9fEgYbcIISBKo3t/icz2z1QCdq+BdDENEJJgjGxoRIYKQB4QxuL36Uv7yQIYATdBkhkEvECeS7HiyjudxhWXQhwXIqMc7gvBSBYyAgSJWM8Ki/9uJWBHXkJtXLgtjowwxXrHkFPcxspvmF8h5QQs=,iv:guYcRlHIIX1CDU5BL5xKrwJJjDDGIeqXZ3UgIJSWmHE=,tag:P+5zdp7XZyOHqoHrLVjUqA==,type:str]
+  mac: ENC[AES256_GCM,data:1JO3lHyzIZRoX9lTnnSd5ciJJEGwaArfdQPRv4dBnkVs81sg326AHcqDJTuwymZGdqoj7yHSQ7H/9ZIGYTMGdAoh7rvHSe5LRSp5+1sAcGzZKsEb6N93FhuNHR50I1E4zaZad0pIV6VyuCtorTrjJcR2Ui8aL0vObV24lqiLa2o=,iv:rnbyjO32NiOMJJlarB0GZEq7HIjdgs9CIrHtMz/SCRQ=,tag:G2nSvXx7mmQ3UMSOCd8SSg==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2021-03-16T01:17:18Z'
+    - created_at: "2021-03-21T22:30:05Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQwAh1ZmezfAZ5hCP+LELp+cev/cnmfIf+6pQsvMDgfdpSbk
+        hQGMA/JorPHm1g9XAQwAmjwXmYjCaIico8iBZFdQPn4Czw6GIwwbONL+Uppj56Pb
-            2qkI7a9oDo0GrB7DDm5ZCMEHFkM84sP6Gg5YQzuoj4/m3EOg9pxkOhGHqSSqH6/u
+        LXklWVEFwq62I+d/LuWGJ8pI5ISl/lxmGQ9hufwxNQ80rWPOvis7QXPZ6AOU2zdw
-            j8YzzgQ1jMeVBNOIuUAebq6xyZkfr3jo6Kj7zU3FqpjovyxhgDuiy7AQLVrRG2qw
+        QgwmeV62bhccr8ExL2QCp4/Edzc/VBs/yl4TLRVAnOYKKqCV3uTAeu+D4bks2CEQ
-            kreZekkbDeRYTCbu28ODxjaqmLLCQCzQkGsjtsKVxTlzgktjZM00hGIQzC8MX8GG
+        akQsTr3qAEDcznyAn83H60e4puZpVc5d8BgUtYOU/z047BsPnUGQif7M7/CoPys1
-            hvF8N6+sZaMTd1QsQ2Rvw4J4nhNQB+8gRXDzgy4HXXZ1hArxwx76FiZOdrrPgcXy
+        diYkHhBd0h+zUx5R6rzQooCEvwP49l6lTDm3iEcaFVWDqQ29yrU5D/PeiYfqoHbk
-            rkkyTIHr2lBJSccsmQuN2j8u+qYJgdO40JgUXEABX+yhf3oVZwyIA4K+EGMm/DJU
+        Nb3Q9FMpQJLn7CUyYS1f9FvHweakkTFxJSzVn3QYw9UdselCIxk8BFrQatCb9Hd5
-            5itRzn3ykOS5QXUFAggUFSl1CMwGP7kZH0HEUpWXvcwmBg/LXhYrjjvsKlLY3ZLF
+        0Hp2abnx/EfG8mdleXdg5dk0xB2PHyRhZpxRuluN1QTUYtmOvV29l+GOiaaGIyG7
-            Qd1yG5qgMhrHdYhUgNtqm2jfFULNZbcCQq0xaP3FXKmZ9sSmwb1OeTPgKiFoSi4j
+        HYMCJjokCEPC/i+QRxXbS9ZoUqyP8BurSJr42Y469fL0Ej2jE04zX4oO0IXPwgRF
-            VGr1Szqq0vjywd0pqBti0l4Bu+HIo23Jnw9H7uYE+rhTez1tueGJLiOvmTpZ33vp
+        iiFYav2Zw7bHnJ8IAIBl0l4B70poZBUc00FKDZxsVNpFu1H1Yo7E4JZjoHvNK+U0
-            gFuZ7/eXMBHdxQrXzWHR2EjzYLI7wZMlW3FtGCy1byr8S4nGUD17lhNZBK7BMBRd
+        8eqbyPFprZ8Qr8u+f0HJNbgS3OhNjLrnPqyIhoMLEUSl/pRdvQAcLDzQGU+TIFUT
-            xu1XMkNJS2CgaHJ7MF5G
+        hB85U5JKH7nDYcDc8LOc
-            =yrqp
+        =ibk5
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/data/freshrss.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:286wpuNUbtaKhs9XlCpBdl8yonCPAbr7p6gXdEBckMChaXRDaDqgWImWBzo3teOoqFQXYe6aV+ktEBW6zVYrjBdUdzPaxsGCbRe3RonliqL51J+wSPo4WdkQiEe4c/8PzZvuQH1Wg7hjfpwGUEDKtK644VN9q2ztorXTbMOeXoU9V0VU70bbW0KP34qoj1RNflm0o00D3apiFL0sA73m7twzgmgZ9kKrDfAzUYcPUYtkecWHKFQqVVps0WpXTbotrMMXAgdjn/C3sgI=,iv:y65JybWbsp+yfLXkcK50m6lJGsnh6o+wb5Jtic0iOL0=,tag:2AGrsr9BzrDZm7f5k3HaYg==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-data-freshrss
-    namespace: data
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-12-12T03:13:58Z'
-    mac: ENC[AES256_GCM,data:bv/jO8+K6car+jPodpoHEFjZQDuHOQoINebOJwTWxiKD71ejvHAHN3SLi1wnn+TVyPbKYrw8IMUoTXU0Gd1xaiGipytZiUJrD9Wn1i8zO79B+eHozu9f1m8/NWgJM09Qlit3A84wqa0dzVR2HjDCtfySWz8UsgY96FLLg60vETw=,iv:Y80Wwt82AGBFsg5klkNjBzw0DfPnIBb9aXqoVrFPhiw=,tag:URgBycZyWkB1nPH4yffnPA==,type:str]
-    pgp:
-    -   created_at: '2020-12-12T03:13:58Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv+Ol0mAAzfjSIyWtdPTeD2y1nFFiyZ2GCGPVAikjb4qX/Q
-            J91A3PBVZCB/Z5U558CLYNxzhtCii4OQhX1Ov/WiTIYx7kcBRuBQXVrK2MhPQ2KK
-            3wCZiRTP+hMJe7kcVwZjwOz6rg6EbaiDb+R4/S2uU7w6tJLTafvJsjmp0n2wF0vl
-            62Xs2GpBtk7MuKhKTQN2z4Qb9QwaMtNEsNPi2xoDIgmrfmIn23+KqdQrU6NRtr9r
-            P0tqRdkSD+ERi4BbqZcP3GA99CmzRjdhuoued1FhROUYEM6z4YYWNxEsB7d5SZkV
-            uiim+DXaVvkrR5xHsgeQU8PgFEePNidpKo8qQgWIJ+RzMSHs9Ixk/9aWtznqrYFV
-            bw+rUfoTnqGfpAPQZr4Ln3TvpeuI8En97M/2cj76TctmL4qyFSwOq/KwpQfAPDFa
-            UOO/CTi3vVDVYxWH/KZf1eWrDkEPTSeKbtF8rCFm+2ebMUcid3Fd3e90VvLpUOR+
-            NWB3BVWJiTk+o2cWoBKZ0l4BlM3q41LzKA4nYcg1/nD7jGQzHJPfdZrs6JERpuam
-            ZNF+8bGt2T9amvFc3tS4beZTMsa8OabowNPejaeHM0ta3oC83iGPfExJ/hXtQkR2
-            3sqTiPJS9amBNJg05bsS
-            =QO7c
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/data/homelab-registry-credentials.yaml

@@ -1,36 +1,36 @@
 kind: Secret
 apiVersion: v1
 metadata:
-    name: homelab-registry-credentials
+  name: homelab-registry-credentials
-    namespace: data
+  namespace: data
 data:
-    .dockerconfigjson: ENC[AES256_GCM,data:qUlGvhTRg2/GHlGDAxiQtCgzuGGBl4twYokuq69mb6oLHYaKlt1Wce4bU9NELPNcfmILMycT5a+wMlwL25OW/urCD9puPo5ZPRTaGgE4LizM55RTJR2dWZmbMMO+4DE2CS5kRi3YfZGxztd9/bG33MDlu55jeALhhPa5oVygXqnOvH9LTZtqJIKNS7wYGtJAAPdPRwyoXDd7SsX3iuTXqLBfhBzh2t3r0a8kYeIuVCi7ZSw0kWIvVDRng00UEoVEhVVVgxdRHijTlSTyEU7iobvIaO0YQOm/Paq53vIa6W0=,iv:Xfgrr/CF5FBXFLKrt6S+XP7jku9p2NB1GLVQF/5KJag=,tag:zJVF/KU/sBBxv0XKJ3VUxQ==,type:str]
+  .dockerconfigjson: ENC[AES256_GCM,data:qUlGvhTRg2/GHlGDAxiQtCgzuGGBl4twYokuq69mb6oLHYaKlt1Wce4bU9NELPNcfmILMycT5a+wMlwL25OW/urCD9puPo5ZPRTaGgE4LizM55RTJR2dWZmbMMO+4DE2CS5kRi3YfZGxztd9/bG33MDlu55jeALhhPa5oVygXqnOvH9LTZtqJIKNS7wYGtJAAPdPRwyoXDd7SsX3iuTXqLBfhBzh2t3r0a8kYeIuVCi7ZSw0kWIvVDRng00UEoVEhVVVgxdRHijTlSTyEU7iobvIaO0YQOm/Paq53vIa6W0=,iv:Xfgrr/CF5FBXFLKrt6S+XP7jku9p2NB1GLVQF/5KJag=,tag:zJVF/KU/sBBxv0XKJ3VUxQ==,type:str]
 type: kubernetes.io/dockerconfigjson
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2021-01-15T22:42:09Z'
+  lastmodified: "2021-01-15T22:42:09Z"
-    mac: ENC[AES256_GCM,data:zrodEizzCJsdcFiR2e0szs/DPv7PpCwxhnKUE+tKe0Qwn2Ff144Rtk5BJGby/idwi/PQ0bzyZLJkxkcOLsy8To8/IbQ4t7ADINVOPhUQcpouHGEScHXCUTDFGal2gl3Suv3beidKvDdYeAi3HcjT2duNmwJrTesCLbTNILg8dAU=,iv:E6nZ3l7qgFHZRMqw7vbdTZVW7/rDsOU50VhIR4JP1Fs=,tag:maDyNr3bjO13/mzVH/gJZg==,type:str]
+  mac: ENC[AES256_GCM,data:zrodEizzCJsdcFiR2e0szs/DPv7PpCwxhnKUE+tKe0Qwn2Ff144Rtk5BJGby/idwi/PQ0bzyZLJkxkcOLsy8To8/IbQ4t7ADINVOPhUQcpouHGEScHXCUTDFGal2gl3Suv3beidKvDdYeAi3HcjT2duNmwJrTesCLbTNILg8dAU=,iv:E6nZ3l7qgFHZRMqw7vbdTZVW7/rDsOU50VhIR4JP1Fs=,tag:maDyNr3bjO13/mzVH/gJZg==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2021-01-15T22:42:09Z'
+    - created_at: "2021-01-15T22:42:09Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv/f+aADRQPAXab4XqbSIc4XPoDw8qA9evEDr+xbWeJziGw
+        hQGMA/JorPHm1g9XAQv/f+aADRQPAXab4XqbSIc4XPoDw8qA9evEDr+xbWeJziGw
-            1Hx8Lq2QeH1uS0ZWVlOTr/RKjGlPw8+NY5g08zXE7r1bV0z4becrd7bwb3Jyif2D
+        1Hx8Lq2QeH1uS0ZWVlOTr/RKjGlPw8+NY5g08zXE7r1bV0z4becrd7bwb3Jyif2D
-            YRcAi283O03sk5wUjvX740bVuqAeiVAH3D3d+rqaZaSFO0qiCVeth6yIXIRnFTdf
+        YRcAi283O03sk5wUjvX740bVuqAeiVAH3D3d+rqaZaSFO0qiCVeth6yIXIRnFTdf
-            gIPt26JgalkEeSFTgdabPy4NoAQqiEAx4JRHhnY1O9kcC5TkDqJcQkRX2F8gn+0e
+        gIPt26JgalkEeSFTgdabPy4NoAQqiEAx4JRHhnY1O9kcC5TkDqJcQkRX2F8gn+0e
-            K9ZvZN9hCu6FMkLruLzCLoqgXTpTmRhtboVMkGm6VN7pd6p9kMh+wVSp0KZOJgTF
+        K9ZvZN9hCu6FMkLruLzCLoqgXTpTmRhtboVMkGm6VN7pd6p9kMh+wVSp0KZOJgTF
-            p3ZxCxYrbK68+nAirHtB843cZOH/u1It5r3Fy1D10j/Ce4DRRKbJ470f+tG8kcEk
+        p3ZxCxYrbK68+nAirHtB843cZOH/u1It5r3Fy1D10j/Ce4DRRKbJ470f+tG8kcEk
-            HgSgflLD3TbjaTeop0C33n6WKfkek8Sv+ERcxsVQh72SypYi3M0s53QXnasZe2t+
+        HgSgflLD3TbjaTeop0C33n6WKfkek8Sv+ERcxsVQh72SypYi3M0s53QXnasZe2t+
-            4EDQGo4YoANijzmQUjBwG5QHqGqedLZfAmUKWAsdP4qovXGOo9OR/Ci7a6GKVVog
+        4EDQGo4YoANijzmQUjBwG5QHqGqedLZfAmUKWAsdP4qovXGOo9OR/Ci7a6GKVVog
-            QP5JV4Ekf6LLmKqQfORl0l4BeqF+zkFyBPnXO9uxwDeAHCPkMH6/X3FOzMCiPJfc
+        QP5JV4Ekf6LLmKqQfORl0l4BeqF+zkFyBPnXO9uxwDeAHCPkMH6/X3FOzMCiPJfc
-            n3mPRSJTdbiYRDtccFvbWYrCd1C48UuBA4bUy5THByxvAYpNlD1H+Q2lWbaxSW1m
+        n3mPRSJTdbiYRDtccFvbWYrCd1C48UuBA4bUy5THByxvAYpNlD1H+Q2lWbaxSW1m
-            6nSBuya1InZST2MCeLfJ
+        6nSBuya1InZST2MCeLfJ
-            =wLyo
+        =wLyo
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/data/homer.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:i97EjLEVoi1LJ2Fn/tx3jjsO6+P6ORZlj6/xQEZiT2lywSrQGI3cgZTL6ZxR72lcHlL9gNoU63WKi2j8oAZaCv9YSoNPTkLZad92ByVv0Un/Xa+Vo5aAWx7K0Bo3+CtS49l8/STqynaOo3eGs204ajSHRbZMTdnY4dM+6J1xdJyH/gUFnU+0sG+ydTzQEMWWXM+og2fo/omZW9VLN9m5CvfqfWdbX4dIUiYYc5BJ1DDqKqC/NBdHMiJbtb4V5FGKazt1vsDAHMl/1vuccWcgcuTrWqtTMMqVG3gXnHeVc3sAdaqaquqBChh4vPR2OS70V2UUQjVGy0nWKwfT9BATA+RE2PwkD0DMOSfUremrcBgjA1skxYJZeD6vLnJVLltXw6QmxFvJtzc4JM4byxSBfo8gf+yWDPYJWGMDT1DgpAUlIPUobo8skrqA8Qh5,iv:Te5uCF0K2QrY44P24GPBDUG0OMeMVSDUmBuFJl3g194=,tag:4NR8qwmeUByf97CC/6xTJg==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-data-homer
-    namespace: data
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2021-03-17T09:23:00Z'
-    mac: ENC[AES256_GCM,data:07h4mG2P8+kL9Yn03aQBqAwL2Z9Bn9J4ivISS6XmorudtHbmnMPvvSZ6erCnX10GCm27RwDulAJk96m5uAlyo8UP7IZu25wr2AsAMsBIXHLilPsuToBPUQiPumpb/0WFZwKWc7gFyo8q+TZ/SP3A2R7IUVvBCjDmGlSVWZS09Dc=,iv:FAEGVkBiz7YVp9Z7/UWVH1lINfsXKFo5ubaZrs5Wugg=,tag:rY3N4GOT7Nu7qF4Qouf9mQ==,type:str]
-    pgp:
-    -   created_at: '2021-03-17T09:23:00Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv+Lm5fwXOa13pUIHqnprPbr1iPJSE5b1BIeWjmzrUFstYI
-            OhTIRx7duSyenARVjwezJHpZ5Hqh3PUEjga63pQMS4JvubRBxWMNQIE+CUKZhkzN
-            Ucqj5hJYPpVOOdColtq//k0c6/l9cZDIAg+rCUZnoo9XmVunsO+j4EPeODpRkV0r
-            T2V2/9YbjMnVbKdpWNLYqt2cbrkSnGcJeCeVeD3L1tZWtK9ApFd0xG1NhOlXgJnx
-            pvYcWkX0iPS52wyfv7AZaQeIHpAuOYyjfrHRG+Su2VAX/GYcPzkROCDX/VChHs7h
-            9eZOVrGWa7Dg9twnJnKSYPmXZ6VS0TuAOWFDLkRkYrpMpR6JvjpXfQZabC54lrze
-            V/mm4i6Tun1UtqJHqKrLo3QP2Df5gRgb+9I0surmqeNyF4SW6FfcZT4lNhSD6hQp
-            wSG0plr7l4eDMujCc/NFAvxBvc79Bexqu5mwG0OS66yO18joV/9mwE8RjazyYfbP
-            UXqANVzaGgaOKzEIdpLE0l4Bihf10RWhH+Z7S2ZFRw2TMt/bTmqyPItE9c2lJOLn
-            35/Pmj77R/IH/N2UeNvrdd1MZZ8llz12bsd+y7jv/4WOtezreiEeuLcfbx8TCWgX
-            D4hOq/vJA75KNQFrHN5i
-            =ND8l
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/data/joplin-server.yaml

@@ -1,35 +1,35 @@
 apiVersion: v1
 data:
-  values.yaml: ENC[AES256_GCM,data:km5fyyaoibeFny6pAKftc1gi9pk6D0bqr9bhapOZ+gHcPbyl8uwWNCUhLBbFiInOyyKjrGboydGX/OAFAqQg1DgD/rwrJLdvUr0o3AjvMjbOxedE3iJQ9X2/9F0COnH6EMasV7N2mMYP4BTT0N+4tJqrU9R6ITOUZ2NLlAthg+VlwqTzLoALo+TXnZojFF0qtVr1CVZRU45WVuhVAPe5K28C9svNTKpajro1bmpQoqwFno0nkpfHm+qF30kaXSRRMlCanjHdH2NjxP7jcFKEMK6+dGpES0SJtyvmnXKRUxOPoGNrxACtJ4nr46M0lGY/Awd4qJacQKCtpILoZDVD92Hj2R498BrCNQZziZvKk3wzZpbiLRISaNGRhkaVqYUB/7GGgWsXlmh0HXO08VUUFhFHc57+HuvXQwgEETTBAJsLXOeLtM/cTqVI8/CoVCr6IT5aSoeomYUn/bug5dm0ewCIhdxU,iv:P53a3V5oaecx/HAm795GGPdMsajKBBsU5K/KwHVq+kE=,tag:HZQkaym2aCPsf4FeTbvACA==,type:str]
+  values.yaml: ENC[AES256_GCM,data:P8HwGsmeVkiQQHdM+elCJqzyLAyoxxhVYfaVcyyGp3JZhgpP+9ADmsupzANKlmj9T54KJq4qgESFBUaG5oAaxx/kN5O2oECf7Rxtq+v/bbwAhleOmkPnWsh7X6blFhhxa7ijfOnRBqbpzxRzfv4aHyEFdreVfctaDbhQDpe+ESFJNczOsq1FW2GIXh40JF0o1jIqLmydYC/1+Y0t7QvL5WAd,iv:lcO6EYmYPVSZ800OdmTk80JEwU1lsuMnaRp2KjRk5Rg=,tag:254+fzWab9D5DK4YCwQ5IQ==,type:str]
 kind: ConfigMap
 metadata:
   creationTimestamp: null
-  name: helmrelease-data-joplin-server
+  name: joplin-server-helmrelease
   namespace: data
 sops:
   kms: []
   gcp_kms: []
   azure_kv: []
   hc_vault: []
-  lastmodified: "2021-03-18T13:29:17Z"
+  lastmodified: "2021-03-21T22:28:16Z"
-  mac: ENC[AES256_GCM,data:I+eOdH+jf8HR+E7Nbce3QBPIUwBxBAb8qtKZ9Qssjs8jWPl3CPhT26dKwA4EnwCDPbBdaOaefqWd+QXiM7hVauqxHbho3yBEkUBqwJEAKisn51aPO1eGxQS/mqGPZhfd5vvj0i4a6F99KwrRIbS7Mcs6Yg/c6AQeK1+rvdOWvzc=,iv:VbTH1WS71WkW/ebWmubcq8e/GcuiEJa78rdF0OBpjM8=,tag:OjceLhJlsmFmXkYCMZiqtw==,type:str]
+  mac: ENC[AES256_GCM,data:4vXg4CWkBjxKoOxZO6i+hdfoSNJ0zNkJuT3tj124c6H3NsTLNKg2424VQ1vzVIun18r8euMC0dRSFcTjqe4huyDs7VrMfwm9WvCxXI44Cin+c9JxQBuVGsKGdZ25tZ3b8BrYt6/S7YbGDWcGNRf6aCfoZGH/U1GaXlLS+WDyDEk=,iv:MEH6At964jttE9fKfRn1X4jexF/1YG/T4yJB8LVI0Gk=,tag:RiKAsPpdMIS70QNiSuU5mQ==,type:str]
   pgp:
-    - created_at: "2021-03-18T13:29:16Z"
+    - created_at: "2021-03-21T22:28:16Z"
       enc: |
         -----BEGIN PGP MESSAGE-----
 
-        hQGMA/JorPHm1g9XAQv9EiU5T2sZ+HPxSUxB1bup5KfJoMg35+NmNOwuDhYrRqMS
+        hQGMA/JorPHm1g9XAQv9Fr7lecTBJjD8eCeuXcQzQFdirAGF8De7TLX2tweaFZV2
-        kPiwK+u63en5LBt74LZdDIenRWVIJHqo08f4UWdGHquQsE7q3tlv5uhvfyoftv0Z
+        FMCSpmCFjf1PuKs+3nTfWZbTLg7gtKpYcSSjDerfzWUwkvquoO0P+G0JarzNOO1O
-        pmnSeccfU5B7K5fovGAv31TTf8Zduy/De20QfoeHkcXtVnvJ72f++BBqjPKa3op+
+        VY4+opKKM9uMrgGXNaUPm1vZtG0PcJ/ESf9boE1R4DcpFeUlhD3slCB+ZTgfAzjs
-        78KEaWAWqo5x8sa8F/B6uYDeBNG4MlGEGcONAflSdI/UYgDCK2PmJ5ybqwPYhWab
+        RC6e/IIsDQOcLISRm21p91B4MK/IPqI4yGSuljgQncY5oi+Ssj5oS8dxcpEFny36
-        +sN6bw60RX6aToPYKTdLjo/yN32DVDEAJUePEYXXhLMsNmr7g8vFGzddHnh2yhz7
+        M8SbyMtsYDu4dEyJon6Y96W5QkJEeFJxFJ0mv9YW99W/GK8iN3Ar5UIGniE9GyjL
-        WN9A7oRFMBd21K0WSyhPChEIL4KBkTV3/mrYm97RriWkbIv/kOQXBeXj3+zVsQa4
+        oCeFXgJcKRFGrpSL5GbVDe5IiI6Wv38xxNZI68QYxE1ZR4AZCp7uRsdh+lBljneJ
-        4SWuHJ/zJN8kC+EJcs/jXGeDvv4K7pbPpmx8Kv4WPqAR135Rio6kgjqu2lCtpbnv
+        GrJrppD9TTfKxEyuQ36V66fwIiLt+LDuEbhTEzYvImH5PhiTpw6JlEnDtylq657i
-        0qY2P1peEa722lpPb9ojb3w76tGNG/rOqrs+GWvDdxmWPbkIm7DFbKNylZwZgLBL
+        LcGN0MkUXV3KzY2oczoB1AlISwxMA1vz52b4UdMLaTY+7BznmPbg8h36fFzdDLre
-        l1Rx8nIAxptKY33mj+qH0l4B+hk2t55o7sSwHV1ZKFGJ9LZn2+fbHVbrTfvRafFO
+        ActjYwfJAL4g+Ml/TksM0l4BRGJ/cBep29TfXVBgU/P4l7NS/77dofdw6wzrKwmr
-        EDlHxLRqNyO/pjT5SSG+QugO+4EKOPYavBFWDAGFl9AnaBKft8Rhhb6V4FPqvksW
+        04q4ToE4OMr7PFdhi1g7n5W6J/OXbhJQKlBFFqqu/wAckMJB9TIq/mg6H6nHLpqC
-        USgFpvOIf1oLkdf46zW+
+        TDwi/jMoSFf9O5EbHsXS
-        =fO+9
+        =6hpc
         -----END PGP MESSAGE-----
       fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
   encrypted_regex: ^(data|stringData)$

secrets/data/recipes.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data:2007ghMRESjGqkYzJoEfpo7gN060B7kFepK/Dn7WiqFnayR4i8jI8S0YG/InuvLmYgYucSCtTVzk3irjwteNYXrfDITgRk4p11W3z6KqXVLMHcwLGIiEVv5DjtakTSsDXNBP/ZqAYOS0LIs1Fvh8wCsSPb02i8jMZzMQ3cyEMwkn5TH2nfVMlzwrZOrAWpjKKS/KWYM+H5sh+UCJYP0MwqxmA2dz+JBXUZU258J2cU0tr/ZSMZOtjakEB9EIpPzkTTo0YhW1nprB8BaetVCMKh6DjsQO7PjO0trQse8OykM08S0XZygnNwd7GjbTAUviVRFGonVNQnh9x3DAg+qohVatOo3USikJdHQ5OxVVeIPP2YV3U0qIiUW9P1+lTc/ksDB1McBZnWgFHuo1ywkPiTDx6MFBbiccr42AlBrPX+TWaomn+/9gLkhOA4sfWFgyzG9oGvu69xMpY3VEk747r0wYPXuMh8Xy3jSNgpeyGakdAUJ0oRy1oXM4ALk=,iv:hewduQppA9ymviERamYwglGjR1tuMy55e7Zp4CiwZ7Y=,tag:DYIvhsMQWpyKqqyRq9WK/A==,type:str]
+  values.yaml: ENC[AES256_GCM,data:6hIJ+y6SQQXQPCP47CUWSsnq2/jzVvj2ZlcrTbrE3dSafyIevK5DutUIhO/usQHCdZuiNG59egBBdjA9p8/CPGxlJZuAFrc9AtTagsxy3rnl4Oaw29/kr1yG/lNGVoFN09kfxLt2SVHxpAiufyVEWQak2vFA1biDkZJ+UhJPjp8c75D1gX0xhB0Q+R4Mmq49Qv+Xv0p7fATQpr+foCzlXr8UlIBdw84YOtxqarotqDFESZJW0/wkl5bgsA==,iv:3umyVWGCvRdH92T+2jQN2sRFynoYRA9KGLU7Brs5nLc=,tag:7UmuWHpg3wl2Brv+G4JOkA==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-data-recipes
+  name: recipes-helmrelease
-    namespace: data
+  namespace: data
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2021-01-10T18:16:01Z'
+  lastmodified: "2021-03-21T22:26:59Z"
-    mac: ENC[AES256_GCM,data:bgGPbjAbChtTlrfIIv80ksTo46PN1cCcLS06AKCllCyGIsnsqHoz/ajKIemFnELj4cUjIOFRr7BwqlrwXgNFRTvOLyJttkKwDOnWj4KwsltUoz14btHKrrcPx2kG77+M5H6+6n0eiq1VxLDGU99R2sDWyrCV4XkPM3Rrkooplx8=,iv:t+FZlGmIccSXo24ohgGIPliiyAY6GTrqBU0y197KNP4=,tag:wSUEDi9tGtiAZVDJ5VEFWQ==,type:str]
+  mac: ENC[AES256_GCM,data:SVMmEyVYzWLnJ7JmDsRQlBuV/KnPru7FYDIJVd3bj24KCm3bi+KFIAugl0wgX0C4q64/iC4LXSK8w++K+Ed3+oQ5sR75/QLVGFCAMsOpiJxTcbVJ0U5Zaht4KhtSRgiY4ydq3mEp0mhP9BkEVO/GRbn39vfA82YAWt0u2z03dic=,iv:dQPQyqKWVBoFFuxO+g1f9Z44e4wVHPI0YB+jwglUe8U=,tag:p4DLo9ZUfJnxgFDcfvfgmQ==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2021-01-10T18:16:00Z'
+    - created_at: "2021-03-21T22:26:58Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv/ZqP1+MAD1aGRWb06WucKJerakMQo6kAGbiVm8Eta4nfw
+        hQGMA/JorPHm1g9XAQwAhCKWGsNY2vb1mdvVFz19uI0xqzDlRLad6iNb0zRiFbI1
-            C+7H6abrmEAOFZY3jzfywyMqUA8keRO8sVNg4bvDg79WsQnzfM4cAdqehQSuvxLA
+        teM9/MaRtjS5I/33p8Y9IqLv6YYnGbpD9A0RigQpV83tuukDi6vWisvmTy9MRk/u
-            WqrTCWZhL1XtWRc2cylrmOf9dQttP/0fm/wnVG6IXqL/nJb+YHmSWOlszp2V9cOd
+        s5pSoNADlbato6+y3rxRzEuDL6Cb/5TBGUacxyZCtdQTIJSxNOhRC++UarxM/uOi
-            OypJvub5I+RVN42RuCBngoAelHwOMuPbo3gJBazGgy8KGtjqFHCL+saOZY8n1Yhh
+        w7YhgVA/1//ZUqZerKHjJ664ONYmhxlzr81Sv9cYpxXq9oB6zsDEdr4ghdvh8/sb
-            AiyAu1IBxLGLOa7EaQB9gUlCv5RXs/Iu+DnjAuf0w+T2jC9eXMMGmYz8Cw5cUoqy
+        rtkPpHQklDTJ9AwpJmtncUWxP2HkoKprmsSxcc4RBmnm/HGSldXJv3JQn74DWcnC
-            Lyy57LNmpkr3/XM6+t+nnUgXJ73yDezujwdZgokJFkCBpSPAq9iI7nuPsVaY63Oj
+        iN6uP+VJ2rs55VJRBN6IwV2ZhgWqpLCDJP/hIltQ4AYA+AkcInD6Nvmq2dkQ/70W
-            X5mcnia4owzR1hzo2VwjMDDx/74q6rJN7ziVAL/ADNjQOKzw5lY5It7hY69fVvUH
+        w77JL72lLZaJSBPFbGW/qzZaw1A4BzwOHjqXU3k4oGNsJZ9xovXyBKp6r4BDhoZV
-            Zp0UsmdA4ZYsTg/aUcJuOGwdv8m7PE2ghHyxVIdQCaYMcJv3Kc8HcGAc8gxR8ljZ
+        sB8TPt94klzOBNBDSUKC+yUCdoMMf1ZI6/kx9rfzVAgDMtfks660IoMFbCHuHG8o
-            0z9Dlm7M2KonesVd1XBB0lwB5yaWrf28wbXc9T8Vf2KmlNpiPZFJxufmNua212Q/
+        r6fLYStrSL0EO9hUXivY0l4BOLkvzceuL8J5+hmSd/NfbOYGqozxHs8I1mB9Ikje
-            m4qnKWZobz3zY9HPF0e9CilRTNJFLFN89YwskeK3gIcNp3JGGUBWq+RvrLDf/k8y
+        d4kYOj2NrUBBvYz9ffBET0s24OmIGx7iUJ19m5HHufjR+3lhCE1xY6etsSm5RFsR
-            zqosh5sXkq4AeRMREw==
+        QPWQiF8lx4yMOtq3tywC
-            =G1S2
+        =N4UT
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/data/resilio-sync.yaml

@@ -1,64 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-    annotations:
-        kubernetes.io/ingress.class: nginx
-    labels:
-        app.kubernetes.io/instance: resilio-sync
-        app.kubernetes.io/name: resilio-sync
-    name: resilio-sync
-    namespace: data
-spec:
-    rules:
-    -   host: ENC[AES256_GCM,data:gWFMYUmmUA7MosojJrNXny8ejWrREZ/4N+6HugVE10/Z5m8=,iv:C78MAm2PFPKlNWRDrq5MYDSxD4IPxXCWyEclJWPg7+E=,tag:sjfSf75voPwoxSx+Lgvb1A==,type:str]
-        http:
-            paths:
-            -   path: ENC[AES256_GCM,data:GQ==,iv:Upm4iJ0pB7sghMvLPVxmximupfAxwzU6DkSCn6K35CI=,tag:4HHJxW9Jv3QvEnFtauh8aw==,type:str]
-                pathType: ENC[AES256_GCM,data:VkDosQ2R,iv:zpUf7aUADlvEoqybV1nAAcJ6seN4dvMAL1ppEFyU5gQ=,tag:AHgLpdYhui5zb1UvW80frQ==,type:str]
-                backend:
-                    service:
-                        name: ENC[AES256_GCM,data:Fkl2S0lkVyuA7dq6,iv:zdh2HqWz6uXAPVa3c+K23extKsNRLK10jPQGKkt+jjE=,tag:dDNSuFcwuTdreS12vIkybg==,type:str]
-                        port:
-                            number: ENC[AES256_GCM,data:Cqpweg==,iv:2YJCkqRsaxX4hOSdQkXIebcgJ+Mhwkt6AkccypMmXqU=,tag:JT5XE7MBd/Dyx2Wb4uDl+g==,type:int]
-    -   host: ENC[AES256_GCM,data:IOxYIccOqDJZtIBmHvaI7qxudX3dlrE79FEweks0EU5ot3A=,iv:C2Ejjjci6LZ9TSHlg5ssqwyUb8agyiPgiA88PYV+p8Q=,tag:YSaxi8cBuw5Gr8IcflwSKg==,type:str]
-        http:
-            paths:
-            -   path: ENC[AES256_GCM,data:Og==,iv:JD0qcfu+XYTSPfy79qF9Jz6XB2Ad6C0MMwQpuELxuGA=,tag:dpEQvOCqoQBBvXMrWPqRpQ==,type:str]
-                pathType: ENC[AES256_GCM,data:vCNvqcPV,iv:3N/9UiRPQA2nxCYxlrMOdXKSBFr7TeHOBFBUQs4Ck1w=,tag:a4DROuJGxmkStDSRWQNTsw==,type:str]
-                backend:
-                    service:
-                        name: ENC[AES256_GCM,data:j9wJbfxkXfpVlv1k,iv:sLIHti0Yh6W8aH0ZM+BTmHdJBSL5ObWHg/mXDKu3uQU=,tag:YA06XaaOX08TmRJ5Fczpdg==,type:str]
-                        port:
-                            number: ENC[AES256_GCM,data:Ml1F+A==,iv:MBv/J/VG9vub0GDLyqc5K8/IIO0OiKpLfyXmiMB2sKE=,tag:fcLjydLm+va+wTivoeqvXw==,type:int]
-    tls:
-    -   hosts:
-        - ENC[AES256_GCM,data:+ftPqrJR0d32X23TZbi1qXV+YeLOViuIMynx9W7cWBEeRmA=,iv:E3bpD9L/ACi//rJWmep29JTTyDGbWvqDvpI+2NX3kTw=,tag:TrZ0+2B6LPjL52Ar+cvBiw==,type:str]
-        - ENC[AES256_GCM,data:3sl5yb6/mR2nwEi1eaHuGH3Vk0wzNt/Qdj7aVmcVQ1zn6BM=,iv:CH0PJBLkPLU2BgkqYK3QXJFmS+PdiYxG2phtr1J6ts4=,tag:QZLw6/Yj7KgT/rx5LdGb9Q==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2021-03-17T14:15:14Z'
-    mac: ENC[AES256_GCM,data:6DpGaXrusUDDvAUBn+bEZibL+kJs4gK+pU8PYg66gUFegKADxaBnail3O2f4zDZwYE3RbZi3F8vXgNKAVlQtRmdxHj+DL0u2Xp9q+kZ5dE8wpyT6Vv+sZaV87GwSdfe4YcxszzKV8DJZ1tGhmG3csRlbcXFIm9OfMzi7t3/fu5k=,iv:+qor0r066zMjCVRM/90j3WxQduzmI78LoiptCp2KSoM=,tag:Fn4gB46/u6Bits8RUxBvLg==,type:str]
-    pgp:
-    -   created_at: '2021-03-17T14:15:13Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQwAmH1hIOiwKfXVN3ENwjwtQ/Cd3tyJUhgY1O/XewC657kp
-            b1UsIXsxtq8iZT7+DDBaMumyx5PnhNkfNrYJ/N/At/t1pBuuyQxId8po3LfOMM1H
-            8pt4y2xKnJcZrIawZWXnjU/J5NULnS4FDYY/Ya2WhzQK0Dm48E8b8/8gZYEsCuKe
-            BZ9ZDnCRj5kqLmE4AXC+BmcfHL/k9U2/MmvwVdjJGu2VBmBpboZZtnFHoaqK6whW
-            WwaJ2g0uNSJn1+nQSGiOIKYWRMpG6dVjjDPRtMjGILUAT+od0362JpN4rCarI+f4
-            ZIcADBGDYYUVvqC16PqEOYEvqJdL6uaSC07Mc2FvBLjVCOpEckNL/sBxKTIiVeyD
-            Vkq5XmNFLUgfUaZj7w6DiUEcgff/20vyazuuKcDE/JCpdkp1NFQblpjiHz4DRVG/
-            kj/7QqAroKRFVhhT9Wf6dkTl+EqpRSwjuEhe3gNOBuXITW+KhYjQj8D2byH0oBsL
-            FSNCOkvZ7WUKcSlLgy2d0l4B0KBULQ8AZcRBG1WFNckuXWLbOHCMbgZ+bCaiY5XK
-            8C5Whz/E8EOZiVTvKxXaLX6vT+eF7LAeXZcWRoMvM6xKEk6D5440tAGMek0W0wSm
-            CiUUFMo7Blcr5+c7jXpk
-            =d1TB
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(spec|stringData)$
-    version: 3.6.1

secrets/data/searx.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:5hJetlEyYxc41WNru2gDiHi+89Fu+BrunauXqzt2C58=,tag:h9TUrN+zOG03FKDq5EH+5Q==,type:str]
+  values.yaml: ENC[AES256_GCM,data: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,iv:5hJetlEyYxc41WNru2gDiHi+89Fu+BrunauXqzt2C58=,tag:h9TUrN+zOG03FKDq5EH+5Q==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-data-searx
+  name: searx-helmrelease
-    namespace: data
+  namespace: data
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2021-03-10T00:09:34Z'
+  lastmodified: "2021-03-10T00:09:34Z"
-    mac: ENC[AES256_GCM,data:Syj/5iH1Yq4C/fsOhMC7mWJVwd3PHrfVeURLsmThbtFFFdlnYue2OZ+HSKi6rINbxfDIR7cXpln+MwQloBmQ7sqRVYBLGe1PCezdgS7yQfaZtvkH6pmBzmJPUtErfZvBBaElxHI5FydsLYSnoWIzUqM0mVAAAZ1qu+1d0Fu4QYA=,iv:fxy7oyh2wNo4wRVVz/TR+M5hFxXjaN4fFj++hCVlETE=,tag:qeNjlhRUlQmEuUi95oo2sg==,type:str]
+  mac: ENC[AES256_GCM,data:Syj/5iH1Yq4C/fsOhMC7mWJVwd3PHrfVeURLsmThbtFFFdlnYue2OZ+HSKi6rINbxfDIR7cXpln+MwQloBmQ7sqRVYBLGe1PCezdgS7yQfaZtvkH6pmBzmJPUtErfZvBBaElxHI5FydsLYSnoWIzUqM0mVAAAZ1qu+1d0Fu4QYA=,iv:fxy7oyh2wNo4wRVVz/TR+M5hFxXjaN4fFj++hCVlETE=,tag:qeNjlhRUlQmEuUi95oo2sg==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2021-03-10T00:09:33Z'
+    - created_at: "2021-03-10T00:09:33Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv9EOSaPJ5J8q85A6mf4LCf636BBVB9+pKm+gOSv5/ReCo5
+        hQGMA/JorPHm1g9XAQv9EOSaPJ5J8q85A6mf4LCf636BBVB9+pKm+gOSv5/ReCo5
-            gOg14XT/bUvruUY2oBQisl2REnR8mxyh5vjDSi+aS1xZfhRdL1euRyxUfHScNifm
+        gOg14XT/bUvruUY2oBQisl2REnR8mxyh5vjDSi+aS1xZfhRdL1euRyxUfHScNifm
-            2dv//X6UyYctFX54+NzkrPztVQkXfnIcDAIMPqa34ogbRETFbzH2ZZVO8LcMZESN
+        2dv//X6UyYctFX54+NzkrPztVQkXfnIcDAIMPqa34ogbRETFbzH2ZZVO8LcMZESN
-            aRtyXks9tAGZQ6iU7UMKh4uZxNEZ7/MEOoR292XFclU1WLT1gqAvDKEtotgtxuz4
+        aRtyXks9tAGZQ6iU7UMKh4uZxNEZ7/MEOoR292XFclU1WLT1gqAvDKEtotgtxuz4
-            mZHJF+urvyoaZVTeoZzTS9n7cuVVmLpZUjK41MSW0DD4YILUf2dWG6kFnOF6uRp2
+        mZHJF+urvyoaZVTeoZzTS9n7cuVVmLpZUjK41MSW0DD4YILUf2dWG6kFnOF6uRp2
-            7+x3kg0hZ6YyejSCVTjZYIhQm0t6kjilI0vvibf4IkmAMBI2bg19Qr1ycL4Gp3+b
+        7+x3kg0hZ6YyejSCVTjZYIhQm0t6kjilI0vvibf4IkmAMBI2bg19Qr1ycL4Gp3+b
-            MRBT5X3PFp1Jd0hmjcDW49egCKutorJ/U2CV1WYUjmZaU5rppEQKnlGuLdbLo/up
+        MRBT5X3PFp1Jd0hmjcDW49egCKutorJ/U2CV1WYUjmZaU5rppEQKnlGuLdbLo/up
-            gleYRCy2XA3EfBj/s/4OiWMZKKf2zHuZ4uWFuFhXVNI75urHM5BuBeRGu9KQEkMf
+        gleYRCy2XA3EfBj/s/4OiWMZKKf2zHuZ4uWFuFhXVNI75urHM5BuBeRGu9KQEkMf
-            avPojMQPu5Qkgr8GspdB0lwBmAEHnj7N4zdJTVdeHbjRrEhO/m4qKz4IuElB3Zxs
+        avPojMQPu5Qkgr8GspdB0lwBmAEHnj7N4zdJTVdeHbjRrEhO/m4qKz4IuElB3Zxs
-            emG0hDTGLQWwVnt0WV7M1d7ujXeg4nwUwLPau7mDi+JK7Z4Gn3v1ocX34rvzqecE
+        emG0hDTGLQWwVnt0WV7M1d7ujXeg4nwUwLPau7mDi+JK7Z4Gn3v1ocX34rvzqecE
-            tE4EcMQt67Ho9z6ocw==
+        tE4EcMQt67Ho9z6ocw==
-            =11cL
+        =11cL
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/data/sharry.yaml

@@ -1,35 +1,35 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data:mcqe7Ry3t/e31oamB3rD835S0CJDYQ9Sxbc5hYEDTbREmzJhlg96BaC2TA/4pdAH2iAU/UHpQ7gi+ib8RbTUxCZBRH0uPgg8iwFHHnsgkCZHkWPwMwQ4iXrpVsD42eSlkQ7I23ebUWiClsF8qhNzamnhExY5h/ycazuJF5QK4qJjm97nGmB6QNxl/N2wyW6RBfSWcvov7VurbfnNjrpGYAs8no+FjaxBF9sERjRfP/1EkpRmjKR29Ro50Q0JX1ArvG5EvbBJGSqu373g5M6/D6scKgc6KdYLkOYUBxESn0R6mHru5pBhneYybGDQXhPgDypfO9oNaQYVTqsUHyx9nJxDLflUhw/XBrAmO5b0QMcgoSwbJGHwXMvMb0H9K7J6S6W9CCjdoYO1qDcF6zbLGyLrl3ByIOfs1eVivJ2W,iv:3apLWXgmqcSzzH32vyWzSrHO+2mtKdyX9usipldiZeM=,tag:jTYLuwt6JMChQFv6Tt/kfw==,type:str]
+    values.yaml: ENC[AES256_GCM,data:uU/KILKggFFbUmSwuqFdRyqWBjoPjYfx8C0EWCvzHVF3XumOxj2PRziB71LXUSu+HuCfeUVJq4im5kW6EdUUKTDhvfXPEh/20FH+btY80mZlFtOUT9/2DMrIQqdTLivAxUZW0wCVnfhdZirYU3uqKl3v/tudnPfeuR1E3mDY,iv:s4FHQSATNMYxbFU6Qgfb3WJRAp5mPg7xZTfo5SU9fXk=,tag:VzzR1L1acIQ9hcej2zh7dA==,type:str]
 kind: ConfigMap
 metadata:
     creationTimestamp: null
-    name: helmrelease-data-sharry
+    name: sharry-helmrelease
     namespace: data
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
-    lastmodified: '2021-03-16T12:47:41Z'
+    lastmodified: '2021-03-21T22:15:08Z'
-    mac: ENC[AES256_GCM,data:Yz56+/QAeL77CGjNwKuLaMxTn8r0lEZUGkhgz45BpNAXsXRyoqrqu/HNnmY0vp27LrvczOVOp5QiJEJq56mnG7Wui9YFIEqGTb9k52AwYsD8XyKTxGX1UBYY4yY0rYz6D8uzxj2nnbFPougG2zNbevU3EfJHPsARSnPKC9WuRfk=,iv:96kt0wyD/WMUv9X0SNJJZKwqVns4irhkk8nbBU+XDlQ=,tag:fxt2UXy4mq3KSkI7K+SWyw==,type:str]
+    mac: ENC[AES256_GCM,data:f74ekFi6TZPvq3YK78gfAKpdUOlIwJMk0odghKgiwegopV/cmX+vx3+W0C4beTBO7q5+OHy2lKqwb7RMkROYFpXgrG6jElvZHkRjVdmBgI18FKqCdXsyo1EQEp0RWu39r/uv3cOrNxCORcYv5MDVJqIidzk6FyZzdI3Zegec18A=,iv:xeYywtD6V0F0sxGyYjJdlu6M3w4ZxSJywZ0X50A1RnA=,tag:rnqkLdL9ZBx5zaChLqg6Bg==,type:str]
     pgp:
-    -   created_at: '2021-03-16T12:47:41Z'
+    -   created_at: '2021-03-21T22:15:08Z'
         enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv/eQ+1vkTWzx63btuVbHsEAs/F2xHnx+eFN4aremQr86g/
+            hQGMA/JorPHm1g9XAQv/WFr3XstTxpG9jSp95jRy+HjaUk1uq2X6eXIT9LDlEeEb
-            rxvOuYndSMiGZ0rzCRJ3GlLlVsuy4J0WrYVcy6ueYtLAV1N4A7bp+tR/iNBg8EDc
+            b8qOt/LTsdELbVOcoZvlPt/R9Jb1bu4UMhwIasWKhppp3Ny517M6SHhKj8TgRtPk
-            VIOts9WzLIXg2As8Nk+loswqcXquUCARgBfXvNP0sxh8Hc1zLqCZavfomhIE6Lh6
+            Zqg6YbRxTLSL3f5ylJaeZADDFbrDf4M7+D3moX2+gTGtclmT2hoZZQa1VWzmnV/y
-            kqtw7kLfVIKBE8IEyM7zHI193/8nHMgAUg2f/Wdi9WI9ZxTDub1IYI2ORhMhUb+F
+            pjBvVfMBbTE7K23P3LK9shb7edCTRtp8NHDBfhtYKlUkB0LMyyMqkl9vS/yGv9i3
-            NoyH9COVVsU0feSB5V8XmMI3zI3BrwJXeDoSlHwl2xwA7scE2HL2xpfYaMIxj0aY
+            OWXemhwDj0i5FDll59PC9UQ2T/DaOntHciwVDAXaEANsMOmckRsbuzXP/OJs7igY
-            UB254OSlxK+yEV8W5FiD+4qgEGvhyNJ0Du4uamLaAEwlg3zHPGteYVXYb/onQHAQ
+            jtW2gFGCXP7wS0hXWle3aK7FBW4PQWuetTRVL09MPBxX48OfPcrGFgHstRl1vSiM
-            a3ZUbi8I+wDkwg0S2nFZN58Py8Q7rf243sUR5vcObY3aGx+OtvoM5CeNjiISB253
+            ZWA6Tzs0ekqoxavzE4AXMHgDA9tT/y7IRgyVFioCNmN+xq/6F3Vig5N/LpfnMFOo
-            vsNen+c2rt9snynB8zvkEc4QStXJbVdp8RN9T5+L2VEL3akgLEBUfykEn0vVZoA+
+            BeDEfsc+fRfmdO0FS93+2nL31gF+8mOIs6D0dCb72NmRoDpEV5F7OzlsG2buZLvM
-            pUc24fvx6Fm6yneaF0f30lwBfC47lhYG2ibnBPSpxVY7/KNhblnqqE/22fWv926z
+            sZU/l/pSoGwrfKQN3EB50l4B4PGPJRna7ZPfUet7hElmCY01yXJZpb2+AfaGJWP9
-            0ERDKuRGVvZj57cC4bmFqmAJ1njjDMNgdMnOBdAqxeiLja0U+1QpuAYiWWbQV9CB
+            BZV7MGdDkzPDD1xLAchhR3Nnh/sctQMdwpRZJkvTtyqhWKcOAZE9EaRVGPZttN9h
-            zW0LBXhWfaOLt91vsA==
+            5YX7AIGd891l0ODhXpGC
-            =J5ZZ
+            =q4mZ
             -----END PGP MESSAGE-----
         fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
     encrypted_regex: ^(data|stringData)$

secrets/data/tinyfilemanager2.yaml

@@ -1,53 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  annotations:
-    kubernetes.io/ingress.class: nginx
-  labels:
-    app.kubernetes.io/instance: tinyfilemanager
-    app.kubernetes.io/name: tinyfilemanager
-  name: tinyfilemanager
-  namespace: data
-spec:
-  rules:
-    - host: ENC[AES256_GCM,data:TjpjEF7day3HegSVsrkyj0HivjkXdNH4efTcuQNWaw==,iv:U/1X5PKL6bgi9bo7rUFWWzxmCjLEAMOCxLwfLNUi29s=,tag:7ZA20VLU7eqRd26EmGqPgw==,type:str]
-      http:
-        paths:
-          - path: ENC[AES256_GCM,data:Fw==,iv:xTSuhqoKgaqEbgBwE5sqUUG3ex9r1ZkgRkQSuAnKJGY=,tag:bhyd1VuQabxiq+JSqcLRjQ==,type:str]
-            pathType: ENC[AES256_GCM,data:YrrtuHLD,iv:RlmP1YXgaXZqRuilQ39eSiKbl+EcRoxBmO8nf7mEdx4=,tag:uh9mBtdF3/eAtB9Oi0MKLA==,type:str]
-            backend:
-              service:
-                name: ENC[AES256_GCM,data:a0MOMbgRrWJBhuOCjWbw,iv:W44kvfD+1kSe5D7eLmDr1OUWH5fDgR5wb/AgQD/qs50=,tag:rfnz7uJ40UBZmLq+xb3EqA==,type:str]
-                port:
-                  number: ENC[AES256_GCM,data:FpQ=,iv:rIZMcmT+8FXzorUHzazrqq+vPB8AJm4Iqvv0Hylv10Q=,tag:Y21sMJqhSmjaTOmHyr3BYA==,type:int]
-  tls:
-    - hosts:
-        - ENC[AES256_GCM,data:GZjscV3z9nelGcUNS/wsPHUa/5BOZILhkpGGxzKw5w==,iv:w6s683ipBmud5HJZzJQ+ITvd0xnz4Ro4Q9blh39DGSk=,tag:MANO1l7/43vg+D/iVnMkfA==,type:str]
-sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  lastmodified: "2021-03-17T14:38:11Z"
-  mac: ENC[AES256_GCM,data:ywCIimBT2RzJ/E6ec08gVTh1/Y6PGiI5wcANn/ZfRxGmi49vVgxdg80c5cpgU3pDqJKbIUwO8MJfqn3nnQYD/YASoKvjicAL14TsUTvZ2wrSHPsPymsxSV+h6nSEmCXF48jPQcJMjJIx/KD/1EA7FlVZbuPHJ5IAbtauStIXubg=,iv:nCGk3LMW+O93dAtntpYd1wFTnco3q+FmS6SHQp06mPk=,tag:Ut5V+dhe4zoBSiEjiR6Igw==,type:str]
-  pgp:
-    - created_at: "2021-03-17T14:38:11Z"
-      enc: |
-        -----BEGIN PGP MESSAGE-----
-
-        hQGMA/JorPHm1g9XAQwAkU5hAi4iPRCN5C1HzY5xdqK34JyLLqqxHdYFV+IH52i9
-        OIgVFIS7fAv4s3ZEb98/mSIuOI8poAd30h+jCDwH29jTCxzZD3b/EaXGJLRFdWXg
-        QmEyynkiqHAcmIk4h3ZECvuLZ5n5+oCzFZ7ZuuEO0gPdUGqCx7ovR2Eqvp0NrKr2
-        93/UiwJVoqeus3pdSqhuP2Em+SGLuedJFVFeXuy8Koj48Ti1RTzDjYpd31+R3foW
-        B7XHClfZKlYCoUF1ET2FSldN526WjoZ6J+x2aJoPRlKUJCLDquznBKIFhqIsiIR2
-        Evqroep8nATlfOs6+hL5NlW+EAho85NNzDR4/YBd39u0apnXUpRM9pwiebK6lFbg
-        lzWzAjxnQQEuOQ7NPl9hLvz3h89DJK/d0STaRYswoNiByZ+AVhmOfqRGSCy2Pz/N
-        ydz1kowIfDwH0w6z0NL7ObuzEs9nskrZoKxvP0DdUUAy1F91WYvHmjMCYACEtIcI
-        Kq53O3fGFpZmb8GQ8OIK0l4BbA8BKT2bH7Ni84ejBFXPpOir2zGlR+PywlowLTe0
-        IT4zTmU+BWebLy5cnwUGzNEmu7LoqACDqjLL4ga4rA6Tjg6wCT77sRMxLvYAUnJV
-        V73jSYtQ7NeCTmlPOB5c
-        =QkZC
-        -----END PGP MESSAGE-----
-      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-  encrypted_regex: ^(spec|stringData)$
-  version: 3.6.1

secrets/data/unifi.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:30f5/5rS3AiUA/vn+Yt/HdHF5HRgCq2sl1D09BB7GwPJjwB+W4Bw84JawlD7RBRycyLSQAvtuo18li9cmQT6Bd7kwNcce0FGN82alCzgBAHz50lF19Ec3cAL,iv:n3frgTtS9LuABQRP7ttg+YgTTCv3tG0OJRK/9iAgZR4=,tag:DlOVOE8bsRIjiLWptkbm7Q==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-data-unifi
-    namespace: data
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-12-12T19:18:32Z'
-    mac: ENC[AES256_GCM,data:MkdBqJLLdClhF5DZG2meMTiZKetEa1i9ikPmdU+nH5xYuNmQqnJ8e7ckGcPsy9IOVKm5/CHfKs8NOGDQs8TVbbqG+528CQMlhDZOJJE3uk/7FzVR7FRoZ6KxD5nSyS99ZGhKlKJgEeIXZZTKtBQaobt/qdxGo+aOxUZ94E+jxa8=,iv:wSQoxkvUzhPEUnFkFEWj3kEzGhP01ERoszEZDxfRW0k=,tag:fVjDPjrJnmpyi1zTM5CvSQ==,type:str]
-    pgp:
-    -   created_at: '2020-12-12T19:18:31Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv+JiugX6dqGRsVwwtv/MhpFdu9nnJSXxLBwz+9Kg53qABd
-            mvvI0f+EsmSva1K/AegXpYrs24DtpsSfIiOG6+j/Dlrp2+2EndbA+Mett4WtGxix
-            Q97z4bpCO6eOQ1lJVikCJwGUcKKUgaAB1X2jKhyYfq6scLzjFp2LTKTMgh/K5vLN
-            8+KrLlgkQKtQO+olxBH8aiyypP6gZTh/bVORZr2KP9RILm/9Ej6LtEA3OZjjs2Xw
-            NP6GRnz+/GQLK/siFCO0VcWJVC++7LDREFDWwgGgIfp/KLxG0c58BdO2ZIxeMqVJ
-            j+Z86qmovVsXsLYpGuaP59/f23r4lRB3FjqE1lfY9OwzNXdk3/v+6pClzhYfkgt2
-            687psv6GInB65n2P93YF2YSb3A/SMK/FCqQB8kxP1AvDtRtMsfAVbe5qPFev/gri
-            Jd1JeAhLy3HXn5ku8pnvNcWz+/NncxXxAtt4R1VOoOWE7CUojeI8pmXhbf11qff/
-            szSuj73wVvsUowO2fNtK0l4Ba0LtX+AUI+IIjrPykPCG0myf/eTWCx6BSkP9C1Rs
-            iUjACAIPuU4mnPytS2y1JPVwCdWPGBzZCsV4V7gZkAe9d/0ED/9nb86lAB2GzYQc
-            SGDz7qhTOJlEqin6SNJu
-            =XBz2
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/data/vikunja.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:fB2PpRsp+BAzAX1fXjQVEVwn7tKFsdI1ecMaWzQCvRQ=,tag:kyeps024TYaxSmyPe0JaXg==,type:str]
+  values.yaml: ENC[AES256_GCM,data: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,iv:Cvswc25WNQwGGf6C1jNrKhtFiJRXc1wZswrTqqRTm6I=,tag:ByYTTTafW2VMk5W1hZQxFw==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-data-vikunja
+  name: vikunja-helmrelease
-    namespace: data
+  namespace: data
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2021-03-16T22:25:39Z'
+  lastmodified: "2021-03-21T21:50:36Z"
-    mac: ENC[AES256_GCM,data:4XFJX2ACPv3WVrCBHPO28Jlh14rE0I7KwmXnHOVco6EKJQs9vLsCKDQBv2HSYivFiaUs7t0inbqYJonfJ24djZy2p4YRiDnvznwAe+FuX3LjjPI/97oWjKYQoLA4hSyIEsUcf8WJz/MdpOO7SXTAUAmAZyZ1iH0mzJ3F0gz0+ao=,iv:mSzpEvRAJuIxlSrYDuP4O8C1FUoF/2B0FwlCkeJFh4M=,tag:FpfEmrgRSVrD4bNHjqS9DA==,type:str]
+  mac: ENC[AES256_GCM,data:2fjvIaxdE/RCX0LEQKVN4kTU5q67j++w1kcATbv2nEw4EYL8hzX5R858r0ew+ydxMkMLiZvnWs+X4NwMs2Ij9eh3scQq0xHhQmfpwmFmK2UZdViXAeoctNTI1Mu4SI+zvpx+jTb57bzK6bFa8+HgcQ0CB/o8yA8sUbIGB5D2XHM=,iv:qnrixT3sYJ7RlqRSMGYfw1pLFKB4Mu+gOqdmYRXGRJA=,tag:U8qjn/HgIXAdzoHRrs3Q/w==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2021-03-16T22:25:39Z'
+    - created_at: "2021-03-21T21:50:36Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQwAiPSnORqFVz/C7wwvVM3kJnFeqVONui8qRPATl9sjBSTi
+        hQGMA/JorPHm1g9XAQwAlBLZhNxSQFDFwYxSXg1igfMgiurAnRPvOERHJiIrAPnY
-            r14SWM6g0tNe+IwpLbNcy4IVylteAzhpuwv7Bcewxzpo2hvY7UKtRfds14/ewuY8
+        koCOjolP1lTxvEEksho0X+OoyLLdIElUc6DZ4Nl1PjzNBOb7F39Bzw0PY9bSNx5Q
-            YoogXfZVeVUBEwzds75NNysNwXPpSk5hPOkeypiC0Mgll+Eyg8o0qiRZrUBeTQCx
+        xSUooEM53jeDx5rMOI3mOiQZfVUNdZGwzDmsMlhmn9QpKxwGBdgRvytDxdZxRQGy
-            L+KSLKlnB5KaGHVYzwzxlzTyXywYwHpuMMkNjCcdiulAUJBHfaIKaZyDm/gIFkQg
+        rVEfddzPF24z1gdoHzUfkzLryjeI9uNHm0Fp726/By/BVcNVJd3XD/lKapOUUzfj
-            0wxcQX/i6NiCUeOQuK7IIbFyyJi/+Myh5mzCk5voKERUSp+4Zu9aUX2q7Jh4zgJ9
+        LegGkdvWMA4d4KsjFTZBP8luXXV18y843bXpI1nskR6EO92Z4D22GMqXZ9N9ZqOt
-            4PiEHuOEl3p4tVJ6ffBQueY8QKzsxpasPX5L6Sw+G/39UmEPBEvaN4awO/rWs8Z4
+        3g11yGtNixZRPBHAXH+CUJxYnoonxN2u9Yszp6/kzAwcSyblDhhoe5TGbFFAFT5/
-            chmXvbAMs8BP6d3RDkypQExQ+dVr9L2pcSzdGkGgsaB9Oghr7rgMM3RUrh1cDiJ0
+        eGTCQ61xpkalqb9e6KqoWuHVDDcMWhpA9uGtciFKkz2JJ97PjOYSF/aKHmw/APna
-            Z7y2UdE8lOgYxi5/UMccXmKXS6n341dlKeXTCgtUV5sYF3MF6Qcq7tsnSyB3f+4d
+        o1yvulflnzW0ZTtGt1jvi2+fgWmGYEUkjV7hlWiOQNBSKLp7BZqHAe42inqq3pL5
-            pzfU3ybExvddvefXoEjw0l4BI6f0G9fh4blUnKf1zmLKhhyiAkhMglb5O6Tg8jDL
+        skKQA1rE6+5op9OS4GGC0l4BotritFWBEyVnt5nyHZubldbR6+dczJ1PmygEQiwZ
-            5Iifxrw8y62gCtCb8auxPf/qFZzKrkKynoCu+In9pIrAPgWqX3JnGxrikFCbFK4Z
+        gp411N7MDX7+9+TqMNF1XJocR530AUhVbBZLNIAky7UNBZsQdKavhz16h4WXqaBL
-            faCFTjBZIg2Mil4OpmzE
+        QkhwM0JjVWlFiDPPWsUG
-            =kzVD
+        =6VqO
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/development/docker-registry.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data:KmkFvDMZoii1JR00hL5+eDbAjL08roQnX0N2kpslS6rnWpBTiwWp7raqP2n7j+BBrVv0uLOrD2OE9JkKfNLY+au5CD40h2nzs7TS4m4MW/Fx84t3DY2i2P6vekpM8mSBuk24xstvA9ULWWJtC9N178WLvSPucFl2aFJqIh1E71073esB19UGfJInDLJrbuWDxteXH+n/uswmRG924iy4pn2quk+3jiagAbfddfaF88rP2tWPcGmIXJ3Rvj2Jm8OBWFv7UrOvuN36OyRL12C6rcQZj/VnjDR4T39iLKKZVq7hpoIAXW9JkaN3vza9hK1pDLR2Vyoy5a5TfUygZC27LtxXm+2KTQeEAwW19bqbgMzeLkvNmiaZjKHMJsmP6Xb/sN6TrgpNYHUFHdStwr5GAqdqDXLKnZimux+0UrmNjvSrKgNlh1q9udU/RrXAddeG/TzlEqTBIbdWyxOb,iv:XkMk8n3W3qInemMYDA3eQka2ysxP0/mXC3hOROkfWZ4=,tag:KM1xc5wHmLXAU31FULt9pA==,type:str]
+  values.yaml: ENC[AES256_GCM,data:6b3R6VpDoRFvzebRnEy1kz4k63kbgYhZ3+GiwAA8ZJR3yN/LHcTC+1RAQQFG1zMoUOCF3Z9vj26ZIIz2VqBDTAr3b61GqPhnfoylDkETDNpG250yizJ64TgKhvSuKZp1mMg76Qpnoq0oLdcn2Mbj+TQ+fqIhz7bhWNNMYmVrf/WyNFx1aVs5EA3L51KhalhtPjijhzk0COq24tvb2flCohMIi1OpkpnMr/cV2moCxaYTmlkdNkWy91VjyaC/TvinbJX4RAQwxsnLw80gxiwSN6eYXXRNfDtPUpUw5mRgG0PFxnIsOJuUF0YKhRbh+TxBoy3DTg==,iv:1XLDwgCPjx1JZk07LUGXYWJ4+YLjg4Na9izry2zEA7A=,tag:hAgj3LKfW3awXPLC48kYbw==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-development-docker-registry
+  name: docker-registry-helmrelease
-    namespace: development
+  namespace: development
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2021-01-15T21:32:03Z'
+  lastmodified: "2021-03-21T21:34:14Z"
-    mac: ENC[AES256_GCM,data:aCEGw3EDCYisPKTZTMPSOyIyw1MVBLNYzVyaZV0HQsJIIWEI4C9VQN4y2D9dbQgrXqjwJYRg82K/Aae4KdQPy5j0M72K8h5oJNxkr69821dT37Sge5pQ7NwcQCpyBLGFmOBe4Q2cAi6vvg0I+9cFFv0nxOIqV2aP3o8ktiLUCbo=,iv:RMildQKx40DAVIE7zb7qOOlUx1U2b6ZM+ZhAgL+YNwM=,tag:jQZ+iIWzabs/X227OVB9Bw==,type:str]
+  mac: ENC[AES256_GCM,data:HBnRoL3LcAYEy2RG3nuQ4RJqFz26w512uJoI6qYjSairoZf6kqHcDR+wFCyEM5B3jNW/ZXGynxW2EJ4FUPGhiEpOb6CyJUT11GMBcFl9HnA6aRCpYYMYTDVzc3kHa6gcawVx57a4r14uDnU4ttUaKavEPaVQH5MVX+mJvu+nylU=,iv:IvwAVRnkj1Itja6XEOEeT/m2TmYnc43naxxTbGaQnD8=,tag:amY/sbYnVaNnl5A7m7ZsvQ==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2021-01-15T21:32:01Z'
+    - created_at: "2021-03-21T21:34:14Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQwAnd1rZy2sZzOkQW3iBC7HIbSMQUuBy17OkTic0AyiUixl
+        hQGMA/JorPHm1g9XAQv/fhr0GrAFm+caGjCkYEVFNMQrzNp0W+NQ7PtveMSnwycj
-            lBM5hxt1hDK6VG1j2gQ3liSQV4B72BIB0NHg756j7o2G/OEALNbKe6qoF5lDu9ga
+        ccO5tIp5Y9SB9SLP6KNp5TYlAu+z2yaKyQHv4trxbC9G5ef6g8Z9fL0kqRlNtHMW
-            xPcpZn2lt+yxHxpxb/oah2wNJL566V8o6Bo9agjZ9brd0PUc7IWZbWuauRwXXWbG
+        pHhQ1NcqKGyH84HwIT8OLhg5IFTuLLcOOkIlrZmrn99D49WeaOX/hernOmA7fgt2
-            KjOoLQT6/Zc3cGIgGHzSQnmiDTRvXLtb4IMZbBluPTqbtC/InwQPsNX/bgXJMUNg
+        Y9rNZ12SbQB1Cwme9wG7VuR9vRsrQI+ZZ0u1THVSOCyPi83/QPeLrtCN83vxyZBD
-            p3aWfICwmf1kIO45dqWt24g8rv9MMj1GRK0m8ZdgjnP5vp+MXNzsNgcC30gtQ22V
+        rYndw7AZ3yldc0Im1zw+gdlcsZMrpOm8JdVa5oVU+JznqcILb69QGTZP2aXINFe0
-            OR/rMc+mxHBAjnkHKQo/MlG1qfLSCDNWeq3azlUoSop9z9vWJA49Sk19v0y8JDrV
+        HhEyqEQ9vgTxLBSSmCqUjgb+hlxrd+f/jCbuzQOtzioPBnohtqEw6EgAk0F00kKV
-            peiUaI6oNkAqHDfP6ZnZUb4htE3FZofJNw9dbu3e572AwDXuAqdiuh3rjDZZ+GB1
+        F/eAvAJwLzklaRugcDNgdZwKh+KdYLg2OOUU7uv5mdwg1TokWQ9xfzRW5TCbV1YD
-            uH7ynBpELtljUz9xDmsdull9UjnPMamXXyL2b0iuEcDToF34uJZbcDbvHwmYBDio
+        doKVXtKiBopEDe94qyIZe5ZUdT4ZQpRyjSTgGVwhtZApGi3uzZc29ei1KaFvK1/L
-            rHtqXjGkU1V0A++21tJe0l4BAiRxJ1z9G/4kBbVjPNsmqYmpgtDKTS4T7+XBoMMJ
+        ecqgMeFbQttysZ23e7UA0l4B2VbPL9xAu80NwJKFPsbSx2LfqKwEz46100pWbeAB
-            3uQomkSpnrvbzLzJO/fhIVtwbtcIIsHj2sgZN+dZdy8rtznDpw+nEr7YHBOu+WkI
+        btQAFHYxq3SmvV3053NDteHqZwB1C2/dLos/KDl9R3oyIQouUE/DxkCZLrIbXu59
-            NoqmJQI9VlXnyIwmksbM
+        6BJBjxcphXvZoQkw5EeK
-            =UVbr
+        =6Cws
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/development/drone-kubernetes-secrets.yaml

@@ -0,0 +1,36 @@
+apiVersion: v1
+data:
+  values.yaml: ENC[AES256_GCM,data:xnsMc3bK9zsVZ44sBN+pK2ZMWJjWVByIpHVJQQAZmNwA+cGgMM6wfiS9Wnk9ZUQ2,iv:6kE/ZDTwoQH3FSLkLf/NC1LUAVSzZEqdR3xjifT2VcY=,tag:u27W/ILD5h4B5DRq/2flaA==,type:str]
+kind: ConfigMap
+metadata:
+  creationTimestamp: null
+  name: drone-kubernetes-secrets-helmrelease
+  namespace: development
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  lastmodified: "2020-12-22T18:37:42Z"
+  mac: ENC[AES256_GCM,data:dV9PdEgnamQKtxW2UKiPl5F8yCHEKa8kUoOL7bTLVR3BPuef8Wj16jXAXu+RiaueGgX7aUZhngoGdpe9Ry45kh4+9wWzTF/qyoLW9r4Fm/vuhISjfkISKgH6c6CYK72u7mUWgIfJ6CJ++x2G2+8waNUp5sZOterwsYjIsBXgEEk=,iv:mgIF60HfvnmZoMc2EM9u49jubDPtgfn6LbN+ysKyK2A=,tag:DZ9qfV8cv6KZZa5AO4Tbrg==,type:str]
+  pgp:
+    - created_at: "2020-12-22T18:37:42Z"
+      enc: |
+        -----BEGIN PGP MESSAGE-----
+
+        hQGMA/JorPHm1g9XAQv9H6qh4wXKWogURc5/jcPx1/cEKt3AjbB2T7v3490SbhFd
+        wi/8vlsI2XpZGM5UDWb594Avhgx51E3geWTt0PX9PEs22ti/B3ZV2BQa4CENi7Y7
+        dTAkUPm0lGrSVd3qlDs/uiSKYhV6T+ECiNpg5Xfgmp1Da329Tn05dC2IyuHXqPAB
+        NgWGsELp78rOlE2YABElVFENmlfbvebhTrhDJXjjy2A9NHbha0WBXUx/9pEFp9h3
+        0eghavaXAsPpHehnsAGb8kmLH2hXU1Zgxn3bZQenQTJrmzdHamp29p/++c1taPcV
+        qx59Q+kv1i6QCn/9subY2OGEuxrwmcwxGzRCLTSggX+b7NhSdqrgTBnYPSsqXPMS
+        Rv7TV7hRwWLLU8CPhuNDVt6cmUCyr1RHLECO6fzFvicuKNIIxyJSOMZhzS2+FjC4
+        9LuVzbuK/VXPQqBdUIu1jZ2pV9qY3W9gbKYhBVeRY/RsIO5ywdd7GIl5T2Nz/9WT
+        I3GcrxfsAPxjGBd83iwi0l4BM8CnFOtCuAASyzI7Q5gr/D226RZ5FTyzum7N4GvY
+        ndS7kNX/+ImlLJgT9qwt2RFIewgmDS/gS1WlRfoxa0Pu3mNBjCodbUcfEyES+qbS
+        9+cFdx7DmgWksnGS5Yh1
+        =bn2P
+        -----END PGP MESSAGE-----
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+  encrypted_regex: ^(data|stringData)$
+  version: 3.6.1

secrets/development/drone-pipelines.yaml

@@ -1,40 +1,40 @@
 kind: Secret
 apiVersion: v1
 metadata:
-    name: drone-pipelines
+  name: drone-pipelines
-    namespace: development
+  namespace: development
 data:
-    registry-username: ENC[AES256_GCM,data:CgWQ11Gb67XyM1of,iv:+G9WRh42KeSSVhShNEg0ktvysEbMHWmTuwOn3aEOMPs=,tag:S2vNHFJkMzUbEBVAgv4IPg==,type:str]
+  registry-username: ENC[AES256_GCM,data:CgWQ11Gb67XyM1of,iv:+G9WRh42KeSSVhShNEg0ktvysEbMHWmTuwOn3aEOMPs=,tag:S2vNHFJkMzUbEBVAgv4IPg==,type:str]
-    registry-password: ENC[AES256_GCM,data:it+wOGiERvM70i4gME789cLIOng=,iv:Rn08QP+Ka9E0X9haOKZOg+wDgb2hS5uzedcHUcCwspw=,tag:4TUYxbmlPeza5JDWhGCjEw==,type:str]
+  registry-password: ENC[AES256_GCM,data:it+wOGiERvM70i4gME789cLIOng=,iv:Rn08QP+Ka9E0X9haOKZOg+wDgb2hS5uzedcHUcCwspw=,tag:4TUYxbmlPeza5JDWhGCjEw==,type:str]
-    deployment-rsa-priv-key: ENC[AES256_GCM,data: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,iv:qC9sZhCRx+TtcjMkbVFZEMuyxbyay234GGb/S9IF+dM=,tag:nDHt3ekJ7shC68EJMKY4VQ==,type:str]
+  deployment-rsa-priv-key: ENC[AES256_GCM,data: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,iv:qC9sZhCRx+TtcjMkbVFZEMuyxbyay234GGb/S9IF+dM=,tag:nDHt3ekJ7shC68EJMKY4VQ==,type:str]
-    minio-url: ENC[AES256_GCM,data:dgiIKWsSndWHqGnjVfpJFL+SR1FT3vri8tj864Whn3L4U7v/z9rZO4sS8jo=,iv:Ah4ILI3OO8Bi4UgbOHGHHnGSTVgN2pMkN0CTmIpkYj4=,tag:lcAGRvcKkeKvFCtaDFPF4w==,type:str]
+  minio-url: ENC[AES256_GCM,data:dgiIKWsSndWHqGnjVfpJFL+SR1FT3vri8tj864Whn3L4U7v/z9rZO4sS8jo=,iv:Ah4ILI3OO8Bi4UgbOHGHHnGSTVgN2pMkN0CTmIpkYj4=,tag:lcAGRvcKkeKvFCtaDFPF4w==,type:str]
-    minio-access-key: ENC[AES256_GCM,data:AtUtmkkPnPU=,iv:AXchBeP0rds6EgUZHzpo2C0PWRyA6bybVDpriFiwb2g=,tag:fNeobDA/8j7bTesjXpmGCg==,type:str]
+  minio-access-key: ENC[AES256_GCM,data:AtUtmkkPnPU=,iv:AXchBeP0rds6EgUZHzpo2C0PWRyA6bybVDpriFiwb2g=,tag:fNeobDA/8j7bTesjXpmGCg==,type:str]
-    minio-secret-key: ENC[AES256_GCM,data:iyCugfnfkmnCYQRyPR8dV5uW/OS+9aDvqvxglw==,iv:5Z1KfM10jP117OYVIeNRwteYrJqRCyqBZwwKsnW043M=,tag:cTaAeodkLSZ6YG3mxS1jMw==,type:str]
+  minio-secret-key: ENC[AES256_GCM,data:iyCugfnfkmnCYQRyPR8dV5uW/OS+9aDvqvxglw==,iv:5Z1KfM10jP117OYVIeNRwteYrJqRCyqBZwwKsnW043M=,tag:cTaAeodkLSZ6YG3mxS1jMw==,type:str]
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2020-12-28T05:16:51Z'
+  lastmodified: "2020-12-28T05:16:51Z"
-    mac: ENC[AES256_GCM,data:FlvP9dewwmsR54UVOEQ4599RCtB/5zdp1pOqLo2GuJrkO9Ef/Zfn7TRJVDCaJ1ymR2bHzORjTbmsqYSniCl7JtM2h0NOc60rviSLR9+x0+FERYaRVMa2ULV6a2tGMB5cOU1pD6fIuMwEPex52q5ILDjz1shUOfGKYf/aM+cNtVc=,iv:wQFq/YFq8vFaubrJWPlDymsiVmz2SwHzvy53inJ0xKA=,tag:Qxs00HxYK/Det0gV/8Cn+g==,type:str]
+  mac: ENC[AES256_GCM,data:FlvP9dewwmsR54UVOEQ4599RCtB/5zdp1pOqLo2GuJrkO9Ef/Zfn7TRJVDCaJ1ymR2bHzORjTbmsqYSniCl7JtM2h0NOc60rviSLR9+x0+FERYaRVMa2ULV6a2tGMB5cOU1pD6fIuMwEPex52q5ILDjz1shUOfGKYf/aM+cNtVc=,iv:wQFq/YFq8vFaubrJWPlDymsiVmz2SwHzvy53inJ0xKA=,tag:Qxs00HxYK/Det0gV/8Cn+g==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2020-12-28T05:16:50Z'
+    - created_at: "2020-12-28T05:16:50Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv+NE6ziN/GMreHnrZibTSuy6H4Cohvyv4pqJtgfeSMNdOa
+        hQGMA/JorPHm1g9XAQv+NE6ziN/GMreHnrZibTSuy6H4Cohvyv4pqJtgfeSMNdOa
-            0qeX5OlBGaDOwZbCBjJYgH+RwsxMAyN5PON8RnFPrAr2snwlzvh5f6dmgZauex71
+        0qeX5OlBGaDOwZbCBjJYgH+RwsxMAyN5PON8RnFPrAr2snwlzvh5f6dmgZauex71
-            VSugMwNNqJ+uArmQdKGkdju2bHt/6Yffim2uatPB5yA4XseHCBRtsi2wHLDqcK8s
+        VSugMwNNqJ+uArmQdKGkdju2bHt/6Yffim2uatPB5yA4XseHCBRtsi2wHLDqcK8s
-            bfvDvK1VL/Lj5JfRQk0OqHrpMWTfrJ7IUphq8Hkhn43TyMR/vK/9PC47wdenOsfQ
+        bfvDvK1VL/Lj5JfRQk0OqHrpMWTfrJ7IUphq8Hkhn43TyMR/vK/9PC47wdenOsfQ
-            PPMbRsE63lMGRxL/jaSZFDhDZeKCqzq+hQItFDXarBElXDIc9ULYau9I6h08upgz
+        PPMbRsE63lMGRxL/jaSZFDhDZeKCqzq+hQItFDXarBElXDIc9ULYau9I6h08upgz
-            j0ubJ/yEj/h/imQ6mztFErVm1P1HVknaiB3aNZgd8/wf9tVAsqFtdn5tEGCLL3hR
+        j0ubJ/yEj/h/imQ6mztFErVm1P1HVknaiB3aNZgd8/wf9tVAsqFtdn5tEGCLL3hR
-            3ES/EPmaIhNz9Z0wbFKgJDnNc8lCuNB/XfFyS1zGUWMLZjMCNeem3AK0wNnzP9Bk
+        3ES/EPmaIhNz9Z0wbFKgJDnNc8lCuNB/XfFyS1zGUWMLZjMCNeem3AK0wNnzP9Bk
-            qJkgXntkipcc+NKeTeYz2YicbbEpHnaEQ0Xa6FtzbcKnDlmY8bchiCRj3ErqOtr1
+        qJkgXntkipcc+NKeTeYz2YicbbEpHnaEQ0Xa6FtzbcKnDlmY8bchiCRj3ErqOtr1
-            rJM69bWPKCrXwCTKmpR+0lwB1/f3l9wPkJonRYxamvEDbRNsMCDD9lY3InqbKdEP
+        rJM69bWPKCrXwCTKmpR+0lwB1/f3l9wPkJonRYxamvEDbRNsMCDD9lY3InqbKdEP
-            u6XNtDjcgyr2JZbaUckYwVazxYVQjVv3CFSVih5HIxOzBya6kw5Ay+Ge1e3h5NJc
+        u6XNtDjcgyr2JZbaUckYwVazxYVQjVv3CFSVih5HIxOzBya6kw5Ay+Ge1e3h5NJc
-            X7iwOQT8HGstIY0ZFA==
+        X7iwOQT8HGstIY0ZFA==
-            =trDK
+        =trDK
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/development/drone-runner-kube.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data:fo6Pr8lEPUr8e6fIviLjacsc1lcv4Wrem/8XlnX9yygwM6tDjl6L1iZrpeHYNznzXypDszW1qGqNuN1mHJ6jHBt9/ywIy5V1m7LSIOddnn3mwrAmfvwdecHB8gM55NkBeXsapcoNXG1tI27TulyPs+WfQ7w=,iv:ZKmX4MWNJ9xhsVUI3bmvUCi5QyT/XUlXj7mT1lZLZOw=,tag:fkA8mkVWnyMbEYJLV0wlRA==,type:str]
+  values.yaml: ENC[AES256_GCM,data:fo6Pr8lEPUr8e6fIviLjacsc1lcv4Wrem/8XlnX9yygwM6tDjl6L1iZrpeHYNznzXypDszW1qGqNuN1mHJ6jHBt9/ywIy5V1m7LSIOddnn3mwrAmfvwdecHB8gM55NkBeXsapcoNXG1tI27TulyPs+WfQ7w=,iv:ZKmX4MWNJ9xhsVUI3bmvUCi5QyT/XUlXj7mT1lZLZOw=,tag:fkA8mkVWnyMbEYJLV0wlRA==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-development-drone-runner-kube
+  name: drone-runner-kube-helmrelease
-    namespace: development
+  namespace: development
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2020-12-22T18:37:39Z'
+  lastmodified: "2020-12-22T18:37:39Z"
-    mac: ENC[AES256_GCM,data:Gux1m6A3o+k3c15/X+AbOp1YCA3GvDJxI8C6B89+z2bcj/5K6PXMEhW5uxgwp18ynbGBDYQCKodH5rPQN2sn6/6TicXbB+Bw4f4jbZQeJHlddkuVTdpYih8D0g3TihB8Eaaj6Qdq1TC//QMX1JK6CWDKQNA7HW6brfUmIxO8s5Q=,iv:NcJOPamy8c+i5Z4H80Mm5+kADxfSQsg5Fp5lacD6Zx4=,tag:gs+joIENPYqYv/YMTvci2g==,type:str]
+  mac: ENC[AES256_GCM,data:Gux1m6A3o+k3c15/X+AbOp1YCA3GvDJxI8C6B89+z2bcj/5K6PXMEhW5uxgwp18ynbGBDYQCKodH5rPQN2sn6/6TicXbB+Bw4f4jbZQeJHlddkuVTdpYih8D0g3TihB8Eaaj6Qdq1TC//QMX1JK6CWDKQNA7HW6brfUmIxO8s5Q=,iv:NcJOPamy8c+i5Z4H80Mm5+kADxfSQsg5Fp5lacD6Zx4=,tag:gs+joIENPYqYv/YMTvci2g==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2020-12-22T18:37:38Z'
+    - created_at: "2020-12-22T18:37:38Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv/a4Ak4TuFGk94NsPs56/R0Y2tCJWarBXXvH8jMe3q/bAy
+        hQGMA/JorPHm1g9XAQv/a4Ak4TuFGk94NsPs56/R0Y2tCJWarBXXvH8jMe3q/bAy
-            WHQ4GiLDGC782k3p+wEyWQ3y6tDhg5YNsTK/Knov8D9+mjeTkyss3C/N/FWqjjWe
+        WHQ4GiLDGC782k3p+wEyWQ3y6tDhg5YNsTK/Knov8D9+mjeTkyss3C/N/FWqjjWe
-            OqXo5aZ7VEAPtVKw7l52us2Y5jiZmUKabvPVXdLYcYsVBBh+K7dehrMMo43lEGur
+        OqXo5aZ7VEAPtVKw7l52us2Y5jiZmUKabvPVXdLYcYsVBBh+K7dehrMMo43lEGur
-            bwQTv+rZkNjHlYivYHyzb0ey4hgsYgSToT54xGpadcpIwmj15jb0ryZl7HRWDgsv
+        bwQTv+rZkNjHlYivYHyzb0ey4hgsYgSToT54xGpadcpIwmj15jb0ryZl7HRWDgsv
-            kLv/TmjIdvEiArgoBpizD6qOQRd9JeCWKufH0gInILXsNYNu+j9LCrmrVt+a7TVY
+        kLv/TmjIdvEiArgoBpizD6qOQRd9JeCWKufH0gInILXsNYNu+j9LCrmrVt+a7TVY
-            AzgbD8/Nm2vdlkrUo1CHEipPNyGDiCQ5VZoFDQqhOjC1lKS5pnl5D7gs5YejkOgZ
+        AzgbD8/Nm2vdlkrUo1CHEipPNyGDiCQ5VZoFDQqhOjC1lKS5pnl5D7gs5YejkOgZ
-            5lGhfEiTUCxeHSPF7qfWloooUiAbDwtCFSmuHaupvPfvaSaeVdldf4NWurFkHeyo
+        5lGhfEiTUCxeHSPF7qfWloooUiAbDwtCFSmuHaupvPfvaSaeVdldf4NWurFkHeyo
-            9Vova3zGzJnS/A46+CLQKWDg9C+jtdjc8Y8uXelWH/n7GJ2Jx8L1H3rWIOftf5OY
+        9Vova3zGzJnS/A46+CLQKWDg9C+jtdjc8Y8uXelWH/n7GJ2Jx8L1H3rWIOftf5OY
-            2omkvL5LwJyknioC2Nqb0l4Brg7abkURayvQX+apHrXL3Q1w/blPU75W89fmI0sT
+        2omkvL5LwJyknioC2Nqb0l4Brg7abkURayvQX+apHrXL3Q1w/blPU75W89fmI0sT
-            xky3+JXwvBIOu70n/1cE7BHfIf05SGfdpvXp3v6MzRkL7i6XaqP5fO1nvTpR5rki
+        xky3+JXwvBIOu70n/1cE7BHfIf05SGfdpvXp3v6MzRkL7i6XaqP5fO1nvTpR5rki
-            cbOJ5BIJXhcYpPmsgLmN
+        cbOJ5BIJXhcYpPmsgLmN
-            =Dk4Q
+        =Dk4Q
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/development/drone.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:AWbzQoY5uaV5FXIwEd16ielsrm28R6qZGIn0/FaWJHg=,tag:Tghk10QIBK4grfH+QamdeQ==,type:str]
+  values.yaml: ENC[AES256_GCM,data:wyCLLhHgskL8HwTUl8yDIxz1D0fHd9EzoEL1/FmFRhu6ZajXBSgHe3iIiQjwm6lxOt+olGMD0PgOapzUSccwl8E70rXEgDbgowtkeXlG+pQfKt8UJn/0bIOUjgHYF2noohMcOcwmPdk7eXs/GLzAx1lHgR7GOWcI1MQOSxCa53Q2KTaClCR8YMNDWm1C4uOrT+qhZbFS3nAcQoxQe/Ina/bIY23s41xjY+TnHvjFYGlitHkYRQVDob3SuPdiOgVKx5dgJqpDsRy4qRx0kBy7o6ezU94olnivTeBci7e+3HK/ueV0d9CX8nOQUJgcQfZldE7C9w042Bc+qJ1BxGRJD1ZBEz4ufkAqDNOQdi/ZgSebTarg2HP//8pDjh+efFrfJGd+Hh/dDPx3CKFYGuP6AyfXpvSraDHhQowXTOFz7jX5Wew/VQhJZOxOjtki/+pXzTnUIIyOdPu7HkWzdltYpngcXRIRAhgvZDTaAoW5GTXn+skojpl3jJbZBQuaXdiVabX+YWVahLv1sR4MN7s2lGS22VZN8RMVBgjPtjzJ0jbB21B2/vX4oC+EcE7eqDU54/UfQ3mbtyJY1+R96Eqqnxmh73Ea/TQQNnTqclD/uwPX0+wgZKi4NlXuck70bQuE,iv:i9vD88Ybmoy8HRADqkD+j3KQWVwFevTC7sv2cGF9s8w=,tag:MYec2M18VFNRCgGGZ8jzpA==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-development-drone
+  name: drone-helmrelease
-    namespace: development
+  namespace: development
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2020-12-09T00:58:55Z'
+  lastmodified: "2021-03-21T21:33:11Z"
-    mac: ENC[AES256_GCM,data:gVixxTZyW91UGVT0P/GNvPjYz1hYA7z4yem4HyM5wZ04CuhPWYZfPrK/NXbaMvTmeImfkwMdMo42oveKzwwABO5fWOIl14fB5O+BcJ2cinJz7GycwyhwFoDdjjnByr4dZLLA/WC2fDno7BpUAvHraL+695Lfu1p0gwE8AN6bamc=,iv:onxLNt7qL5NL+Ji4pQwlQnKUEs67FxoceePRd5OXTPE=,tag:aWrnJntQ3l78SpLyoAjZcg==,type:str]
+  mac: ENC[AES256_GCM,data:mCH37lqRFnH/9QcNw9SeIdsR/J2EmwU0QQWpWrMhjcO9/TSHuotwOHXVWUYwr2hNoQeWf47ikeZHTsjLNF+frCiOiYsS7bUTyGNcmIPB3sOn/pupYVTN7dZ/tOVhbh5okWl3AcERg8ked735f4j5T6+X4JdKp2jYQ1QV8jZcwyQ=,iv:tgk0vqXuoR4XOPQxlftX7wS6psci33IvROAEoudUkfs=,tag:XxvR8mFc8rBP/6r7dB57Mg==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2020-12-09T00:58:55Z'
+    - created_at: "2021-03-21T21:33:11Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv5AZxz7f29ETGl8qG0HMrHP4q4Y/38h9vNlLqWQkHuxsO3
+        hQGMA/JorPHm1g9XAQv9EqOdCfzvLHQZ3R6okjZ5pLriC8RvDoDpqCEe71+8+OzR
-            MCmeNKyRlzfiDkZmkPThZUFYwWH+aeCCLeaYaHZ+Pn0I+/9lKyOyDtBKG2jJ3T/+
+        yC4uTL/bHgoC3DyWCBh3yl2SaZNfbSgpgJ+rcg3ZLYonCcUMEWKD+ykk8/NbjhaZ
-            haoNlZB5Ufy5YDWNeu5xVUZUue7PmI/3EDLkYfJyVQ65gfWUmhc3goD4IfcX0ilg
+        aTjPPm+9qE0mIY/VDasxdJ30Go+mjjuHA9o5LH7dmeeoDyyhLGBx+wM5qZ/3kAvK
-            TB8QYuVtOeCFJn/P969lHBl+CiffoNzoeH324iKWxIs+wI/v6azX624tW6lqP+ni
+        2rshL7ihpAAfjxmII08e6G7EIdw7bpMVnczS0CMbJ/hAftzlIMx+OUxRQhv/hp15
-            /MDsA/wXBMFRCR+5GGpt6+MZomw6DpL0oVgAHVGNaIqZH4MY4eLNvyk0b/gYe/7W
+        WTA2JU/ge7gOucHJzIn8aYLo91ERFEClgNo5L8zErpLHsAi9mle7XJjowvppia0y
-            iy4uUP2JLnfkaHvydCZTyhScYBpKHsm4HKZA3iG5u3LX86aDHEqblMK+ONRe9Nhk
+        OmGg4Kw/Rfhv3ORDf2l3lFRtAsOBpjePtXkPkP17XqUq7iNwEpfOvEjOubYxG86+
-            m8wSJNX7zURxc/x3EZ4eM0ekr7Xku8jtIEQNaFd9RjjRJFNZScPyf+UOhEnaVJzx
+        9kNvJbvYqlGyw7cNDHLZJs68Fi3014frQD8jo7tpaLfLqZ/Nqdop6Z8eXdpu9ull
-            iLfUV58G5o5NR2MKuzj0CEF8FZeBfWEgyJSyd4lB5XqWDYjdHApkcLylonTGOcKR
+        nqN0DvNSLiMLD0YwujzkPwc/cCuIYFnbkNb6gvxZFvF/MmO0uSBHzHl/NYV3AICx
-            s7E3PCqfYq36FpazYcZ80lwBNCNllyAwRk/k/eQAlNRkmRQBm8d+jGAGVa786lae
+        HYxQMMLB1l9LSANNd1Lq0l4BQ4AOCHY9oIYVk5UNnTVpBLBxmABEmOaQFhBgpALU
-            6Hr2Mn/Q3h3x7Mrmxum+j8FL3naPl+lOunolCvlP3P2tyBZu/dZn4qIy9PaQzrMH
+        bQkUmt7JofjpXpiIgHYHE4YmvmQkI+sEIfP/imeRkSdV6OEx2UPBHzYHxY37gcN3
-            k0E1YLzH44ImwudQfg==
+        esdeUqyXcrY5jbR/PBMV
-            =C6lX
+        =6xSC
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/development/gitea.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:D9vJhX1IyPj8I5UZxA+UQqEiuHeKFdvAw52KoB47YFY=,tag:6ijAuQbkmycKbmvww8Hx5A==,type:str]
+  values.yaml: ENC[AES256_GCM,data:Bf+98XqxMk2WKKTcQU/6m9WptOtI+NXDgqKctP/614KM5t+I1rThrlkIVLA2aa7oButDRyPIHPVRfE/2xebjrqSxqvYspYsMm3UpEPMFaJxyMah+spOmuuDZXiAikmGhvLJEl+AOy4XHAGTDvnQkJQ8fD/6I1CKEaX4aUkspGFtx9/X7NHw0A3q/xBUvizhQyHfWDPFj2x0DPlhA8iMq9sncLLlVCjGG2d7K8tBEbOY4iZR0tIL04sDCcVDgUNd4SRUSPdHKYLasRiAHSiYiFZfLPvzofnkxT4p3HmGLwsqtKC4iLmD8Fr0Ibp//RgGsPeECUgx7XHYQSzuBkqQXBBN/N+kQZO3p1UN2GH6N7EWsI1xT/heShxC4lj80UmVSCJhuP7OeIN1OWkz+Tdlp0UL6NYcoNHT/PEmHCj+M9raaNgz804RgN3wOltEu7mOxPrwRqQ9HMEId41clrZwR/DDtFUDx/6AYCQ==,iv:/eA1EqyjWuhC3Nnhw9scut2EG/Vp5G9lzVRrgNKg3zo=,tag:JfcW4K1+KGGAXM2pHVbw6Q==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-development-gitea
+  name: gitea-helmrelease
-    namespace: development
+  namespace: development
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2020-12-08T23:44:15Z'
+  lastmodified: "2021-03-21T21:32:42Z"
-    mac: ENC[AES256_GCM,data:chmtuxyjD4vFQYGco/0BIKLWrbFcGgbgv3j/+Nb/c3S9siaFgbfUFbmQ4RvtO+oBKFn8aA2VKPGsOZOsRSNnN92F6yjIU3xfVhxrL6OuhiI+D1v2neIO9ypyD3Fxc7TaXARYsEyUHpswx0BIMRYhm9E5l251Ptfe236IgwCTNiU=,iv:6hviPOPRC3pQNidhBL5d+65VdIN/KiTR4koqKWFboaQ=,tag:bFMXsBZL4oSuya1IUybLHQ==,type:str]
+  mac: ENC[AES256_GCM,data:ooLjOnQdtrdQeX9w3sJetSxQsx4qns7Gq656nVFTEauQb7LPYMkTrCJzp2iCpS6E0rMXY2anoluROUH0kojKuAoD3atHvScj+dsscy/9KGfxYhsIAlV/icWGmG2ZJeDh5E9uiMO0TfFKyOQfMNhURq8F5g2wflQpyKc4/DQif+o=,iv:+KYG0THFeRVGgv6OZU4MBvN5zOzIKLcMin+MbPhEI58=,tag:iydzxp4g091iUvTTOz6eZA==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2020-12-08T23:44:15Z'
+    - created_at: "2021-03-21T21:32:42Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv+L7UJ7AglK7jczd0leMXVj0dxRF0tcwsFM3Leba2CpEB2
+        hQGMA/JorPHm1g9XAQv/WvC0Onjq9VPZ8dMydYVbRxL27VTwXp0VOibVWxxl99Pp
-            8O1Smh0Fzb09OY17z2Rer4QVBRo88f2npB0lCHAyQs+o3187x/wejpe4L8Wdk2uU
+        78wV1zgxV4LLJnGTdmN48cB0RGua4uluRZSJi+z4TZ5jVaUps1L/hz0ufKb+BKq9
-            V7lq3Yk/2liw9oaRMFayMjQGox2U5jPEBjPeijxSWHBQ1o0toV+ehEHniE9lORdQ
+        STpvstdq2TxyBclIZM0eruhuqQzFDPkconHpOWaIcgqAhmslaZAQmJ3LNdteVuKk
-            1Enw/nFHTtKzGfCcDcMwuasDhJvrizwU1iwLJNjNIMBCTeZDFmwdsmEpRobKRPqR
+        KkSMzm+Ub4joiov0G6EBaRJz9wihM/N6llVbfiK+MC0dXQLE0/X+xZjXGmtOwzYE
-            CfwW5g0+mug0f/A17XaDtYEWyVbTtqKR3lehj2f6lD+opZ2x3MZN+zUCfIvi5Kzw
+        td6h2V9Pb9NOMACZkmW5gMOWi5weKnSNX8EAQOWF7mC6oiR1PsERwsMoB1MxVImG
-            mV2s5X0HmFRwDStImmcdCBl8FXfzK1zdbHtnFVukP3VXsOPwBzid0rSQoPEJrzcO
+        lMlKDRbjF75T4QTD+TTPEkExTtEO+3sUFJd6MuJkf9GPbvDlVuD/ZE3f8Y8mf0AE
-            F/bsfUkyzmYfnfsVRwNHQTifl5FhmNKLzuEBBSL+sGeT0h7Lqg8f+hUrcs/BA7SP
+        f2qKMW4CVwm40GBfemFaLUSr3HKAoM61nt7cr78zhg/vi2F05qrPT2XQqk2n9CM8
-            FtYxmStc4jTMM0QpUWCJVx0tRHnsYF/k5DrU5E/xKxq/znxzs7ZuW0F15DoQV7Q3
+        RAgkz2APW/QWcPzSY1TViWchw1Pc2VX++nigUv9tKq9c1umL5A2o0qRGO2e+h53c
-            GcUvqCNnjAPOmvYCGx5B0l4BlIRHZhjvLyaOM4FjjrjsFhGeVJRmvlLYif7ysIwS
+        NW6gWfOMRsEOPSJrRSxi0l4BTd1dgN3hz43I8VsYdnmg+g7wJy48NrVzFb9ongoj
-            ObH3ugdg+v0oNTtkEVd1+gt3Uckxl/4L/AcmZbLTrFrbxkbdY/KtH5ufUTOuEccP
+        5dmRcpmFtkHrSOMnlQu2nXVEEXJU/uJ4wfHXEPRjPR3xRdzqIttmDuAKhLhm3+O1
-            F69H3yoj2hBf1ntV2DzK
+        S/XDvfT8+vi/KuZ+r9ho
-            =Lles
+        =8u/X
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/development/kubernetes-secrets.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:xnsMc3bK9zsVZ44sBN+pK2ZMWJjWVByIpHVJQQAZmNwA+cGgMM6wfiS9Wnk9ZUQ2,iv:6kE/ZDTwoQH3FSLkLf/NC1LUAVSzZEqdR3xjifT2VcY=,tag:u27W/ILD5h4B5DRq/2flaA==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-development-drone-kubernetes-secrets
-    namespace: development
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-12-22T18:37:42Z'
-    mac: ENC[AES256_GCM,data:dV9PdEgnamQKtxW2UKiPl5F8yCHEKa8kUoOL7bTLVR3BPuef8Wj16jXAXu+RiaueGgX7aUZhngoGdpe9Ry45kh4+9wWzTF/qyoLW9r4Fm/vuhISjfkISKgH6c6CYK72u7mUWgIfJ6CJ++x2G2+8waNUp5sZOterwsYjIsBXgEEk=,iv:mgIF60HfvnmZoMc2EM9u49jubDPtgfn6LbN+ysKyK2A=,tag:DZ9qfV8cv6KZZa5AO4Tbrg==,type:str]
-    pgp:
-    -   created_at: '2020-12-22T18:37:42Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv9H6qh4wXKWogURc5/jcPx1/cEKt3AjbB2T7v3490SbhFd
-            wi/8vlsI2XpZGM5UDWb594Avhgx51E3geWTt0PX9PEs22ti/B3ZV2BQa4CENi7Y7
-            dTAkUPm0lGrSVd3qlDs/uiSKYhV6T+ECiNpg5Xfgmp1Da329Tn05dC2IyuHXqPAB
-            NgWGsELp78rOlE2YABElVFENmlfbvebhTrhDJXjjy2A9NHbha0WBXUx/9pEFp9h3
-            0eghavaXAsPpHehnsAGb8kmLH2hXU1Zgxn3bZQenQTJrmzdHamp29p/++c1taPcV
-            qx59Q+kv1i6QCn/9subY2OGEuxrwmcwxGzRCLTSggX+b7NhSdqrgTBnYPSsqXPMS
-            Rv7TV7hRwWLLU8CPhuNDVt6cmUCyr1RHLECO6fzFvicuKNIIxyJSOMZhzS2+FjC4
-            9LuVzbuK/VXPQqBdUIu1jZ2pV9qY3W9gbKYhBVeRY/RsIO5ywdd7GIl5T2Nz/9WT
-            I3GcrxfsAPxjGBd83iwi0l4BM8CnFOtCuAASyzI7Q5gr/D226RZ5FTyzum7N4GvY
-            ndS7kNX/+ImlLJgT9qwt2RFIewgmDS/gS1WlRfoxa0Pu3mNBjCodbUcfEyES+qbS
-            9+cFdx7DmgWksnGS5Yh1
-            =bn2P
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/development/pgadmin.yaml

@@ -1,19 +1,36 @@
 apiVersion: v1
 data:
-  values.yaml: |
+  values.yaml: ENC[AES256_GCM,data:2tBvUDty0iYub6ekXrh9u3fCElSY9fQ+yWMeFz8FLdT+f4V8FmIyZzkqpKXipRKDrvuaRlqJlEoEV6hgqpiYUw==,iv:HgwEkJrjVOS6RV2RPLXijKiZiZpj1g3jfDlRj1drGD0=,tag:nbg2Nwn6yGmSPxC4dMlM+A==,type:str]
-    env:
-      email: pgadmin@xpander.eml.cc
-      password: X9VCaWrsCr9PoF
-    ingress:
-      hosts:
-      - host: pgadmin.k3s.xpander.ovh
-        paths:
-          - /
-      tls:
-      - hosts:
-        - pgadmin.k3s.xpander.ovh
 kind: ConfigMap
 metadata:
   creationTimestamp: null
-  name: helmrelease-development-pgadmin
+  name: pgadmin-helmrelease
   namespace: development
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  lastmodified: "2021-03-21T21:30:33Z"
+  mac: ENC[AES256_GCM,data:yR3XxXSgWlD9agbQhYacDwvPxentm0TiftX+nbbuK8pt50SX8vLeRWBPEB+sC7HYo/LZdaI/OJcCMLEmATwqsfuuYHlC7f2hWA8l990Z8bxmn5MgubpXv2QH75oeeJ03CYy36+f6fBHnZ3uiXSF/Gj7/tBuEasoqN6q5kKga2OY=,iv:9p4YJQ2jz6F1kiXuS1Ix3toiUNT4tVFS91o6OiOoZfA=,tag:08CjOvYpualjSGTMux3SeQ==,type:str]
+  pgp:
+    - created_at: "2021-03-21T21:30:33Z"
+      enc: |
+        -----BEGIN PGP MESSAGE-----
+
+        hQGMA/JorPHm1g9XAQv/bl7sa7sLapUhfR8QIbbNoMr6p6HqalNmkO2OlabMQAAc
+        vPSuM3tBv+eMsvSBtOSb1BS0+e9xQKb0udjuJdeaX8tGQk/ApoqvHqtMusnwIg9h
+        U5MRRmYYq3AX6IZbzFd5Tu4RsIRuV4FyhvjhX9buVycwz7Af9KaTGde67F+ots1U
+        /4yR4lC5ZFHkpYqNvGLwMuLqu+FQnL4IK6tmqYL16YAIeaeFKtm1ONZ7bdqq5e+6
+        I1Ti7/eajf/JAqJ/qfYmxUkGCIKoKvCcKhUq5WkuatWumTaJZcCkQGrwcZ1pCCKE
+        U4D+zJDVwQD0KpXk6FVgE1nmZVZIvPNeFEye8ZjkJeP6TSjXxwKeq+c/T2Zj6wWT
+        Trfo7PtF+NjLULQIaUcpV7Mi7rrqh2e2QVTozmOMFSC7giyCa4AwKE34ofPRUfC2
+        JqDx3yQkO7eScPYCcEE9ZOrerqiEwThamYEl+W0FzZyjituaHtUZ5hIpg7sH4r5j
+        SxrBquo53Wf1ZQbodGTD0l4BHn+RTMko+UXpYDSQMrwP5O1UBaiha0a2YtAVK9By
+        VXI/sVAJGMBEJqFktXu0mUwyYU2JW03Hh/VI+aOB78NV2ObotdwHXpAJuk++6nZ0
+        v1Vf/7c7edYX43LkT1x6
+        =d2IY
+        -----END PGP MESSAGE-----
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+  encrypted_regex: ^(data|stringData)$
+  version: 3.6.1

secrets/home/docker-registry.yaml

@@ -1,36 +1,36 @@
 kind: Secret
 apiVersion: v1
 metadata:
-    name: regcred
+  name: regcred
-    namespace: home
+  namespace: home
 data:
-    .dockerconfigjson: ENC[AES256_GCM,data:9Gfmu4pTlagQGohJVdWG0vnGundILX43zOqLZ+rhsZOXkIEmYOde5U/IYHHgbDDyG7fosVsUrZh9dp0lls0Fbg3MlJo04wXx8eet9bkfJbRdAf75zrtMwjgCYEJ9ILwzsgOr2ilAM9JrXTvhP2WoDPJ75aH31T+uuHZhRmXTcfW3oIok4fzG6yvyvJO9tyfb3ErcrGw3lZgtiXfHa3cG3MuyxHwt0cvU2IytwW87HzNA15Eb8u9PeDWpngavbLOFcfzFFfxtDUTlgaf/8yNPRijSOCf6ZkupoZeFaJim8qA=,iv:dTqbFX0cDtnm78cZvHkOdTBFlHfDY9g8SEx+hb8oR7M=,tag:5JEX6yI3TSqBqstnXh4ptw==,type:str]
+  .dockerconfigjson: ENC[AES256_GCM,data:9Gfmu4pTlagQGohJVdWG0vnGundILX43zOqLZ+rhsZOXkIEmYOde5U/IYHHgbDDyG7fosVsUrZh9dp0lls0Fbg3MlJo04wXx8eet9bkfJbRdAf75zrtMwjgCYEJ9ILwzsgOr2ilAM9JrXTvhP2WoDPJ75aH31T+uuHZhRmXTcfW3oIok4fzG6yvyvJO9tyfb3ErcrGw3lZgtiXfHa3cG3MuyxHwt0cvU2IytwW87HzNA15Eb8u9PeDWpngavbLOFcfzFFfxtDUTlgaf/8yNPRijSOCf6ZkupoZeFaJim8qA=,iv:dTqbFX0cDtnm78cZvHkOdTBFlHfDY9g8SEx+hb8oR7M=,tag:5JEX6yI3TSqBqstnXh4ptw==,type:str]
 type: kubernetes.io/dockerconfigjson
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2021-03-17T10:32:47Z'
+  lastmodified: "2021-03-17T10:32:47Z"
-    mac: ENC[AES256_GCM,data:SWjM/a7SP43e6da0jqUHe1YWrMAdQ3NwTdRPKVYb+156jvKmf5NO7BJr+gj2mq5C/FtSTWQnA/HQqdMXcv4B4vfeu0M+ybtz4jk9gsQdJD6m14+CBF2yjVYKvkUpVXjsbofc0ESf5mFuXnKc20vXDmqgD1Ijb//onBeOQSEowV8=,iv:EkcniKMvecv5TFx7ZowM1ip4wjQnCKIfxyytoOxbcn8=,tag:RV6N/NqQSqX/5Z4MGgUm1g==,type:str]
+  mac: ENC[AES256_GCM,data:SWjM/a7SP43e6da0jqUHe1YWrMAdQ3NwTdRPKVYb+156jvKmf5NO7BJr+gj2mq5C/FtSTWQnA/HQqdMXcv4B4vfeu0M+ybtz4jk9gsQdJD6m14+CBF2yjVYKvkUpVXjsbofc0ESf5mFuXnKc20vXDmqgD1Ijb//onBeOQSEowV8=,iv:EkcniKMvecv5TFx7ZowM1ip4wjQnCKIfxyytoOxbcn8=,tag:RV6N/NqQSqX/5Z4MGgUm1g==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2021-03-17T10:32:46Z'
+    - created_at: "2021-03-17T10:32:46Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQwAiO6R84iD3pDV9XxRAPzRoOYEvEJaJ/kkvyMNR3TMDjpv
+        hQGMA/JorPHm1g9XAQwAiO6R84iD3pDV9XxRAPzRoOYEvEJaJ/kkvyMNR3TMDjpv
-            vFKMZlQ8wJmgj2+BDHhiCM83AHWXAle2pSP7RSgoASeM1OxYat30SqKWDHVyGpNu
+        vFKMZlQ8wJmgj2+BDHhiCM83AHWXAle2pSP7RSgoASeM1OxYat30SqKWDHVyGpNu
-            W6itmAd/ZvLuxcDc4uCL/cK19PwIb390ee0H3ruSUiDzoLF6RZP07yTiC+Rll3TU
+        W6itmAd/ZvLuxcDc4uCL/cK19PwIb390ee0H3ruSUiDzoLF6RZP07yTiC+Rll3TU
-            vCelyGbsLWsCWFjo7jJDM9cGEVH51FaVX9KdC9+EbGeJEf7dN6wW5+KvrFxre4yu
+        vCelyGbsLWsCWFjo7jJDM9cGEVH51FaVX9KdC9+EbGeJEf7dN6wW5+KvrFxre4yu
-            mj3T7XnWQDVTmBfqdAesk+cpL7WtLvGRjhmQxunSNpwmmmEx6tknghNeLjmHwRNp
+        mj3T7XnWQDVTmBfqdAesk+cpL7WtLvGRjhmQxunSNpwmmmEx6tknghNeLjmHwRNp
-            ouQL9K4+vCyK4mhsiPjUHTdLT3IahzkS7bI62/0PCnKlhD8YIaWXeXhBLWqiUuOP
+        ouQL9K4+vCyK4mhsiPjUHTdLT3IahzkS7bI62/0PCnKlhD8YIaWXeXhBLWqiUuOP
-            gK1HKkToZUg2G9kLIM3SzsV7c4dXnul0bdVlx13uZKjg048gYDYhZnsceZEU6l4x
+        gK1HKkToZUg2G9kLIM3SzsV7c4dXnul0bdVlx13uZKjg048gYDYhZnsceZEU6l4x
-            z+GbZLUPmwHD0H2JTCqmrX60TnbkK4qqOVedTEuHTImKlR6Bp9xwqJH6bRK5CDwD
+        z+GbZLUPmwHD0H2JTCqmrX60TnbkK4qqOVedTEuHTImKlR6Bp9xwqJH6bRK5CDwD
-            rzN7lDkU7uMsBpRes71N0l4B87Pl6LdXmI9OwVoQbMm0Wyxvd7EREX/elh/6A4Nr
+        rzN7lDkU7uMsBpRes71N0l4B87Pl6LdXmI9OwVoQbMm0Wyxvd7EREX/elh/6A4Nr
-            +Ndo1XJF05CNPCH8F9S7K3peMFSeIUe0az18Ft1Mp4PhsqBCzNZcWKhGBy88BIR9
+        +Ndo1XJF05CNPCH8F9S7K3peMFSeIUe0az18Ft1Mp4PhsqBCzNZcWKhGBy88BIR9
-            mGyOGdByEUKfdB4feWcl
+        mGyOGdByEUKfdB4feWcl
-            =yYe5
+        =yYe5
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/home/hass.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:tcR6kaZbwScjHob7H+q2RFnu/ZnSs8pDGDLqzWBDmPk=,tag:PsUVLGQ2SVnI2rmkBMwG5A==,type:str]
+  values.yaml: ENC[AES256_GCM,data:3TUr6kQxGCJ1eavBhAiQ8ycLRG2E6bfgv/Rzp/FbzlOfL1i284D15nlpK8/wcYu4D3kUKt8rYwiDe0DA93lpqazmrjc18ZvnSvVLRh+w28MgbSb6a5f281cbcBFwUvWhqaHW9pBkphsk+rDHiX4k/rxWMHoQENrgnfjAYeKfWDDsHuIJuZoCZyNhmq/ndx6I8eQ5MYsb1x8Kgp0vdiBTzsCVUuSEnrkfL77O/NVAZIITL3FZJfu/T5MKd3Jk5EwdpUvB0gPKIbGbXfYHCvcpfGkn/8UvUGnGsc2Gr2LUV4Egp4gAyPgowmbfOeT08i4O1Oc=,iv:GGr3Es//XMIEx5EUro87b7Kz/K5TmXTztBYBUjV1gAE=,tag:gzJ33OF9XYrQ5+6ws59/6Q==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-home-hass
+  name: hass-helmrelease
-    namespace: home
+  namespace: home
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2020-12-28T13:35:51Z'
+  lastmodified: "2021-03-21T21:28:20Z"
-    mac: ENC[AES256_GCM,data:8REwuhFyRWwNX/tdjEfUnE2Gz7fZ3j3HQVid6n/Cbn8Hs3t7BYAEY/2/wUxSudcYP2Dk3iaNMOVi9peBus+e60O8KX4Zwb4fV0wJMXuNBPpLCb7DGx+cHGYxr5f6F6CbThXQFj7/FYBuelTyUEPFUZCdhvQFhDXF5wQ0i7HSVSE=,iv:CQYvwVUj9Q4dj8oUP9kpkK/c89NtQye3AhVC5qx1Mcg=,tag:ub7N3jR4Byu2zRAaDbOdFw==,type:str]
+  mac: ENC[AES256_GCM,data:U2OkBGzAaaGUt5OMzoS/WDWJF+IIHJ1vj3+gkM9vtY8L600c9GcEj7doQutzuua3vgvM4efG5UFCiyTRTOnwvMVlDO31si8ZDJg+H949EEEqrvpJB6rBJKmtmme+tIOWgYYYHwwFOPugm83fRxqJA2wBYgOJd4NkKxRtyUgij8s=,iv:P+gFBjfO81Zd20K43GzcXOyP/CgceHsTo+ufGNtyLXY=,tag:GtBkZpfmBo/8dpqMTpoAig==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2020-12-28T13:35:51Z'
+    - created_at: "2021-03-21T21:28:20Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv/T8H+HCtJn51mZswpgjlRILm416mQBspbSzTbce1MuEtW
+        hQGMA/JorPHm1g9XAQv+MWYOkNRCBiFyZrRiqCjeXkBwD/eUu6kQpmfrqTBNb/70
-            9ihFi+5dhfAS6xUU9wfPQNQY9v8XJeHE3siuKti1Ojfz1m64bFcmpQuqh4UfxaFg
+        EJ/7zT0cPEiVm53wh9yk3f5Top14e1fIRYxFlrDRlcXqGOK7ca7v4VkqYSGfgzpv
-            kOYM3TgS10KtBOi9wzysQOahn1z5swZfkhc9x7zIXmdQT+m2H4rAYibloLI2TmVm
+        Bzk6GqSLKHAMMFXtPSaIUIf0Qfm78imIzvLJLZrwVKGEllmlfFl9GrzcL0wVD5ng
-            WbAsc4+Nmnt9vVgSnYGRQv/qq1zOkM4Z4UXYPVd/oLa+0wQf7JdwrklMAeHvpFtC
+        5bRmGoCzsMGNJ2CiJgFax89zRYXBHbDMnksIcszrrguE5bBDzAWHhV69ILt8dOjg
-            o44TXv6hfgYDevVDK4ZuuokcOHgeJOJSgW6KQYSvO6pdlBLAl8KyDxTNHFgKkCXg
+        k6zXfEXlt0/inGYSSy6ONRxGiqcUMzj0G51yGMZCSMt2fBV6OVrAp4sQI0B8p2Tz
-            cHSwsNC66EyONtKfkLVvgmF9d91UbsuQnkXNGPqcZI3V128BzOD/yl/uVHyV18DE
+        E2FcBes48q7c4+QoNl0SzAq/z6irQsV9CZMSyCgpO27Tm0wDND1lqTO3wYpvtHhh
-            SdBP7AOBbIX0vekHI2CaAL1eP3O9D1Jg4yM9RcByMNRMSfRvS0i0XM1Q2VlC3ZlQ
+        j/l9Gz4dEoIlAzQiJ9Fmxr3Ho70X5iffBAdSPnPQHbyuqJAQEap+f9BuMfCtPkNX
-            GSXTpB3kFJ4Eni4nIgDkrWZMALftIwQ2rY1z76PlwZacLv7hx3DtHIvTVi8P+Ain
+        rGEZtCHRCAsgkmQBQca3SAz5OfknZckxFodcFee6SgxLd3n7QRQWHBL/JcyYkIEM
-            O+qt3ssk68FAbH/YZtld0l4B6A+GaaCf3PyZdv37X5t9AB4WcAh2CselSjOk1nEC
+        R6wGi+dd2QnXqM/R/kPU0l4BR/wACU0rE07/4ErzaDVrSO3XtdHGyNsqiuA6BTgk
-            mE+wPm3VgChASLqUZ1W0U20FcuH3Zue2QXGaOzSHbZHLf/kijszT+FsA/vACl7Cq
+        UXk4TCWsLLNU6olDNoAqkMWxaaLHprggM3Y9qSLQa9MJMeAWjlOwyP0jEvSbMEEE
-            AHzrD1hwBoes54WfO+C8
+        T93Aj6LHFd9ZT4EjniGN
-            =i3FD
+        =jblx
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/home/travelstories.yaml

@@ -1,123 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-    name: travelstories
-    namespace: home
-    labels:
-        app.kubernetes.io/instance: travelstories
-        app.kubernetes.io/name: travelstories
-spec:
-    replicas: ENC[AES256_GCM,data:BQ==,iv:yB2mG8RlP3mIpqW2Nr2LA/ODapgwxDuo3SaoH6EdWtk=,tag:LrM/VRgJEMWBW5JZGfN8uQ==,type:int]
-    selector:
-        matchLabels:
-            app.kubernetes.io/instance: ENC[AES256_GCM,data:/GxErUb9mYp/zMSiIg==,iv:o9TN/Ls8Q+Bh75LWD84YNBGXrJZgTm+/2aK17hKMDYs=,tag:m7TfFrSCmqrUlxDciCzlKg==,type:str]
-            app.kubernetes.io/name: ENC[AES256_GCM,data:b6wqWgAu9bPiCJsSVQ==,iv:VywDPRKiFEGShFDkH/MkrIw3Sa7I3tzyxNgO6pdMjbs=,tag:Jgp9C6x71UUFVcmm0UN/Ww==,type:str]
-    template:
-        metadata:
-            labels:
-                app.kubernetes.io/instance: ENC[AES256_GCM,data:6gHFjM9CjDfxVwxeWA==,iv:G01AZBPMbqtcXVCIY3zLkHUHcrEhHZeTaRxbhpYVmLI=,tag:XXSLXW+MxU8nzytLOZ1K6A==,type:str]
-                app.kubernetes.io/name: ENC[AES256_GCM,data:mIkP9IoTVKYtLMe1fg==,iv:yM4ZbRTzs6G1Y3eHOGqx36eDYn4iegRlMWmOfoBHp7o=,tag:Iz1NmqFTRU1XH8BhTVvcYw==,type:str]
-        spec:
-            imagePullSecrets:
-            -   name: ENC[AES256_GCM,data:0hKHFvDvkw==,iv:PeL1HeBn39rPQvOSiF/FHDKYvfij3EWSAddGrh5kT3s=,tag:3iRlWjllUkVpMWpZn8FbLQ==,type:str]
-            containers:
-            -   name: ENC[AES256_GCM,data:H8TQzAJFa0Q70qx4hw==,iv:QLbG79x0dOU6qsbaexJPVhA6hHSbudFAqNaUvoqZLqg=,tag:p+8VnLYpt7r1JEwdDAdowQ==,type:str]
-                image: ENC[AES256_GCM,data:WaSZpyUURoaJqBCP6pipnQy/kQcIJM+MkC5RjBiRLLW2PxmRy2qVaXZ8mFczixhf+xU9aA==,iv:PBzLk/evbi6HfSZFAW9CWsSkiYUMpiEpkYUqx4Vz+rc=,tag:O8qpP3t4ugihOBpzOllBIw==,type:str]
-                imagePullPolicy: ENC[AES256_GCM,data:u324Y+pv,iv:Nqdz+1YYBIexF6a+ebEJC8ViQAIuTdB/hEoa7neivE8=,tag:mWNLadPrquZgWI2aAkOcag==,type:str]
-                ports:
-                -   containerPort: ENC[AES256_GCM,data:YUc=,iv:QdBLSWLz+dejV8FjAbNOUS3SdQiMU5CgZgUSIUP5dRQ=,tag:oSZoKJW54rCOTHsjQY7oBw==,type:int]
-                    name: ENC[AES256_GCM,data:43TPtg==,iv:iatvbLiTVPehdqpyJIn0ZE6WdBV32R3wqcOwkx56HSs=,tag:vNqZEJBLmVQyPK9GbuhEeA==,type:str]
-                volumeMounts:
-                -   name: ENC[AES256_GCM,data:CgRbjvR/LO59,iv:vJp9IemN9csV/jUjB9K45x3MwiMM7rU7FaSgS2so4K4=,tag:kd9m2kDGc2u6urrEz4XDrg==,type:str]
-                    mountPath: ENC[AES256_GCM,data:w85Zag/M87ozuNdaifp7/PaCh0s=,iv:3IlQBzR0l6Vm9ud+Y32V99aZq+wxLI49S5qv+9VLKRI=,tag:FDC8kMcQKwNgLJ/+0K5CCQ==,type:str]
-                    subPath: ENC[AES256_GCM,data:CPge/W+8Kz0r,iv:ejLlZyQdXnSw6rkrJJkzksHmrt2aMc2rRPIqu768+Go=,tag:at7dGgnXRe7WXFDawr8Hiw==,type:str]
-            volumes:
-            -   name: ENC[AES256_GCM,data:/am7lUgMwhq4,iv:MpZdVJ2Na609Q+gRnk3Kobmj9oz6qYU+hNN2z3fCxiA=,tag:KYadb57rsmvbwDEPC7BpIg==,type:str]
-                configMap:
-                    name: ENC[AES256_GCM,data:pBdZk0wzi0gBzHPSyhTSsHWBscNtM5I=,iv:O2fexbfL3Td7kjO57Iz5yIaJMlnYTYYQ2kWbae2RT2s=,tag:mz7ur9gB2Z+Gs1FbFBhhiw==,type:str]
-            dnsConfig:
-                options:
-                -   name: ENC[AES256_GCM,data:y0OCesw=,iv:Ni7elsrZxujAWqJZqBnMwWGWhFY2RA8jLEsp29zzTwI=,tag:AivWAcW7pNWUA/L9+Wq/Og==,type:str]
-                    value: ENC[AES256_GCM,data:Mw==,iv:EvIy3wzwMLUXsNk5R7F6lkRz5bDyU6fOwCdJzYTrUG0=,tag:3TLtlLbtJ1JudItiQH+3XA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2021-03-17T11:11:45Z'
-    mac: ENC[AES256_GCM,data:WwgIJnlzYHtCnpa969V43tztPpIBNxkEcyQc9b/juDmLqjX8Z6afGs492ccyqGL7YyRBnNdt0LUfmAf3AYxnMJdDdV51lrObSAhGVDyRjBbY3Ke11JkCsLOl9rZCDVImiRfvUx2ecOsSQ5HDXE3yOBtLVxaOB3RULqJYvxFC+1o=,iv:ofE23xNsGedR+UdzOQbTUyp7hkth0eWPTHGejN5QY+w=,tag:idsb6JuS+JiIGqfucA7IXA==,type:str]
-    pgp:
-    -   created_at: '2021-03-17T11:11:45Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv/X+hgRhDD+b7iABU9bjYPcFHKKovqYZeW1KjPqBhROGVk
-            2B1BPHn88vIAoZpI+18/JFvQr8hBthHjJIOOwOb3vtcfreEFPMSg/svpau3uGwkh
-            0NKFCc/La0J07QkF13OHIlzRXXW3AI90aXaIeEsmjYWms0yFejXpVC/bAp6BsRQx
-            mAQOY2pXEdRV3zja7AreZP9kPHn23pZxVZ3xDASIAjfqjq5ownMhIm5l5kYK0fZc
-            3Ctm/70wFoZVX9Eq5y5U7OKsBmxJSZN9n1HV9CLC4zKt7T8nIET5MuZ+ZPIR9v2w
-            KiM1qMulrpFQxWaKkLXWnxtqN1cLarw2rOqxuCwGdxPp0SQSG04XBvLKox8qaRuM
-            EAs7F4GKPDE5zsbIBhY0MLl7rVCUHVZ+W/j7zWw5b7Db7lkyXQMwrSnm0fp3Vyy9
-            aQ5LtELBz5oHmES7NZ3X2mvTNMBFfLppSBnKkAh1dkgAYRPw2QvsTIEzexebZ7tY
-            IAXgiwwOby57tDWcQSzp0l4B6+uoqhIspt1PJgL2L4J2F7+7JAO9x1MXLPoZhVPg
-            asYoPAPSSq4Va/zVK3e+zQKpTHbb2ppKNUIbOQcec6GyCOWcXt26QI82kg6ldrk7
-            Js7YwUTgO7yymzpvy/0I
-            =8/bz
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(spec|stringData)$
-    version: 3.6.1
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-    annotations:
-        kubernetes.io/ingress.class: nginx
-    labels:
-        app.kubernetes.io/instance: travelstories
-        app.kubernetes.io/name: travelstories
-    name: travelstories
-    namespace: home
-spec:
-    rules:
-    -   host: ENC[AES256_GCM,data:joodqOXigNCjPH7Km0PnU+kgFijUgLzWgMZueu0=,iv:+iwdhDDkKHCLZwFVaHtTTDmdCterHpvWYDyFxfyJXyE=,tag:RQF9h19g7bj41oBD7j3aqQ==,type:str]
-        http:
-            paths:
-            -   path: ENC[AES256_GCM,data:Mg==,iv:xFCcofVe044hr5JtgYe8o/0UVGrWpkNb35TlYTstgC0=,tag:CvyGI7gj4BMRRhiXlGnLZQ==,type:str]
-                pathType: ENC[AES256_GCM,data:Gj0M2271,iv:gV5GulFYLzJ7BvdzMcMl4WXnTDltpZmK5Sw7IfNPgJk=,tag:hGlGvqdXKMgqHSdL7CnA9w==,type:str]
-                backend:
-                    service:
-                        name: ENC[AES256_GCM,data:HuhI2oJHQVQ8KlFA0Q==,iv:S8gbgJkujTy77Y5aipIkdq1M+mKDQSuGxj6UTUG6Yvc=,tag:tq1Y8IOq3SUwsmUoDpLUnw==,type:str]
-                        port:
-                            number: ENC[AES256_GCM,data:SF0=,iv:uyN1MF1F0UwTTWUeKCd/+RySDb7t0uwISbLusj9g5FQ=,tag:xadXAAtUMJbrEqqzWQoTBA==,type:int]
-    tls:
-    -   hosts:
-        - ENC[AES256_GCM,data:qeEvxutAsabMrUzWAfINVaUL5QW/Z6Q1O26RVUI=,iv:UIIBXUZFM4XtWw2LgfP2Jy45BJniS6q9aYeIV3MBdm0=,tag:FOBUAOpEgJScUe6QIA/3tA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2021-03-17T11:11:45Z'
-    mac: ENC[AES256_GCM,data:WwgIJnlzYHtCnpa969V43tztPpIBNxkEcyQc9b/juDmLqjX8Z6afGs492ccyqGL7YyRBnNdt0LUfmAf3AYxnMJdDdV51lrObSAhGVDyRjBbY3Ke11JkCsLOl9rZCDVImiRfvUx2ecOsSQ5HDXE3yOBtLVxaOB3RULqJYvxFC+1o=,iv:ofE23xNsGedR+UdzOQbTUyp7hkth0eWPTHGejN5QY+w=,tag:idsb6JuS+JiIGqfucA7IXA==,type:str]
-    pgp:
-    -   created_at: '2021-03-17T11:11:45Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv/X+hgRhDD+b7iABU9bjYPcFHKKovqYZeW1KjPqBhROGVk
-            2B1BPHn88vIAoZpI+18/JFvQr8hBthHjJIOOwOb3vtcfreEFPMSg/svpau3uGwkh
-            0NKFCc/La0J07QkF13OHIlzRXXW3AI90aXaIeEsmjYWms0yFejXpVC/bAp6BsRQx
-            mAQOY2pXEdRV3zja7AreZP9kPHn23pZxVZ3xDASIAjfqjq5ownMhIm5l5kYK0fZc
-            3Ctm/70wFoZVX9Eq5y5U7OKsBmxJSZN9n1HV9CLC4zKt7T8nIET5MuZ+ZPIR9v2w
-            KiM1qMulrpFQxWaKkLXWnxtqN1cLarw2rOqxuCwGdxPp0SQSG04XBvLKox8qaRuM
-            EAs7F4GKPDE5zsbIBhY0MLl7rVCUHVZ+W/j7zWw5b7Db7lkyXQMwrSnm0fp3Vyy9
-            aQ5LtELBz5oHmES7NZ3X2mvTNMBFfLppSBnKkAh1dkgAYRPw2QvsTIEzexebZ7tY
-            IAXgiwwOby57tDWcQSzp0l4B6+uoqhIspt1PJgL2L4J2F7+7JAO9x1MXLPoZhVPg
-            asYoPAPSSq4Va/zVK3e+zQKpTHbb2ppKNUIbOQcec6GyCOWcXt26QI82kg6ldrk7
-            Js7YwUTgO7yymzpvy/0I
-            =8/bz
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(spec|stringData)$
-    version: 3.6.1

secrets/longhorn-system/longhorn.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:SkP3j4TehfecaKllAhOwtv4pTuD2XIHmIGkllk5zdvbC6acW9Qr8cxZq0T1wNHz6dY3nCI7G4rOAebVP5UErSLpN8QJOhzsQell/USuZIusH3CGiFXd1Nop7n31S9C9KQy1m8zp58FORQ+XZzNn3k0joKhd2WHz/1Z0EoWDw6IE7I3x9Kwcn+GXBg69aJn56YV4wL5ZrAKo9cwtUBkTxq/xWedyVoUFd7bB0GUJ/9PeIU8CqP4/16DQQiRgGXSEU6ocL0x2BSZjybNW/24eSmYDYQlqpuvYj2fxC5hclP3uMPZ3hfg==,iv:nErUMd58FxzCWEc1ch3TSqVskH4P8Pdc68UdzLmjkXE=,tag:o3bX4rzOV55tlco10VQ/pg==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-longhorn-system-longhorn
-    namespace: longhorn-system
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2021-03-16T14:50:11Z'
-    mac: ENC[AES256_GCM,data:tarsCRl9teqfk3IZYinntBK5ZPGKR/6ruOS9sKIdessbiL9qC2v4xgJmSpDa9dfu2FOV/9MJ1nDvnSA5FcN16kAUFHOsZ6jrN/8a+a5rMP6v71cuzTPQti84pRueotgYRmjfovradZ/qDmyEtRvkVrhEKAm+fAOyIbqgQC52nec=,iv:W2AezQODizZrD5LuFTzP0XLCIVXMiMQwLbPULx8bktU=,tag:b00N5D21i3A6K5r+0l4i6A==,type:str]
-    pgp:
-    -   created_at: '2021-03-16T14:50:11Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv+KPvZ+EtWLIMUX8+hm3nNrjRVtyE94xQYKuFbRqZfEV4W
-            fHKHHuQA8j5N5YzZd11xAdbuCTkAmNM/vTjJYRKBBEdoAJitHFQ5pvTRL0/syz4C
-            tezPhq3SgiyL4Le0imxDZOz8BUCojWz07cAfocjLFx5a7gsL58izBx6nvx+BYkQt
-            4SVmgplI8QPGmH0BrOtyaG1UFYfXBQGQ9HXfL29LMxGpk5Dtz0f1A/XKF4QfSW8l
-            nf0HeR1lzYeqBQCY6rD7/fpdgXR+2OX72HuKuMK1jL7ux/MFxTEht7pA/5rvfKp7
-            IDvS2H0rcqwbiuNvXwEVxBV3Olqx1jFkkDsjuZGvZva2SZAXU6Gfn0DSC4Ndyj0m
-            J8IMJ8U5snlKjHJIx/s91emwUXuB9wK9KEVi+MIZx+88PK4P0CXzaUyXTmfSL1ty
-            pWTrkciemUDGszCVR/5NwO3kZopfJQTbkZwuK4t+VYseREhBfYHjHd+RgcFLy7et
-            UXHgQkQUdXzAMEBPrLkA0l4BObkmmEtjg3EtYtbEPRmel9iZoVtMieIt3yHHSo5/
-            TPk+tMymn6pYKYqRFjylYoPc5yxsjocl0YmK8Kz3kGSv2isuLpfVMOFk80prq0M6
-            1nJfd3a9+AqRLtadX7Oo
-            =4zR4
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/bazarr.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:3ZJOnNsa7uIOQEVh+JbOjg5S+FtdFAe0rM3QlVHY+qic19As3UU1IGM4vjMIi0VVvhq/ZssBZ2SVfEivz0nKQ1ukGyLf6q9bWK7sNM0LDjrLrrxxdOESFPga4Q18XE5RegNhJzTNkAL8IPBwed4ZCMWXKEjbhni9hDnhzqHlxibZQfmxcQZaJPAAXmiwS/dwxKwUR9saT3YLEy+b8aaJqzqYnzIaDabQnen22SyxX3szKsE/6ukc6zji+TkXPT18yEIbhNtrqgia8a1VbQRqw0J+227TXKL78FepEqXrC5R5tT/tlKWnN/o+NcbZjuZn5jNDqfQRSXEEVeek1ItQt2scNQ5ufnaIo5HQ8dhmtR8Gw4iSJU3DF3FqxssmcBLj6+riQNZObtleE0P+D3yN1si5EX+is6fDyk58fmEfTi6YKd5KQ9Jtp7PTKwmcVqXJL0Mxkml+8SyoOVYRtu5LHbWgeqAkGtrhUitXLYV9HjrzX+i6+09c6ZZ//0jnUDasrTTPsZaPo7g=,iv:4iCjAc5Y3ovIhj6WeH9i+6SDPR7B4+iBaOGuBJieBdE=,tag:6i9bmwBy5VXFoKDvHQ543g==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-bazarr
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-11-23T17:43:23Z'
-    mac: ENC[AES256_GCM,data:PmERPQPHlueaSPfLCjmU8t9s9NEFhCyUK9Cr0vY0B4u8JZb8NHO8F7vgZtAwKeIqeV51jYOTmywpb65+qdOOpwe9ZVJdihEDmW874Vk8s84v/l0emLHo0T/82Se/tRHK2QxePCvr7cj0SGSFEAkBPNaeWSqiir8UnW9fxCWa3Mw=,iv:jhpGKRppev6twl4L6H6CHbFfaY4yZhQo3cH4UkLN9Io=,tag:HEKXiq9+qj4xbZ0b2e+tgA==,type:str]
-    pgp:
-    -   created_at: '2020-11-23T17:43:23Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQwAhLOfuPZQnGmj9+54hO6N616v+BzP7cemwirHf58X2NQ/
-            lDW54Ju4IL7EFE3ICBD8qPywmPznOx+7zKPvaVQFtt4Y4fQQpkYGL2tNTSvW95hs
-            aTD+ZKJzVmDhn0PfvFmdC8zspRqS+mvs8sBtpNAKG9XMXafz20Acq8rEToNpHjHZ
-            sDf3VtW3eI8e76OTO5OGpH2dZR6NhFMEYDTi9K830LrRANkdZk/7nwq1p3jS0vfz
-            wdkchvHUr8SnsuRRJYom90XK2DBIe9CTUscTe4ff30OI9YTpGESlYy55uC3vZHNE
-            fUo0iXyK+bFv0MxOVl2QcOLlwVNJiU7aWGLqlDZP+Qfv2YBAFDoUulT587XT1DMt
-            pQlpDJt5dYHsZNypSB8yjAbR2H3renCtaQbY2W/pgzc3OYhZN1k4U6PxrDGK1tvy
-            EZtXqZ7o+N3F8e995BA68ZZU2wUgApj8M9iD/k5CFdsGC9FObJTTDCQooAdmekw3
-            Q3L16DGlP4HbW4jNKCtx0l4BWnvfGYQgT21jomayT9YXlZfoyxjgJwM2N8w8dzLv
-            Re5DmsFOkGOGJbMehHjzZ4eHeEhz5Rj1OR4zQ7eU9+AmMoJ0Yy5DboQFm9Q49Qqd
-            6xx8toMKs2NRND+x0is0
-            =7suV
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/flood.yaml

@@ -1,35 +1,35 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:LDRQ1Q3PNXECIhXAyub5OHShruvFIh0i+0XtUMcV6DY=,tag:VUAx2E8IUgVBenpv/V1UmA==,type:str]
+  values.yaml: ENC[AES256_GCM,data:fOTTzH8Jod3rjRoWJkCps3T/B91pzbLYKHsx/UeM1dkYHpH5iUsIIGYSKqiY+zgOBFrnhMt8+bqD722M4IKXvrCoXLUsUvYzuD9m/sju,iv:DguyjbDWem3XTxnKwG66b25OhYyL2od2fBWVdni5VUw=,tag:QCLUdehJZMXHjQ/DHKHXfA==,type:str]
 kind: ConfigMap
 metadata:
-    name: helmrelease-media-flood
+  name: flood-helmrelease
-    namespace: media
+  namespace: media
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2021-02-09T00:07:45Z'
+  lastmodified: "2021-03-21T21:24:27Z"
-    mac: ENC[AES256_GCM,data:fVEjmHBh2sAtt+X3Zl198vEE423dY6++PznTYNrWfDevZKyWabZ7uneS3gbRr4pyOYhfOvBegJ+WOtqK/pJbM+iM3OpXHmt3uRqayacEluKeYqYY3rDr/vYO3zzfaM+z+4P+pUmQCQ2vttjnvCyG5cgJ7C2uJNA4FGjyXTFBkd4=,iv:Y4syEtS4gQdJF3o8gqsrOId/jRU2YkVx0UC8V1XT1G4=,tag:XkeV9Uj3gojyYRYu8LkSzg==,type:str]
+  mac: ENC[AES256_GCM,data:DLWROnLzP1OJRSCmAZF1oR28Efv3W5UxctAwpjouM7ovfT3NKGzZB3EKxd/a+y+VDgIE1qTjuYIHpM4o+ti9y7+xpJpPLhIk/rot+2YNS5MJpDOEvLedskaDGmFQ72hVe3Te50a2+CbKn6zrWcC7paBqKoE4ATf12MlptVNx9yc=,iv:nBwSwmgrcpHkKjVr09V/M9cfkBVivxgsRn+WvJCKul4=,tag:J+sbAhDsiNF+tVfIEGr2SQ==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2021-02-09T00:07:43Z'
+    - created_at: "2021-03-21T21:24:27Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGLA/JorPHm1g9XAQv2Pkkzv50f1m3WqvsNIanZXUk3yw+beZkIwrejdODAqaSk
+        hQGMA/JorPHm1g9XAQv/eYTyL0bUqQvIcZYWYQeM/7dzy2TjRAC6TZqGMpXUbISB
-            2bMsYhkLRSCev4KqHgKQxDrI9qM2ZQ7gMldjE+jKEijgLpqHmuzLJqGnZOg4xgLx
+        c7CaLGDSj3dndipDXzvIT2c4wvNpmp4H/601pmU+NlxFsdqw1zaQJ5zisPcLqIjA
-            9Q3YpfBzmIYHIdzQ/6LqfaS/QClHVcE6jZmbFfclqJahki6H09SrQkjqLRoC/5Gp
+        Cxe1okyDeVrBn0pcA+ugiviz0C+DqE0nEyAxRcL0PMQ1S814Tagf+RxoG+bQQH3A
-            nt5UXbatnzKc+57HYh2n7kf9QlEi2xdw6BjgTA5rRBKLA18clzsmgTaKW1FADJH4
+        7Lmo9lBJ4l1WvQWZCUznp3ELnjKsnkpHjYGofvPJzjAnCcymS+LpnIUXAaouZxR2
-            KmgR2bzRRI0wCoy14Xmr1D5ZytUrVlX+u9wco4+y1yj05qPR7Gdy68t9CYyn6wzj
+        WVPwBelsjKhB1ui3yHmJR5i35KtsSFkFfnOdcpI9cuPRRnZwib8n0Cs4BzbRzTOe
-            jNUeezB1gp2QZDriyp09xAHUSjv2vxnsCq/0CuQCQOIPQTmKCJKl3gQ0ZOnyTzzi
+        ruzUyc/lrbjFPKD27arWnpo9rgQaaK1RWhWfxySnzKy0/YeIP0cisFuwNjJqNwyC
-            DHOChAP0lRHGgTGZLboXNhs2ThR3HX0i8sFSN90MlScdIAUUp/SXI6QMhUeha9bJ
+        cNDEpuxwvDCD35gpdXZHqXKRTB8I4K6g1NYa39pyafMakEOmbIMTG/pZ+ped4WVX
-            uyV1I+U7lwVVDpYTDDrxDfQLZtSvQ7kqSomKyMtHqKmaalIJ5KZXfPcO4NGiyWGH
+        l3iwzRWFflszgsV27/mj/N+84GDdTa8Rp2dWZC4YdxBwJFXrQonUVCB8AwVVKLz8
-            Ad3OkDp4WAgyea3ND5HSXAEyQ8/Bwu0dKUMt6FYBooFoiLGW9+NKLRRi+mAIihXq
+        65yCgTD+LN2Fr3Z7tlkJ0l4BsiimyQyXcH4jCuwA46ClCJSNnajaPFZjAP3K+Ozd
-            a4RZ1bz9EgU1WPsOWd4dCYnRNorN+4xyKumfRJe6G9KWCS1uc6wCUdWVIE+CvvgY
+        +B4efEHbjg/sKFeYab1ecPR4fQhxjQIGP7jGeQsEV+IluTeKgSDXAL7DoJAlrtrp
-            Cg7KYFohA7RzdHH5
+        KhthFnfmRF47vPRGBMF1
-            =zNwG
+        =U67D
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(values.yaml|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/media/jackett.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:9C2wms8Xi/5JYRdXsKNbtOA0DCWTfF0AjRPKODN9aM4=,tag:6rhPDXPawDRcoiYhBXyZbQ==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-jackett
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-12-11T00:32:17Z'
-    mac: ENC[AES256_GCM,data:+vaCAlbxZSyzOnqFZD9oFMVvQIM5NUJ7zOAPxxGkxfP5k1p7AOCeG+iBvK7ab2G2OSkVvlEioIZqssFntGMMgEsDM0HVAk7oDYXkgn5Zh9NT9Q7AiTL7KtK/ShcRW3eIwgLdPkO3NnYc5ke1XbxhiXdQVjTZvbm2iunM/8ZE8xA=,iv:5eoZtrArMF6Hix+2qDJThCLA74XdCTLWSZoRjk3t/wo=,tag:Tfq801oVdvaPSJuylp//Ng==,type:str]
-    pgp:
-    -   created_at: '2020-12-11T00:32:17Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv/S7bDuEwyXFxnXaNAtO7nmC+ndXdqy4ZrG9y1NItjs2sK
-            Qhdvc4V0haZiwMyrPZQqASyBr8kZIFF32TTQzR8pJmDYwE3viJnhyLpFvQ6RvZL3
-            R03V3Ubt37cceUQfijaH+gdNvnGUALwnd64ojhK0a7Xfokl2ada06y3fKSGHz4vx
-            2nTeqxEHOCZM3zZn2im8pWvlPrgQRsewpSosVIJxJe7sV+Nc0JHMiMjZPUmst1Xq
-            OjXPed5lm0CFz3xXKS+vXQoDM0yGX+Tc9p2IffAbdyf/eWb3GHh/d/0OItesL4Bc
-            bmUaNJX2OWkkwik75OzZMAM0ioZx3VJoE4jfJEtbo2lpZJkGnkTvRl1J28E7rOC0
-            3IsyBYOkUBH2itQB0gJ8+WLLBbd6re4s8cbwlQ6ukLy/myzYt3Fj8KbbACHh7hy/
-            LIxWEpkRIBxT2x2p4QPawgJPN4Ez/jRfabhMGTrs7xl5mHXZZWfIdtcS3g7B9lBt
-            R6UcAq+C59mntwIH92Yk0l4BJ5i3wolINr07h5L40eTv81aBE2B3SgU5is5L2/Qs
-            IAcdEjC2bBWJUKtxWF1BMGE0XAI50RMRd3xAydu0SQTOT1t282ljK+hAGgG5hUTB
-            PUN9gjeXVzmc80QxtoIN
-            =Affl
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/jellyfin.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:I1SuL+0Gc9mx4HVjw9s7oU+7D9Vryl7sE/GdMRJ/NwRlEpIs554jqaXNNkaF2qsrwe5ZaPffzGSRY5XE13gf3kIw6ZInZcBTW2BjE5ttVlXbO4oP68QoA1I4CvZdTL9GEQtzIxdri2wsbiPeZohxBX/Yq8wig/n6xRdeFpnbIRHOohnXH3lmu8AkHkFJ3wyfyR5LbDXyHUB47H+RqySEyMKVIDbs8FT7vDd1/VufIYWyBebrRneN82apkDdlJAP9OzEsLWvFEC6C2b5OvNzBDN53Lwm4veikyKU3+xtAejg=,iv:fAbAFlZ5HYZnslazPS6H1Vm2ReH4aa0nfahP06q9nNo=,tag:N8q/CLeoGbn2ewJ4r/uUXA==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-jellyfin
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-12-04T16:35:13Z'
-    mac: ENC[AES256_GCM,data:9TycSVagyN0a01xeVhcMnCXT92YBm1nHi+5UjwJaoyjNvuT3b+cGAVsMtIeNTjGFoTAvPRjNL3p1pydeIGiFKtvqJurvpNrwIIiDhjVbBA4q3mdLZS/SBIoRAKxLGUrTUYDpracq8VYDlrHnhLUsNj7rNUKxTMcpQyiFqJgfPDQ=,iv:Bw4fCvWtS3sB2cSEwrZWSusM5MEnGM3z4TvUXRmFlD0=,tag:FCwsrX83dPYmr1Bq0g/gHA==,type:str]
-    pgp:
-    -   created_at: '2020-12-04T16:35:13Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv/QwDtVKFS/6YCfBHg4lHzVLeuTmiU6ceUQCqxY0Y8kwvx
-            DZjxlr9YohVhTExFGIKl10Nf5w/Jr2YhXonvvVW/vKjn0LeefPbLSWdyHeZgLCEY
-            BHMvQBtw25Y8eI+o4CAZ+bFOAICTLfkUYtytmdSr3S9T4zY+raqDcLEmHcjM41Gr
-            qcdYIaWuBDgwoLfr3P6QAg/0Rdb0KlEcCRlhxKR6MPN70S7zqnaVcomyIZLz30Zf
-            mZRYOCTsuXXvFrVGax+wHCgUDnSCOOAQ1+IhXNWSTfSYxCqVeL3ti6GzGJQaSQMH
-            wK8381TtSfG5VvH+k/VB46FdJ8QvutL4Jk58GzcJNNJVhe6/Qcd/JaWUcm8jSoF0
-            d//dhzXS3fYnsBEojzV9X7WjVXBMODZnSjttSzvQh0rZIhGuLpZIFovGuBKiIJxg
-            eu9EylGHDw3j8zRoavHMoUJ+kLizcULhzm6TpliUsCBoWjm+9J4pdu+o3kx9iVte
-            vEAoGD+L4SXxBYb4IIcy0lwBtiBWBZwVN09euN/Z/XHH+ypSxAFUNTFE+isMSMzw
-            ei/4Ow2gwn4Uy4V5IPgo9xL9tfRo04Vt0Bl3NRuvCG+n8F8mwfYy6q7ZtQsEXYtj
-            sJ3Xx39kQ3KSxF5kfw==
-            =sLP4
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/lidarr.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:BYe9W546yQv1p1H78v59i5CmbgPZaOFkoFYJxEv7fUE=,tag:CK2iDukxyAgkIuXNOhUY5g==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-lidarr
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-11-23T17:43:20Z'
-    mac: ENC[AES256_GCM,data:+ON2Tn6VOwaGk64fHzKMjin0txXwALv7y4DIrQAL4cuIe95YQ15B9CSj3ROd1J5x54k+K9W0+QIdv/f6VhjlHRblSIb970tNGnqkU/08Rwn9jSrrxX2pd380UbzHPKnYemEithNYKQodw+Y7Uq6SUGX7Dhw8E9PVEP9xJx8UJ+o=,iv:HTMw3qKfn898u5cY+/ABL42XxuphUXo8ugUii34aDKY=,tag:pqeAREfl85c1zoT+o893Wg==,type:str]
-    pgp:
-    -   created_at: '2020-11-23T17:43:19Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv/f6zBE9e/9WCT3DYewSp7spOlyWWpH5OrsL5vLlHEFAnn
-            bV8pTi0WV18PtaLfggltUQ3srvJOs4cUbJbUGJOPXkeBTiwuGOHcJbMX4qe2c7a4
-            WgyyRGeGfen1/+Pu/rmfY2G9TtxUqVTQT1eSSfT2EMGaeaL5hyJYDlH9whRUVftV
-            PK2s177qg1jVL1FK88djmA5pW+vuTXN9sATqaW2+C+HBsxYDWuAdwdh9v7f8lZfS
-            T/UHeEurR5CIH3jXvM9ZsiNEa4HS7asfvqUEhOu/WtpfhEh+3uUCe/El0yHp9Mzj
-            AEaqV+Nck6d9MwGC/pt9pKrflTtF06ToQyA6gFhCXeF2KCsi0IlKO+dWSnOWn+mK
-            KxIF0yOmalvtDCGKpPTxABD2mSP1ZcRotpXOh0ow/7dq3B5zDKZWAgjuZ9ueo1ga
-            Sm54C+xFsmHcE6ZTmWs7RJstOzArTfL8FAO5nzdsToERxCY8vSMHd4IL7zprPUtj
-            AxwLv3LN4LN5tnMY7Z9T0l4BKNfd8x14cIerOQ1Kii+rAU0BMOPcY+1+Yzd/PLB2
-            /CdZTfambO5AWEn3U43oNA4ASP7O6x0kLi2kDF0BmzBaw8JOt3KTE6djeH/Xq62k
-            hNa6ejYReZRTjtL/MBYc
-            =/ETC
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/lychee.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data:0pGNghxpDCHlsucPzTxP75fEjCmEJDt+nJZL053LPZkYBqhwJqjhWs4jppVrTvwzZqdNVekcFAgcMMQ0hOaYE5frlwK+4xyAhg4oaY0gNVvk82Tw1aM7R4K1EkJ/2RFc3+YDbu5Wlj+ua9VIdvVKwoBof9mVdk8ZCRPeSt7MYbJC5T5KuCj8mspgL9ii+i2Var184q1BW1MKTgZnWbC+Jtpwyzx2aoc/cWWMbOsKu9zpwVBxgpR7y2YmQIGo8QVmvlMbO2F/tHZgGoAtZ9IPN4vZTb2hJlccNsKzhcJAOi+2Cd3617QBPTtJrL7ZP/q31zsElVjzv2fVpHviRqys4uYERGT6JTHTxbsmbZ1Ji5PeBsZXnQ==,iv:LeSPqUOIVb6GVc500faY+CjTkSzJXlp3bBve4NC5Hdc=,tag:d/k0h+jQVIWhfgPXptORkQ==,type:str]
+  values.yaml: ENC[AES256_GCM,data:8aXhvFviB5rMMvOJ7aKkLDLvZ8BwwRHSi2jwqSoncJtGDWtcCHPdAVlLVmoH81mM0nqd6OPiIUqor1Ml5AXJONrxsrqxwiGyfJ4JJ749epJS7KuzNxhx31cbkehWrYbZNEbO4hxu5YqeIwbSK4mZMRarsZO+mHD8NxU02Su1Dugy,iv:QwSYxW3VQR6eyjbIdfeF21uUijL9KrtY7qR9wFSZ68I=,tag:QAuabBgpO6FVYdQnFjE8kw==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-media-lychee
+  name: lychee-helmrelease
-    namespace: media
+  namespace: media
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2020-12-12T00:53:51Z'
+  lastmodified: "2021-03-21T21:21:49Z"
-    mac: ENC[AES256_GCM,data:+0wOxEpAgGc4YR5t5uI1T9QgaU7oz0VfavtUAL0cgJJFANR11VsuKf8WIcEgVJwcHiIuRRTuMUdWx6PMwz8N278ITWuTa4D2qV9bcPKepBmEU24JJ86sVMGHe7hmofWiuXFeKathUNOf7mgH6XwFmMO7GY52jgK7vspSKF4OhlM=,iv:1M3zq4Mgqembmc2C6XGtuUrU1/CuqIlho1zFsnZ5se0=,tag:cHq5q5dsp8e5JNsgVB+emw==,type:str]
+  mac: ENC[AES256_GCM,data:bPLRT3FV6ugE2T/8lizOIi7Hfy8cYAOVFj981TZqpmgoVUI1dtrq/h9mvI9T8jBEwtYl2Ye0HrGzfWpr0Sb6fbiORrtqmxDLe/hUUtaFbTPiIiM/AzNEz5fq2yQBx5TcVI9uRWZ0HOl4Zcwtg2KHAULs2D2+WAlrtf8HfGYRC5E=,iv:7XxC35KjPfjV6onWrTdrMBQ3b2afZNBRWwicrDyfGSM=,tag:1nt3ZleqIVu6QDtY+DWOrw==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2020-12-12T00:53:51Z'
+    - created_at: "2021-03-21T21:21:48Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv7BrDKZokOwVymAnNozmvZvC/08geg/VjZs0Xp0Ws5mqyv
+        hQGMA/JorPHm1g9XAQv/fOkhF1AJxFxtNB1mGtPfqcUefeImzA+VOCmPPrWVJKFt
-            ic9aRVnnm7ogHGXyTTsx2n4cnaPaQfB9maveCLLvfv3xF0qeU3qTlXrXDBdyQtNE
+        wAS9EnUdb6Q5dTPJlv4B2z1fUKMApz5bedzPA9ysNNiWfeMQSrdd7BStR0YcbQHg
-            8igj9yYotbjKeuhCuAEBT0sGdn7PERMizQmhEP5lmPrcqLj6E5lCnbfCsEIxGCkh
+        ST0bOuWlm+EIuKPIul5LPxVrM5fEJv8iyxb8KSlsAhMmVidHcIJ18BjvGg7tanKc
-            MQuQEXoklVaXGhUR5kwfcjsLOoHECdNY9oC7OHqSiYjk3VmBzxqabRjF5AIgsUBb
+        Ib8RwCipBdIERJxDl5AoDGTIeGcYVY+zs8UhFAFm4kJBRvVECTupdJG/BsVz5cTc
-            Omn2NMbzXG4brB6G6oDCD/J2G0K/z5QvbsFsW2v9nEdpjov4zp0l+ru7nrb/SfBo
+        D1lEk+VYPnBer+yd6qi1L/MwUPUFxPQvH42ZvFqDOhDxa7ydQRanUGpOKEizPy6w
-            7v3yPkgapXfJhdX1SXZ0K790XmAmQZ+53CmhukAPtC7xq70hSD2a940+ctXNy7kQ
+        lD1TNywUG+xvcH+Y4ky22db8a8tPEiEZRrLzamSwfYhcerAtdQ3AyJCsoIR3Z41C
-            hnpN41NEnVVORlm4whuETj3CYHPkMBvrtN3+FWibDiSKz6L5sV72crh4Hn9WOS0P
+        WgIVMhCIvqM6gCctGPtRhvXTKQqj1mQarmRPI0MLKefoZutnlzOBWXeEVqV5kPNY
-            I2dvedJYr8fIjAVwsEKyR/gjLUGyLacO4+N8uA3upX2/4TdbRuGPnw1SxGdkqCV9
+        Vw+nRbayzWRe17BD+umjmQ+/pH+fS7gzQ9gSuT/vugYIyYfai1eIPCp8b6X32e2I
-            mxFSaa9UXxibCekOPIU30l4BkRQ5qFZsrEhPAs0g5NQ3QY+YCcNs3T1fCGnledIq
+        WT+w3/SYepsdFTlC0LoK0l4BG3pcKTMyTIB6Bzcn8BU8aTXDsy0dIy/acjiKWMds
-            2QqBNF5NoHqz9M64QRgCaQIZuGvyxgluLkp3KMBrkHAljVaBfPgOKeY25WQiqHoH
+        tORqn0MRmUZCaNI6bSNt4ai8e5/8pMtlmAG9pl3BPwz6gyQwuzSyB7mR+eYS84M1
-            v6kCyTXxc7eqEEbS1o9t
+        85+j7TT/uoDOsfy3ndWr
-            =qocr
+        =T+zv
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/media/navidrome.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:Q6OhVatRWDBpt6xoDNKm+jyGC5AzxRwmRpZXmWoQEYBEJurFteRpZI7TK2qaMTn8VKSE89mIRtJgQUGU/NSk4weLoIdDco8nGwoDbmBmklIgz7279hy4/34ZH4ZdNOECVm93wFinIFulvwGK11N8cXxDaLkp1cMw2YjaeLErnXZF7BteFysdiQ5JQ4CWt8KH8IZvX+qjX1eLxQ==,iv:6IGZEemZ6qVQE+VtE/p45uSq5L3NAvxUyJOoJrQ/ZkQ=,tag:i53ijoxSnBqvpNT3dVipVw==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-navidrome
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-12-12T01:00:12Z'
-    mac: ENC[AES256_GCM,data:UXhXXHAWWE3b+h//qQSxaWtnVgptIxwvNm48IrPT/RwPvUl0+h4EXO3J/g2I3G0jFDOFj+okeU1lYOStWdqDP8KT/5dhiadRW1E1MIKCwaxr5ha4MG4A9Vij0Ph22fMBBE/EtvcwtqzLuiROxM0MElH9vc9A4s/WPydXTAE5/mU=,iv:g7SW6tvMw9UlCMyFLSoVNT/4Kw0RUAp825cWoBKLmCs=,tag:k0BrGNll0Hd30YP89czuWg==,type:str]
-    pgp:
-    -   created_at: '2020-12-12T01:00:12Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv+LCDaz/1iAhYqxt7nRcgzcz+Lt+jJaInQxCQLrT0+rAYN
-            /ILDfHMD/TNuaPsl3PNQTpkPjne6wnsHMeYQgqUtabdzlBr3+2wTWwJWKZcz8C8C
-            Znwrj1sgZ2w3BZlCbJEMHCZAtCqAid7gnITbYx1cE1vSNvC9jlWkbYHtKdBLpdc+
-            bpO5lajdZp/kaaBL64cqQjnVpuJN09JyB8WU2EjgXRvKKJhfXvY+Hpac9Bh38HPp
-            vLLkazcQmpwgwcQ8QgLH0R+ACdoKmMViiacErkSkYznxJ6weOC+5zfRi4LbgSmjL
-            mMLWuVWekLq1VbI2LpgwEKQq2ViroHmA709r/kGp6/PDLFDLNw6ALATCddg8TIDA
-            E7daUjBSLbXifotAH2Xf07Vicbpr0c/395W4dYkiJ6d0hTvPccu7AH9d9pWfwmqk
-            jgRGNk6GbNmVyTk0QRooW98ImzwMLQpZFRHXK/koGemO3qxwySV5ffqPocp/Q+Sn
-            i0pwJkxRry5riSQMlcf60l4BE9Efllh/rTtATk3bUbxm/LeJx8cDA5mIrvhmNmcZ
-            B0SbHAVcLVRhDGOSD236ZlhUSuErOHENkMcvV36qmQNbnDJQKURWiRJloQYdlweo
-            U1HMpHIsoC5QpyXYB3oq
-            =DFHT
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/pyload.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:Lkk767HZamf76regkGffNYyukAw7b+Sqb7RSdOIBgAQ=,tag:3zfQa8CfPE30S5SGHcPBJQ==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-pyload
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-11-29T15:59:32Z'
-    mac: ENC[AES256_GCM,data:Zx3zZBgKWMe0qOjyX+uEpt65JBG5wuE0ssoCMiQLKBVaoipYgr/QVgadc4LuBCl+hGyf0i7Aw6lwiOXx/8/yitgpPLhJlHi5nIbq7s9co79TP7RK7ziFTzurR55zvhRIkXR9O/egzaCbBNnGf8tOrZn3jxIP7uvonrHjH/nWQ18=,iv:LukJj5rz+pdJku0aNAC6PDWmpmklPR/dDYEYhBuvTLQ=,tag:bxar3ElQcYEpdJf29XAVdA==,type:str]
-    pgp:
-    -   created_at: '2020-11-29T15:59:32Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv+LevAurhC2ZHB6aud6G9MVrCzuErsJQ4bzzceK4Qgp5HT
-            18DlGMyb99zs1iX05bHB8ZrZwnNBxWq1T3CWcZRi3qjnqPi9vJR+grJdxb9DieZA
-            VBUZ1564BeWC80/06RNNAo9sy8741aHDfDU2En/0yGthk/VUAKJebDmVwbFYRmz2
-            vhAhzgThCCJCu/OCyDDvvftYok+A2lxt+y3h6aJ6/M4sUFo2L75y7jK5uXK4Varn
-            rmhwGbyIsLYTkrp+9ybeKG97q+/rQ2kcjFDhNKj6Zfs6HGDUHZoPMr4ZmuZkvj+D
-            BERBB2LrTEr+mxIa2NNBU9pv5xPcmzSu/B3kJxSyJa6Zi85YzYHM5Cds/Llb7L3E
-            Nx2GoTFMHLGPwqk/XlfXiQx9T8Y2mYY5hsX4odcIsGWWlAtB8NSv7RsHZSs/CDPm
-            AOAIYEwio0loSgThJvOXseIqFL5eXeMjHI3j35xJZEf4pbRO+DykeFc0EbH8QzDa
-            IIsiDxv8zsW49xWwys3/0lwBT0xrU2noKLX1Cl4zGTXXWwV3yxG8ffp8kHTV0m4m
-            aDYzvLTDKnbGdWVTRX62KAOp5GTRm5wDJ94kJko9GoaifphQzDLaieUbx9Mm+yiq
-            MgVkI9xeK9pWULl43w==
-            =B5F6
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/qbittorrent.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:ppXkdN+7ww0VT6x8murPrRhGSed1WwAZ+ppJTnFRVPrKMFF7RQFZOE75i2F0WS/xW9u/vLCrK3QCihJhYaB+Z0NcZFAkHDsmv+uIhmmsYTY2xahpScXaPnv+1z8MNW6LpJma8B7MSA+1igMNP/bijanLlV0n1V18rs2B2F3PIId85KfKYNBs6jF9nw3KrmYnLqhEWeQw66+eczAGap8K+6IDp/TGlFvgFixkbuJKiLkJ60B51HSunm59XXw6BrHwWCP2RFKJ9Qd5kjcxDV06LxYo6y4KcVNe1lnebzjCMUeSz93XNKE=,iv:e1fqHN+9njQh2IYaujUnQ2DzMdtt3FcF5cIW/hCX9PQ=,tag:ldkH+Kubf2Tuy7zxJeIMdQ==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-qbittorrent
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-11-23T18:11:43Z'
-    mac: ENC[AES256_GCM,data:k1yV+1XiJGRVX97OG73tfMg8PG7oeZ4lVEcxyBdrit88hkisofp6DfcuvLsSL/1a/UJvBAHLnAHNg3JoRar4uPCEqtQ4Gxc58RTvNPdkXAL5k4nQi7HMSnczD5MBe4uzozgwqhZ0L/tcoNb+I/+qS0qDCQ/OTbBAateLzjuupsM=,iv:yRu0VPW/NRSBrBBUKnSSm3OeXFVunyVyAqO1kJ5elW8=,tag:onD5Z4OYguan25oUV+ybHw==,type:str]
-    pgp:
-    -   created_at: '2020-11-23T18:11:43Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv7B+s3FRigWcOmWO3oztDi8zN8aM051wu92E7gfDjOtMUu
-            T5ZMNB770iF85ktmFFNJRruBv3llPBYHFRGDqy0lYEwqQuSELqV1eBOrpLtffQ7o
-            eMs9LEIzCk2j6iIOS0oXjiae6FDcjdJmooX4YYTRPgRo0PjizapNGISwKORKhLtX
-            hCW3iFJ/2ZFMI2YjUzsyopWBwIJE/SlwlAtUuLjoSyL3YcpHXTBsJkCdY5pIHyk7
-            FDO6Rk08bhHQTxjrEP/UqohJ28Xmckj403jy3tIO5KCIgQBUe1H6OzJACOeeXPAp
-            z2ImMzItLO9tE4bVkj+7Rh/LRK6bnv+akvuWoJLA2Y+aAZBCrRpldkys0nqZn4yV
-            N3URhwljHFpfo7OFyiGBhhd7yMHuWYjyhh+7Y12aRcbSyK2L1XM/eX/7QyUtxO4M
-            44sM4/O2a1ZB283TuFvjiABDAiI+Fk1+lJsoYMlFeNIvp3tODxYd9JbXzQckq+2k
-            9YpXaN2BxU5SgmFN6azx0l4BEcJV6kbYUvaNVdeOL2joVpFhM0jyAEHEU19Q0hjk
-            0V3mZanDshyzP/gcDfM5zkFTsObVNt5XKBUnik3hevnrgY41s2A6JCSTp/jiVp6P
-            BVx7UhQrwGxwq4MtQ0nU
-            =jcGw
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/radarr.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:+A7UZnpAuLOjVXHmigtCbD5zBqEqOLgeGFHMWKV+diI=,tag:iIOf+W4q1hzuqbfM/Cp6DA==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-radarr
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-12-06T00:51:01Z'
-    mac: ENC[AES256_GCM,data:hMnVt7ScwdvmrJjxd2HMyJIQcjen/HW+9LYTVv7JLZp+Yc+mpdSnn5C1ZfiNvgkwfo0+RG3hIGzviOYeB8OUxi5AQsNtFXcL8XASAaqVKv2qKGAKqi/bWj+c8P7IXSzaNzSvKRyBQmHe5DfeVk9Povo5smuR5+SQMskR+n429PM=,iv:gD9afJAYLOsQ0DddX/u2J2J8VgBYrQ+4y+2PaXe7MGE=,tag:1xOXsvbfzZTxzhunuVY/Mg==,type:str]
-    pgp:
-    -   created_at: '2020-12-06T00:51:01Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv+NGgXJSFlKSRULiaQHsUli4qoJSWwTmBQel5JFXxEIaXG
-            bwkwFG/qm5HNS2psy5RmbTtrpTMsOF9pd5OY1Ro6j1bVjxyB+RSZr9J8r0qxeafb
-            Br6+Pk7rwaAwrGwxIm5lBD8MvjKMD31LBl1HMvRuA/QJkgUuPFfNNfUhqVkUYW4L
-            C/33sZ33qmf5gf2+1kcCIznC4JbIDLkF1/nT51VEwXDUkMWX7rzvQphV0nGiuFbp
-            4UPIZymABZJk5x9e8wso+n2Dw4/DMcnwVRnnZtbwmkjDPyk+Mu/TvyaufOJU2pRy
-            nimyoJQJBBoglABTZnzsrhQYsh9AjVorxf9ei/CtB9WcVz/UOvfX7z8rwwtvQKpQ
-            s6zVGFnzF9ZmVFFl16JI0nYQEAnZ4H94gMTmvY3Ssz67x5J58fhJakYYdBAu5cCs
-            oTvid0PjrFGvY1zrsg+vZXKGVqoOf8ISjySG79+E/9RgmFw/QrpmXZdIsC1fbJ9q
-            QSBgi89ZbOFNqNGC+a+B0l4BvDoBYFhZjfCZDawEUWngp0OCQbFKBBiQoJV+Xyjm
-            W9S8Ci3dQUpglg7yy9yBuv71aG0EvtkVv6ujSxf2gN2vDTEeJc91e6fXOqIHBXzo
-            GfqzEqyWvsgOJP4D72Li
-            =rFFz
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/sonarr.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:JllVrarTpR+Td5k4Xi3u+XHorbLvYXCvPOhXq3FVr2I=,tag:9PFGtbsWWvQ2OdYslj1zMA==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-media-sonarr
-    namespace: media
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2021-03-17T09:22:16Z'
-    mac: ENC[AES256_GCM,data:lpmtkqACtZCrq1S/Tpdxt1hZmkkzuICOG40KsxNUxpBBXz9iI36etzGy9ce8dlSDQgMSaT9x6AO0UM0yaroGwkYcNJl78cgQ7OUmNItvj/ZRXa4wrE6SCE8jMZs3tTjrkecEDz6PsG5W9YcvExf2qF5Jg8Mokj4m4tt+BVx9PFY=,iv:oaTu8J9IRwOuJqnYvIJrh9rCE4kiqo3clo3JfZ78Xhc=,tag:SFlo/kdotSlUy8/PSS41LA==,type:str]
-    pgp:
-    -   created_at: '2021-03-17T09:22:16Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv+L6eaHj/Up8uHiU9C3jSBFJw+JL9EckB2hvtBoYMWekjs
-            zNfE8RXaT58lulRkDnBS94VpdDd6WrOaEk/2oDiYdKswZzwK+AMEk9wd6Cahz1o8
-            GoFjg7y4EP6EjkKBF1NPJDk5xHH/c21mKexFdzuDk4g0xfXFskuRJuvkX3uJzh70
-            Jb+jD2EMsXhWkuW8/0KjTQ1cyBlIILv/x+hFiyu9naqjxawhFvCsxMJhgQ5taGov
-            O+m6ZAUwKg9qSfBslf8eQrmiB8dKUX3SZR/m7gT+G8ITd+1/5MF/RNEqQzsJ8Je9
-            U/b/dO7jdtD+cr8RiUV21qxggnv2Vsv71swVjIiYOXYIs/lmDYaewoRaEOTkuMUv
-            OdcyqV5YVgiOCus/NSSveIMBL8czzP/iJfkZmcjsiYOP2GKTJMk3ivBhNpuxAzyh
-            JaVCXHMvhJUi6xJDjzfj/dXm6Ybv7UKK2UUJt6KGnQahFehZF5rmSTLnD2UQbfjT
-            m82wZbyOU0dFdJbhq/gD0lwBbWR8FBieXvJIBdbbV4fQ5Wdmi5k0ryHFsD9YYYf8
-            mHct1k8mn0bZjH1sXMhyO6p3TXg1vNAwh0AvSzJLdQ8rokQIH1CianO8VgZ8dmWN
-            3vrhez/aDcwsH5yihw==
-            =f6Pk
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/media/tdarr.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-  values.yaml: ENC[AES256_GCM,data:ErsV6+F02zyOd9YQxG389yhgtjP7gRD8EXQbP47MeXJuJDSVfoo+slPnnD754huf6gPISPTTuPtbo/wQVTsXlEIMlNdfrAYd06REN/cz4hjWB1yyUvw/2TGI+jX9/Lh01W/uLBzz2z5URrPwrYZ1ww+yciWvlAbfoBUOHBQX9uW9qO1+SuXid7b95h02iZcrPKk=,iv:RbL7TsF6mtmv03254bIR80csMspPoH6IzVod9utfTEQ=,tag:XikOq7J8jADuPua/kKAWxQ==,type:str]
-kind: ConfigMap
-metadata:
-  creationTimestamp: null
-  name: helmrelease-media-tdarr
-  namespace: media
-sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  lastmodified: "2021-03-18T15:00:15Z"
-  mac: ENC[AES256_GCM,data:QCQM0RdPUMmAhACp7/cue3G5dzPa2zGqaub2e46BZXm2T7PNFsu+V7H8FisoacN9AZ4ovM7LoYlWhq30LKz2s4zOUFqECZkEX4hKxmCA5TlPFUkWD0G0LZj8TK/9AIG99gKttQMhCH4YUK8yFX8jonGJYCUR/6a05zGvpunobxE=,iv:yUDMrwDpN43NbL9nJcz1U8R3mbRoP3zDqw8Jfl2bCyE=,tag:ifSY6KchLpgASablEhpbMQ==,type:str]
-  pgp:
-    - created_at: "2021-03-18T15:00:14Z"
-      enc: |
-        -----BEGIN PGP MESSAGE-----
-
-        hQGMA/JorPHm1g9XAQv+JitlAYnxa62+mYrcE6Hg7pthSAjsaCsMkO01lBmyDBHs
-        z9kKgbSaXrJj7mSbY1/FZfg+Uk2z+Zl9RrKrC6Mh7F7ZeS0FtMskmP0GmojN/urm
-        rHot1Kg6cV7/2dg8NPKKBy7tmtut/4VccqnRqjz8C5DtghX/Lo0KKLGg8CPCN3v3
-        g0Vl7Vw0abGizhaBEinR+m40pxDCncQGjIQjc8tq9kjFmuAkX2KFOCguyeQvSTmt
-        +xF2ENQ/aXmeOc2o1bLIKSomcQDPoeYkLTd8Q43y+APuzQ6SyBeaMQhwQ+oJEeOI
-        YbAkaZ7q9F8Gn5tCSYO4y3TAmt8/cNgP5EGMai2Qu4FmabTSvQF7u0foEmcAQ8LQ
-        TlJhqN6qXJjJdggVG+GXFWwVnRasHbwzHozjncA2xewqyIoqAxNNPvCVaOjW3OcB
-        D5ZL2FRLnCcjzqw5y42/IzE1nMYuc5V0UsufasUmERsFPGLaD9F3ZGZxi2Ax9qhn
-        LjxE30W/qwmuYz7f6Qvy0lwBtujUBNodCsYU2DmExMMx2+qWLHAaqJ7oOVC0ACLM
-        dvy4yTBE46H/L5Ned73wPQ5jd2CZFEI5klERn/4aFpodMIiHCbJcbaRz5dvnwSo+
-        oK2v5SOERoYF93cIPg==
-        =pOua
-        -----END PGP MESSAGE-----
-      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-  encrypted_regex: ^(data|stringData)$
-  version: 3.6.1

secrets/monitoring/blackbox-exporter.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data:yMgCoC5h2VM8uNFQ68EZfgpNx/pLzX0o2GpwWnq1BYEPgre5ENAf09W4F0KS7sJ2xR1lYbhUcGSK2Wehal10jw4eSdttSVHhDpuvvem6/8edBOBiAGLRKqZTRFNWj8ivzRsT0q64kvf6t5QXGxH0Bqf5+0aSWsO29XwMYCwS6rRK4LkNEB87VDEsIDKA5BD1dptwfNeJY0ThsnNuLcn9amTvtNwG5gRYhzts5Qf/gQG/z8XhvyFtPrn7J7TlqY/sxEARod8co2nNGcJ8ko9APHXHPXKBpOOFJVfXaaW7DO7bvBmgfGr2Z/CSwfCRtqtxZRviZMhmPL7Tah0kmJkaqGISkYSPb5OZd/+TpcEbmyuSJ1727s7iihA3Rr9yq1yjMMPVWw8nFouuBQFixT1DbmawcJ5UZ9xey3d4/GXReI4vUIOTLjNz4YLt+ZrQ54cE0jDrApnNUtapmvq26EGUQnfrCGdd0K6Rf0myKVIEILOe5KlQpTSueZXO7jL8KgkwuhmCoNF947f1Bp69RUBkXqc7sQcHe4wd+eh+QwOF3/+27CzTzdaeT6W1xxFoq4kWyvF7hK3SynvjO3S2x5qlpwKtaeDHbRpEUSRrAzzZsH0QLCQEnsY6zi1icWhnMvwP+Msci+xs0fWBKVvboGs35e0OHWpFo75ZJxKdIhZmDVodunc6W0/xNr7zln9hKAT4JfJymV1j7/tCftjHigUwqn9E6c1GBZ7g4yWG17xAVV2O4BKP0xWrisL0eji0qHwg3USrFwJdrNjAY/P/Ivgj3dHqbInFcm1ZDb05qz5SHBeH/wH6y7FAqo9vlICOHChzBLEupJo8NFFS3U6EL+lhJ37kmeFSaIaMi+TOdyvmI0i7q3qanRZViN6ezX30bywLn+bsRrJmqVAc7yQVnGiqrIFV1kEU0a/QUJWmM93faCEyQ4y/hYKLXmds8ha0roLfQwZLCE87/8xzHMTCxQLRtECAw84eo5xcVfv73T9PCV99DRdecTohHKaYKjcNvmZ4UM7TXYIBG9gkZmxVgNXmNyg6gIYG805hMMogF6dkEX/WFEMAGKvFd/Ppr6Y2xPHBIVGgMBYiTGyoUxB3zxbDWgXo90RA24iHCYUDWbv1,iv:7eVjBqy6kmDdep1HkwGpBmeDf5ooMzqmLZ0nBomzcSs=,tag:2YgCZbKxbzi57kKl6Wd8Tw==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-monitoring-blackbox-exporter
-    namespace: monitoring
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2021-03-10T00:09:03Z'
-    mac: ENC[AES256_GCM,data:6tf7zOm+EowBiPc8N4//K+pyHCe5fUq/cKSz3n+ufVDrS3Pe9bG6/JqEqpVcuDNRSJrFOEtDQNyz2CpVNze/8qjO+kB3eK2NwtFOtdu043/7BZjE/LktmAgQSDtV6R8KoSecjoxC8giKRIgOCdWVfwZnRnmmlysqP2eCk2r7gZo=,iv:M+14GzPHWRFTBi/zN5ezQpJ5nBigqTcRyFfc2a8k0f8=,tag:06iVRMRB/gSRMaaRQ1U9Zg==,type:str]
-    pgp:
-    -   created_at: '2021-03-10T00:09:02Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv/eVSh9JrG29gv+x28uzxFVup+9//NXXMWOCaTxTWN2D0R
-            l64OUW6mxqk2DT2zAglQZCyWfxXgp6k4JjaNZsOSm6Kszs5JOt/wkHEsdK7dV2iJ
-            xkaktOxXfl2QjodnnPiVaoqCGE7XNbOha+rU3Q2L9WGOTpymeUbdGJm0f1kvuwG4
-            k8w7lFZgNl7pUJdcujMCZeOUMqppzXN9lrPMh9NtTRZ2ELxn81ZsKyI7+BM9UfSW
-            Xrxp9jafArnQhASpwTLxWT6tk+IezXa0ML4XWToI5rRaMlFfHSkUqF4VEvt+Nn99
-            uEu9yckeSQQHOhw5UHyB8fUwO5Cc1V3wR0OU+RL9MTcZdI9st5TdbJXsD0dCtNwY
-            PCUJdpk3g6MLlpPECWnCjJLCMDSgeviC7Qw131SnTKPvrpWn1+WPZed6IycshmTG
-            UHMmFNgA+NL1XoHY5fPivwtywoq8gtk8m08pE8rM+KSL3KHNDupfHhUOMc4hvgzd
-            12MSy1PogO08jxxhgwJU0l4BFdse+65jkRMZ3urvDc05kgnv+xuUILnLZ5IgG4u8
-            XIFFUpTNcfeohBJ4rXhTspFfWH9bu8JJjgxKQXQmoauXWVak4CHBdkM/rhoBxjAb
-            402DyeksUYtzaFWOeXu9
-            =15ui
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1

secrets/monitoring/botkube.yaml

@@ -1,36 +1,36 @@
 apiVersion: v1
 data:
-    values.yaml: ENC[AES256_GCM,data:jLX59UTqG3N0+zjLko0Bz5xiE8FjVV+yh+ithmPwsckq558k6a34H3kIDchaLjhhKERVvB3NTQKBaqsDNQ/7x4wEZCK2sqxIbldEUexRyhHAN/Ui6M9s0Yu5GIxrfmwTkVa79a8yIaCP7EpRZ1x5FAxgB02N+kop4DKCoSBBVtmuBhaBCcEiTdB8M8PUKzRM/3C9CyeL6WsoGA+qieP+n2xHKnn3x08uDXU=,iv:8O/IXgdUfLvSMTrsjXUjAiq71SvaH3p0P/DzqhSTHAA=,tag:aSQhwwP8KhxnIZQqR9HAMA==,type:str]
+  values.yaml: ENC[AES256_GCM,data:jLX59UTqG3N0+zjLko0Bz5xiE8FjVV+yh+ithmPwsckq558k6a34H3kIDchaLjhhKERVvB3NTQKBaqsDNQ/7x4wEZCK2sqxIbldEUexRyhHAN/Ui6M9s0Yu5GIxrfmwTkVa79a8yIaCP7EpRZ1x5FAxgB02N+kop4DKCoSBBVtmuBhaBCcEiTdB8M8PUKzRM/3C9CyeL6WsoGA+qieP+n2xHKnn3x08uDXU=,iv:8O/IXgdUfLvSMTrsjXUjAiq71SvaH3p0P/DzqhSTHAA=,tag:aSQhwwP8KhxnIZQqR9HAMA==,type:str]
 kind: ConfigMap
 metadata:
-    creationTimestamp: null
+  creationTimestamp: null
-    name: helmrelease-monitoring-botkube
+  name: botkube-helmrelease
-    namespace: monitoring
+  namespace: monitoring
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    lastmodified: '2020-12-04T09:40:10Z'
+  lastmodified: "2020-12-04T09:40:10Z"
-    mac: ENC[AES256_GCM,data:9W/0Dh/K3TTNj48OFvz9DeAHuy1jI+JT2ohYjUcH5vlJ0yqUiMCHEOCrp7OC+WDZokxxVUbw3WCWBSx8CllKYlMUPtoQ9XLHwwOM90AaSjcDuqI+Kkbb22WZN04Ocrh83dW7RBrPjCdF4glqq4PkXoTMZHD1e66WpJyCE16okMI=,iv:ibX8v0XKUc7M9oCP4b2VD8LpT/tiVicMg2Z45y1ei0U=,tag:m83GNebzQ3t1YovVIgaGVA==,type:str]
+  mac: ENC[AES256_GCM,data:9W/0Dh/K3TTNj48OFvz9DeAHuy1jI+JT2ohYjUcH5vlJ0yqUiMCHEOCrp7OC+WDZokxxVUbw3WCWBSx8CllKYlMUPtoQ9XLHwwOM90AaSjcDuqI+Kkbb22WZN04Ocrh83dW7RBrPjCdF4glqq4PkXoTMZHD1e66WpJyCE16okMI=,iv:ibX8v0XKUc7M9oCP4b2VD8LpT/tiVicMg2Z45y1ei0U=,tag:m83GNebzQ3t1YovVIgaGVA==,type:str]
-    pgp:
+  pgp:
-    -   created_at: '2020-12-04T09:40:09Z'
+    - created_at: "2020-12-04T09:40:09Z"
-        enc: |
+      enc: |
-            -----BEGIN PGP MESSAGE-----
+        -----BEGIN PGP MESSAGE-----
 
-            hQGMA/JorPHm1g9XAQv/TMQu8CD6SzueHyYj8goS71DEx4ZeDvqTBmsTa3tCbwns
+        hQGMA/JorPHm1g9XAQv/TMQu8CD6SzueHyYj8goS71DEx4ZeDvqTBmsTa3tCbwns
-            DwPG43sqN7OTCKzo4Q11snlbI5S5ZMuCTjxSG+WaZLGtGUGGm248gywbBhMb0t7v
+        DwPG43sqN7OTCKzo4Q11snlbI5S5ZMuCTjxSG+WaZLGtGUGGm248gywbBhMb0t7v
-            pnbCI5nSVk+3HIpQLOEy1Zwo4GqpUGXxx7tIV8YAUKMLYLqkZsxoyc6zGsxPA4Ip
+        pnbCI5nSVk+3HIpQLOEy1Zwo4GqpUGXxx7tIV8YAUKMLYLqkZsxoyc6zGsxPA4Ip
-            6VYc77CkF8PQP72KOl1TnVAvDeztnl+sMAWBrkUKjhW7QjX5LPZ382cDef9im1YZ
+        6VYc77CkF8PQP72KOl1TnVAvDeztnl+sMAWBrkUKjhW7QjX5LPZ382cDef9im1YZ
-            on/DTdMQhgYwOh69c35wHlrG9AIXppzybwCsPbywRGzNBqwxzxCBwkiXV8LMFbF8
+        on/DTdMQhgYwOh69c35wHlrG9AIXppzybwCsPbywRGzNBqwxzxCBwkiXV8LMFbF8
-            VKIH72FAXZv/X+7IZYLdJLZctUi1D2D31nf+HthenrKzbCGSZyyqB4dtLuBD7v+t
+        VKIH72FAXZv/X+7IZYLdJLZctUi1D2D31nf+HthenrKzbCGSZyyqB4dtLuBD7v+t
-            BNE4JABqwHiYlSO/z36PBRuiwSkvxDK+0LtA62gW0/X5RSAI+yUEB8mV88pXMi4q
+        BNE4JABqwHiYlSO/z36PBRuiwSkvxDK+0LtA62gW0/X5RSAI+yUEB8mV88pXMi4q
-            EccNv2m7DnWE+GsbGjTgAUD3uITnjubKW8f0eden2f1BRMCXgy/PJxeAA4BZKDak
+        EccNv2m7DnWE+GsbGjTgAUD3uITnjubKW8f0eden2f1BRMCXgy/PJxeAA4BZKDak
-            Lu4r2T3wXeNRSAVEus0y0l4BvL1mUQtfNsZ9mg3EOMJlknmeMktcYpX5Kgmz2AMv
+        Lu4r2T3wXeNRSAVEus0y0l4BvL1mUQtfNsZ9mg3EOMJlknmeMktcYpX5Kgmz2AMv
-            fIVhY6Bogk19X7vJn3Dzl+KMNu7Jlb41XY8wKgGNZNDX2Zwo8bSKFKDvAlF4YAbU
+        fIVhY6Bogk19X7vJn3Dzl+KMNu7Jlb41XY8wKgGNZNDX2Zwo8bSKFKDvAlF4YAbU
-            UVA53lN7uaMNh2JguUWl
+        UVA53lN7uaMNh2JguUWl
-            =LB8D
+        =LB8D
-            -----END PGP MESSAGE-----
+        -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
+  encrypted_regex: ^(data|stringData)$
-    version: 3.6.1
+  version: 3.6.1

secrets/monitoring/goldilocks.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-data:
-    values.yaml: ENC[AES256_GCM,data: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,iv:UPIVNTLvsBvliri1iUmZ1pmFOZ3LK+iGmRcLxk5ikdc=,tag:8Z3Nka4gmOXW6CCvKfu9wg==,type:str]
-kind: ConfigMap
-metadata:
-    creationTimestamp: null
-    name: helmrelease-monitoring-goldilocks
-    namespace: monitoring
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    lastmodified: '2020-11-29T19:11:19Z'
-    mac: ENC[AES256_GCM,data:2yVCP9U9O6P8mktS3qGTsFhiYJY+QrRw2mvvFMj827WaCVskC7uXlthA6YIZtT4RvUznmwr6yHSIHlf6YbzyniBaMGotuaaXQNMYgKZ70/KmBz2oa2xjCnmXsaPiK2e33zHpa5unuXA7RhBTsOTdXNI8q8rHfEuWMVvrXBpqcq8=,iv:OKUdIL5z7bg5dofFnYOk0kDGPAa8rZg7U0NcQMwHBkw=,tag:9fbZMuMO4FNMSM38gmLHQQ==,type:str]
-    pgp:
-    -   created_at: '2020-11-29T19:11:19Z'
-        enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQGMA/JorPHm1g9XAQv9EZrHHvo6JXKJmhsjQpla3UmKkrvXv/p9+FxSf4w4Zupa
-            AGqF2Sn9zFW+R2+2SrnVUMp5PUhpO7hNnYfRe5qZn1LsiMCrl18b0mhlUe/Ijfb5
-            VAwCs5awTEcBZh8DDW8uKgWr+n8/w5zkRYNDxDvafs+kJOmfedyfR5/wnU1ZqGN7
-            o2fp33MYJ+zOxDXVpEB/p2a747V3No8vSGBJvk5OWzLc/YtNctYsWsk2p2Vdj0s7
-            Sy4D6j/G4KLUZ/B3lOBFjZlb1hf3RrcT+iMjItEGoLfE5UhNbCiyI09xh7WgiNVF
-            zK23i/LIuInVPwJJLVEd7M8Xzligm45nqcKZ8ydUAsd8ocpk2jr1/VRfWIEWMFCW
-            wcfBDIn1PKFdHKiKN6iOMPtr8Yy6F3gZ8ayLW5A8hyKYyKyzkMEziYuyqMLDGVOD
-            Jmc2ehhQyRsqDB4o5lsF8QS3oa+MPW/vSwP4aiX+EnbhAvbXGHqkzH5j2kJeyWj2
-            MhsmqMIeKJoSeiKsuxLl0l4BeqV6wMOPDtt/IM1PLn4hHPadnFE5Es8UpW3WlBuO
-            +xpGOI2afrMZ3evj7e7NlIbIeN3jJ4LMLBhhZ1o7LLp/gNBoDOyb0ubxLP+liuEI
-            NiBbpup80v/y7S75QCdF
-            =e1Ov
-            -----END PGP MESSAGE-----
-        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-    encrypted_regex: ^(data|stringData)$
-    version: 3.6.1