mirror of https://github.com/auricom/home-cluster.git synced 2025-09-17 18:24:14 +02:00

Files

feisar-bot 90be307a26 ⬆️ Update image ghcr.io/auricom/kubectl to 1.28.3

| datasource | package                 | from   | to     |
| ---------- | ----------------------- | ------ | ------ |
| docker     | ghcr.io/auricom/kubectl | 1.28.2 | 1.28.3 |

2023-11-08 08:54:26 +01:00

app

⬆️ Update image ghcr.io/auricom/kubectl to 1.28.3

2023-11-08 08:54:26 +01:00

ks.yaml

🔥 kustomization healthChecks

2023-11-01 18:13:18 +01:00

readme.md

…

readme.md

Opnsense

S3 Configuration

Create ~/.mc/config.json

{
  "version": "10",
  "aliases": {
    "minio": {
      "url": "https://s3.<domain>",
      "accessKey": "<access-key>",
      "secretKey": "<secret-key>",
      "api": "S3v4",
      "path": "auto"
    }
  }
}

Create the opnsense user and password

mc admin user add minio opnsense <super-secret-password>

Create the opnsense bucket
```
mc mb minio/opnsense
```

Create opnsense-user-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:ListBucket",
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Effect": "Allow",
      "Resource": ["arn:aws:s3:::opnsense/*", "arn:aws:s3:::opnsense"],
      "Sid": ""
    }
  ]
}

Apply the bucket policies

mc admin policy add minio opnsense-private opnsense-user-policy.json

Associate private policy with the user

mc admin policy set minio opnsense-private user=opnsense

Create a retention policy

mc ilm add minio/opnsense --expire-days "90"