mirror of https://github.com/auricom/home-cluster.git synced 2025-09-17 18:24:14 +02:00

Files

feisar-bot[bot] 53a49230a2 ⬆️ Update app-template ( 3.7.2 → 3.7.3 )

| datasource | package      | from  | to    |
| ---------- | ------------ | ----- | ----- |
| helm       | app-template | 3.7.2 | 3.7.3 |

2025-03-15 21:40:30 +01:00

backup.sh

feat: opnsense backup healtchecks

2025-02-22 03:27:43 +01:00

externalsecret.yaml

feat: opnsense backup healtchecks

2025-02-22 03:27:43 +01:00

helmrelease.yaml

⬆️ Update app-template ( 3.7.2 → 3.7.3 )

2025-03-15 21:40:30 +01:00

kustomization.yaml

…

readme.md

…

readme.md

Opnsense

S3 Configuration

Create ~/.mc/config.json

{
  "version": "10",
  "aliases": {
    "minio": {
      "url": "https://s3.<domain>",
      "accessKey": "<access-key>",
      "secretKey": "<secret-key>",
      "api": "S3v4",
      "path": "auto"
    }
  }
}

Create the opnsense user and password

mc admin user add minio opnsense <super-secret-password>

Create the opnsense bucket
```
mc mb minio/opnsense
```

Create opnsense-user-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:ListBucket",
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Effect": "Allow",
      "Resource": ["arn:aws:s3:::opnsense/*", "arn:aws:s3:::opnsense"],
      "Sid": ""
    }
  ]
}

Apply the bucket policies

mc admin policy add minio opnsense-private opnsense-user-policy.json

Associate private policy with the user

mc admin policy set minio opnsense-private user=opnsense

Create a retention policy

mc ilm add minio/opnsense --expire-days "90"