daniel/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add immich secret

Browse Source
This commit is contained in:
Daniel Cosme
2026-05-01 13:38:11 -04:00
parent 7fd65110bd
commit 5e4c4b7628
14 changed files with 93 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/hydra/linkding/kuztomization.yaml
+1 -1
View File
@@ -4,7 +4,7 @@ metadata:
name: linking
namespace: linkding
resources:
- namespace.yaml
- srv.yaml
- pvc.yaml
- deployment.yaml
- namespace.yaml
apps/hydra/secrets/immich-db.yaml
+9 -9
View File
@@ -4,20 +4,20 @@ metadata:
name: immich
namespace: cnpg-cluster
stringData:
password: ENC[AES256_GCM,data:ro6PvLSzDN2nF8TZdmA+tbRCjngWmcrHP93sXM6FrqeZPsoo6h7dsw==,iv:46dbK5Ri6e0hqpHfPGR/1kvcqxekqtgHHCHpDXWSevA=,tag:DN5llN321qc5JQ7fBq0lyg==,type:str]
username: ENC[AES256_GCM,data:ccMGLgcl,iv:VuT7b5p1CAIzob8dy5J0BTml8z2uOlXmg+OncjZJZjs=,tag:kWJjv0vgD8XwtNNq8hFIFA==,type:str]
password: ENC[AES256_GCM,data:YKCFmVBldp05fYSJjZ7sd6HvSmQ/l174dObSi8f6Eq1qEId6wk8loQ==,iv:hABfZ8CNV3wPtfN1Ei0zD5qtft+ceTlLW5nbCnyDvtw=,tag:eZlQboGQvuP+t/yFUUFltA==,type:str]
username: ENC[AES256_GCM,data:wdRO09Dt,iv:BkgLPsZblWStO8H0EgOLRcRiCJvge2oHrQCoGgWAYkE=,tag:c3weTKT5k+/kgA6gl1NLjw==,type:str]
sops:
age:
- recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlM0NpNGRNWE8zKzVpbFNE
UnNzVDRIWlA1TU9nTVV4elVGaWZOZ2R2ZlNvCi9qQTZHWEtFakRQUFlzU0ZvVHVi
V2FmMkZwVFZ6WHdiNElYc1RKMTNkM1UKLS0tIEcvQllZSjVXeVFZUUZKNitkcW5t
OXlVb253Y0RDWXFqSU9mZ3lZc25yTTgKKirL9lbdeA52EWWuqhELQpnhAWRQUs3K
lLC8LWHDB6z23fw4X9vzYN/g2IdC0dw9dOag2gFEfvafNcr5+ltCmw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1OGxVTkRhZWY2akI5eCt3
Y0lhdmthS3lMYUZ4amxJYkdYbzNwVmVVRlhzCmN0d0Y0KzFQcnNTUERaa0FjVHlw
YkNrc3lVZmlUNlNTdzFSWXdiSkFDL2cKLS0tIGc4d0pxYmVVYzZyaWtJSGhUUVc5
T0FubzdDcC9GQ0hkTmNuM1NjZUJEbTQKAESfbFXmAZMSV2xSVEe4Gg2B5HIlLWYX
HvPqwbjvw9SLMADzbsoqnk2RHzfJzAjx6jWlhLEC30BWxZygqOwjxQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-04-30T22:47:46Z"
mac: ENC[AES256_GCM,data:Gm2sqsYIEbI5yCtWKaVlo6fY22X9+W0u0VRXLEWfzvvhREQC+KdsJYfTyKAJCHLlJw+ciAjjbcsftAFZMt8vweUwMr9qNQIWeBWIbE/j3cNn+0KwQM/f6HpLz0LG27RYhdYWbzQGZDoPlyEIax+XiAhjdYQnU/vbRAty3II2GF0=,iv:Y6N/abUHSI5Y/TfZCpgstcoTfP7NE1Xfrr8AykSMByE=,tag:qjwVvnhlbcH+XUGSTsX7Vg==,type:str]
lastmodified: "2026-05-01T17:37:12Z"
mac: ENC[AES256_GCM,data:7vfMPHhjsDaZR6cbOLaggRtZsxMTkHbKZRwMmnYoDloIx8nhZs91ioXXITK60KmYKjUT9hhH+0anAzOYHyMjxkgkZk8+Hg4/v6kyOl9XTi/k2Wgx7O12GMkqW4ivjiKJvsbKhOHJFVS6VQsPXgvejkESkoImhnRAicVEPOtc1cE=,iv:II93SrVuhoQNjz/P850Y2G79Znstgjr8hqw4/umWKkk=,tag:yJGb3Y6oii9cBnRfj0cApw==,type:str]
encrypted_regex: ^(data|stringData)$
version: 3.12.2
apps/hydra/secrets/immich-secret.yaml
+26
View File
@@ -0,0 +1,26 @@
apiVersion: v1
kind: Secret
metadata:
name: immich
namespace: immich
stringData:
db_host: ENC[AES256_GCM,data:1tKO33/bK0xAmMLOcHF8IxO7ypILp8Dlwq1rUq4ilWGwGTv8+S9B+MJzGNFx3Q==,iv:l9LUG1K7JPjLAk8cDL9oZ+k/IugT9NiZcyxedUdJY2I=,tag:kwbDTFbOE6B+RneYEdxkmw==,type:str]
db_name: ENC[AES256_GCM,data:XrYHdZpl,iv:S9Pso8AAz9mtdL1r9PhPogjfYcmTAjQF01lTFM4xcK8=,tag:7IYGnqlGy8Z0DP8JoS9R5w==,type:str]
db_password: ENC[AES256_GCM,data:+oXLCZifcC03CRSGEyTs0qel9lkSFk6wauL7R7KesvKXTvXWnEFROA==,iv:6wOdb7/kfs/XnliALyAd6qhcRJcXLO+5juQ074LzBjs=,tag:TbPdvtSkFmso3pB8Gx3sXg==,type:str]
db_port: ENC[AES256_GCM,data:nTfPZw==,iv:soROf6MLJJIBrCoh8cHPrBV0gDZLXIrihezH+402+EI=,tag:cxx0BeVgYz9tvWl5UFHfbw==,type:str]
db_username: ENC[AES256_GCM,data:Pl/XFDWR,iv:l63f8mEau+0ZISRnpYg2+JQI55mAAQYAkuozRNpYgHo=,tag:/0lseB7D+9ndtIjXDa7Osg==,type:str]
sops:
age:
- recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlUzJtNzFTUEFwSmVoTmpK
Q1Q4K09OYTNSTnNpU3ZBeExiZ1ZLak9INlFJCmw3ZlhSOUZySU9mcDcxay9TL1Uw
VisvSHpmNUR3aWJ3M2h6Y0phbCtEcWMKLS0tIFV4QXBYdmp6c3NZOWJFWUR4ZnNt
S3dTcEdocXdyckdNV2NsWk50WVZ0b00KYcOUyMEzRCDJI91r3MzBUdIvJ4Qem2RO
57U6pJvyPnAG1GY3/OcrPosheisoH4nNkPHxz3tkv7WWYNby3WetMA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-05-01T17:37:12Z"
mac: ENC[AES256_GCM,data:HnsWVad7+p3X3UUiOL3J71KkeEztMe2B9mLtWJbF7/r1x8TKXrnBjKqAmT/unr3LgYRuqNeMZ4mHwYk64P/T9PECTG/0dnDWpo+8sXxJL6/x0fR21gBwRUY3O8zy8VrEFCDeWy1qg0JrM1J3YyF6v2hoOiRsq0Qel2pql+Kdao4=,iv:SMZx9mCdRPVtMXDRztMRHG5oEfThV4UV70mctsoOS5c=,tag:lYIueK2PzLk7qTUqXdbyrA==,type:str]
encrypted_regex: ^(data|stringData)$
version: 3.12.2
apps/hydra/secrets/kuztomization.yaml
+1
View File
@@ -6,3 +6,4 @@ resources:
- linking.yaml
- truenas-csi.yaml
- immich-db.yaml
- immich-secret.yaml
apps/hydra/secrets/linkding.yaml
-23
View File
@@ -1,23 +0,0 @@
apiVersion: v1
kind: Secret
metadata:
name: linkding
namespace: linkding
stringData:
supe_user_name: ENC[AES256_GCM,data:RsvY0j5LNcXQUIuMy3JpysE=,iv:HWwZ/QlTrudv3fiKuAU8vnnXzWLDQjbcMVNQmYc0kqk=,tag:tg6ljEf7lMs4dlMl4mPKZQ==,type:str]
supe_user_password: ENC[AES256_GCM,data:mNvTtG7i2XEkubYX+s128oyO0/oxelgUkojQCcFOOm2d+iZ7jXt9YSGv9Ms=,iv:b44NwHjwyCRq5QY3LgKnSEpLz1UGWUwsuXjNfDD9PAs=,tag:02K45I4l7py+JR0/qSfCMg==,type:str]
sops:
age:
- recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5TzdPRjVxYmhFbGxZUnRF
V3d5WUp6TXpCUllZSFgxK3ZnaENkb1JsVmlrCjEyNDQ5NVNBdXorcldCQ1VkZEtC
Wk9yWFY4NG9YcytReHBVMnFRRGpPWm8KLS0tIEU4dEJQUDZ6YmQ4NGtyUnZvUDFC
enNnWGhJV2x5d3BZbnErSUs0SzBscTQKYjNHAMOUbpZ+nH8+QUKog+iAZddf3G8j
PAZPX8VWt7jwmQzXPk+59QkfIfsBB/NgQmzyWaf3jBKC2cUZ5sEXPA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-04-30T22:22:16Z"
mac: ENC[AES256_GCM,data:BgDzbxNxxOo5iAeKRtwTKUbSVFZQpueruReR/PL/LA0XrMtDHUBcv/HaCAPfD0kQoRWdve/v4ax0WA4hir7n1jkGSKU/EA1qgtW6dk7ZH/Dql26W7GESQD0BA9A+RCql5SIXcBOWdCfxirU7aUASUjkJ0K1XTXsbqkqOpbD4nTY=,iv:SQcTjqhzPjYU+xNYXL6EUoAreyI+8DJdtywg4QxtFPc=,tag:ALZ3TH2lPhczwYEG6gUu1g==,type:str]
encrypted_regex: ^(data|stringData)$
version: 3.12.2
apps/hydra/secrets/linking.yaml
+9 -9
View File
@@ -4,20 +4,20 @@ metadata:
name: linking
namespace: linkding
stringData:
supe_user_name: ENC[AES256_GCM,data:XVBqIWJz4QHdgg48yNK9nmw=,iv:mt7dn/sEEy1Ed4DX0FK0v5pJFWgZ9MFuCWvW/SNhDUw=,tag:7738mUggImWqrVvWxanNPQ==,type:str]
supe_user_password: ENC[AES256_GCM,data:LJNaesKwkBReCgbbDczkCDL0DMUCo6o2YPzo4FQrgTwyqrlMcqdDm1PP8G8=,iv:zkDt8CSBmdM5ok0PDSaN4MyfFV5vt6YCs/EftWyN/54=,tag:xgW0u6cCQWt1m4ut1vNzag==,type:str]
supe_user_name: ENC[AES256_GCM,data:hCDqI37a0lmpFzNGdBL5+6M=,iv:k2XdcDFAix9ormuAe61NmCmbYX3ylpPDOFV6HsoO2nw=,tag:Ow547g93h8Owa2rF67abMA==,type:str]
supe_user_password: ENC[AES256_GCM,data:rdUXIhNkPVbjVMNfxvHk6CCGzr3qJY1Y6RtKLasKGtcWFZga+/PqTbcSxQ0=,iv:je9WLE0y0PO1uCACg5OiyPgzXY0TeVoMHYiCBabJA+4=,tag:E0Jm60Fhbo572Qv/Hn73sA==,type:str]
sops:
age:
- recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5WkxCQUkvRERXYVVhK0RJ
c3RPbXVXTnJHc3pna2NKamRRdm9tb0lTMzA4Cis3K3F5R3A2YldIRDlUcUY0YVFs
U0RBak0rdUVTY2VSa2RTbnRGMjJ1aGMKLS0tIFZ4Vks1ZUI1SVg4eXNvYzBIMmt4
QmZEaEc2L0NxUDFWS0lDTzRGbjlxMHcK9ozIUYv1rIJ6OOGajJ6PKQJLBVofKH/U
1IQTjS7DoNFH0gEXSex2PtvYwbEqO297EFunokyYDQkHKEqGoMp85w==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMbmhsQ3NnaXIzbHVuelRp
UUN5bjJaMGlIVGpicXNiWVRVajJDQVZ6aURrCnViZ0ZPTFVyejZNTjd1NndSaDcv
c2RCSkowaG9Eb3h0RkJDS0lvaGh2dHcKLS0tIHNRamV4enRZUWt0RzdhNFJOcjdJ
bDhCL2N3OWU5eC9yUVgxbTlTR096eUkKtLsoS2I8oGfZaCR7GwjaSkICHd7DRlWT
4+GcVH8jz9i7c75osDCtrRNSZkn2d/NsZKDeKg2y9uGoNrv7Cg3McA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-04-30T22:47:46Z"
mac: ENC[AES256_GCM,data:VRVM7bWRci1XwvJ/Gwwz0HiY5ik9mcX/dBWAutVqwcqlOTB51+Piw0iONoLC1qCDIyGVOH9mV5U7u7BgdPKxmA3UfzJBcwcwHw0yaoMaFujWOVFQgSSOJ58+6Vuh2SDrf0nAmkJpp0jXkqa9/6XoIyb3qjQis4OsNAAPEXiJMlQ=,iv:8doqWJwaHidcYjbbSLbqUNclfsk3uf1jpyVcjcftA1I=,tag:7yrv+Cr2JlowaXaaO+o9nA==,type:str]
lastmodified: "2026-05-01T17:37:12Z"
mac: ENC[AES256_GCM,data:5pDY0tkLkSRQEcegXg1Ss/g2XpZX8di5XrMKRsZK5Lco+DX8cQQWFEABiZk2NnBvgd6f1l4wcStMXiax4K3AGRCSIVXLSA51ltF1Ooh/Z/HKSUr1lf8cvdq43U+r/ctUGzUrph43jWNXpILuE0ARlawYtxLBVjOZp+kXDprU8ik=,iv:C3IYoF2YyZ3hGE/QxpXA2/iYjvATll2FqrWaQm2T1xY=,tag:2ENp3EBWOgoGjRZ2OrO3DQ==,type:str]
encrypted_regex: ^(data|stringData)$
version: 3.12.2
apps/hydra/secrets/truenas-csi.yaml
+8 -8
View File
@@ -4,19 +4,19 @@ metadata:
name: truenas-csi-api-credentials
namespace: truenas-csi
stringData:
api-key: ENC[AES256_GCM,data:P17H1ksNvjc51DbJsTnYdXOUHpMscqtWdV0CxunH+IGx3tsWrknCG3y6zpzb7XMD3TtRO8/63OEcy8W6LDF2+e24,iv:x5If53IjFyrr8E4OosdL1fHSikyk/Va9btePp8nry4o=,tag:QHmdC3vljynJQkZL4fMvlw==,type:str]
api-key: ENC[AES256_GCM,data:CitMTwW7Fnkz39PthZ23Zo+BZBtbJQzVtjFgR0tPmZiSZ9YxXySaf3PH+N7RoA5X38bd+Lrg9/YMEvOVsagQAkXW,iv:lqfA/PnoPVLYW9CXudXfMSsCDPxf0Mn8iLr2mozbSbg=,tag:+5eOFLr6tt4Oh/3J2CFYQA==,type:str]
sops:
age:
- recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuZ3lranNtRndEVDJLVlhI
ZjZyZzhZenF5eG5Kd041TlN4OXJDYmpIZEZJCnI5Umo5Wm00emhUdG5aTWdkaGdr
eHBOREFMSmZFNzh4ZVM2SnRTdU1MaHMKLS0tIDJiSXVscTFHMGpqMHhZZ21VSHhx
N0haaU8rejRwZHZiMmtBTFI4Nk1tbUEKWwU2lcsejXv5xzCmslKvrugQqU9fHCIE
ebsSK+djYYSVsz/wwHWP2CO9GKH+0mSn2V/fi3x4WnPImJ6JSbitZA==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYQ202RU1GVzdqQitVZEti
U2FIVjNKMzNYMHU1Nmg1MmtJV2xvaUF6VEd3CmZUQWtKRlE2MVFsSGoycE9yL3Vp
ZzVpOERFekZLVTJFNk1PMHhIVHZ5NDQKLS0tIERNRWw3a29FUmxoSWpvU3RlbXYy
TjJrUVJUZkZFQkFFbi90ckJpRWVJaG8KYBoxszg7Ah91yVLs/8T5poo6S5TC6sRr
tyLqwwA3SUIrdPLI/bYON74ZyB95khHIN0em1OMtMYY+Ok4gJuH1Ng==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-04-30T22:47:46Z"
mac: ENC[AES256_GCM,data:JIKUhicF8YYMN7DS6HhjzN6AfVDSMWIFKKXTGlYqCFE9Arx9+Js6Y0mWtcmNDKDq4JE0kLPZPplUk50jT6SvG/n4UF92i2cvKKkVsGdRL7rb0EVyMu7NOHvp9Y6F7os3raWhGEMHVcZcwON2ANAcVmvUXggP5933rVmnWpt1MjQ=,iv:fNqSgwTV/WVruXdL2/FxT3F5e7XVuX1mwT4vJ52uyjA=,tag:iphxaJq0Srln7LlLy3u/DQ==,type:str]
lastmodified: "2026-05-01T17:37:12Z"
mac: ENC[AES256_GCM,data:aMiws/+k8OaL9qdDrXBwq7aAqnUZMtDCFM9WG4kt0dMT4MJf5mxqaoz2RDupAWaWjQ3ccxW/WoGFazRmuIdPnoeyVsTRfwLMa17+HIvOyAZAajqKnUqIGazYjgcQiw8S4D+B9oa5Jl+PFu6bIHiWJLaHw9m5WrU55olJzRpOnNs=,iv:nh3crjtwYICi6IUiX1gZD5WOc3A8KkuCAVbBnv0LsEs=,tag:J1CneXNbRlSqf0PY/QEG6w==,type:str]
encrypted_regex: ^(data|stringData)$
version: 3.12.2