Add immich secret

apps/hydra/linkding/kuztomization.yaml

@@ -4,7 +4,7 @@ metadata:
   name: linking
   namespace: linkding
 resources:
+- namespace.yaml
 - srv.yaml
 - pvc.yaml
 - deployment.yaml
-- namespace.yaml

apps/hydra/secrets/immich-db.yaml

@@ -4,20 +4,20 @@ metadata:
     name: immich
     namespace: cnpg-cluster
 stringData:
-    password: ENC[AES256_GCM,data:ro6PvLSzDN2nF8TZdmA+tbRCjngWmcrHP93sXM6FrqeZPsoo6h7dsw==,iv:46dbK5Ri6e0hqpHfPGR/1kvcqxekqtgHHCHpDXWSevA=,tag:DN5llN321qc5JQ7fBq0lyg==,type:str]
-    username: ENC[AES256_GCM,data:ccMGLgcl,iv:VuT7b5p1CAIzob8dy5J0BTml8z2uOlXmg+OncjZJZjs=,tag:kWJjv0vgD8XwtNNq8hFIFA==,type:str]
+    password: ENC[AES256_GCM,data:YKCFmVBldp05fYSJjZ7sd6HvSmQ/l174dObSi8f6Eq1qEId6wk8loQ==,iv:hABfZ8CNV3wPtfN1Ei0zD5qtft+ceTlLW5nbCnyDvtw=,tag:eZlQboGQvuP+t/yFUUFltA==,type:str]
+    username: ENC[AES256_GCM,data:wdRO09Dt,iv:BkgLPsZblWStO8H0EgOLRcRiCJvge2oHrQCoGgWAYkE=,tag:c3weTKT5k+/kgA6gl1NLjw==,type:str]
 sops:
     age:
         - recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlM0NpNGRNWE8zKzVpbFNE
-            UnNzVDRIWlA1TU9nTVV4elVGaWZOZ2R2ZlNvCi9qQTZHWEtFakRQUFlzU0ZvVHVi
-            V2FmMkZwVFZ6WHdiNElYc1RKMTNkM1UKLS0tIEcvQllZSjVXeVFZUUZKNitkcW5t
-            OXlVb253Y0RDWXFqSU9mZ3lZc25yTTgKKirL9lbdeA52EWWuqhELQpnhAWRQUs3K
-            lLC8LWHDB6z23fw4X9vzYN/g2IdC0dw9dOag2gFEfvafNcr5+ltCmw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1OGxVTkRhZWY2akI5eCt3
+            Y0lhdmthS3lMYUZ4amxJYkdYbzNwVmVVRlhzCmN0d0Y0KzFQcnNTUERaa0FjVHlw
+            YkNrc3lVZmlUNlNTdzFSWXdiSkFDL2cKLS0tIGc4d0pxYmVVYzZyaWtJSGhUUVc5
+            T0FubzdDcC9GQ0hkTmNuM1NjZUJEbTQKAESfbFXmAZMSV2xSVEe4Gg2B5HIlLWYX
+            HvPqwbjvw9SLMADzbsoqnk2RHzfJzAjx6jWlhLEC30BWxZygqOwjxQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-30T22:47:46Z"
-    mac: ENC[AES256_GCM,data:Gm2sqsYIEbI5yCtWKaVlo6fY22X9+W0u0VRXLEWfzvvhREQC+KdsJYfTyKAJCHLlJw+ciAjjbcsftAFZMt8vweUwMr9qNQIWeBWIbE/j3cNn+0KwQM/f6HpLz0LG27RYhdYWbzQGZDoPlyEIax+XiAhjdYQnU/vbRAty3II2GF0=,iv:Y6N/abUHSI5Y/TfZCpgstcoTfP7NE1Xfrr8AykSMByE=,tag:qjwVvnhlbcH+XUGSTsX7Vg==,type:str]
+    lastmodified: "2026-05-01T17:37:12Z"
+    mac: ENC[AES256_GCM,data:7vfMPHhjsDaZR6cbOLaggRtZsxMTkHbKZRwMmnYoDloIx8nhZs91ioXXITK60KmYKjUT9hhH+0anAzOYHyMjxkgkZk8+Hg4/v6kyOl9XTi/k2Wgx7O12GMkqW4ivjiKJvsbKhOHJFVS6VQsPXgvejkESkoImhnRAicVEPOtc1cE=,iv:II93SrVuhoQNjz/P850Y2G79Znstgjr8hqw4/umWKkk=,tag:yJGb3Y6oii9cBnRfj0cApw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2

apps/hydra/secrets/immich-secret.yaml

@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: immich
+    namespace: immich
+stringData:
+    db_host: ENC[AES256_GCM,data:1tKO33/bK0xAmMLOcHF8IxO7ypILp8Dlwq1rUq4ilWGwGTv8+S9B+MJzGNFx3Q==,iv:l9LUG1K7JPjLAk8cDL9oZ+k/IugT9NiZcyxedUdJY2I=,tag:kwbDTFbOE6B+RneYEdxkmw==,type:str]
+    db_name: ENC[AES256_GCM,data:XrYHdZpl,iv:S9Pso8AAz9mtdL1r9PhPogjfYcmTAjQF01lTFM4xcK8=,tag:7IYGnqlGy8Z0DP8JoS9R5w==,type:str]
+    db_password: ENC[AES256_GCM,data:+oXLCZifcC03CRSGEyTs0qel9lkSFk6wauL7R7KesvKXTvXWnEFROA==,iv:6wOdb7/kfs/XnliALyAd6qhcRJcXLO+5juQ074LzBjs=,tag:TbPdvtSkFmso3pB8Gx3sXg==,type:str]
+    db_port: ENC[AES256_GCM,data:nTfPZw==,iv:soROf6MLJJIBrCoh8cHPrBV0gDZLXIrihezH+402+EI=,tag:cxx0BeVgYz9tvWl5UFHfbw==,type:str]
+    db_username: ENC[AES256_GCM,data:Pl/XFDWR,iv:l63f8mEau+0ZISRnpYg2+JQI55mAAQYAkuozRNpYgHo=,tag:/0lseB7D+9ndtIjXDa7Osg==,type:str]
+sops:
+    age:
+        - recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlUzJtNzFTUEFwSmVoTmpK
+            Q1Q4K09OYTNSTnNpU3ZBeExiZ1ZLak9INlFJCmw3ZlhSOUZySU9mcDcxay9TL1Uw
+            VisvSHpmNUR3aWJ3M2h6Y0phbCtEcWMKLS0tIFV4QXBYdmp6c3NZOWJFWUR4ZnNt
+            S3dTcEdocXdyckdNV2NsWk50WVZ0b00KYcOUyMEzRCDJI91r3MzBUdIvJ4Qem2RO
+            57U6pJvyPnAG1GY3/OcrPosheisoH4nNkPHxz3tkv7WWYNby3WetMA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-05-01T17:37:12Z"
+    mac: ENC[AES256_GCM,data:HnsWVad7+p3X3UUiOL3J71KkeEztMe2B9mLtWJbF7/r1x8TKXrnBjKqAmT/unr3LgYRuqNeMZ4mHwYk64P/T9PECTG/0dnDWpo+8sXxJL6/x0fR21gBwRUY3O8zy8VrEFCDeWy1qg0JrM1J3YyF6v2hoOiRsq0Qel2pql+Kdao4=,iv:SMZx9mCdRPVtMXDRztMRHG5oEfThV4UV70mctsoOS5c=,tag:lYIueK2PzLk7qTUqXdbyrA==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.12.2

apps/hydra/secrets/kuztomization.yaml

@@ -6,3 +6,4 @@ resources:
 - linking.yaml
 - truenas-csi.yaml
 - immich-db.yaml
+- immich-secret.yaml

apps/hydra/secrets/linkding.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: linkding
-    namespace: linkding
-stringData:
-    supe_user_name: ENC[AES256_GCM,data:RsvY0j5LNcXQUIuMy3JpysE=,iv:HWwZ/QlTrudv3fiKuAU8vnnXzWLDQjbcMVNQmYc0kqk=,tag:tg6ljEf7lMs4dlMl4mPKZQ==,type:str]
-    supe_user_password: ENC[AES256_GCM,data:mNvTtG7i2XEkubYX+s128oyO0/oxelgUkojQCcFOOm2d+iZ7jXt9YSGv9Ms=,iv:b44NwHjwyCRq5QY3LgKnSEpLz1UGWUwsuXjNfDD9PAs=,tag:02K45I4l7py+JR0/qSfCMg==,type:str]
-sops:
-    age:
-        - recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5TzdPRjVxYmhFbGxZUnRF
-            V3d5WUp6TXpCUllZSFgxK3ZnaENkb1JsVmlrCjEyNDQ5NVNBdXorcldCQ1VkZEtC
-            Wk9yWFY4NG9YcytReHBVMnFRRGpPWm8KLS0tIEU4dEJQUDZ6YmQ4NGtyUnZvUDFC
-            enNnWGhJV2x5d3BZbnErSUs0SzBscTQKYjNHAMOUbpZ+nH8+QUKog+iAZddf3G8j
-            PAZPX8VWt7jwmQzXPk+59QkfIfsBB/NgQmzyWaf3jBKC2cUZ5sEXPA==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-30T22:22:16Z"
-    mac: ENC[AES256_GCM,data:BgDzbxNxxOo5iAeKRtwTKUbSVFZQpueruReR/PL/LA0XrMtDHUBcv/HaCAPfD0kQoRWdve/v4ax0WA4hir7n1jkGSKU/EA1qgtW6dk7ZH/Dql26W7GESQD0BA9A+RCql5SIXcBOWdCfxirU7aUASUjkJ0K1XTXsbqkqOpbD4nTY=,iv:SQcTjqhzPjYU+xNYXL6EUoAreyI+8DJdtywg4QxtFPc=,tag:ALZ3TH2lPhczwYEG6gUu1g==,type:str]
-    encrypted_regex: ^(data|stringData)$
-    version: 3.12.2

apps/hydra/secrets/linking.yaml

@@ -4,20 +4,20 @@ metadata:
     name: linking
     namespace: linkding
 stringData:
-    supe_user_name: ENC[AES256_GCM,data:XVBqIWJz4QHdgg48yNK9nmw=,iv:mt7dn/sEEy1Ed4DX0FK0v5pJFWgZ9MFuCWvW/SNhDUw=,tag:7738mUggImWqrVvWxanNPQ==,type:str]
-    supe_user_password: ENC[AES256_GCM,data:LJNaesKwkBReCgbbDczkCDL0DMUCo6o2YPzo4FQrgTwyqrlMcqdDm1PP8G8=,iv:zkDt8CSBmdM5ok0PDSaN4MyfFV5vt6YCs/EftWyN/54=,tag:xgW0u6cCQWt1m4ut1vNzag==,type:str]
+    supe_user_name: ENC[AES256_GCM,data:hCDqI37a0lmpFzNGdBL5+6M=,iv:k2XdcDFAix9ormuAe61NmCmbYX3ylpPDOFV6HsoO2nw=,tag:Ow547g93h8Owa2rF67abMA==,type:str]
+    supe_user_password: ENC[AES256_GCM,data:rdUXIhNkPVbjVMNfxvHk6CCGzr3qJY1Y6RtKLasKGtcWFZga+/PqTbcSxQ0=,iv:je9WLE0y0PO1uCACg5OiyPgzXY0TeVoMHYiCBabJA+4=,tag:E0Jm60Fhbo572Qv/Hn73sA==,type:str]
 sops:
     age:
         - recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5WkxCQUkvRERXYVVhK0RJ
-            c3RPbXVXTnJHc3pna2NKamRRdm9tb0lTMzA4Cis3K3F5R3A2YldIRDlUcUY0YVFs
-            U0RBak0rdUVTY2VSa2RTbnRGMjJ1aGMKLS0tIFZ4Vks1ZUI1SVg4eXNvYzBIMmt4
-            QmZEaEc2L0NxUDFWS0lDTzRGbjlxMHcK9ozIUYv1rIJ6OOGajJ6PKQJLBVofKH/U
-            1IQTjS7DoNFH0gEXSex2PtvYwbEqO297EFunokyYDQkHKEqGoMp85w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMbmhsQ3NnaXIzbHVuelRp
+            UUN5bjJaMGlIVGpicXNiWVRVajJDQVZ6aURrCnViZ0ZPTFVyejZNTjd1NndSaDcv
+            c2RCSkowaG9Eb3h0RkJDS0lvaGh2dHcKLS0tIHNRamV4enRZUWt0RzdhNFJOcjdJ
+            bDhCL2N3OWU5eC9yUVgxbTlTR096eUkKtLsoS2I8oGfZaCR7GwjaSkICHd7DRlWT
+            4+GcVH8jz9i7c75osDCtrRNSZkn2d/NsZKDeKg2y9uGoNrv7Cg3McA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-30T22:47:46Z"
-    mac: ENC[AES256_GCM,data:VRVM7bWRci1XwvJ/Gwwz0HiY5ik9mcX/dBWAutVqwcqlOTB51+Piw0iONoLC1qCDIyGVOH9mV5U7u7BgdPKxmA3UfzJBcwcwHw0yaoMaFujWOVFQgSSOJ58+6Vuh2SDrf0nAmkJpp0jXkqa9/6XoIyb3qjQis4OsNAAPEXiJMlQ=,iv:8doqWJwaHidcYjbbSLbqUNclfsk3uf1jpyVcjcftA1I=,tag:7yrv+Cr2JlowaXaaO+o9nA==,type:str]
+    lastmodified: "2026-05-01T17:37:12Z"
+    mac: ENC[AES256_GCM,data:5pDY0tkLkSRQEcegXg1Ss/g2XpZX8di5XrMKRsZK5Lco+DX8cQQWFEABiZk2NnBvgd6f1l4wcStMXiax4K3AGRCSIVXLSA51ltF1Ooh/Z/HKSUr1lf8cvdq43U+r/ctUGzUrph43jWNXpILuE0ARlawYtxLBVjOZp+kXDprU8ik=,iv:C3IYoF2YyZ3hGE/QxpXA2/iYjvATll2FqrWaQm2T1xY=,tag:2ENp3EBWOgoGjRZ2OrO3DQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2

apps/hydra/secrets/truenas-csi.yaml

@@ -4,19 +4,19 @@ metadata:
     name: truenas-csi-api-credentials
     namespace: truenas-csi
 stringData:
-    api-key: ENC[AES256_GCM,data:P17H1ksNvjc51DbJsTnYdXOUHpMscqtWdV0CxunH+IGx3tsWrknCG3y6zpzb7XMD3TtRO8/63OEcy8W6LDF2+e24,iv:x5If53IjFyrr8E4OosdL1fHSikyk/Va9btePp8nry4o=,tag:QHmdC3vljynJQkZL4fMvlw==,type:str]
+    api-key: ENC[AES256_GCM,data:CitMTwW7Fnkz39PthZ23Zo+BZBtbJQzVtjFgR0tPmZiSZ9YxXySaf3PH+N7RoA5X38bd+Lrg9/YMEvOVsagQAkXW,iv:lqfA/PnoPVLYW9CXudXfMSsCDPxf0Mn8iLr2mozbSbg=,tag:+5eOFLr6tt4Oh/3J2CFYQA==,type:str]
 sops:
     age:
         - recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuZ3lranNtRndEVDJLVlhI
-            ZjZyZzhZenF5eG5Kd041TlN4OXJDYmpIZEZJCnI5Umo5Wm00emhUdG5aTWdkaGdr
-            eHBOREFMSmZFNzh4ZVM2SnRTdU1MaHMKLS0tIDJiSXVscTFHMGpqMHhZZ21VSHhx
-            N0haaU8rejRwZHZiMmtBTFI4Nk1tbUEKWwU2lcsejXv5xzCmslKvrugQqU9fHCIE
-            ebsSK+djYYSVsz/wwHWP2CO9GKH+0mSn2V/fi3x4WnPImJ6JSbitZA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYQ202RU1GVzdqQitVZEti
+            U2FIVjNKMzNYMHU1Nmg1MmtJV2xvaUF6VEd3CmZUQWtKRlE2MVFsSGoycE9yL3Vp
+            ZzVpOERFekZLVTJFNk1PMHhIVHZ5NDQKLS0tIERNRWw3a29FUmxoSWpvU3RlbXYy
+            TjJrUVJUZkZFQkFFbi90ckJpRWVJaG8KYBoxszg7Ah91yVLs/8T5poo6S5TC6sRr
+            tyLqwwA3SUIrdPLI/bYON74ZyB95khHIN0em1OMtMYY+Ok4gJuH1Ng==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-30T22:47:46Z"
-    mac: ENC[AES256_GCM,data:JIKUhicF8YYMN7DS6HhjzN6AfVDSMWIFKKXTGlYqCFE9Arx9+Js6Y0mWtcmNDKDq4JE0kLPZPplUk50jT6SvG/n4UF92i2cvKKkVsGdRL7rb0EVyMu7NOHvp9Y6F7os3raWhGEMHVcZcwON2ANAcVmvUXggP5933rVmnWpt1MjQ=,iv:fNqSgwTV/WVruXdL2/FxT3F5e7XVuX1mwT4vJ52uyjA=,tag:iphxaJq0Srln7LlLy3u/DQ==,type:str]
+    lastmodified: "2026-05-01T17:37:12Z"
+    mac: ENC[AES256_GCM,data:aMiws/+k8OaL9qdDrXBwq7aAqnUZMtDCFM9WG4kt0dMT4MJf5mxqaoz2RDupAWaWjQ3ccxW/WoGFazRmuIdPnoeyVsTRfwLMa17+HIvOyAZAajqKnUqIGazYjgcQiw8S4D+B9oa5Jl+PFu6bIHiWJLaHw9m5WrU55olJzRpOnNs=,iv:nh3crjtwYICi6IUiX1gZD5WOc3A8KkuCAVbBnv0LsEs=,tag:J1CneXNbRlSqf0PY/QEG6w==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2

infrastructure/hydra/truenas-csi/kuztomization.yaml

@@ -5,15 +5,15 @@ metadata:
   namespace: truenas-csi
 resources:
 - node-binding.yaml
-- node-deamonset.yaml
-- iscsi-storage-class.yaml
-- controller-deployment.yaml
-- controller-service-account.yaml
-- controller-cluster-role.yaml
-- controller-binding.yaml
-- node-cluster-role.yaml
 - CSIDriver.yaml
+- controller-cluster-role.yaml
+- node-deamonset.yaml
 - config.yaml
 - nfs-storage-class.yaml
+- iscsi-storage-class.yaml
 - namespace.yaml
+- controller-deployment.yaml
+- controller-service-account.yaml
+- controller-binding.yaml
 - node-service-account.yaml
+- node-cluster-role.yaml

pkg/enc/truenas.go.age

@@ -1,5 +1,9 @@
 age-encryption.org/v1
--> mlkem768x25519 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
-+3s0pA9VTfNjhy5VRex7EcDtke1QT1L2Oq7EsUv2a/E
---- UYuc4fSSe5o9iQ8ywKTHKhRW8ZynKd9l/D7Yl6H8iEo
-6’gß,H(¾ù†¸gj®½¡MåJ:Ú_q~Šûæ؈&£ë‰ÍÄ7a·ÙN+t ÷Пàž9eÆ$2è͹.®<05>iúðgÆ–Ë®5ÿÌ9CY¨,BÛ¨Gþç.ˆkœ½JÖ¼f]Ã`PKz¹Úï_&á²÷2‹<32>Þ™rŸ"•ÐµoÓè¡sîðç<>’~3òu³<75>ö1†Dõ*Ào¨`ˆâÆä3$æà*ó>XGüÁpIˆFÊ€ì¯ËYÎ}Ãqí'1i+±åæd•)öb„%dÙâÒ± ¥‡‰ëýÕŠ©ý8P˜FåZÐÚ<C390>kÃ,n•ff¸@"ÓÖ_hˆ4EŸð+'ÙA-ú–‰òqKÚ1r<<3C>$¦žÚ‘˜t<CB9C>Ç·ŽônÝ´@Zkô'¢8ïöPýœ°?ýŽïì`]‡¡¿4T}W•®kå¡ÆõXÏ~¿iݹBÇÍ<C387>ë]:p‘ù/¬To£•T‘•Š¥‰"¸kaÄø~`Übi÷æ¹|'ýéLõqë%iôížS	PCG=ÍŠÛß;Ó:Ϥ‡T®*%^Ä×qÙº÷…£Âƒã<ÛÇ'ä5+3Y	ôþ¯½„·2
+-> mlkem768x25519 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
+4SFySSbbIT2XA59MffoN9IWmmViLX4vo6H9Dxg2gpVI
+--- YUIaqcGNwULVEn4zeaEhq72dSEwUE4KeJjFSMIB6rq4
+Œád¸!«Ý,B!ÛØ‹=5ÌäÛÆ´³Nøäã‡h‡·òÄó}eoÝ"´ÝQ‰Ýen
+ú^•6ǹƒëžßa/x<>Çr©tBbÍÄ12–;§L†<4C>Üd3€jÉš5åaá©Ö•òf°æp1©0…Ö‹W‰'òhü
U\Þû=ë'<27>@!{
+iU'
• V+›ÃÀ™0*V©Ø(pêxY3sÈøâÙL_Æ#T¢acßç"ò¾‘K‚g({¾vžd„%¸ÍþÀšÿ$Ìñˆõ±¹ð²æýï	¨­<9˜$<24>j$\r„éµÝgˆF•©åZkbiÈÈDBÌÑÕC9Ý죒O æ9z°éH©ó÷é×Ͼî›Ä´å?µÏ9´u£_	Íâ )‚•;UÉyëÂ,ð*¾<2®q”XÐóA<C3B3>oý<6F>ñ9?+;kLàw	Û^5f»«
ÁÀ«˜Àq¶Øa}‹å0‚ùß)6àXMY+~Ú†(sŒú…ox«×¥¿©;H2+Í}ˆ
+h‡Yvð}¸v#
+Öœ.Wp:ÖíL0<4C>^¶

pkg/immich/immich.go

@@ -7,6 +7,22 @@ import (
 	core "k8s.io/api/core/v1"
 )
 
+var Secret = struct {
+	Name          string
+	DBNameKey     string
+	DBUsernameKey string
+	DBPasswordKey string
+	DBHostKey     string
+	DBPortKey     string
+}{
+	Name:          root.Immich.Name + "-secret",
+	DBNameKey:     "db_name",
+	DBUsernameKey: "db_username",
+	DBPasswordKey: "db_password",
+	DBHostKey:     "db_host",
+	DBPortKey:     "db_port",
+}
+
 var meta kube.Metadata
 var Namespace = kube.Namespace(root.Immich.Name)
 var srv core.Service

pkg/root/services.go

@@ -1,6 +1,8 @@
 package root
 
 import (
+	"fmt"
+
 	"danicos.dev/daniel/go-kube/pkg/kube"
 )
 
@@ -42,6 +44,8 @@ var (
 	Monitoring          = "monitoring"
 	CloudNativePG       = "cnpg"
 	PGClusterNamespace  = kube.Namespace(CloudNativePG + "-cluster")
+	PG_CLUSTER_HOSTNAME = fmt.Sprintf("%s-rw.%s.svc.cluster.local", PGClusterNamespace.Name, PGClusterNamespace.Name)
+	PG_CLUSTER_PORT     = 5432
 )
 
 var (