m3ta-chiron
f1481dc256
- port registry: atrocore = 3058 - oci-container atrocore: Gitea-registry image, 127.0.0.1:3058:80, web network, static ip 10.89.0.16, db alias to host pg, env-file from agenix, named volume for instance data, registry login via token secret - agenix secrets: atrocore-env (ATRO_DB_*) + atrocore-registry-token, age-encrypted to AZ-PRM-1 + user, non-interactive creation - host postgres 17: idempotent atrocore-db-init oneshot (psql peer, secret only at runtime), pg_hba 10.89.0.0/24 scram-sha-256, atrocore in 03:10 backup list - traefik: pim.l.az-gruppe.com -> localhost:3058 (ionos, websecure)
71 lines
4.1 KiB
Nix
71 lines
4.1 KiB
Nix
let
|
|
#SYSTEMS
|
|
AZ-CLD-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItSijmU5YwcJcoshtmYxpxBaVA4TPaCMk23ws7KDkAH";
|
|
AZ-LT-NIX = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIg/nFOPx763xIbepPsdYRE49R7HwvikXhLF/iPgH1Jh";
|
|
AZ-PRM-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6gl9maUQ99I4t8mCAdfUw6lrA9NYx2EbwqGOmKts+l";
|
|
|
|
#USERS
|
|
sascha.koenig = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEZbg/Z9mnflXuLahGY8WOSBMqbgeqVIkIwRkquys1Ml";
|
|
jannik.mueller = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPvZazSuIoWoRWhkAqQDMLeurxVUyy1MTllp1wfw1tzq";
|
|
|
|
users = [sascha.koenig];
|
|
systems = [AZ-CLD-1 AZ-LT-NIX AZ-PRM-1];
|
|
in {
|
|
"secrets/atrocore-env.age".publicKeys = [AZ-PRM-1] ++ users;
|
|
"secrets/atrocore-registry-token.age".publicKeys = [AZ-PRM-1] ++ users;
|
|
"secrets/azion-env.age".publicKeys = systems ++ users;
|
|
"secrets/server.crt.age".publicKeys = systems ++ users;
|
|
"secrets/server.key.age".publicKeys = systems ++ users;
|
|
"secrets/traefik-env.age".publicKeys = systems ++ users;
|
|
"secrets/baserow-db.age".publicKeys = systems ++ users;
|
|
"secrets/baserow-env.age".publicKeys = systems ++ users;
|
|
"secrets/kestra-env.age".publicKeys = systems ++ users;
|
|
"secrets/kestra-config.age".publicKeys = systems ++ users;
|
|
"secrets/kestra-secrets.age".publicKeys = systems ++ users;
|
|
"secrets/kestractl-env.age".publicKeys = systems ++ users;
|
|
"secrets/librechat-env.age".publicKeys = systems ++ users;
|
|
"secrets/librechat.age".publicKeys = systems ++ users;
|
|
"secrets/librechat-env-prod.age".publicKeys = systems ++ users;
|
|
"secrets/librechat-env-dev.age".publicKeys = systems ++ users;
|
|
"secrets/litellm-env.age".publicKeys = systems ++ users;
|
|
"secrets/litellm-prometheus-bearer.age".publicKeys = [AZ-PRM-1] ++ users;
|
|
"secrets/metabase-env.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-env.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-env-prm.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-db.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-runner-auth-token-cld.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-runner-auth-token-prm.age".publicKeys = systems ++ users;
|
|
"secrets/netbox-secret-key.age".publicKeys = systems ++ users;
|
|
"secrets/netbox-api-token-pepper.age".publicKeys = systems ++ users;
|
|
"secrets/cld-var-backup-sync-ssh-key.age".publicKeys = [AZ-CLD-1] ++ users;
|
|
"secrets/netbird-auth-secret.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-db-password.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-encryption-key.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-dashboard-env.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-server-env.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-proxy-env.age".publicKeys = systems ++ users;
|
|
"secrets/outline-env.age".publicKeys = systems ++ users;
|
|
"secrets/snipe-it-app-key.age".publicKeys = systems ++ users;
|
|
"secrets/snipe-it-db-password.age".publicKeys = systems ++ users;
|
|
"secrets/snipe-it-mail-password.age".publicKeys = systems ++ users;
|
|
"secrets/pgbouncer-userlist.age".publicKeys = systems ++ users;
|
|
"secrets/pgadmin-pw.age".publicKeys = systems ++ users;
|
|
"secrets/phishboard-env.age".publicKeys = systems ++ users;
|
|
"secrets/homarr-env.age".publicKeys = systems ++ users;
|
|
"secrets/vaultwarden-env.age".publicKeys = systems ++ users;
|
|
"secrets/vaultwarden-db.age".publicKeys = systems ++ users;
|
|
"secrets/zammad-pw.age".publicKeys = systems ++ users;
|
|
"secrets/zammad-secret.age".publicKeys = systems ++ users;
|
|
"secrets/zammad-hr-env.age".publicKeys = systems ++ users;
|
|
"secrets/zammad-hr-env-prod.age".publicKeys = systems ++ users;
|
|
"secrets/outline-key.age".publicKeys = systems ++ users;
|
|
"secrets/ref-key.age".publicKeys = systems ++ users;
|
|
"secrets/exa-key.age".publicKeys = systems ++ users;
|
|
"secrets/grafana-admin-pw.age".publicKeys = systems ++ users;
|
|
"secrets/grafana-db-password.age".publicKeys = systems ++ users;
|
|
"secrets/grafana-secret-key.age".publicKeys = systems ++ users;
|
|
"secrets/monitoring-loki-htpasswd.age".publicKeys = [AZ-PRM-1] ++ users;
|
|
"secrets/monitoring-loki-remote-env.age".publicKeys = [AZ-CLD-1] ++ users;
|
|
"secrets/ntfy-grafana-webhook.age".publicKeys = systems ++ users;
|
|
}
|