From d16f466a426975708ede75e5190ae3715bf490e8 Mon Sep 17 00:00:00 2001 From: LordMathis Date: Sat, 30 Aug 2025 15:37:00 +0200 Subject: [PATCH] Add Velero configuration files and update production kustomization --- apps/base/velero/kustomization.yaml | 7 +++ apps/base/velero/namespace.yaml | 4 ++ apps/base/velero/repository.yaml | 8 +++ apps/prod/kustomization.yaml | 3 +- apps/prod/velero/kustomization.yaml | 17 +++++++ apps/prod/velero/kustomizeconfig.yaml | 6 +++ apps/prod/velero/release.yaml | 19 +++++++ apps/prod/velero/secret.enc.yaml | 22 +++++++++ apps/prod/velero/values.yaml | 39 +++++++++++++++ cluster-vars/prod/secret.enc.yaml | 71 ++++++++++++++------------- 10 files changed, 161 insertions(+), 35 deletions(-) create mode 100644 apps/base/velero/kustomization.yaml create mode 100644 apps/base/velero/namespace.yaml create mode 100644 apps/base/velero/repository.yaml create mode 100644 apps/prod/velero/kustomization.yaml create mode 100644 apps/prod/velero/kustomizeconfig.yaml create mode 100644 apps/prod/velero/release.yaml create mode 100644 apps/prod/velero/secret.enc.yaml create mode 100644 apps/prod/velero/values.yaml diff --git a/apps/base/velero/kustomization.yaml b/apps/base/velero/kustomization.yaml new file mode 100644 index 0000000..a9b3525 --- /dev/null +++ b/apps/base/velero/kustomization.yaml @@ -0,0 +1,7 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: velero + +resources: + - namespace.yaml + - repository.yaml diff --git a/apps/base/velero/namespace.yaml b/apps/base/velero/namespace.yaml new file mode 100644 index 0000000..b442fae --- /dev/null +++ b/apps/base/velero/namespace.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: velero diff --git a/apps/base/velero/repository.yaml b/apps/base/velero/repository.yaml new file mode 100644 index 0000000..406a203 --- /dev/null +++ b/apps/base/velero/repository.yaml @@ -0,0 +1,8 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: velero-helm-repo + namespace: velero +spec: + interval: 1h + url: https://vmware-tanzu.github.io/helm-charts diff --git a/apps/prod/kustomization.yaml b/apps/prod/kustomization.yaml index 0b34ce2..54d3e80 100644 --- a/apps/prod/kustomization.yaml +++ b/apps/prod/kustomization.yaml @@ -7,4 +7,5 @@ resources: - lemma - ghost - dashboard - - homelab-proxy \ No newline at end of file + - homelab-proxy + - velero \ No newline at end of file diff --git a/apps/prod/velero/kustomization.yaml b/apps/prod/velero/kustomization.yaml new file mode 100644 index 0000000..22dba36 --- /dev/null +++ b/apps/prod/velero/kustomization.yaml @@ -0,0 +1,17 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: velero + +resources: + - ../../base/velero + - secret.yaml + - release.yaml + +configMapGenerator: + - name: velero-prod-values + namespace: velero + files: + - values.yaml + +configurations: + - kustomizeconfig.yaml diff --git a/apps/prod/velero/kustomizeconfig.yaml b/apps/prod/velero/kustomizeconfig.yaml new file mode 100644 index 0000000..7c31b22 --- /dev/null +++ b/apps/prod/velero/kustomizeconfig.yaml @@ -0,0 +1,6 @@ +nameReference: +- kind: ConfigMap + version: v1 + fieldSpecs: + - path: spec/valuesFrom/name + kind: HelmRelease diff --git a/apps/prod/velero/release.yaml b/apps/prod/velero/release.yaml new file mode 100644 index 0000000..28e432a --- /dev/null +++ b/apps/prod/velero/release.yaml @@ -0,0 +1,19 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: velero + namespace: velero +spec: + interval: 1h + chart: + spec: + chart: velero + version: 10.1.0 + sourceRef: + kind: HelmRepository + name: velero-helm-repo + namespace: velero + valuesFrom: + - kind: ConfigMap + name: velero-prod-values + valuesKey: values.yaml diff --git a/apps/prod/velero/secret.enc.yaml b/apps/prod/velero/secret.enc.yaml new file mode 100644 index 0000000..53ca268 --- /dev/null +++ b/apps/prod/velero/secret.enc.yaml @@ -0,0 +1,22 @@ +apiVersion: v1 +kind: Secret +metadata: + name: velero-s3-credentials + namespace: velero +stringData: + cloud: ENC[AES256_GCM,data:xe/0WSMf6xzPQiz5Ob+JOeJWU2lG8kkLilMRkmpxKYYLTavluSc6DTR/M80wIs5pQXyeFOSkmvpubViNvn1FernbI/Fjh8FGRdHASLugdsH4b95rQdKj17gC7sdZu+l1cHVwz3oqycNYWf2qYNykbA==,iv:JGo2jHko1yUWsMsrOjzY1+3g7s3VV3oUqWtVXKDfUU0=,tag:L+rNbm9x05BSxq2NeJR6Vw==,type:str] +sops: + age: + - recipient: age1jk99rtxq3ep2xj2w886cchddf7jypqpwkr3dszg5dzq93gn8cy9qyc786m + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYaVgvYmtTSEFjYk4yeWox + bGdsc2x3VHh0ODBlamZJSnl4NXNoQ1BRclI4CjdUZkt6NVprM3orUkNIKzZIdnBl + MzNxKzFpY29ubjJ3Z0hJYm05VDdBRjgKLS0tIEo2Y0JWMitJZkVQRmhjSkR2cjdY + SnBPbHFIQWc1NjBGbmR1eXdSYUNGR2cK8zkfj54jgv5tLMKHfOci6tBkTVDUbBFO + NTRucXIRfNu8HMaH5jSP+VlSDrheXm3p4Rdx2jLoPmJKnhmw+PNhmA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-08-30T13:21:34Z" + mac: ENC[AES256_GCM,data:cmKct89oRyL7DMtithkIngxnODAfRh9I0HjvaY65UCfaEAao8+VWewa/dOXjX55YDFLDC5I92DvUD796k/NOLdZnznGmq0cix73W119LmwXxsen7WM2BIvt+ziS8MvjaQrZ84R1Q/jtRxIMD4AD1cyhkcg3OwgSAPRsa85bdZhQ=,iv:QFUGHgo4zu05HUZa+wCg3E9IWXKnX6G1KW1df4ftSKQ=,tag:CB8jnAKMXF77HprABNG/pw==,type:str] + unencrypted_regex: ^(apiVersion|metadata|kind|type)$ + version: 3.10.2 diff --git a/apps/prod/velero/values.yaml b/apps/prod/velero/values.yaml new file mode 100644 index 0000000..df8c470 --- /dev/null +++ b/apps/prod/velero/values.yaml @@ -0,0 +1,39 @@ +snapshotsEnabled: false +deployNodeAgent: true +configuration: + backupStorageLocation: + - name: scaleway + provider: velero.io/aws + default: true + bucket: ${VELERO_BUCKET} + config: + region: ${VELERO_REGION} + s3Url: https://s3.${VELERO_REGION}.scw.cloud + + defaultVolumesToFsBackup: true + +schedules: + daily-backup: + schedule: "0 2 * * *" + template: + includedNamespaces: + - gitea + storageLocation: default + ttl: "168h" + includedResources: + - persistentvolumeclaims + - persistentvolumes + labels: + type: scheduled + period: daily + +credentials: + existingSecret: velero-s3-credentials + +initContainers: + - name: velero-plugin-for-aws + image: velero/velero-plugin-for-aws:v1.12.2 + imagePullPolicy: IfNotPresent + volumeMounts: + - mountPath: /target + name: plugins diff --git a/cluster-vars/prod/secret.enc.yaml b/cluster-vars/prod/secret.enc.yaml index 31da2d5..2ac4cdf 100644 --- a/cluster-vars/prod/secret.enc.yaml +++ b/cluster-vars/prod/secret.enc.yaml @@ -4,45 +4,48 @@ metadata: name: cluster-vars-prod namespace: flux-system stringData: - #ENC[AES256_GCM,data:o/mZ8x5vLOxshX9PCmGPxQ==,iv:ZlN2oeAI3wlLa1Yd6al+vaP+fWjHK7j2ts7MnwS5Jmc=,tag:H46zzaGWlg44+l/aMrTdcw==,type:comment] - DOMAIN: ENC[AES256_GCM,data:+0JN+uKZQexU,iv:Bvu4YANkkMvlVTeHITWSQnHSQ3Oa8+q4juy7yqfUTXY=,tag:vtIIZk4r0XYKCzwzFQDTHA==,type:str] - DOMAIN2: ENC[AES256_GCM,data:bJ2dSdo3oG/2Gw==,iv:VjJwSRWUNmxkIbZ65JmBnNvgg7UF0WwQoFYIvyTZTek=,tag:usLGF/HV7mQNHT+uIbcHoQ==,type:str] - #ENC[AES256_GCM,data:PQFi9euCTmU7STqGF1NjaQ==,iv:hu5AAbFySKE4PMIiDc1xoXaK2zRczvDhF9fk/lzFUfg=,tag:gATT7JEly3diPjXGyBOQ6Q==,type:comment] - GITEA_DOMAIN: ENC[AES256_GCM,data:T+3otwVccnnucMvHhg==,iv:QBXWGHWPEUWBgf6UlWcngXOnu0NQ7JBOhkGD3cxe6eA=,tag:ylKa57vxNmTaPUnqWn4wJA==,type:str] - AUTHELIA_DOMAIN: ENC[AES256_GCM,data:pdhtyJS8QlV87OXeVJY=,iv:Ivc+kedxU1X1rqj0Hx82LMbhPRJlxeZt6c0xmNVaF24=,tag:lWHZOEImY05jwlNQvFbU7g==,type:str] - TRAEFIK_DOMAIN: ENC[AES256_GCM,data:bU4CkZ1ha7d4OQjM7+ZyupU=,iv:Nmw5aFJX73eTzGL95mw+8K5+S4p/f9FqbVtr78W08pY=,tag:XzV0shE7WBj/TU6VTxqA0A==,type:str] - LEMMA_DOMAIN: ENC[AES256_GCM,data:y6LkMwO2fU4StIbMLpOZ,iv:EDnbK10vdKauQ8e1lL68hV3CzT8cDXq2wH3DPLRePSM=,tag:3VLkJtDUEe9Bc/XHDK2X5Q==,type:str] - GHOST_DOMAIN: ENC[AES256_GCM,data:GX6Ib1XYIi+5GwrITRbjMQ==,iv:uQHogvnrIoISAa47b5uMj0dz+619zE7qe2wCItzrM4Y=,tag:yqDArdO0oMukBsaMjgMPTg==,type:str] - K8S_DASHBOARD_DOMAIN: ENC[AES256_GCM,data:DeunmKQPaifJFZ+d7w==,iv:zdt3D39F39zSjjrWPl/sQJLJY9PTwHYX7MFM+qlE9WA=,tag:rnGfM/2ivUy0r2HKrlOxvQ==,type:str] - #ENC[AES256_GCM,data:nPipPfa7bmNtIQgokge1EYOkvO4=,iv:eK82Op16sMntPuV+jyazeCi2wTtdfpZsO94m3gQRJw4=,tag:MAPTcqv1S5LmzAn+mOKufw==,type:comment] - LETSENCRYPT_EMAIL: ENC[AES256_GCM,data:iRlWIU9rRprmSCdwkrjVzkozTNLcTjo=,iv:1O4hnTVj+FtMDaB7x/KvhSpSnnBjgsEsuP4z5rOYOE8=,tag:at0XeRkpNjBNWmHb9jdeqQ==,type:str] - GITEA_ADMIN_EMAIL: ENC[AES256_GCM,data:GKKgraex89RwpkXUZ2i661E=,iv:6Cmg7ovEJfhGLZIKbyIITUKEPG3vEJTXrTk0UGdnyo4=,tag:78VKM0jSlrmEMnCcrck7TA==,type:str] - GHOST_ADMIN_EMAIL: ENC[AES256_GCM,data:unwFibm9MQMUlkoZHLh2KkI=,iv:gyOu7AVcUQm7GV+dWZBNXnhWfZom4OQcSlprn7T9f2M=,tag:IN4bSw4I2WaZWTAo+iot/w==,type:str] - #ENC[AES256_GCM,data:aNCwl59rIf2xTkzgaWFyJJ+G/Gc/uBVsneq3oISIwN1B,iv:tot5X8HtRbAYyrfXAb1c7fjDlTQpYMbteIxC9kCRX8I=,tag:N6NPZaJkfYKK9LEaVrLcgw==,type:comment] - LLAMACTL_DOMAIN: ENC[AES256_GCM,data:4SdjW39rtMAobA3JNBmk2pJu,iv:qB0OYHalFTSzrVX1sJKpTb1egunwwB5EdSHSNSlW5F0=,tag:yeWWDiuj2pixbOt/JMJvag==,type:str] - LLAMACTL_TAILNET_FQDN: ENC[AES256_GCM,data:1jJf+aUK6PTTe1AYsLZsY223b+IDHbe4kebE/Qk=,iv:q1vTuV0RvqUINLkdesspwa6WydbyHtbzFXOUjy4fhUA=,tag:d576abOFtdbGeoPwiII0FA==,type:str] - LLAMACTL_INTERNAL_PORT: ENC[AES256_GCM,data:0SA8LA==,iv:7kTR4HlotBIjRqmHHa9y1Dtkzd5dlVmOIOolLSMo7iU=,tag:5d2MBSf6GqLLbJIOq4mvTw==,type:str] - CHATUI_DOMAIN: ENC[AES256_GCM,data:HzfM/gGtsTgcycsvzXE=,iv:Ka2xl/OBXPZ/wCB4njhzkNvUQb49J8oISU+R5MIxKGk=,tag:GviYKDAH3NmVuATSUZG3lw==,type:str] - CHATUI_TAILNET_FQDN: ENC[AES256_GCM,data:sqeZwFA8jiDXerOznqKQT+90Er79jCichzZE2Kw=,iv:irstCrBqvTeF6oTi75e2KLtrqOYtEzN3ofmO/7hDnM8=,tag:M2oRK7YdoeXdTPEq0a3WGw==,type:str] - CHATUI_INTERNAL_PORT: ENC[AES256_GCM,data:OfQUyw==,iv:Nz6E61mui03rlZQ8nRH8k7u9uLFkFTfLIFVSAMRmIxs=,tag:lI7EbtrO8jNYRFsMwj87Nw==,type:str] - NETDATA_DOMAIN: ENC[AES256_GCM,data:MEQFGnK3fzxNnw12WbgA3mg=,iv:Y92Rkski7pDDRtOFwJyEnrXlwB98mv2n5srpJy2Hlng=,tag:PLFdAqX+b9UJ0akWaC1i6g==,type:str] - NETDATA_TAILNET_FQDN: ENC[AES256_GCM,data:EiBDtB1u8/zaBkLJYGxpf2kMMZ8v5cZ7fBerIcU=,iv:j/BRyUj5368/AY1qPXtgn+3ulnqSmtpQ9EM5zUUQUZA=,tag:itFq9nSe37iqs5Ag/KG6bg==,type:str] - NETDATA_INTERNAL_PORT: ENC[AES256_GCM,data:PHdiWLY=,iv:PqPE6MkdBmJy2ZlCcx65DRZpl6moWVhXvrnSrz9joBw=,tag:qzGQi4kwcXoV9K1rSSxZyw==,type:str] - MCPO_DOMAIN: ENC[AES256_GCM,data:8aFfhwSiyoB4joiEL0o=,iv:c+m/AeNw2YCJY8fAyLqxfLsiNBMKgQBFhlOtbKbXqc0=,tag:jlQUAO+o1dzjyfENa7EB+w==,type:str] - MCPO_TAILNET_FQDN: ENC[AES256_GCM,data:sPL+OBcrJTjiVnJbH2b6r8s//Rm+zbsfoJxAnMs=,iv:E8rCzcUqw0pywc4OENFCf9H6sOPlMbt8RET+PMiJbl8=,tag:Vkw318BBeEJyp4wtTZ36nw==,type:str] - MCPO_INTERNAL_PORT: ENC[AES256_GCM,data:Rsrhcqk=,iv:tBI3IRK+nQ82SxSkZ26Bt8EbdJ/pUQllSDWFWHxEof0=,tag:n+vg07M3bODlP2uA7y+PDQ==,type:str] + #ENC[AES256_GCM,data:DJqvr7kWF0hNc8s4oa0gmA==,iv:vWFOMIQGndwiuMGvvF387GGKxR8lkMVlUDpbGJubBoQ=,tag:/t/C4rzVBqBSV474H/FSVg==,type:comment] + DOMAIN: ENC[AES256_GCM,data:RBZ8BTPEiVyp,iv:lYB0rM7K7Wiluh/ussyT/iDSOP9nCJFj7vs473KoueQ=,tag:NQfNXmqeflxKik1jqh9bMw==,type:str] + DOMAIN2: ENC[AES256_GCM,data:pRZmsNCOgFk6jg==,iv:tOGL/C0sr1+ohnQMWCpgTkKc4Zwt/hJO5mekwJgxZEs=,tag:eigMKtMMQSth+5nR701Haw==,type:str] + #ENC[AES256_GCM,data:0S8gWvhdH3prBLf5edUpwQ==,iv:aGF8qFplvk/TEFs3xqruePsUNhIGnxcza0rAzM1LAiI=,tag:6rUBE//rWG3JzO0gdHv9sA==,type:comment] + GITEA_DOMAIN: ENC[AES256_GCM,data:Z7Z4J00MfnhAybaiJA==,iv:xcqfC5F6FVuQt4bF8WBssTJEiDHy4aLQ+N4MizFSTQg=,tag:KwwR2bccrY6LyfBerPeI4w==,type:str] + AUTHELIA_DOMAIN: ENC[AES256_GCM,data:MrRxRei+dSdP6REXykw=,iv:1URMokdO31sJCayANcaWMZLXkt90gdVrd85+NDrHsFI=,tag:PV25elx3Mdu0vv+a+3qGYQ==,type:str] + TRAEFIK_DOMAIN: ENC[AES256_GCM,data:GQDpDaHkxb02g5eMTSJ+yMo=,iv:iZUP9OovZjs+luDQv9kN2bM5PYYrfCKFXyFMh+TOr3g=,tag:W7HUkACCQUuSu0esilfGbw==,type:str] + LEMMA_DOMAIN: ENC[AES256_GCM,data:8zWJoNyPkb4TowRKxGW6,iv:Qa+jZfDLT4IBrleTTu38ErXfhKSleHmo+mn3QispghQ=,tag:/lXbNqj3/qfmLevT0/GgDw==,type:str] + GHOST_DOMAIN: ENC[AES256_GCM,data:kwg6u1Fc7EGyIPNKOWKs/A==,iv:4aw+ZjbmFp3Z5iFzuf54KXSCaDRX6zqiULNio8NMllo=,tag:QOcCZOce0U0BXjo6AVivRg==,type:str] + K8S_DASHBOARD_DOMAIN: ENC[AES256_GCM,data:EAB0qB2EJaYxdCK31w==,iv:+3Ubu9tLvu6kJzaa+DR/4rLPaeaUNWqyyP4eNyTGLxk=,tag:KlNalOfJ88C/kFQivGRvpA==,type:str] + #ENC[AES256_GCM,data:W7NOhcmHPCh3fV9PuRWsFWnMhFo=,iv:mMxFfYJW/yPIyYHIy5WjBBanvtZ/hUmT2dEhQ52nTDc=,tag:ycS3B+YFy4c0ITrxyEGc7Q==,type:comment] + LETSENCRYPT_EMAIL: ENC[AES256_GCM,data:0qs6u7+CDOCEzdozxPFoQ6qDiTbEr0A=,iv:s/aYQKs+uf53Y4Z5qdARUVA5sneyn5hqXkiWnpYLRq8=,tag:J+98O2eoCoz1BlDl46K8ZA==,type:str] + GITEA_ADMIN_EMAIL: ENC[AES256_GCM,data:qQT/5vg68BFpjC8Wo8sYtdA=,iv:OELfdS8KtF2oZq8HyH1rjjIzo5++4Jba108K3VzG6wM=,tag:rYRwXBnTrRDSU5/QQJctng==,type:str] + GHOST_ADMIN_EMAIL: ENC[AES256_GCM,data:CNu9kJL8kUHxd+WWB3Dq//8=,iv:1la+LAOQkTYEXvzZ4wMgdpleop/pwQqBAfIeJBwIHfY=,tag:XsdXXs6TiekmiLKFD9QDeA==,type:str] + #ENC[AES256_GCM,data:fpB0688GxsJhbUGJo/oFvhwxmZRv,iv:qMWADjc1ju/Yj4HQC70tVpgpGNsy3tKDsyNmLqke/D0=,tag:UTALoTr0kWVdcEFVfXdOmg==,type:comment] + VELERO_BUCKET: ENC[AES256_GCM,data:V0uALjZhpFopnBeq,iv:Veh0e45blkw52ldQFgG9UT2Xqg8evdYnViOBq7ZKtuU=,tag:blS0GCSqpMl4AfSMykMQxg==,type:str] + VELERO_REGION: ENC[AES256_GCM,data:LnEKRGMD,iv:rxpH/alj4w8ev0rNgMOneGCSzt2euv2LBat+hzxNvtE=,tag:xsCGoDf2pWEfb7iXASQbHQ==,type:str] + #ENC[AES256_GCM,data:YV2PnLebxvlMBj2+YAyyTAk85fRMBq4XDD+LsYut7ii1,iv:3jZqAcPtMDyuJHJHw4W+U5LjhJ/sF1yh1wzgC11A3W8=,tag:bCW4EE7Jw5pSZXpG3kfJow==,type:comment] + LLAMACTL_DOMAIN: ENC[AES256_GCM,data:nvZRVmNlzZeu27oK7v66cdoe,iv:Q762pBjkcaKcq8NM4fogwsQHbGogWf+GcEIYFcnkVNg=,tag:bUIgdRWRhlKicKdVNdSEMA==,type:str] + LLAMACTL_TAILNET_FQDN: ENC[AES256_GCM,data:ATitqz1CpVztUauVro+CoSQNU86xNVcoiUBI6j8=,iv:TzGbSRjU6EEjnDAAOj4fXwAD3OoQHfNTB5zahmLCYac=,tag:JOrdrcpv1UeyNg39qup60w==,type:str] + LLAMACTL_INTERNAL_PORT: ENC[AES256_GCM,data:+VhlPg==,iv:2Rel9/FYYrnrwtYFQNLfJXrLrXhgJ8GptrK2O/9Mww0=,tag:ff4titimyDvXait93rBIAQ==,type:str] + CHATUI_DOMAIN: ENC[AES256_GCM,data:03vQ/iJjN5k3LQbkRds=,iv:+MCUcwYhrLV4wO1hzzYxRpi+bJdGgaR+XnCxJWVAQxs=,tag:ujjonzknl5iQZir5/JAMfg==,type:str] + CHATUI_TAILNET_FQDN: ENC[AES256_GCM,data:KvqtYGZxngFMZj8+bJvLE+WSRUjZ438g/ufHRRI=,iv:+2yY9LDPPZfL1rvFmXNFVmwnbAF367KgsBRDzbzSu2Y=,tag:JULNKI/uEfj4hD+fTB/QRg==,type:str] + CHATUI_INTERNAL_PORT: ENC[AES256_GCM,data:F8ckQQ==,iv:L7B4ot5Nb/5xXc51WWAXGQjp8IVhZ7RkU02ePv9ItFI=,tag:7vMxkTPwHO5JyBq4TzFEjg==,type:str] + NETDATA_DOMAIN: ENC[AES256_GCM,data:qnB0EBSN2XcErMgKaEuNb0I=,iv:AZOwFun+u8H76MwOGzyffikJBFMOljY6SjE7IUto6GA=,tag:yfZaL2h40GlGq9xoMVvBJQ==,type:str] + NETDATA_TAILNET_FQDN: ENC[AES256_GCM,data:Urw5ayazwW25BYy/PoQ/aq1q1wBT81dBT1iFsaI=,iv:/ZbHF7RUVskXnPn9BhY+uUtcuIXD9NzMzR7K34k0PlE=,tag:fJpkMMN/qdRdbsk1ovFCTw==,type:str] + NETDATA_INTERNAL_PORT: ENC[AES256_GCM,data:dUAgojk=,iv:L3Y+pJSjQFMm2e9JA+nOfdBz4kWr2UQF3PKb+Yy19LU=,tag:UUBX6Jn/IQClw7R0ye/kcw==,type:str] + MCPO_DOMAIN: ENC[AES256_GCM,data:NciBaOCjmH09OLiM9Mw=,iv:6RuMLH3aLHyJ8bcy2FNBQB2S77/BYcZPmC+23k+xCuI=,tag:e9Atov2WtMawIN0H2NoWVQ==,type:str] + MCPO_TAILNET_FQDN: ENC[AES256_GCM,data:cNrpL55sVlCZ+hqlwKo/Rm4uC+KiAVCn2a5SZtY=,iv:A1j7K+H9HZjgPeLo64M4csAfYHDuK4SlChjVBd2JH3M=,tag:ExI1RN9u6wsRqVcUX+iOBA==,type:str] + MCPO_INTERNAL_PORT: ENC[AES256_GCM,data:kLwABQ8=,iv:hvlzA4aCbVAbxUkmDevQEyPH7zpLgmOlIkNUZ9D7EMI=,tag:csJj/A8an0KtfQ8lbPt5dQ==,type:str] sops: age: - recipient: age1jk99rtxq3ep2xj2w886cchddf7jypqpwkr3dszg5dzq93gn8cy9qyc786m enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEd3k5Z2FLdElzT2o2S1Zt - Nng5SGlPdzNUVVRBSGJhKzFhYnRIWmZ0QVFBClk4UlQvWnVDaGNwU2hmakZ5Z1VD - a3ducGF3TGYveVRRemNLVjJUSEloeG8KLS0tIER3SjdVM0VXa1dZWXZDbHJhcXds - RG8ra2N1Zi85bmFicWc4TEZTMWhyencK1KSsV9krcR/n2R/px3pfBoRxK0Oh7QaS - 10qkaQhFZroRUGELQE5yXe+Cx1Bp9xIPRlyxx4r3ssdIZQTo/glGlg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMR05TN2EvMkE1TVJlMElz + T1paK1BMaHBCZ2FVZy9SUG56SEpreGRGSUVNCmMzVk10ME0rTkFlNmtLQXhXUGVH + Y05wRU5uVEZmc1E0ME1YZmhOWGpzOEEKLS0tIG1JNS9JeG44NFlQcXEwZDZQV0tU + cXhSelVXb25iYXBTUUFsZFBGZmlsNGMKT80LuwIxALeoOqtHAl+kv9TZ4kAs5eMm + NYTECGzWkx84OvAcyyT+zC0jKNnGet7CRWWiI83Px3dhY8BOMX+xSA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-08-26T19:27:49Z" - mac: ENC[AES256_GCM,data:jEBRsqcyvTCRD3tP2LIP6ZQkNXRES6XG56kv2ZabB4oVfaTgMgBOFgSV8O/Mp80+aJ0i0BrRcHxe8M267bVgs+bqF9Uz3ehxkjkhTXbsl0N7UjpZwSeyGJ75mNSRI4MBc0R1cFdpe3oZZybLBdGgcDAWaFQdvAoE6zxfvlXkCKg=,iv:U2zdDjY32bsf9B/W9Jxkwpa34j76Di8nchTAxwW6lTc=,tag:RzN+qihPuGnGeVluAlpdhw==,type:str] + lastmodified: "2025-08-30T13:33:02Z" + mac: ENC[AES256_GCM,data:QoBQr1BKr3LU4wgZkEof/Og+Bemq/C1Q5T+wTSDwBVluH7xBdU7jsNF22MNALJstBmdahSMKHY5foc3E94ErYII2VW/ZQzXpBh0LfYLCIXi9zEcp0ZJKtF+ToWiech/ri+vDGjWraY8z2+7rBfp2EBzDb+nDh2OksVYmEHI3luw=,iv:IWuqmUjrBN0ehWY6ZhMAt9XFLhYiGSqeNHxrrlEfhuc=,tag:meSqkvsdIMFThQOhR9GaUw==,type:str] unencrypted_regex: ^(apiVersion|metadata|kind|type)$ version: 3.10.2