diff --git a/clusters/main/kubernetes/apps/vaultwarden/app/helm-release.yaml b/clusters/main/kubernetes/apps/vaultwarden/app/helm-release.yaml deleted file mode 100644 index 294ce5b5b31..00000000000 --- a/clusters/main/kubernetes/apps/vaultwarden/app/helm-release.yaml +++ /dev/null @@ -1,171 +0,0 @@ ---- -# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2.json -apiVersion: helm.toolkit.fluxcd.io/v2 -kind: HelmRelease -metadata: - name: vaultwarden - namespace: vaultwarden -spec: - interval: 10m - chart: - spec: - chart: vaultwarden - version: 28.8.1 - sourceRef: - kind: HelmRepository - name: truecharts - namespace: flux-system - interval: 15m - timeout: 20m - maxHistory: 3 - install: - createNamespace: true - remediation: - retries: 3 - upgrade: - cleanupOnFail: true - remediation: - retries: 3 - uninstall: - keepHistory: false - values: - credentials: - s3: - type: s3 - url: "${S3URL}" - bucket: "${S3PREFIX_TC}-vaultwarden" - accessKey: "${S3ID_TC}" - secretKey: "${S3KEY_TC}" - encrKey: "${S3KEY_TC}" - workload: - main: - replicas: 2 - vaultwarden: - allowSignups: true - signupDomains: - - truecharts.org - - kjeldschouten.nl - verifySignup: true - requireEmail: true - allowInvitation: true - defaultInviteName: "TrueCharts" - showPasswordHint: true - enableWebVault: true - # Restrict creation of orgs. Options are: 'all', 'none' or a comma-separated list of users. - orgCreationUsers: all - ## Limit attachment disk usage per organization. - # attachmentLimitOrg: - ## Limit attachment disk usage per user. - # attachmentLimitUser: - ## HaveIBeenPwned API Key. Can be purchased at https://haveibeenpwned.com/API/Key. - # hibpApiKey: - - admin: - enabled: true - disableAdminToken: false - token: ${VWADMIN} - smtp: - enabled: true - host: "${SMTP}" - from: "noreply@truecharts.org" - fromName: "TrueCharts Vaultwarden" - security: starttls - port: 587 - # authMechanism: Plain - # heloName: "" - user: "${ICLOGIN}" - password: "${ICPASS}" - yubico: - enabled: false - ## Yubico server. Defaults to YubiCloud. - # server: - ## Yubico ID and Secret Key. - # clientId: - # secretKey: - push: - enabled: true - installationId: ${BWPUSHID} - installationKey: ${BWPUSHKEY} - log: - # Log level. Options are "trace", "debug", "info", "warn", "error" or "off". - level: "trace" - icons: - cache: 0 - - persistence: - data: - accessModes: - - ReadWriteMany - storageClass: ceph-filesystem - volsync: - - name: b2 - type: restic - credentials: s3 - dest: - volumeSnapshotClassName: csi-ceph-filesystem - storageClassName: ceph-filesystem - enabled: true - src: - volumeSnapshotClassName: csi-ceph-filesystem - storageClassName: ceph-filesystem - enabled: true - - ingress: - main: - enabled: true - integrations: - certManager: - enabled: true - certificateIssuer: domain-1-le-prod - traefik: - enabled: true - middlewares: - - name: bouncer - namespace: traefik - hosts: - - host: vaultwarden.${DOMAIN_1} - paths: - - path: / - pathType: Prefix - admin: - enabled: true - primary: false - targetSelector: - main: main - hosts: - - host: vaultwarden.${DOMAIN_1} - paths: - - path: /admin - pathType: Prefix - integrations: - certManager: - enabled: true - certificateIssuer: tc-le-prod - traefik: - enabled: true - middlewares: - - name: local - namespace: traefik - - name: bouncer - namespace: traefik - - name: auth - namespace: traefik - entrypoints: - - websecure - enableFixedMiddlewares: true - forceTLS: true - allowCors: false - fixedMiddlewares: - - name: chain-basic - namespace: "" - - - cnpg: - main: - # mode: recovery - backups: - enabled: true - credentials: s3 - recovery: - method: object_store - credentials: s3 diff --git a/clusters/main/kubernetes/apps/vaultwarden/app/kustomization.yaml b/clusters/main/kubernetes/apps/vaultwarden/app/kustomization.yaml deleted file mode 100644 index 1b2b2dc29f5..00000000000 --- a/clusters/main/kubernetes/apps/vaultwarden/app/kustomization.yaml +++ /dev/null @@ -1,6 +0,0 @@ ---- -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: - - namespace.yaml - - helm-release.yaml diff --git a/clusters/main/kubernetes/apps/vaultwarden/app/namespace.yaml b/clusters/main/kubernetes/apps/vaultwarden/app/namespace.yaml deleted file mode 100644 index fb678cf2279..00000000000 --- a/clusters/main/kubernetes/apps/vaultwarden/app/namespace.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: vaultwarden - labels: - pod-security.kubernetes.io/enforce: privileged diff --git a/clusters/main/kubernetes/apps/vaultwarden/ks.yaml b/clusters/main/kubernetes/apps/vaultwarden/ks.yaml deleted file mode 100644 index 69fcbdfe4dd..00000000000 --- a/clusters/main/kubernetes/apps/vaultwarden/ks.yaml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: kustomize.toolkit.fluxcd.io/v1 -kind: Kustomization -metadata: - name: vaultwarden - namespace: flux-system -spec: - interval: 10m - path: clusters/main/kubernetes/apps/vaultwarden/app - prune: true - sourceRef: - kind: GitRepository - name: truecharts