Delete clusters/main/kubernetes/apps/vaultwarden directory

Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
2025-01-31 18:40:37 +01:00
parent ed982a4167
commit 78db43cad5
4 changed files with 0 additions and 195 deletions
@@ -1,171 +0,0 @@
---
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2.json
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: vaultwarden
-  namespace: vaultwarden
-spec:
-  interval: 10m
-  chart:
-    spec:
-      chart: vaultwarden
-      version: 28.8.1
-      sourceRef:
-        kind: HelmRepository
-        name: truecharts
-        namespace: flux-system
-      interval: 15m
-  timeout: 20m
-  maxHistory: 3
-  install:
-    createNamespace: true
-    remediation:
-      retries: 3
-  upgrade:
-    cleanupOnFail: true
-    remediation:
-      retries: 3
-  uninstall:
-    keepHistory: false
-  values:
-    credentials:
-      s3:
-        type: s3
-        url: "${S3URL}"
-        bucket: "${S3PREFIX_TC}-vaultwarden"
-        accessKey: "${S3ID_TC}"
-        secretKey: "${S3KEY_TC}"
-        encrKey: "${S3KEY_TC}"
-    workload:
-      main:
-        replicas: 2
-    vaultwarden:
-      allowSignups: true
-      signupDomains:
-        - truecharts.org
-        - kjeldschouten.nl
-      verifySignup: true
-      requireEmail: true
-      allowInvitation: true
-      defaultInviteName: "TrueCharts"
-      showPasswordHint: true
-      enableWebVault: true
-      # Restrict creation of orgs. Options are: 'all', 'none' or a comma-separated list of users.
-      orgCreationUsers: all
-      ## Limit attachment disk usage per organization.
-      # attachmentLimitOrg:
-      ## Limit attachment disk usage per user.
-      # attachmentLimitUser:
-      ## HaveIBeenPwned API Key. Can be purchased at https://haveibeenpwned.com/API/Key.
-       # hibpApiKey:
-
-      admin:
-        enabled: true
-        disableAdminToken: false
-        token: ${VWADMIN}
-      smtp:
-        enabled: true
-        host: "${SMTP}"
-        from: "noreply@truecharts.org"
-        fromName: "TrueCharts Vaultwarden"
-        security: starttls
-        port: 587
-        # authMechanism: Plain
-        # heloName: ""
-        user: "${ICLOGIN}"
-        password: "${ICPASS}"
-      yubico:
-        enabled: false
-        ## Yubico server. Defaults to YubiCloud.
-        # server:
-        ## Yubico ID and Secret Key.
-        # clientId:
-        # secretKey:
-      push:
-        enabled: true
-        installationId: ${BWPUSHID}
-        installationKey: ${BWPUSHKEY}
-      log:
-        # Log level. Options are "trace", "debug", "info", "warn", "error" or "off".
-        level: "trace"
-      icons:
-        cache: 0
-
-    persistence:
-      data:
-        accessModes:
-          - ReadWriteMany
-        storageClass: ceph-filesystem
-        volsync:
-          - name: b2
-            type: restic
-            credentials: s3
-            dest:
-              volumeSnapshotClassName: csi-ceph-filesystem
-              storageClassName: ceph-filesystem
-              enabled: true
-            src:
-              volumeSnapshotClassName: csi-ceph-filesystem
-              storageClassName: ceph-filesystem
-              enabled: true
-
-    ingress:
-      main:
-        enabled: true
-        integrations:
-          certManager:
-            enabled: true
-            certificateIssuer: domain-1-le-prod
-          traefik:
-            enabled: true
-            middlewares:
-              - name: bouncer
-                namespace: traefik
-        hosts:
-          - host: vaultwarden.${DOMAIN_1}
-            paths:
-              - path: /
-                pathType: Prefix
-      admin:
-        enabled: true
-        primary: false
-        targetSelector:
-          main: main
-        hosts:
-          -  host: vaultwarden.${DOMAIN_1}
-             paths:
-               - path: /admin
-                 pathType: Prefix
-        integrations:
-          certManager:
-            enabled: true
-            certificateIssuer: tc-le-prod
-          traefik:
-            enabled: true
-            middlewares:
-              - name: local
-                namespace: traefik
-              - name: bouncer
-                namespace: traefik
-              - name: auth
-                namespace: traefik
-            entrypoints:
-              - websecure
-            enableFixedMiddlewares: true
-            forceTLS: true
-            allowCors: false
-            fixedMiddlewares:
-              - name: chain-basic
-                namespace: ""
-
-
-    cnpg:
-      main:
-        # mode: recovery
-        backups:
-          enabled: true
-          credentials: s3
-        recovery:
-          method: object_store
-          credentials: s3
@@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - namespace.yaml
-  - helm-release.yaml
@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-    name: vaultwarden
-    labels:
-        pod-security.kubernetes.io/enforce: privileged
@@ -1,12 +0,0 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: vaultwarden
-  namespace: flux-system
-spec:
-  interval: 10m
-  path: clusters/main/kubernetes/apps/vaultwarden/app
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: truecharts