Merge branch 'main' of ssh://git-ssh.martyn.berlin:2222/martyn/infra4talos

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>

apps-kustomized/blog/mysql.yaml

@@ -0,0 +1,10 @@
+apiVersion: mysql.oracle.com/v2
+kind: InnoDBCluster
+metadata:
+  name: writefreelydb
+spec:
+  secretName: blogdbrootpass
+  tlsUseSelfSigned: true
+  instances: 1
+  router:
+    instances: 0

apps-kustomized/clusterissuer/clusterissuer.yaml

@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    email: m@rtyn.berlin
+    preferredChain: ""
+    privateKeySecretRef:
+      name: example-issuer-account-key
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+    - http01:
+        ingress:
+          class: nginx

everything-app/mysql4blog.yaml

@@ -0,0 +1,30 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: mysql4blog
+  namespace: argocd
+spec:
+  destination:
+    namespace: blog
+    server: https://kubernetes.default.svc
+  project: apps
+  source:
+    chart: mariadb
+    helm:
+      parameters:
+      - name: auth.database
+        value: writefreely
+      - name: auth.forcePassword
+        value: "true"
+      - name: auth.username
+        value: writefreely
+      - name: auth.existingSecret
+        value: db-creds
+      - name: primary.service.type
+        value: ClusterIP
+    repoURL: https://charts.bitnami.com/bitnami
+    targetRevision: 14.1.4
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

everything-app/mysql4nextcloud.yaml

@@ -0,0 +1,30 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: mysql4nextcloud
+  namespace: argocd
+spec:
+  destination:
+    namespace: nextcloud
+    server: https://kubernetes.default.svc
+  project: apps
+  source:
+    chart: mariadb
+    helm:
+      parameters:
+      - name: auth.database
+        value: nextcloud
+      - name: auth.forcePassword
+        value: "true"
+      - name: auth.username
+        value: nextcloud
+      - name: auth.existingSecret
+        value: db-creds
+      - name: primary.service.type
+        value: ClusterIP
+    repoURL: https://charts.bitnami.com/bitnami
+    targetRevision: 14.1.4
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

everything-app/paperless-ngx.yaml

@@ -0,0 +1,61 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: paperless-ngx
+  namespace: argocd
+spec:
+  destination:
+    namespace: paperless-ngx
+    server: https://kubernetes.default.svc
+  project: apps
+  source:
+    chart: paperless-ngx
+    helm:
+      parameters:
+      - name: service.main.type
+        value: "LoadBalancer"
+      - name: persistence.data.enabled
+        value: "true"
+      - name: persistence.data.size
+        value: "1Gi"
+      - name: persistence.data.accessMode
+        value: ReadWriteOnce
+      - name: persistence.data.storageClass
+        value: "rook-ceph-block-ssd"
+      - name: persistence.media.enabled
+        value: "true"
+      - name: persistence.media.size
+        value: "8Gi"
+      - name: persistence.media.accessMode
+        value: ReadWriteOnce
+      - name: persistence.media.storageClass
+        value: "rook-ceph-block-ssd"
+      - name: persistence.export.enabled
+        value: "true"
+      - name: persistence.export.size
+        value: "1Gi"
+      - name: persistence.export.accessMode
+        value: ReadWriteOnce
+      - name: persistence.export.storageClass
+        value: "rook-ceph-block-ssd"
+      - name: persistence.consume.enabled
+        value: "true"
+      - name: persistence.consume.size
+        value: "4Gi"
+      - name: persistence.consume.accessMode
+        value: ReadWriteOnce
+      - name: persistence.consume.storageClass
+        value: "rook-ceph-block-ssd"
+      - name: postgresql.enabled
+        value: "true"
+      - name: postgresql.primary.persistence.enabled
+        value: "true"
+      - name: postgresql.primary.persistence.storageClass
+        value: "rook-ceph-block-ssd"
+      - name: env.TZ
+        value: "Europe/Berlin"
+    repoURL: https://charts.gabe565.com
+    targetRevision: 0.7.8
+  syncPolicy:
+    automated:
+      selfHeal: true