From e8e6b7084ff8ff1815b97a69ee41338a8b5dfeea Mon Sep 17 00:00:00 2001
From: Peter Kurfer <peter@icb4dc0.de>
Date: Wed, 17 Apr 2024 22:13:59 +0200
Subject: [PATCH] chore: migrate linkwarden to git-age

---
 linkwarden/.gitattributes          |   1 +
 linkwarden/config/linkwarden.env   | Bin 0 -> 847 bytes
 linkwarden/config/secrets.enc.yaml |  48 -----------------------------
 linkwarden/kustomization.yaml      |   6 ++--
 linkwarden/secret-generator.yaml   |  10 ------
 5 files changed, 5 insertions(+), 60 deletions(-)
 create mode 100644 linkwarden/.gitattributes
 create mode 100644 linkwarden/config/linkwarden.env
 delete mode 100644 linkwarden/config/secrets.enc.yaml
 delete mode 100644 linkwarden/secret-generator.yaml

diff --git a/linkwarden/.gitattributes b/linkwarden/.gitattributes
new file mode 100644
index 0000000..6c2aef3
--- /dev/null
+++ b/linkwarden/.gitattributes
@@ -0,0 +1 @@
+**/*.env filter=age diff=age merge=age -text
diff --git a/linkwarden/config/linkwarden.env b/linkwarden/config/linkwarden.env
new file mode 100644
index 0000000000000000000000000000000000000000..1821cd5494bdea60efcfff6c7b3ceb1c0a6c2df6
GIT binary patch
literal 847
zcmV-V1F-yIXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$STZ#=F*zVsXm?>XZ&_$Jcz8j1
za$<K^cS%YzcX~H<ct}z(FK#wcSxGT!GFeY{LqQ5oOf^tQazQgRFhqE0Nos9IPC`~e
zI81U`aB@O*H(EhOLs(K}aztS^a6t+!EiE8oOLs+bPef!lIBaKObarnzP%lC@L2`36
zVsBMTO=VbAV^vm1Z){akD|ZUY|LgpohlXY%D{a{G@Ya8|fuWkFx&$h)h0(`Ekp4#*
zRUQX)?2#+g!=B*pTM7Pz9KC9xscH8HHbzQ5benb%4c<|1IpU-2>z4YQqd2Q&Ev;UH
zLd3y8T~)qLcQh;#7bE`&oX@uils(UAM1U&F%sGiSs;C{shw9J|;AV6cn5>6oEP`la
zV)a^OW*iMWz3F3m!O>wfIMztN1Agl5zqAw+?&G4#G3U`O@^KarxmD#|zBx?>t=U^8
zFpmIlPAz{xW$8ZEqq(Bn&bd;+WCTX;L~V9s-)gxhWcR<q$%))E&ODT*y9b@(3+P;*
zEgfr!j@*7YHLC3~?~$@D$}}?=Hc6~_e&IQ`Te7A#F3lL}hi0gXA)<hOd)7knP-69m
zK$hC2m?)4av=$*A`Jrv)r~IVk{_akpAB?)5ROzm{`4CQNN^%8tzd}y*Askp)w2uM{
zf6u|?lYxdDa(Nhe);H(h5@vy@F5*b2Gi{~s`1Z=pb<Jzj;LA?ay=-n#x%|lz7HQ0h
z?Lv3SbG|N65u#>0QfpR^7O8GwAxm2g@-@i!GL&B$g<7_2y$H5<SKS9sp51u@awiS|
z<N(wtoXx1}9Sr;vtsJM-SbrsgorSLpfaEg`brM$#Iz>ln-|PJm8zmf$)cjktlU={!
zjip}V#i<}JrCo|iDj5f^L3=HXD$-T927*Y%Wo|XI&CF-GW-hhjG@?6RIql|{;HgpE
ztK{#rl!mqVq;^l3yg|0;(NG9^eDv3130=2a`>4Pl!O>u(`v%Q1yOIn;P?RzDqLZD+
zwvuE+JqCk*Jiw{H=00!C&Ibc>^GUbJbH<qbTX``rF}Fl&!hSx1=wD^a-{guU63vfj
ZgnZOwTQ?6SdSM3S`&J+0m4rHVo>*DMi%<Xn

literal 0
HcmV?d00001

diff --git a/linkwarden/config/secrets.enc.yaml b/linkwarden/config/secrets.enc.yaml
deleted file mode 100644
index 8fe47a9..0000000
--- a/linkwarden/config/secrets.enc.yaml
+++ /dev/null
@@ -1,48 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: linkwarden-config
-type: Opaque
-stringData:
-    NEXTAUTH_SECRET: ENC[AES256_GCM,data:qljN/QafFYQwk9tZzfUom864wmLBkOA6sZLezygCqpmTPxo6T7VWP2Z6hoI=,iv:HZHCtzraMHTaTjlTRdSs0T6gaREUVWwg4tst7lGgWjs=,tag:g4WXVJ4zcoH8HcPBprkiiA==,type:str]
-    NEXTAUTH_URL: ENC[AES256_GCM,data:WqEQhQHOgitq66YKbF0SV4iox3rb0713TATzZE+iNxEccm27,iv:urUC/cmks3renR3kkGpw8hHYwVrwz5JXf7QXXQq2ElA=,tag:Vucguui87xJWGCT+M1SaZw==,type:str]
-    NEXT_PUBLIC_DISABLE_REGISTRATION: ENC[AES256_GCM,data:r7mA+g==,iv:hTpGulLYK10DoCAYc3Hp6BlKQBeKHkV3A6BUJku9ZjQ=,tag:5gpMkBYkySIO8RGG4dzaew==,type:str]
-    SPACES_KEY: ENC[AES256_GCM,data:BF1RGNTId/gzEATiHqI4DwAeSSz0QBk1MVtQCs91K84=,iv:4jKC+G/c8MZ/kNyt9n6Hn7YvSYNWegTEzcQ9Z63i6U4=,tag:05l1AVPhFN4H53b5/FM4fw==,type:str]
-    SPACES_SECRET: ENC[AES256_GCM,data:UwWvKzmHsLE4y1+yeZEjP+swVO5+Ss/Dj8YJz/V1xq9sbvI4dyswuUeOJ6xzl4fbPUYW4gMCELhLBYz4s6eOZw==,iv:fvt2J66VPFMY4bLn+18rpxOPFRJi2ynikfQGNSn0PoY=,tag:F4XGCCJq+1uvl1LdBBES1A==,type:str]
-    SPACES_ENDPOINT: ENC[AES256_GCM,data:9V9UgB1YgSqyXQO6VogyDHTRpS++OmDvWdGYEoaAoSHrBMhrDq2YW7mCLSNA8HOpFCLWN5AF9FqbsjA/dB/7Gio=,iv:S3Js7k/hoLJeDIbZWPdPlupdNKaupAaqFoWWiFgHs7Q=,tag:5deMT1/t78VOduFs5pTuxA==,type:str]
-    SPACES_BUCKET_NAME: ENC[AES256_GCM,data:/T9L2eHlrpX74w==,iv:pGzRxFLGYOEf8LeuzOrc7GVTHQ9lbp4YjFWSS03OQNM=,tag:S6iWpQANHebGAK+7lhAqwg==,type:str]
-    SPACES_REGION: ENC[AES256_GCM,data:kP0CGw==,iv:bniAW1+xg7y1qnSqh9qAUM1LG1geVs7AIvbqn+fH/CU=,tag:GyWNCgK8PSJWnUOfDg3X+w==,type:str]
-    SPACES_FORCE_PATH_STYLE: ENC[AES256_GCM,data:JSXD7Q==,iv:JMbqKZO4SdYBglZySpDY56vTiCKDCeBlRjKD4uwFQOg=,tag:6gsT1+BWbGA1Ce05iaK/1Q==,type:str]
-    NEXT_PUBLIC_KEYCLOAK_ENABLED: ENC[AES256_GCM,data:5ePOxQ==,iv:B3Xv/z0Bcv4u2nzNQSHFZGQeuAw6kkZIi4V2gkkGesk=,tag:ZLzKaf55W1DXzXhQ0NRPWQ==,type:str]
-    KEYCLOAK_ISSUER: ENC[AES256_GCM,data:I710NmdNMWyheJD5i+zXgV8I3LCa9dc=,iv:17dX+n20fkq+m98i47WeKeJ+f5l+rg9oq08/Ki8hmg8=,tag:5HdizFf2WM2X9X/rMsZH9Q==,type:str]
-    KEYCLOAK_CLIENT_ID: ENC[AES256_GCM,data:aUrLGjG5Pt6yAdI1sGMS7qmDg70oiUMciLAwfpNsyscMv9nk,iv:29JZfzF8sPmIvyWPw+VjzgTRJr+aSjDN6IGZmt7JFYM=,tag:pX6w2++QHwED/46njtM/Qg==,type:str]
-    KEYCLOAK_CLIENT_SECRET: ENC[AES256_GCM,data:yrz8bwNmEvjl0zeul2EfcyBrvp1VhDJYIVA/2ttIvEVuvB9M0XzOAtV/KHxZXv544mQ+/HsORMY=,iv:GL0vMgvm5zIfV4+zWUmAnTv7FTJvF0jQzfoxqFMB0ho=,tag:jzwQYN2sB6EoS/owF0wNMg==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age18e0w4jn03n66qwg8h3rjstz7g5zx2vhvz28aterkfkfetrxtpuysftp6we
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkb2dXQkVHOW9aVGozUkVG
-            QTkyWVBkQ1F4MVVmN0Z2ZGhUVi9oR1puYWpZCm5xcXM1VU9pOE5iR1VUQmZOQlBq
-            V2N0ZG5mWGJMTW43V3ZDWUJhQ2RwVUkKLS0tIDYvSkpQQnkyb2ZvOGwxcXM3ZUVh
-            NnkwcUJna1FSTXpMY1RxS05TV2lCWEUK63y4d4TS0JWdNPy2DCFsrnPVoWF3HaF2
-            hMFBIt7bKNrEMChwJ0IWCtCS4EoatYKrFSwuIQHBGPiDgQuHij90Rg==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1yssdnqk90tn6zzggmwt70krndw04yfk9hwzdac3wsgfxmttngd7q89qzjr
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZQUZFaXFCbFVoVEVNS3hP
-            bmt0YXJhbk9BUDdkT1M1N0h0UXZ3V0dCOEVjCkQ5Wmt6VjMwNTZmUGk2Z0srU2lo
-            OU8waDhDMHE3SDRaOUNxc2pZallnd0UKLS0tIHNkOEhudkR4SmVhRGd1VStQLzBZ
-            aVVYZ3JDSDhKdFZZZXdycnUyTml0VXcKTg087ZASI5RraNAD8rnHa5OUaYEdRte/
-            OyVbfwvYm79jQipgTwoctCmVuL8lMjnoKuDZnMT6UEgV6ziHKrqIZw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-12-21T12:25:42Z"
-    mac: ENC[AES256_GCM,data:U2rRu3TPyXjt2YnR7cQrsRYvWS41zgDonqglfJPnnrSegoe/JmNn2jIU6iljJEruGmhxNGxh1KE8KHn2mJ2M6GWJ0TMW6JBiQ0Yl6UXBYAnMrw5FYfIThtB8gxvEUtoQ8fES9jCyqneHE5DWe0kbdMqaU9uf/G4nwUMAyWdVAdA=,iv:AejpeLY6pooJ4MOIbXjSAr9d6JjFx7FTkygs8Jy91Ug=,tag:7/RNNFY5ZhkxJ88bL4v55Q==,type:str]
-    pgp: []
-    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
-    version: 3.8.1
diff --git a/linkwarden/kustomization.yaml b/linkwarden/kustomization.yaml
index 007f963..373bb50 100644
--- a/linkwarden/kustomization.yaml
+++ b/linkwarden/kustomization.yaml
@@ -19,5 +19,7 @@ resources:
   - "resources/service.yaml"
   - "resources/http_routes.yaml"
 
-generators:
-  - ./secret-generator.yaml
\ No newline at end of file
+secretGenerator:
+  - name: linkwarden-config
+    envs:
+      - "config/linkwarden.env"
\ No newline at end of file
diff --git a/linkwarden/secret-generator.yaml b/linkwarden/secret-generator.yaml
deleted file mode 100644
index cdfd1ab..0000000
--- a/linkwarden/secret-generator.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: viaduct.ai/v1
-kind: ksops
-metadata:
-  name: linkwarden-secret-generator
-  annotations:
-    config.kubernetes.io/function: |
-        exec:
-          path: ksops
-files:
-  - ./config/secrets.enc.yaml
\ No newline at end of file