mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Ruben Hensen
e23779044f
Add ntfy at ntfy2.rubenhensen.nl on the home cluster, pointed straight at the home IP like s2. s2 now alerts on mail and on s1 through it. The home services are left to s1, which sees them from outside. ntfy denies everything except the provisioned user. The user, its password hash and the Gatus token come from Vault kv/ntfy.
22 lines
455 B
YAML
22 lines
455 B
YAML
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: ntfy-auth
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: ntfy-auth
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: NTFY_AUTH_USERS
|
|
remoteRef:
|
|
key: kv/ntfy
|
|
property: auth_users
|
|
- secretKey: NTFY_AUTH_TOKENS
|
|
remoteRef:
|
|
key: kv/ntfy
|
|
property: auth_tokens
|