Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

2025-06-29 22:34:46 +01:00
parent 71bd447b78
commit c130157f2f
72 changed files with 18264 additions and 13543 deletions
@@ -4,48 +4,48 @@ metadata:
    name: postgres
    namespace: home-stuff
 spec:
-    replicas: ENC[AES256_GCM,data:LQ==,iv:9qOgWRQsK+KTzmIJU5Mo1tvlM5e3zRVAfU8TBDMs49U=,tag:tb6NoSJ7heL/8+J71MsyjA==,type:int]
+    replicas: ENC[AES256_GCM,data:Tg==,iv:4wZpaK54RFm2E4Wayyps9AMy4o49RJJJNonrMAUcBr0=,tag:nGvDt2bw1w3YpJpP0rV4VA==,type:int]
    selector:
        matchLabels:
-            app: ENC[AES256_GCM,data:Kpv9N07jWkM=,iv:tNtbYDGbsNdJZrl3g9yD6MPtEUJrhY4tUhUOJ3J0wcE=,tag:myM20b4bAZJXy0slrPb0KA==,type:str]
+            app: ENC[AES256_GCM,data:Gv9OWfOC2oc=,iv:v7J7t5uGuu2zen+72piwSldN7Qr22uMMHWlt/7ib7O0=,tag:o4SBCMbU2TgDFqHNwvh87g==,type:str]
    template:
        metadata:
            labels:
                app: postgres
        spec:
            containers:
-                - name: ENC[AES256_GCM,data:Tbe0MrbBw84=,iv:FOWsJ6Frek1WUPCfhrqb+Q8BJwuu9WQQwUCA/XDvWEM=,tag:4nHOrKjd4nyLkIOW1ABS0Q==,type:str]
-                  image: ENC[AES256_GCM,data:iqmz/jPThYGIejc=,iv:VNpPfL1t4YE1hmwDv/5OEesC03WIUE4a49qbCSTOtsM=,tag:u/tWrb7gC2lL9qTsKYGJgg==,type:str]
-                  imagePullPolicy: ENC[AES256_GCM,data:1p9BLOeaRAx+QJNu,iv:zwVcCf8NMmH6LryBOcTfxQNHJPO67ZIetaxPxe00HOk=,tag:qe4hr5bbSB3N1kVzv1PF3g==,type:str]
+                - name: ENC[AES256_GCM,data:sUsf8ALtJN4=,iv:SKlh0jbstgbqn/XGWXP+pSmKaExfv2gUrL9BsRkK/dY=,tag:jNRQrYrAGhqFy2fpm/tcvw==,type:str]
+                  image: ENC[AES256_GCM,data:5ytgh6SUwlYT3n4=,iv:QuKQFhZTCgzcFYJG9p9Sa15R18AzRAwvJmkGwifzgZM=,tag:n0+A9fDt+PYeGXwbSzreQw==,type:str]
+                  imagePullPolicy: ENC[AES256_GCM,data:DjsDHOCNGxxQSS1v,iv:vSRckXOuNvhj9Q1Jzx+OkqIZcZzNVE/lNZg0Hp4xKOc=,tag:PEI85MvCL4SBaKmFR4LKyQ==,type:str]
                  ports:
-                    - containerPort: ENC[AES256_GCM,data:9pAlPA==,iv:1Alm6la0BBZHeNBQfZ9YKYmLhuRlgIDQt0NhNS+RVD4=,tag:/Zvbels9KwpnN1TsbRnHDA==,type:int]
+                    - containerPort: ENC[AES256_GCM,data:Tf0jSg==,iv:n7DukwHYcdrWEqAojLBbNR8lK2RMy+7szFkTD6ZcGiA=,tag:0eQ5joGTktPBqedF8Y3RIw==,type:int]
                  securityContext:
-                    runAsUser: ENC[AES256_GCM,data:aMqjpw==,iv:HaqHgeu1n2lgAjcSearN9Qd72krb11eMrtgtc2H2e8U=,tag:n13Rh6Y5Z4gFrqcFwSnX0w==,type:int]
-                    runAsGroup: ENC[AES256_GCM,data:kmcutQ==,iv:vVSdBzC90j2ol8sWRqgQTij3+EZkrzyZxyDCWap8gfo=,tag:DinCLnTahRn5Q4YH0MQlxw==,type:int]
+                    runAsUser: ENC[AES256_GCM,data:ttUeXg==,iv:LsN2MYXsCr/TGOtbsfLWHOtlefX6C//ZJJ2IXJdY0TA=,tag:DrYWfP/xd9/reGVevCjWjg==,type:int]
+                    runAsGroup: ENC[AES256_GCM,data:aU8Wgg==,iv:Kj7qx8L9mjWltXpvGDVbOCg0RfJimTD2RKU3QGLKhRg=,tag:9brz2oLLSi/iPGdCFIWaVw==,type:int]
                  env:
-                    - name: ENC[AES256_GCM,data:/k7AAaGIbjOWl4Q=,iv:XqI9RMp1Z1Y+NRo0YTGoBa8jV9/IOVtEckmz0Pz4Zps=,tag:zrRNTclQx6ib3avoBBszlw==,type:str]
+                    - name: ENC[AES256_GCM,data:mnR3vIVULpeOpj0=,iv:njB07SiFmHd8CO70npjGVu94BXVhgpl8dgM5CIDOrrc=,tag:786X2633tmILLfa5tuCgGw==,type:str]
                      valueFrom:
                        secretKeyRef:
-                            name: ENC[AES256_GCM,data:ygKvxib8xICWRG/enUeIhg==,iv:iIOwZUaNnpZGaeuy94YowvcxdbBoC6CWABMLkqVPbmo=,tag:NoHN8Ucq9Y72wf9q7pp0zQ==,type:str]
-                            key: ENC[AES256_GCM,data:IYiIBoZRmKXpFU8=,iv:IuvCTOUEIqd6ou/8ubKdlRDIh5Vo/wHVHETzFTmOu2E=,tag:lZ///+rykG8ey4dP+QM7MQ==,type:str]
-                    - name: ENC[AES256_GCM,data:ce+vATdgFxI1Id7z5g==,iv:mrSeYIT4qU1jDiesZmtei4GBUl9jrcD6fbw2VD/LxlU=,tag:XVmwpoID/0/paGkHjFOmIA==,type:str]
+                            name: ENC[AES256_GCM,data:S7RYy2O/UCWb7MYzaPE04A==,iv:XiAf6wMopKelsSGnq7Mm252YUSkWu86nwmGJwSUZCok=,tag:OiFW91J+clBbLgfvwZvxYg==,type:str]
+                            key: ENC[AES256_GCM,data:YRgE1pXHW5e6nYk=,iv:0QiaLtvOFcke2GXrnEFnMPagF8kNH2OBjJPCcx8aOj8=,tag:DY67Gd4+YbUQwJD2Eds0tQ==,type:str]
+                    - name: ENC[AES256_GCM,data:q9njMiSFM6ihHZke5w==,iv:l5T39EC6lviMaO7vWGAvEhf710O984opE/EmW0YrCVA=,tag:zYdzD8HM+OEHM9GWPU8dcA==,type:str]
                      valueFrom:
                        secretKeyRef:
-                            name: ENC[AES256_GCM,data:p9gTYjmD/HaMAT3QWsAdjw==,iv:bZLHxjFMSUbMy1LPhk6YaDrm7HyPrdlG+WnXm/sD2HA=,tag:fNIlEXxkO3aBbUjrktKWjw==,type:str]
-                            key: ENC[AES256_GCM,data:+Ccgu/ynD3mpKHZOmQ==,iv:X0Sp5whrrWzGbYlmKldHO0c9DScOCMyEZGgDkNwfdSM=,tag:zjbn21XNx3lfq1JpZBlAwQ==,type:str]
-                    - name: ENC[AES256_GCM,data:MEzau9Iy+oncwNXOWRHAmjk=,iv:grTsEn5gIPOUR6MQ2oeu/jZAzIJ1U1Tzcg3p481wLVE=,tag:FdiN1LAZxR4M7shv9Se7Sg==,type:str]
+                            name: ENC[AES256_GCM,data:QwDXG6UiPhCvwMCez4RNRw==,iv:DsL7QifYum32jIh37WyPQCt7LULLkPAMRJyE+CI8pvc=,tag:/96oMZgckbM0PvW2Zh0lxg==,type:str]
+                            key: ENC[AES256_GCM,data:FP76V2wWNQ1lX7Fx1g==,iv:w0sphMeVjDIkWf0PTKGWmrBMF9hJR7cIC8X1njER8SQ=,tag:9Ddr3wnwbMpcSLw2GsHMBA==,type:str]
+                    - name: ENC[AES256_GCM,data:HpiQPvtQSYTLHJZ9Gmsf/fs=,iv:NAvdKtUpKEic6PSQZSw2LOzo/CQBSccVe/wbLuh5siE=,tag:fZFE3QqPk3LftIP+uge1Kg==,type:str]
                      valueFrom:
                        secretKeyRef:
-                            name: ENC[AES256_GCM,data:ycMf7cvMJgsHSmU6FS5T8A==,iv:QdhbnesAsnn7+wbJO8VuNuyZ3uBWpSYtOKk1Oaqo8CM=,tag:KnzIuq6avYZjF9WZnWdzPg==,type:str]
-                            key: ENC[AES256_GCM,data:O/v8awTx5Dy9eFOIENkOHXk=,iv:Z+91RY5pZbPrZSE0OBQY0gdA4wE3DMPO+wStC4VWWK0=,tag:snLXUuwBJO/nR+KHfmE6Ow==,type:str]
+                            name: ENC[AES256_GCM,data:rwFF4VY21+eHmFkbV9nXqQ==,iv:1m8IxQ9ROmAErBabUK+zUeJXTo6iMyMll2s7s5LZw/g=,tag:6C1Nv10c7qjkIM07VU5/nQ==,type:str]
+                            key: ENC[AES256_GCM,data:rOdQMuKeIbKj/A2yKLcP8tk=,iv:uYQrfMt/LHxcLctS5tlFJk3+L2+RO9sAEr3irMknUzc=,tag:/ne6pO36lwIVmGTz3RW5Tg==,type:str]
                  volumeMounts:
-                    - mountPath: ENC[AES256_GCM,data:c7L7ab98h0EonqcLbwqfTOcwVgdHyVVA,iv:OmZRb/74yjINQDml4LjrDW7vDg4XJ3odPK4xFl+iPSg=,tag:0bFqsr0yyWOgwL9zyuR3gw==,type:str]
-                      name: ENC[AES256_GCM,data:IfkTeBWUvbzCPSRNRQ==,iv:hzZ9Dgwn8AR4OT5cnyGCtjKdQFUvDRTPmE7DYpt8SEU=,tag:gO/6OMu0i3a4gV6iimO/Ww==,type:str]
-                      subPath: ENC[AES256_GCM,data:qU5C66+df3I=,iv:w12oFlymXYQ/myn5S1adWhfwgJhKC2RhnUp1SQNqli4=,tag:hih9wc1wS6ouh+DAE24pcg==,type:str]
+                    - mountPath: ENC[AES256_GCM,data:pRg+Z9ODXctP73qyOj+f1cgU8vRV8oxM,iv:sctwjZ6z8RPfBzuUNrf9aUzJT4ni4RMjGS6g4P8qUVU=,tag:PjND6L0L3OlGgHGFUt8aCg==,type:str]
+                      name: ENC[AES256_GCM,data:sHWG7pafRi1i9Hi2JQ==,iv:pc4JU59jbkHvFUByY7BqeKXEBOgF8VBbwWvMWlGAyZI=,tag:SRl2zyCLEVj5fQdsoJKbcg==,type:str]
+                      subPath: ENC[AES256_GCM,data:/wHB5YIVOWc=,iv:ycf/wA1FrWOT4TVxPSapkOxYZ/z37SkJkXrJULVSbqI=,tag:zujolj3II3QvGxRrtAMhUQ==,type:str]
            volumes:
-                - name: ENC[AES256_GCM,data:M9JyG+KwhUU8qWADLA==,iv:5sQdoqCdEiU3dAn/x+Rkbw7F6fGdc3QVoPXefUfXbCQ=,tag:R6GVrx0xy4GNUcWEE3zAsg==,type:str]
+                - name: ENC[AES256_GCM,data:lUSC+LE8ZoBQ9uuHgg==,iv:EOKAHkFUExManDulIjYr8/TjItonkHcd4+PaQILCcco=,tag:Mc3pM1mlA1MzUKHJz4sHhw==,type:str]
                  persistentVolumeClaim:
-                    claimName: ENC[AES256_GCM,data:0DAe87x1A9oMgLYiyEbjTq2nWw==,iv:GNtjFd8b4VzLuxL3MssY0iW9ivqyBVHSNvd8erhK4Wk=,tag:z2IwUEyQjKZeZFAUJjOTGg==,type:str]
+                    claimName: ENC[AES256_GCM,data:KaKpYRzCpmfqN+HMnVpWN2JE2Q==,iv:TBq/X+TEUDI51vAMOqWyAvj24JYeiSwuxb3yYiN32EU=,tag:KAsIGWS/uICaq2Hkb4WHzQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -55,14 +55,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4YnU2WW1LL0ppY2tiWFU3
-            ZEZ5SFVkbUE0WHQ1N3MzVEtaUGdoaWtSclhnCko3eXN5OFgxNytQMlNCR1dwd2x2
-            RVFqSmhEZjdkajdWbkMvQXhsRjRMRFkKLS0tIFN1REgrc1prcnk3YmdUNU5HQlNx
-            VU90c2ptb1o5N0N6cW5OTlk1UTFmdW8K/aikmW5IkjrQQBdWMIruLXRw9qd2LkwZ
-            vTtKz6Oelaf6YPbrhJbnO0fOvhh4V+TghITsYlgVO7GvBXDfOrH+Jw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXdXpCMmI2N2c4Z1h2ankr
+            TnBaUnlpWXdBbThKMXBITHhPQVFWRjUxVTBZCnVBVXZHeXlSdlgwUzFOMklwSFBM
+            ZUtJYTZlYXF1YnZGdWtqM0VwNGRMeFUKLS0tIHJ0OXZ0aDRPWnQ5SWNhbjFxNFln
+            YUE5cktsOEt4MXhpM09kMkF4U2dtbm8KbRa8xF5PbMgz3p8QJMa+lnHQdt6NxDfg
+            fchwm8iYKyZjq+9B9Nbd8ZPbFHtLHdx0uIu4/06t0soNI+g2I9lZ2g==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:12Z"
-    mac: ENC[AES256_GCM,data:mndSYbOx49NHHF8LrImdcwPKPMMdFH9mQGZiAQFzoxB5vgadJSLt1Fvquk6oXbTO46qmKkfydyUzhIC2VjyQYlisarsXiOGZkhS+RjecZyv6jL00/dye1X+NteKaBv9BO02OinhkZCbLcHf4zN7D4NTp1Y1Ena7X/zFyLeR5U7Q=,iv:7fLE1+5zTY8HXJyrdXqLPNBZ6Ot3WKnDxxoYIeZvp8A=,tag:8/fD8D0L+jZ9SPjnlJ+SPQ==,type:str]
+    lastmodified: "2025-06-29T21:31:01Z"
+    mac: ENC[AES256_GCM,data:27f7ETnKIAgGAtrPVdXN5g7T1jbPqxN1pbg6rhb5cPaI6IQBdcGUKh730S4uRaLJ4n1cyesci/+FYRt3wWlX9+aGAc4yGvdTVMzPDAU4G8l0W/iXlSc7kXmBFeoTwWGUXH+KHnN70UnzL9FYEFVDqEPMjv+L0PoLTfv80Qwl2Lg=,iv:tPG7+FpGCVdqteMQxqwJtGxdHaz/4TMbcVTfy4TgCCQ=,tag:5U1FF12uwClR03qOgI7bcg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -6,12 +6,12 @@ metadata:
    labels:
        app: postgres
 spec:
-    storageClassName: ENC[AES256_GCM,data:2Xuy57Z82DgYbw==,iv:KMbvDzN8WIRF5YaKzu6geCNgvv5L3k+XEMC2Y4mKE9E=,tag:Oaa3TkWjD4BlA7ThtGPzmQ==,type:str]
+    storageClassName: ENC[AES256_GCM,data:aj1Z6fzzf7RexQ==,iv:5akYDb/kDcsTHufcEMqNQl71G7/9gDSatVXxMLxD+aQ=,tag:RuOKwpopMg4ugMeN1SDIrw==,type:str]
    accessModes:
-        - ENC[AES256_GCM,data:wLF4v4Yuizz0oeE5Qg==,iv:RR08FTV4qhce5NRfqiImZmaEGtK++Lp87epV+j7Pqgc=,tag:CuSCyJUgPWjW/Q2GZV4Gjw==,type:str]
+        - ENC[AES256_GCM,data:XZVZYEft4V0zh4FwLg==,iv:BE6TVEhvlBYk92Ce7TGI05p7QV+clckojvJv5yjE8Rs=,tag:gxkL3ZLdC4ICR1vxCE618w==,type:str]
    resources:
        requests:
-            storage: ENC[AES256_GCM,data:rYIW6A==,iv:a4dH/HnyHeD3Keg5eoEaJHZPOHwQolkZM6rAu4oeHpE=,tag:EReSmQ9/YclWXNrLgEmGZw==,type:str]
+            storage: ENC[AES256_GCM,data:hZo0AA==,iv:7k7C4GWZZQ1D37WUm4+Y77Y3jn39U9tbWf852ranLRI=,tag:Mj13TyHZYqRi76IB9SPgvw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -21,14 +21,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOSkEwQ3FKOXVIelRZYVdT
-            akZOa2VCcjZDVGtUTlRxRU5aTURJZ3BQcFJFCmJwcVJXN2E2VjhvSU1XWGdlbS8x
-            SVRuVVBzamxsaEJSUHpyQ1ZaZlJSRDAKLS0tIEoyMGJWVWhINzNzdWdXNEpJdlZC
-            RmJGUjIxZGpqMSt2M2dlcURMYnV1TFEKRoNfxC9pP+0YPPlrcCqCwzYf1zWlWc8c
-            YO4Waj1RK3fKTpgnmoMdHlep3E0Sr0PMXZ9bKaZjaXGOxRZyNKH5Tg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3a3VGTnlOcUFYbmZ3RUQ2
+            ZDNFaWlKSmFpNUkweWhmTnc3SVBGWFJ3SzBFCkJoMGlSSCtkemVqbGN4YlZmSzdL
+            QlBlSDV3M2x1TEVJZk14bjR3Z0NrRDQKLS0tIGR2cVZtVnRMR3ZEZFVBZG1kWlBx
+            bDJoSTFYSGd5TEQ0NmIxWDFtVDRJSlEKqLwNXcSvhzo60CuIKHr/cIYbYf3OzBub
+            4KHY6rPv4SNV0zEjiMAcqP7DhvQymBXKSn1tQLNW2IHmJ8MGX+kS6w==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:12Z"
-    mac: ENC[AES256_GCM,data:8tTEex9ocaLujq7S33glOYXJYMdgFPBF8oFp6+lZUUAx4q01EJmOKrhsSUjtHeZElskIPvrl2puCHCoerEhJ/RGsngDkDVRq8X2flfbXum4RVouMX1vxy7I1Ip15PghFuWS3L9Yngezt0gEfHqAb6IJiJMQsXmltulPXoXEEvUY=,iv:fzQXTZybEuby+XKRtVZTajhdSBa/GsCyD/YI6Zqgb/4=,tag:7C2Z1rzBtXx7Xu6UvwWGfg==,type:str]
+    lastmodified: "2025-06-29T21:31:01Z"
+    mac: ENC[AES256_GCM,data:O8Pfx7glWbyQdGCGTqVJOClA1tqvUs0ArXqREc20OivTtEX7pRCdKUvZheLMDCngaxc2HB8n2KIHoJCxeQvzat4kg9M+l+kYYBRzK6DfHwNOmvesajbjQWtvx8pOLuLXgv5mvi7ZgzIQxZ35hbCFY2kcScQcQFNQb9vNK3y5/VI=,iv:qL1ngyp9gwS599tV7MOQ4Sa5gEyp/R53Xs9RXXi+uT0=,tag:qeak9+vVC6miKEhUSnZyag==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -6,9 +6,9 @@ metadata:
    namespace: home-stuff
 spec:
    encryptedData:
-        POSTGRES_DB: ENC[AES256_GCM,data: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,iv:CWpoQcz2TMrKQK1hiMM4w4r1z1qO7m/O3BytUZQG+gg=,tag:AQ4NIhH8sjmv7f2USLUXng==,type:str]
-        POSTGRES_PASSWORD: ENC[AES256_GCM,data:DunPHXIs/H09quZ7BzmlWgokBhYfNEsEvk6cXP/+RMTUW90nVQhQMfZfdTBoBWaQQjb3WH/XJQJW6/jSMXHO7oIHExigic+lko1Gs4fsV5ka7FnbYa8NmK9xG/rBENEtlwFSpvCJ40pb2PlriglSLSBqrlYchDezf0x6MZEax7K31Y2mq1aouJx7AY43fdasqySOgsgqHv4atYa9qXfAnZzwmRbbp1YVDQWrL2DsswNNuKkRzaOptQYCcvk33ammGbM8tDA3pDcSap7Q6K3cU1cRgBod6cdkXXNZOWCnJ79GHgC842JtH/ZgziYkCxjoyUNd6tQK0iNXdrToJi9+yIdVFN9I274pSJVgcijVZem89st8OPicQ/0+cVP8aRDXKaSurjVYYw40n5cD62W+NWKsc5nmOeEz5oZDoNe2YLF7U9ZPtGhnCTCqgO551XcfHtV7/498iQTHNerHzbao67YQ17jZpEmK3BEpK2SnPK3dhSoUcQ1YzOupTh4TTdADrtznKOD+xCvhMhJuHf/p5O+E8PBWiHp9IcCTbhqsmf6q6s4bVUTzGgCgFftFocOJtAgSbyHKiEwXg/f8kb2f4Ut/avNmIRNDBsScUcYOthXeFWvSeQt1ldtQ1vmvFLgiOsHmHKM/fNCo82gYAAiWgCYEVvL4DYR0mQguCEhXZUFqSc/DRnv6JSVDGc3UzeXiTFRj87TmSRtULeLxDVwKy0FwBNbnpclKEoNcuoY+VOeivTRr7yUbofbZSTBx3lSdbCpw321T76+TAbfhjyoThJtY2cS6sp81ZOdHIj1p+a+WjbV7Fjy4w2ta750bbLVsl4uR2H8ykzyj/SEYD4O0u4O4iHZSWDLHc3T4e+c+zbkDZgAKpYsk6eJU0H3WaUYkC75hm0x7RC0HzRHmKpDeR3nL9Yh0NIHrpq/u76enXO/NHK8X2mWRrLyJ+d8SkjY8ioaWyPqH5+Y=,iv:kVGH77HEzPuD67iIhjfuUlP5vl51T2eCVkdaKNG5CIk=,tag:6pZMpfwK22ZyaMwEfla8Ew==,type:str]
-        POSTGRES_USER: ENC[AES256_GCM,data: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,iv:JsaQoSbEBCa3TNWWZ452SwiyVKZBI1oROGgmqNbWlac=,tag:wOa7be5zTevQsSlfwxxBkQ==,type:str]
+        POSTGRES_DB: ENC[AES256_GCM,data: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,iv:j26p5cM4Cc3jf9v0Qy5mmDPuOdw0G1n29Rwc9osSjGc=,tag:guxMOvTh9NC7V4Et4I7HQw==,type:str]
+        POSTGRES_PASSWORD: ENC[AES256_GCM,data:AA30bEvuQT4chTcctKr6vRMbWqSKj0uTkK8HvGnXB/UDgxIedIAEGvtWTJ82bSqBJXW//AW+9hNyHNwEf3wu/QJItuEpmPKMI2aLBF477QVuXX/YJhXQG2pQDLkHfoDWmtd1zDQjskwojkFGNeG5FuFGb8eG/oXmrm3iu0foDW+csjgv36aaBOUEUC6djE6xSZ5sXpGXXiCl8UumddeHU8uocSR1ah3uIt8Syti+UaW+Iv415+vLvOpKYLCOTkdW7YiYYEAVr0QgXWSYSci1u/KJ+MKE5agN1A79ZNXeNckhGgtzspLh0JRW98v7d0QH1KGKE1+KsAOFIqRRu/p5KtG/nSZtGpOOK9dwtU8eYppphCsFRzheRgG8T3bF7vvep3z696xjtQB2rTCd4YmWAqiP2NB82vZbvVJmhHddPfIz/nhAtbCErSaFM0kYXxfA8Sk7bWg5kgLYeVnbYuPXUtt1r9SHGND0YpVrXYmvmJtYVzNCikYWUGURWGgayrUUtr6BUmOxrKpjrUDn3SbO9MZ+jCFHCuBvPpR2MyhOnz/6jx9/IKZm7l0sUa1OmwFk8UMNsLb7SvVDyI3KFJvp17GnLJHnLQeZVoCE3syqrJyZqwQTM45DmLusSmVkHVsckoR3eIhBPH8RbmnyGRgYsjURn4Uo+qWOOfh5sgCwvNA5yU8W/o9r70yLsHvjQigjBmq0nfMXaa/eEROgu7tQiGulSkAyXkZQ7tnjGuPJkC5Jr/7bPNuSp1jm9sOovQK2RYt8gKQH4tMsFq50nF76mIHLi5JjoIfCkV6ShLQ+MeBghXIAPpT/KPSP40aUPVSJX6GIMlgcJKoSwWO71o5W7MwDDCdu0LqB58oAbt838pDBP27M8VtFKCCMFyxoih6tCpKf96CFdGTm6p0BWCotRGcurCo7m1NbBWcMkqAG3tqAgtS7FWZalO8HFesn+YKs0uZH/oElzZU=,iv:UqWBUQ50ip+Hc5izgFzFIV+sqasBKByfzV3Xi2gzokc=,tag:MNxl4QpbSds3QFKp/JgN8w==,type:str]
+        POSTGRES_USER: ENC[AES256_GCM,data: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,iv:ygOKv11kkGYxNbZN0wkNxjxVaPzbPC/WCnKa3bR15js=,tag:7sBaD196PnSI5sYpQJUNfA==,type:str]
    template:
        metadata:
            creationTimestamp: null
@@ -23,14 +23,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1em1XMFJvRUxib2liYWR3
-            SnByVC9rbVAzZ2d0M2dzRVBmRkRDU0Q3ckhnCjl2MmdqalBLWjE5YnZudHJ0b1dt
-            b2JzMXlnKzFCaDVnOEpJSURzTE1IajgKLS0tIG5EVWt3aE9VYnZFRDFvUlBDdTdH
-            Y3d6T2RqSm1NZ1RsUklHcVNVSG04UzQKYu8R9YpfxKB+9/yrp7htuOlDACiRVMaL
-            h6UAHUt5yAMlty1T++Jc44QPN8QVoOU4syQoCFF9PXchEB3lVrNXhA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1bGJFclpXMDljRGp5bjQ2
+            S2x3MFpvMmpCNXBkSTVBNDlBNUIwWVRYMmtBClE4NHhHSUNBNStpMlFGd0VBTjJm
+            dEgzSks0L2NTSXNkNlNUR1VLdGZlREEKLS0tIGxHdXBKa1llYkdSVk44eVdScFQr
+            VTZZS2I5YU85OUhXNGlKbDNUS3kxaVUKkTPFhW7D5Xy+jIsDXaLu4bJGrWBRuhcD
+            5gmrKPcjlz3HVmQvcfcFeiXsZjksEwyscICTbRAoK54XK19L3UbDYQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:12Z"
-    mac: ENC[AES256_GCM,data:Notl142yL3ffUQSvtZz6eGb3MLTvHTEGZwBFCum6FzqRh51/ftE0kbzhPE7pZif5Jl7nM7MgdVAOK5ac0NqAPEzAi56MOnmFng0YJnwqiK3dLRBKjissADCaHQbTgqKvFSsN7k8sX+QCSJAom9R/544ePYG73PzMXpBlUygFhqU=,iv:GH8e6f/owRtqUHi4qL8uQPaCIXwqdS0s6Dz2V3JonzM=,tag:/Ychsj9Ik6NSK5UG64WWzg==,type:str]
+    lastmodified: "2025-06-29T21:31:01Z"
+    mac: ENC[AES256_GCM,data:zB4NsucX+evQb/+jCiole9l+GUKD5Km9gQ/cnnxg9b58+mwcXNIJJMBDMlHdrkLumXJvSVHtN4n5KdvpiFd6vGDvr/K9RSZl6P/wvScA8mgRGca8J093g3RTmKaCymkbcl7up/NfaPcp7zrH3NjChPTSEaJKKyBVsfa27jUhV68=,iv:DoV1Vi1RCy1A8q9aWIJGb2l2SEOFl2EmZVBUTDRP/Fo=,tag:VVdrXtBrLWR4WSA4q/cWag==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -8,9 +8,9 @@ metadata:
 spec:
    type: ClusterIP
    ports:
-        - port: ENC[AES256_GCM,data:yJBtAQ==,iv:TvMxeTtEdhZHoNStuT//gasLLhL2vfR5DIKFbdB8Fcg=,tag:jPDnKcZgEEDLJzhx78oyhg==,type:int]
+        - port: ENC[AES256_GCM,data:6oDuLQ==,iv:b2htEGyj8QwA05gQ9Jwq8FQh/x3oTQNRPzqHfpIVdrs=,tag:yQBp5FHtlunWvMeGFHKjhw==,type:int]
    selector:
-        app: ENC[AES256_GCM,data:0B1Blkug0PI=,iv:FRNeCOychosn9CrUvAOHwXhj07A0J0tySmK5Hre+sm4=,tag:fYZnWDxdcTj+MaKhy1Yg9w==,type:str]
+        app: ENC[AES256_GCM,data:52HhUF42Rcc=,iv:XBq+0JH1X6lffBAT6+Du+3JIvs1UiKZEZx1BwpMgGyI=,tag:J+duxOwTOX1yhtWtFIuaTA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -20,14 +20,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXNVRCNytaRCtaSEVDR0xU
-            WFh4RjU2SE56NHl5VnhndWdtcEhwZWxKeFdZCktKNmtWc2liSW1zS0hPZk1XL2xJ
-            UndRZWdGdWZSbFcwN1hrMFNaQ1M1dFkKLS0tIHhyNjhPdzg0anRvcGI2UXA5YkVz
-            M0psTGlvYzhqNzlKNENvUUluNWRFSGMK46LvYHiFI4Mih+SIN1WlYAGU3Rcfte3J
-            bOXg2/Gh0OpuU8+3gT4sPlDgeqF+z5/jkLCkxTDYtQzfMIQi/Fbttg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtQzkrTjhsRTdmWVJCN09M
+            TGpBUHo1S2tpWXpOOVlCZnlQTWVQUjdlaEE0Cjhpd2M2cmNDOHFjaXdVcmg5M3Vh
+            c2F3VkJ4RGt3cjdWOWdkZW9FNGl1SlEKLS0tIDdrRHc2UGpwNktaZE50V3ZrcG1G
+            anBmeC9GSDB5akJXbHArVzBwekhsazAK8XBqRv+9gYUCzQnVHC1hih0XFIBZAjSa
+            6KwbfssVkP1GOZ9R/+zUZgsF7ppjCQ5gGfcsQNW0f69fO5NFih+P4Q==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:12Z"
-    mac: ENC[AES256_GCM,data:l6sRFRPmYtpIod15VuX95eTArDYYyGtEwxCYwtlenflXqUYMYxp8AzG3Xj8W63wMH0dH73Lzbf2ntnlZ9OcBXQ0vJfFuWbKNI/ovPW/dctq4kLGE7lCuteHjpymuV4EmPB3vLVIxE4F3k9lDTD7Xc1iE3qUFEYtVBaWQnU1rSUg=,iv:Zm9wgU9zzVUavK37HwwyoU/7O+EO+WDuHqcBvcCDUg0=,tag:laKNhCEEDCC7r4dXVqnNwg==,type:str]
+    lastmodified: "2025-06-29T21:31:01Z"
+    mac: ENC[AES256_GCM,data:CrFCRl2ifbYK9hp8jlSsk4YbimeOH3027LtuepCIRMz9n5hbKEvmGd8E+cxlvW89SyRkVo6PhxsKg4ahytYoz7G34xFjZoBQOGb1IEbk1gYT8QRMrC1d84mfY9FX51e5RNBsBDlza1n6Qv7LZGbewPTfsxIXfD+fgNzSbjNUNkg=,iv:QqXCt4X3lkf7Nh8FRmqTmjZcpV/zSb1N3sgk5yN+tzQ=,tag:Rvv7MmZO98U79Fs4O0PAZw==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1