apiVersion: v1
kind: PersistentVolumeClaim
metadata:
    name: home-assistant-config-pvc
    namespace: home-stuff
spec:
    accessModes:
        - ENC[AES256_GCM,data:G9HE4EgqpgKF2YudcQ==,iv:HG/EfdfZTaHUP9nxqT8l3M4HhWpZ7DlNU/gpTHpKwas=,tag:kBlQnFs/YTkzQVQhM1Ac7A==,type:str]
    storageClassName: ENC[AES256_GCM,data:2GPkLAvvQou7aw==,iv:o1rEW1VWnC6Sm8/wwt+VXU8JGL1w4oBhtNaSclbYMyE=,tag:ZB946d0Xwb5Ntiy55aVTkw==,type:str]
    resources:
        requests:
            storage: ENC[AES256_GCM,data:evj9,iv:xiMpw8jRDfKC87g+vbU1odUvDyFNnu65in3y/pUDd3Q=,tag:bBM45v4iwIsoT3kGABOCzA==,type:str]
sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvMTFnR2V2NFgrZTBwOWp1
            Vld3MXJxUEU1TFI3bHp6Y3BiZVJYRENUQ1FVCks2MTJaOEo0N3c3SkI2ekthSlVw
            RVppanFMR2hJSFJRSU45UDZFZjVMOFUKLS0tIGVXZFg3c0xuVm5EbUh3ZHByYldj
            NHYrNWYrdEZzNjRyWGRNQ3ZhOGo1bmcK/mpVenv/IAnHXWN4TgRZ+g7HFhfNz2/a
            1shdINWV07bzv+50m/CaRT9jTZFjaMQonfTCSouwW1d2J23vwwAdAw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-10-18T18:27:59Z"
    mac: ENC[AES256_GCM,data:SW80XQWb32594vxPxERvNAzPqAgxMstEIWi9kHDzitx94vLS1Yw2HmftDaAdxSdy0WbmOswCUt6IpKvaTM6HZv2B52Ku+Mxym5NYwzHgDlmGobsB6OmmgP3PwZx/X+8/p8nOa7rYiGAU52TKMEp5Mdecaa/qhg1gPv9C3T+bTmc=,iv:kxtElgeQjD6ODEswBgq9dTOZAxJX717VdgwFP3YnkEM=,tag:9Xh1Lp2BnXCKOp21YrADfw==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
---
apiVersion: v1
kind: Service
metadata:
    name: home-assistant-svc
    namespace: home-stuff
spec:
    selector:
        app: ENC[AES256_GCM,data:imkqA2C2YiQd+qMpvAI=,iv:GpYJ5bNSgyqBBorltn9jtnvN16l/FTzQFXsxbXVc8Aw=,tag:fBvkm2vGGeHXRTrr0ABf1Q==,type:str]
    ports:
        - port: ENC[AES256_GCM,data:ebqc,iv:PkyKcnOqz7q+GvMd4L6CcQ+fwdMl/rI5YnTwgQg7s0Q=,tag:8TrbD5bHAN/0pqFclNEL7A==,type:int]
          protocol: ENC[AES256_GCM,data:tKFL,iv:M+xh1uE36+cgK+xfao72XFLSQH1jDGmGgEleRcJyb1Q=,tag:KwcdBJ61CiFwG8xcfZ6PgQ==,type:str]
          targetPort: ENC[AES256_GCM,data:BvN37g==,iv:a5A/T6Q5j+8GvWW1Sno3ymVZG3IFiIsklL3R1H6ZzBs=,tag:ETE1LUSUTHqZMUlVV4BvXA==,type:int]
    type: ClusterIP
sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvMTFnR2V2NFgrZTBwOWp1
            Vld3MXJxUEU1TFI3bHp6Y3BiZVJYRENUQ1FVCks2MTJaOEo0N3c3SkI2ekthSlVw
            RVppanFMR2hJSFJRSU45UDZFZjVMOFUKLS0tIGVXZFg3c0xuVm5EbUh3ZHByYldj
            NHYrNWYrdEZzNjRyWGRNQ3ZhOGo1bmcK/mpVenv/IAnHXWN4TgRZ+g7HFhfNz2/a
            1shdINWV07bzv+50m/CaRT9jTZFjaMQonfTCSouwW1d2J23vwwAdAw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-10-18T18:27:59Z"
    mac: ENC[AES256_GCM,data:SW80XQWb32594vxPxERvNAzPqAgxMstEIWi9kHDzitx94vLS1Yw2HmftDaAdxSdy0WbmOswCUt6IpKvaTM6HZv2B52Ku+Mxym5NYwzHgDlmGobsB6OmmgP3PwZx/X+8/p8nOa7rYiGAU52TKMEp5Mdecaa/qhg1gPv9C3T+bTmc=,iv:kxtElgeQjD6ODEswBgq9dTOZAxJX717VdgwFP3YnkEM=,tag:9Xh1Lp2BnXCKOp21YrADfw==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
    namespace: home-stuff
    name: gome-assistant-ingress
    annotations:
        # < use the nginx ingress controller
        kubernetes.io/ingress.class: nginx
        # < use letsencrypt-prod application in kubernetes to generate ssl certificate
        cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
    tls:
        - hosts:
            - ENC[AES256_GCM,data:xFM02TN/FT17+f7bBBDuu7etFRGnd92LEA==,iv:KgfzhGYngb79Eg0+PA8MvFa17Flyg4iR5m/I1keqYro=,tag:rkqftQwYYczi6lZqymBUSw==,type:comment]
            - ENC[AES256_GCM,data:4NSvZUjjLLy2S1sX,iv:xBRT+21YViRyOegzaKtaiw1470gAq37aJKbhjn4/tkw=,tag:eyHy0K3UtYI5cqRVbTII9g==,type:str]
          #ENC[AES256_GCM,data:XNLchQO3iTu+aGf/YwYw3fFhjno3jJ0XxO9vhM2xQ/HriXCWXi8xhR9DukKQ73ZxoyZsuE8QcwUR,iv:qDwV3/N0NqtFh0KKLx8Kwjo0YPRHyz8r+pqBS/5B1sk=,tag:StbIbu8yJv9+XPMzuJqovg==,type:comment]
          secretName: ENC[AES256_GCM,data:g328BpfG,iv:xzlfcwq8aY4oa4S6O8/1HYIhIzYqOrvEdxEyJguDEW0=,tag:+91YHVRHzXzxHoqoOVNOIQ==,type:str]
    rules:
        - ENC[AES256_GCM,data:krd0qAcPKh8pAClFn6WfGGffH6TopZt9MA==,iv:nvXcSJ3d+fEw90QR3nUAB4z6nQDQzNqCmPdOaE2IHeg=,tag:wiHQQfR9ZScavFXG/bLeMw==,type:comment]
        - host: ENC[AES256_GCM,data:n3G1fPQhf8L746Xn,iv:uXBrrNXyzWmfI2eVQ8vVcy7JBsMmXNXjKaCjP6ClSNs=,tag:alVL08WHWwDlTPZVc4EcZQ==,type:str]
          http:
            paths:
                - ENC[AES256_GCM,data:V01LcT4b9eTCfFhX6LXntp1CSOC4u4uhU5XgDaTvuNCU/9Xtr/JQEq6rtFK/O+S/0RwOyHnUxxik73z5AbT1IToPkZ7A,iv:F8S6nBjix9V33z3OfuMmGXb7fhKqZud64e90DCMg4xQ=,tag:sCGnpDFfXb3JGPTUrkhC5Q==,type:comment]
                - path: ENC[AES256_GCM,data:gw==,iv:nuVLhrd7ye6hCfmlmpHDKrcc3Cr9wXIPUDKR9TnVM+s=,tag:B45QqaVPohyGJz0e5DD2nQ==,type:str]
                  pathType: ENC[AES256_GCM,data:S1JHgRdL,iv:UTL2gicfdwHAkskqzDMidy2QT6tY/jlMWjFlhCyZONs=,tag:ZbLgYSdlIJ90n655a7kPsw==,type:str]
                  backend:
                    service:
                        #ENC[AES256_GCM,data:CZHHW6kbi8jNhylcU4eryOutD/OjKSKIKNYEAHtccTPs1vi7fzNbQ8mWMqiy64t0PLZIZVXRh4fcnOUuyl0Q,iv:yXW2el6RTN05uODjMQxvM1rrZHfnCgtHrwOvUu77C/8=,tag:Or36C5NGjL19BaMlkEUYbg==,type:comment]
                        name: ENC[AES256_GCM,data:ZEyrrYKjRGX+F27vybOmDmAm,iv:zL76BRhe+whTtwjFB3XtXYWlGBcz9St/WnXuMMB+I4I=,tag:K0civoW5xUJDaJHaMP8EMQ==,type:str]
                        port:
                            #ENC[AES256_GCM,data:h6HNxbZkORi2rotyb8ffTAd6lulZn84TJxeuLoBkeVbOnRmRgMWsP/foTBgVTirJyrEOkqV21bq4Kny6,iv:bN5ystueVmRlwebAOtl6ejEThGEqvYc4mni+nVVK95s=,tag:aDVkfPbJIVnXY1AlhG7sdg==,type:comment]
                            number: ENC[AES256_GCM,data:xx7s,iv:9MkcJrMr0msJIRm+OXsLaZNyhkYUY14svk55FZgKEL0=,tag:cKHMNmygq8WsBrDgq8p2iA==,type:int]
sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvMTFnR2V2NFgrZTBwOWp1
            Vld3MXJxUEU1TFI3bHp6Y3BiZVJYRENUQ1FVCks2MTJaOEo0N3c3SkI2ekthSlVw
            RVppanFMR2hJSFJRSU45UDZFZjVMOFUKLS0tIGVXZFg3c0xuVm5EbUh3ZHByYldj
            NHYrNWYrdEZzNjRyWGRNQ3ZhOGo1bmcK/mpVenv/IAnHXWN4TgRZ+g7HFhfNz2/a
            1shdINWV07bzv+50m/CaRT9jTZFjaMQonfTCSouwW1d2J23vwwAdAw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-10-18T18:27:59Z"
    mac: ENC[AES256_GCM,data:SW80XQWb32594vxPxERvNAzPqAgxMstEIWi9kHDzitx94vLS1Yw2HmftDaAdxSdy0WbmOswCUt6IpKvaTM6HZv2B52Ku+Mxym5NYwzHgDlmGobsB6OmmgP3PwZx/X+8/p8nOa7rYiGAU52TKMEp5Mdecaa/qhg1gPv9C3T+bTmc=,iv:kxtElgeQjD6ODEswBgq9dTOZAxJX717VdgwFP3YnkEM=,tag:9Xh1Lp2BnXCKOp21YrADfw==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1