From 145f43d352bdd67d5416d39afca0c0c50da06d5a Mon Sep 17 00:00:00 2001
From: Greg Hellings <greg.hellings@gmail.com>
Date: Mon, 6 Oct 2025 19:57:46 -0500
Subject: [PATCH] Add nas1 attic cache

---
 manifests/kanboard/chart.yaml     | 61 +++++++++++++++++++++++++++++++
 manifests/kanboard/kustomize.yaml |  5 +++
 manifests/kanboard/namespace.yaml |  4 ++
 modules/nix-conf.nix              |  2 +
 4 files changed, 72 insertions(+)
 create mode 100644 manifests/kanboard/chart.yaml
 create mode 100644 manifests/kanboard/kustomize.yaml
 create mode 100644 manifests/kanboard/namespace.yaml

diff --git a/manifests/kanboard/chart.yaml b/manifests/kanboard/chart.yaml
new file mode 100644
index 0000000..4b907bd
--- /dev/null
+++ b/manifests/kanboard/chart.yaml
@@ -0,0 +1,61 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: hellings
+spec:
+  interval: "24h"
+  url: https://src.thehellings.com/greg/helm-chart
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: kanboard
+spec:
+  interval: 1h
+  chart:
+    spec:
+      chart: hellings
+      version: "1.0.0"
+      sourceRef:
+        kind: HelmRepository
+        name: hellings
+      interval: "1h"
+  values:
+    fullnameOverride: kanboard
+    image:
+      repository: kanboard
+      tag: v1.2.47
+    database:
+      postgres:
+        enabled: true
+    readinessProbe:
+      httpGet:
+        path: /healthcheck.php
+    pvc:
+      - name: kanboard-data
+        path: /var/www/app/data
+        size: 10Gi
+      - name: kanboard-plugins
+        path: /var/www/app/plugins
+        size: 10Gi
+    environment:
+      - name: DB_DRIVER
+        value: postgres
+      - name: DB_HOSTNAME
+        value: cluster.db.svc.local
+      - name: DB_NAME
+        value: kanboard
+      - name: DB_USERNAME
+        valueFrom:
+          secretKeyRef:
+            name: kanboard-postgres-user
+            key: username
+      - name: DB_PASSWORD
+        valueFrom:
+          secretKeyRef:
+            name: kanboard-postgres-user
+            key: password
+      - name: LOG_DRIVER
+        value: stdout
+      - name: PLUGIN_INSTALLER
+        value: "true"
diff --git a/manifests/kanboard/kustomize.yaml b/manifests/kanboard/kustomize.yaml
new file mode 100644
index 0000000..43675d7
--- /dev/null
+++ b/manifests/kanboard/kustomize.yaml
@@ -0,0 +1,5 @@
+namespace: kanboard
+
+resources:
+  - namespace.yaml
+  - helm.yaml
diff --git a/manifests/kanboard/namespace.yaml b/manifests/kanboard/namespace.yaml
new file mode 100644
index 0000000..8a4613c
--- /dev/null
+++ b/manifests/kanboard/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: kanboard
diff --git a/modules/nix-conf.nix b/modules/nix-conf.nix
index c432e5c..3122e63 100644
--- a/modules/nix-conf.nix
+++ b/modules/nix-conf.nix
@@ -42,6 +42,7 @@ in
         substituters =
           (lib.optionals cfg.cache [
             "http://chronicles.shire-zebra.ts.net:9000/binary-cache/"
+            "http://nas1.shire-zebra.ts.net:8080/nixos"
           ])
           ++ [
             "https://ai.cachix.org"
@@ -53,6 +54,7 @@ in
           ];
         trusted-public-keys = [
           "chronicles.shire-zebra.ts.net:0qWYHn3gGllXChhAaaxKlNZtRy6yG/XJs1RFSqV3nW8="
+          "nixos:1018vqYZeLLOFt+XPiB8k49w2yX8/MT7UbPLCXB92F0="
           "ai.cachix.org-1:N9dzRK+alWwoKXQlnn0H6aUx0lU/mspIoz8hMvGvbbc="
           "nixpkgs-python.cachix.org-1:hxjI7pFxTyuTHn2NkvWCrAUcNZLNS3ZAvfYNuYifcEU="
           "greg-hellings.cachix.org-1:y01Jl/L5evlhxdnUW6n56AiI1k8g1wxWhTxJCe7XSco="