Give Gitea its own database

manifests/databases/kustomization.yaml

@@ -9,4 +9,3 @@ resources:
   - postgres-matrix.yaml
   - immich.yaml
   - ingress.yaml
-  - postgres-gitea.yaml

manifests/databases/postgres-cluster.yaml

@@ -32,13 +32,6 @@ spec:
         superuser: false
         passwordSecret:
           name: postgres-user-matrix
-      - name: gitea
-        ensure: present
-        comment: Gitea DB user
-        login: true
-        superuser: false
-        passwordSecret:
-          name: postgres-user-gitea
 
   plugins:
     - name: barman-cloud.cloudnative-pg.io

manifests/databases/postgres-gitea.yaml

@@ -1,9 +0,0 @@
-apiVersion: postgresql.cnpg.io/v1
-kind: Database
-metadata:
-  name: database-gitea
-spec:
-  name: gitea
-  owner: gitea
-  cluster:
-    name: postgres

manifests/databases/secrets.yaml

@@ -167,31 +167,3 @@ spec:
       remoteRef:
         key: 5ce63e26-dd7f-46d4-b7ed-b310002ef93f
         property: password
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: postgres-user-gitea
-spec:
-  target:
-    name: postgres-user-gitea
-    deletionPolicy: Delete
-    template:
-      type: kukbernetes.io/basic-auth
-      data:
-        username: |-
-          {{ .dbuser }}
-        password: |-
-          {{ .dbpass }}
-  secretStoreRef:
-    name: bitwarden-login
-    kind: ClusterSecretStore
-  data:
-    - secretKey: dbuser
-      remoteRef:
-        key: df47ed61-61d7-4273-b81c-b3a9000de00e
-        property: username
-    - secretKey: dbpass
-      remoteRef:
-        key: df47ed61-61d7-4273-b81c-b3a9000de00e
-        property: password

manifests/gitea/chart.yaml

@@ -15,13 +15,18 @@ spec:
   chart:
     spec:
       chart: gitea
+      version: "12.4.0"
       sourceRef:
         kind: HelmRepository
         name: gitea-repository
       interval: "1h"
+  dependsOn:
+    - name: cnpg
+      namespace: cnpg-system
   values:
-    # Gitea Helm Chart Values
+    # Gitea Helm Chart Values https://gitea.com/gitea/helm-gitea
     global:
+      appVersion: "1.25.3"
       storageClass: longhorn-default
 
     replicaCount: 1
@@ -58,7 +63,7 @@ spec:
           SSH_PORT: "2222"
         database:
           DB_TYPE: postgres
-          HOST: "postgres-rw.db.svc.cluster.local:5432"
+          HOST: "postgres-rw:5432"
           NAME: gitea
           # USER: ""
           # PASSWD: ""

manifests/gitea/kustomization.yaml

@@ -2,6 +2,7 @@ namespace: gitea
 
 resources:
   - namespace.yaml
+  - postgres.yaml
   - chart.yaml
   - ingress.yaml
   - secrets.yaml

manifests/gitea/postgres.yaml

@@ -0,0 +1,129 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: postgres-user-gitea
+spec:
+  target:
+    name: postgres-user-gitea
+    deletionPolicy: Delete
+    template:
+      type: kukbernetes.io/basic-auth
+      data:
+        username: |-
+          {{ .dbuser }}
+        password: |-
+          {{ .dbpass }}
+  secretStoreRef:
+    name: bitwarden-login
+    kind: ClusterSecretStore
+  data:
+    - secretKey: dbuser
+      remoteRef:
+        key: df47ed61-61d7-4273-b81c-b3a9000de00e
+        property: username
+    - secretKey: dbpass
+      remoteRef:
+        key: df47ed61-61d7-4273-b81c-b3a9000de00e
+        property: password
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgres
+spec:
+  instances: 3
+  enablePDB: false
+  storage:
+    size: 20Gi
+  primaryUpdateStrategy: unsupervised
+
+  managed:
+    roles:
+      - name: gitea
+        ensure: present
+        comment: Gitea DB user
+        login: true
+        superuser: false
+        passwordSecret:
+          name: postgres-user-gitea
+
+  plugins:
+    - name: barman-cloud.cloudnative-pg.io
+      isWALArchiver: true
+      parameters:
+        barmanObjectName: k3sbackup-objectstore
+---
+apiVersion: barmancloud.cnpg.io/v1
+kind: ObjectStore
+metadata:
+  name: k3sbackup-objectstore
+spec:
+  configuration:
+    destinationPath: "s3://k3sbackup/postgres-gitea"
+    endpointURL: "http://s3.thehellings.lan:9000/"
+    s3Credentials:
+      accessKeyId:
+        name: k3sbackup-secret
+        key: username
+      secretAccessKey:
+        name: k3sbackup-secret
+        key: password
+    wal:
+      compression: gzip
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: postgres-backup
+spec:
+  immediate: true # Create one when this is added to the cluster
+  schedule: "0 1 0 * * *" # 1AM, nightly
+  backupOwnerReference: self
+  cluster:
+    name: postgres
+  method: plugin
+  pluginConfiguration:
+    name: barman-cloud.cloudnative-pg.io
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: k3sbackup-externalsecret
+spec:
+  target:
+    name: k3sbackup-secret
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        username: |-
+          {{ .username }}
+        password: |-
+          {{ .password }}
+  data:
+    - secretKey: username
+      sourceRef:
+        storeRef:
+          name: bitwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 685b29c6-9264-4e60-ba4a-b2ea005a5d7b
+        property: username
+    - secretKey: password
+      sourceRef:
+        storeRef:
+          name: bitwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 685b29c6-9264-4e60-ba4a-b2ea005a5d7b
+        property: password
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: database-gitea
+spec:
+  name: gitea
+  owner: gitea
+  cluster:
+    name: postgres