Skip to content

Commit d9d9789

Browse files
mebezacmebezac
committed
Add formbricks for heremag
1 parent a6c5098 commit d9d9789

File tree

6 files changed

+159
-23
lines changed

6 files changed

+159
-23
lines changed

‎kubernetes/apps/heremag/formbricks/formbricks-secret.sops.yaml‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: formbricks-secret
5+
namespace: heremag
6+
stringData:
7+
INIT_POSTGRES_DBNAME: ENC[AES256_GCM,data:/wxPrwvbFpkYYA==,iv:1jgaHVyPaTFYUnwDQP+ZCTYlchnP9aQO6ieJSEC3QEo=,tag:xoQZVu5cnbWIn8Isbgrh9g==,type:str]
8+
INIT_POSTGRES_HOST: ENC[AES256_GCM,data:tufyLOuvxFTgEwG9J9olBtVQHoWarbxPQN2JCesiwsCOOY+deKv2HuTc0ZCPkoatMQ==,iv:oT/eUAz7yMVzFf/dy5hOT5RkUCyUn/6G5wbrxQEl/Xs=,tag:WcqW71jX93VL2ePGKgiZtA==,type:str]
9+
INIT_POSTGRES_USER: ENC[AES256_GCM,data:Q79o2qkCbLlrgw==,iv:tYQA2lhlCOnyN96Io/K6E7ZbrOUKNxy8ldZ3skLMj8I=,tag:sxVBWR8RDSxMy4zAQvceCQ==,type:str]
10+
INIT_POSTGRES_PASS: ENC[AES256_GCM,data:p3uaMOwb46I6XC+JsK0yW7Yo2UC+7DgAMYY=,iv:1WOyaP04Rx+IgXouHpMfeZiC9rDGmlG/cgw9DRp1ia0=,tag:Sg9NPrdLDaRLlkpFgRhzpA==,type:str]
11+
INIT_POSTGRES_SUPER_PASS: ENC[AES256_GCM,data:usPMgP7nQOBPp/uez9I+pb9reciqcYnf3fM=,iv:drVmSn+tqti4iG9LYqYQ2OqhVF0sMxrepPhah8LjXS0=,tag:oitr2ixoLybI9wvyjE00ig==,type:str]
12+
#ENC[AES256_GCM,data:RsANI/1d1iOl570=,iv:7e9VsmxlGFlIiAr/boKJmhEWKjzy+DlGai6U7GcWfMo=,tag:pdctVzw7wVp+03BrWzKloA==,type:comment]
13+
WEBAPP_URL: ENC[AES256_GCM,data:gghs9q/p3ZOvdGEJp1wxsC+HUD6rE+rOBMU=,iv:4zdybS4okB3gPKORswf2qkUR4iTdbVznQM7nsN7PWPE=,tag:iFnAzYGJ/T+mz7XKsVUdsA==,type:str]
14+
NEXTAUTH_URL: ENC[AES256_GCM,data:D7Tidf2bSDrFQatT0E2LF+FO1DI71ay9p4M=,iv:bBwvJqlRYH3YqDi6yO5mCMKA6ymTofwZIIjb0HfymTw=,tag:UFLs9wm+fKnzUvdKFhOVdw==,type:str]
15+
NEXTAUTH_SECRET: ENC[AES256_GCM,data:aHmxPWA+QrnyusMwg5uJNA7GKec+Dra+oztsdcJScd4QNY06y1jro7ZASlKhY06bUen/ctD5o41W6HHvUnL0tg==,iv:JKlLg2txz5i0QUWN7cbPHGzeFNtN3Lvxv7ceGkkTiWo=,tag:1dkBLO8Pi/X6j8W9QG6t8g==,type:str]
16+
ENCRYPTION_KEY: ENC[AES256_GCM,data:/FuW+F8xSz8Mid5/KsdIjfqkS0PMWhNEhITKT/aIjkZE6f1/LnkEgOxO+xhteaBPB14F+uJaZLnxdq4kxWaS3A==,iv:hFg+wW058CZWr1Z/bZQinIfRGnoB8HcCp+FkgKs9iXc=,tag:2kqR4L54VMZOgFPW+xzqTw==,type:str]
17+
CRON_SECRET: ENC[AES256_GCM,data:dIcjue83Gz8v/TrfI/orP+SKl/rpQB6JOS+1ImXdfVXvWcl3fAGF+x/tSD1bKiFsurLN/TukCt3Ql4E6zFVtww==,iv:gqHftXoODRFj9cgmV+/PKTWCacW5i7/xPIZCV3w8Z1w=,tag:6a0lzQZRCWG+1/reOlavpw==,type:str]
18+
REDIS_URL: ENC[AES256_GCM,data:POOC60bhc8fQ7neFeqIi3DUsyE3SV1nA8m2HqOB1SbJ2hh4xMzMnhd1IwhmSL4y8SDQ/6PzZq+Ik28po6RP0Tytsmy4XUfBWJw==,iv:RG/2bnnOpIZeBEwV0IMOHC7f9UoQp3swfljyGfdKJY8=,tag:UQ4AjrW6YpkF7ie9zxqFuw==,type:str]
19+
DATABASE_URL: ENC[AES256_GCM,data:lUs+wnkhEMW/T8p3oKSloPDc/S8DiTRLx3pMq3CmLAqdus0Bu4rC+2Ltplmf+vOq5nqKQge0T1/CByLQmw9+llUFf1AGQGhliSQnn4vF3xW/YR7erg3TJGb7/ZsHJYboXb/907VQpLbpIf8OBbZK86Ljb47xvCPYbOxhBSkLNWDYkg==,iv:F5drn+GFxFh7pOd+qpjvql10AwaLkFRzvhSnVR2kCsA=,tag:4fbUJpZJfV4W/TwGm86ztA==,type:str]
20+
S3_ACCESS_KEY: ENC[AES256_GCM,data:U68u3DkSaQ8SQYgEub2FsI+jhvtnUFPh2qg=,iv:0+INHlxkULZhP/SPM+3COG7AwSsv4VCo1G7isOwDaDs=,tag:4M3MoebQlMij6Gc+6BWmMA==,type:str]
21+
S3_SECRET_KEY: ENC[AES256_GCM,data:BEI9bsYpmPgC5NKbFL0AuANbUboWYIW9Cc+NHjJn/BOBvNc6BgGREKVvIbZVYfZrIz3M1p1a+Gs/cSRqP+VwEQ==,iv:fsdWngNMtFVF+4QMXUs3UpIP4uzjUrknR/WIyuiRfEo=,tag:qEdtWN4X/1XkfQYFNWvS/g==,type:str]
22+
S3_REGION: ENC[AES256_GCM,data:VhiOaUkRe26L,iv:zCFBE4nsnx5stF89o6uQLtkXPk+FBN12sJzSGfEqPV0=,tag:ThQ/Nad38AmnDMjJgy/2DQ==,type:str]
23+
S3_BUCKET_NAME: ENC[AES256_GCM,data:PAUl7QPnbeiu+EQlh0g8HRdS,iv:geOmIB5icSDvrwlUxviXs/Rw47jPHiO/9BASL/gaNiM=,tag:0Fs60w+DxqX7ZvNxEEWHEQ==,type:str]
24+
S3_ENDPOINT_URL: ENC[AES256_GCM,data:3gfqWzKDVyazVeB2yLqel+2VtrtP7MJr/Q==,iv:ljfwPUBvE7AlymJ9yszNPfGuYQoAmzt7+qILJyBe+VQ=,tag:66mC0nYAtv8wg0tyP7gmiQ==,type:str]
25+
S3_FORCE_PATH_STYLE: ENC[AES256_GCM,data:DQ==,iv:+lT9O12l1Po1+M0Ik+m345S+lPXPH6FYHXP4bU9Bb7A=,tag:pXI2fFCgLiNHV1939w3LYQ==,type:str]
26+
sops:
27+
age:
28+
- recipient: age1j7x3jkw82w02taqj8dmqplae07fxcrup2enejnta9z2v82fzsakqd4ka6p
29+
enc: |
30+
-----BEGIN AGE ENCRYPTED FILE-----
31+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTEFsNStiTjlybHpHanN6
32+
NzVjUTBkM2htSUJRZUd1cXZQMWJEU3dzOFVFCm9JRXBuL2UxSEQ2TkcwRTQ5VUpB
33+
SHQrM0VJWFZZNk1oaldIRjFKMEY1M0kKLS0tIEhFejRLNm9wcnFwOE91LzRaeUxU
34+
UWRqVTBLS0JGV0c4TXhBaXZZOVUxU2MKG9WnIGa5K51ab4t4r9arCuHRI/hsnUck
35+
YKpaKzYWYXHg8LpHnDHqT1izBldGK28p3b6N+wdp6bLIuVa3n7kPEQ==
36+
-----END AGE ENCRYPTED FILE-----
37+
lastmodified: "2026-01-04T22:46:42Z"
38+
mac: ENC[AES256_GCM,data:QyoDJ5MSD1tXEtsQp9oFI1LCxCQLPYokMOwFXJSW8zkLFFfMrziC85h+3hieQfX3L+N6ogUVmmkV6ZM4bkeJlGspeXvK2967s1oVaw8X6ku5LJ7iJHpPcHz6eKBQzvfLjwQyVqHqT7W4H75v3sSJ6dhNuk4wQ3254HQawG85Wiw=,iv:fwjnOJC0yrvpAAkRcCY7zmJ5RKt19xGR9H3VKm2POzs=,tag:eGlHNbWKHRhhxwJBwWnnJg==,type:str]
39+
encrypted_regex: ^(data|stringData)$
40+
mac_only_encrypted: true
41+
version: 3.11.0

‎kubernetes/apps/heremag/formbricks/kustomization.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
generators:
4+
- secret-generator.yaml

‎kubernetes/apps/heremag/formbricks/secret-generator.yaml‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
apiVersion: viaduct.ai/v1
2+
kind: ksops
3+
metadata:
4+
name: formbricks-secret-generator
5+
annotations:
6+
config.kubernetes.io/function: |
7+
exec:
8+
path: ksops
9+
files:
10+
- ./formbricks-secret.sops.yaml

‎kubernetes/apps/heremag/formbricks/values.yaml‎

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
defaultPodOptions:
2+
securityContext:
3+
runAsNonRoot: true
4+
runAsUser: 1000
5+
runAsGroup: 1000
6+
fsGroup: 1000
7+
fsGroupChangePolicy: OnRootMismatch
8+
seccompProfile: { type: RuntimeDefault }
9+
10+
controllers:
11+
formbricks:
12+
annotations:
13+
reloader.stakater.com/auto: "true"
14+
initContainers:
15+
init-db:
16+
image:
17+
repository: ghcr.io/home-operations/postgres-init
18+
tag: 18.1
19+
pullPolicy: IfNotPresent
20+
envFrom: &envFrom
21+
- secretRef:
22+
name: formbricks-secret
23+
containers:
24+
app:
25+
image:
26+
repository: ghcr.io/formbricks/formbricks
27+
tag: 4.4.3@sha256:5549123d9117c8b7d18bc43ee80321a97399f129dbd9f56377386624618a1695
28+
envFrom: *envFrom
29+
resources:
30+
requests:
31+
cpu: 15m
32+
memory: 256M
33+
limits:
34+
memory: 2048M
35+
service:
36+
app:
37+
controller: formbricks
38+
ports:
39+
http:
40+
port: 3000
41+
ingress:
42+
app:
43+
className: internal
44+
hosts:
45+
- host: forms.heremag.free
46+
paths:
47+
- path: /
48+
service:
49+
identifier: app
50+
port: http

‎kubernetes/apps/lubelog/lubelog/lubelog-secret.sops.yaml‎

Lines changed: 23 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -1,28 +1,28 @@
11
apiVersion: v1
22
kind: Secret
33
metadata:
4-
name: lubelog-secret
5-
namespace: lubelog
4+
name: lubelog-secret
5+
namespace: lubelog
66
stringData:
7-
INIT_POSTGRES_DBNAME: ENC[AES256_GCM,data:5+7/xNfWQA==,iv:CHbAPZK8djS6F0cZXamuZfX50xfFmNzyd6xShCB4kfQ=,tag:3jr8IdK9VWPI6Y+Zs6Ml+Q==,type:str]
8-
INIT_POSTGRES_HOST: ENC[AES256_GCM,data:tufyLOuvxFTgEwG9J9olBtVQHoWarbxPQN2JCesiwsCOOY+deKv2HuTc0ZCPkoatMQ==,iv:oT/eUAz7yMVzFf/dy5hOT5RkUCyUn/6G5wbrxQEl/Xs=,tag:WcqW71jX93VL2ePGKgiZtA==,type:str]
9-
INIT_POSTGRES_USER: ENC[AES256_GCM,data:CvlgapDr0Q==,iv:m+utp23k/LpieYVlpWnMCwLMuHWi/WYqFOT+dOJ4IVw=,tag:TGTXodjbpeZ8NTAgGsYuKQ==,type:str]
10-
INIT_POSTGRES_PASS: ENC[AES256_GCM,data:cbJcTep81juYIiPC0m4uVQoq/BJPU9Caveg43ws=,iv:5YUYW9OG1F6enbkw56qNqoZvHxCaBxjkerq0kfuoFBM=,tag:ifAxffwJpGQoEsSwPyP+Sg==,type:str]
11-
INIT_POSTGRES_SUPER_PASS: ENC[AES256_GCM,data:usPMgP7nQOBPp/uez9I+pb9reciqcYnf3fM=,iv:drVmSn+tqti4iG9LYqYQ2OqhVF0sMxrepPhah8LjXS0=,tag:oitr2ixoLybI9wvyjE00ig==,type:str]
12-
POSTGRES_CONNECTION: ENC[AES256_GCM,data:u2Euin4Fj0vAjELgwRahHPTpzBK+BryS/84Lz3dvniFlQj9R1YSnuNwX9WkhYTCi5dOPYOcdiJMCMfB0ML2bJfJ6Ds/gNjMAOHRF0+pdrxb1bCY8Kw0z5UnOgKnJia3Tr5wRQYg2Y3q6nsE5nbSzdTD1CEsJtz9IBWIRfTlmxZLv9S9g,iv:MA32hUFQGJgN1/SPv0AVKo1V5BAiOf3/6gZ5Y8g9SRU=,tag:A8JWVXeiRPj8PPQbc8HKvw==,type:str]
7+
INIT_POSTGRES_DBNAME: ENC[AES256_GCM,data:5+7/xNfWQA==,iv:CHbAPZK8djS6F0cZXamuZfX50xfFmNzyd6xShCB4kfQ=,tag:3jr8IdK9VWPI6Y+Zs6Ml+Q==,type:str]
8+
INIT_POSTGRES_HOST: ENC[AES256_GCM,data:tufyLOuvxFTgEwG9J9olBtVQHoWarbxPQN2JCesiwsCOOY+deKv2HuTc0ZCPkoatMQ==,iv:oT/eUAz7yMVzFf/dy5hOT5RkUCyUn/6G5wbrxQEl/Xs=,tag:WcqW71jX93VL2ePGKgiZtA==,type:str]
9+
INIT_POSTGRES_USER: ENC[AES256_GCM,data:CvlgapDr0Q==,iv:m+utp23k/LpieYVlpWnMCwLMuHWi/WYqFOT+dOJ4IVw=,tag:TGTXodjbpeZ8NTAgGsYuKQ==,type:str]
10+
INIT_POSTGRES_PASS: ENC[AES256_GCM,data:cbJcTep81juYIiPC0m4uVQoq/BJPU9Caveg43ws=,iv:5YUYW9OG1F6enbkw56qNqoZvHxCaBxjkerq0kfuoFBM=,tag:ifAxffwJpGQoEsSwPyP+Sg==,type:str]
11+
INIT_POSTGRES_SUPER_PASS: ENC[AES256_GCM,data:usPMgP7nQOBPp/uez9I+pb9reciqcYnf3fM=,iv:drVmSn+tqti4iG9LYqYQ2OqhVF0sMxrepPhah8LjXS0=,tag:oitr2ixoLybI9wvyjE00ig==,type:str]
12+
POSTGRES_CONNECTION: ENC[AES256_GCM,data:/q3Unh44hUwcs62ptQ2uFXWx1f/NHwd/mRJlIowgG2OMR2srNpZgL8KXQK5uMvVmmuixT/gVanMJ2BfDx5jKaUVbZIGduwHfRQwGU/nhxjKAjodftgNM52OWeLetdg/8ImwtmvqHSjAoC488a65VShxXIVQ9NvZCCxf+GrPJ9EqY9g==,iv:qTyYfDegcAQU2PpKWKNl4gTf9PcUqbIFOqEeOosE8mE=,tag:97SpF77vwTwSM9i7lUExlQ==,type:str]
1313
sops:
14-
age:
15-
- recipient: age1j7x3jkw82w02taqj8dmqplae07fxcrup2enejnta9z2v82fzsakqd4ka6p
16-
enc: |
17-
-----BEGIN AGE ENCRYPTED FILE-----
18-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTEFsNStiTjlybHpHanN6
19-
NzVjUTBkM2htSUJRZUd1cXZQMWJEU3dzOFVFCm9JRXBuL2UxSEQ2TkcwRTQ5VUpB
20-
SHQrM0VJWFZZNk1oaldIRjFKMEY1M0kKLS0tIEhFejRLNm9wcnFwOE91LzRaeUxU
21-
UWRqVTBLS0JGV0c4TXhBaXZZOVUxU2MKG9WnIGa5K51ab4t4r9arCuHRI/hsnUck
22-
YKpaKzYWYXHg8LpHnDHqT1izBldGK28p3b6N+wdp6bLIuVa3n7kPEQ==
23-
-----END AGE ENCRYPTED FILE-----
24-
lastmodified: "2025-06-21T17:09:00Z"
25-
mac: ENC[AES256_GCM,data:5gkOcJvvYzcA5Spq2galg6/vTwaR1rORgV2cHJ28m+AZgPqglAjD5fpPyaQgBQAAV/lGb6bO54e8kRvxnMp+8ypsZxcZAHi4PSmQyyvaheKG1oYlQHv/+2NC3hAvmrCW14SpCgusOWXlSp4jRkHYp40Gd5GM/eAqGG1QktecDQY=,iv:C3zh6obSZwFUOZpAb35qjxSmgfMylEFd1wiAwePBeG8=,tag:TuNVmW1RToCZY/GjJrep7w==,type:str]
26-
encrypted_regex: ^(data|stringData)$
27-
mac_only_encrypted: true
28-
version: 3.10.2
14+
age:
15+
- recipient: age1j7x3jkw82w02taqj8dmqplae07fxcrup2enejnta9z2v82fzsakqd4ka6p
16+
enc: |
17+
-----BEGIN AGE ENCRYPTED FILE-----
18+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTEFsNStiTjlybHpHanN6
19+
NzVjUTBkM2htSUJRZUd1cXZQMWJEU3dzOFVFCm9JRXBuL2UxSEQ2TkcwRTQ5VUpB
20+
SHQrM0VJWFZZNk1oaldIRjFKMEY1M0kKLS0tIEhFejRLNm9wcnFwOE91LzRaeUxU
21+
UWRqVTBLS0JGV0c4TXhBaXZZOVUxU2MKG9WnIGa5K51ab4t4r9arCuHRI/hsnUck
22+
YKpaKzYWYXHg8LpHnDHqT1izBldGK28p3b6N+wdp6bLIuVa3n7kPEQ==
23+
-----END AGE ENCRYPTED FILE-----
24+
lastmodified: "2026-01-04T22:50:18Z"
25+
mac: ENC[AES256_GCM,data:Ct/Wvo/4ENwMX+vxX/VYI7IP7CGKDFdCl3lFeKp0QS41re9hW9LUlkr70VPP64NQ5TPrE3vzlHD4tdScUEuGKyXm6874fP8xdKYr9BIbBaM/Fo+ALW8+V+NvHl1FiAXibeknxbcwLQe8ZrG4WZH5rxAqenPqaJkurX0RRsC6JYY=,iv:Gc7r3wUXmudmJvlvSdYnNoL+KaDntwnfz2o5JXKst3Q=,tag:OWeJ+QFW9W6OGJhlVoWSHg==,type:str]
26+
encrypted_regex: ^(data|stringData)$
27+
mac_only_encrypted: true
28+
version: 3.11.0

‎kubernetes/argo/apps/heremag/formbricks.yaml‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
apiVersion: argoproj.io/v1alpha1
2+
kind: Application
3+
metadata:
4+
name: formbricks
5+
namespace: argo-system
6+
annotations:
7+
argocd.argoproj.io/sync-wave: "0"
8+
spec:
9+
project: kubernetes
10+
sources:
11+
- repoURL: https://github.com/mebezac/home-cluster.git
12+
path: kubernetes/apps/heremag/formbricks
13+
targetRevision: main
14+
ref: formbricks-repo
15+
- repoURL: ghcr.io/bjw-s-labs/helm
16+
chart: app-template
17+
targetRevision: 4.5.0
18+
helm:
19+
releaseName: formbricks
20+
valueFiles:
21+
- $formbricks-repo/kubernetes/apps/heremag/formbricks/values.yaml
22+
destination:
23+
name: in-cluster
24+
namespace: heremag
25+
syncPolicy:
26+
automated:
27+
allowEmpty: true
28+
prune: true
29+
selfHeal: true
30+
syncOptions:
31+
- CreateNamespace=true

0 commit comments

Comments
 (0)