Adds redis password. Adds tlsSecretName config to manifests.

apps/example-admin/manifest.yaml

@@ -2,3 +2,5 @@ name: example-admin
 install: true
 description: An example application that is deployed with internal-only access.
 version: 1.0.0
+defaultConfig:
+  tlsSecretName: wildcard-internal-wild-cloud-tls

apps/example-app/manifest.yaml

@@ -2,3 +2,5 @@ name: example-app
 install: true
 description: An example application that is deployed with public access.
 version: 1.0.0
+defaultConfig:
+  tlsSecretName: wildcard-wild-cloud-tls

apps/future-apps.md

@@ -1,36 +0,0 @@
-# Future Apps to be added to Wild Cloud
-
-## Productivity
-
-- [Affine](https://docs.affine.pro/self-host-affine): A collaborative document editor with a focus on real-time collaboration and rich media support.
-- [Vaultwarden](https://github.com/dani-garcia/vaultwarden): A lightweight, self-hosted password manager that is compatible with Bitwarden clients.
-
-## Automation
-
-- [Home Assistant](https://www.home-assistant.io/installation/linux): A powerful home automation platform that focuses on privacy and local control.
-
-## Social
-
-- [Mastodon](https://docs.joinmastodon.org/admin/install/): A decentralized social network server that allows users to create their own instances.
-
-## Development
-
-- [Gitea](https://docs.gitea.io/en-us/install-from-binary/): A self-hosted Git service that is lightweight and easy to set up.
-
-## Media
-
-- [Jellyfin](https://jellyfin.org/downloads/server): A free software media system that allows you to organize, manage, and share your media files.
-- [Glance](https://github.com/glanceapp/glance): RSS aggregator.
-
-## Collaboration
-
-- [Discourse](https://github.com/discourse/discourse): A modern forum software that is designed for community engagement and discussion.
-- [Mattermost](https://docs.mattermost.com/guides/install.html): An open-source messaging platform that provides team collaboration features similar to Slack.
-- [Outline](https://docs.getoutline.com/install): A collaborative knowledge base and wiki platform that allows teams to create and share documentation.
-- [Rocket.Chat](https://rocket.chat/docs/installation/manual-installation/): An open-source team communication platform that provides real-time messaging, video conferencing, and file sharing.
-
-## Infrastructure
-
-- [Umami](https://umami.is/docs/installation): A self-hosted web analytics solution that provides insights into website traffic and user behavior.
-- [Authelia](https://authelia.com/docs/): A self-hosted authentication and authorization server that provides two-factor authentication and single sign-on capabilities.
-

apps/ghost/manifest.yaml

@@ -18,6 +18,7 @@ defaultConfig:
   adminEmail: "admin@{{ .cloud.domain }}"
   blogTitle: "My Blog"
   timezone: UTC
+  tlsSecretName: wildcard-wild-cloud-tls
   smtp:
     host: "{{ .cloud.smtp.host }}"
     port: "{{ .cloud.smtp.port }}"

apps/immich/deployment-microservices.yaml

@@ -25,6 +25,11 @@ spec:
           env:
             - name: REDIS_HOSTNAME
               value: "{{ .apps.immich.redisHostname }}"
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: immich-secrets
+                  key: apps.redis.password
             - name: DB_HOSTNAME
               value: "{{ .apps.immich.dbHostname }}"
             - name: DB_USERNAME
@@ -46,3 +51,11 @@ spec:
         - name: immich-storage
           persistentVolumeClaim:
             claimName: immich-pvc
+      affinity:
+        podAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchLabels:
+                app: immich
+                component: server
+            topologyKey: kubernetes.io/hostname

apps/immich/deployment-server.yaml

@@ -28,6 +28,11 @@ spec:
           env:
             - name: REDIS_HOSTNAME
               value: "{{ .apps.immich.redisHostname }}"
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: immich-secrets
+                  key: apps.redis.password
             - name: DB_HOSTNAME
               value: "{{ .apps.immich.dbHostname }}"
             - name: DB_USERNAME

apps/immich/manifest.yaml

@@ -18,6 +18,8 @@ defaultConfig:
   dbHostname: postgres.postgres.svc.cluster.local
   dbUsername: immich
   domain: immich.{{ .cloud.domain }}
+  tlsSecretName: wildcard-wild-cloud-tls
 requiredSecrets:
   - apps.immich.dbPassword
   - apps.postgres.password
+  - apps.redis.password

apps/keila/manifest.yaml

@@ -14,6 +14,7 @@ defaultConfig:
   dbUsername: keila
   disableRegistration: "true"
   adminUser: admin@{{ .cloud.domain }}
+  tlsSecretName: wildcard-wild-cloud-tls
   smtp:
     host: "{{ .cloud.smtp.host }}"
     port: "{{ .cloud.smtp.port }}"

apps/openproject/manifest.yaml

@@ -20,13 +20,14 @@ defaultConfig:
   hsts: true
   seedLocale: en
   adminUserName: OpenProject Admin
-  adminUserEmail: '{{ .operator.email }}'
+  adminUserEmail: "{{ .operator.email }}"
   adminPasswordReset: true
   postgresStatementTimeout: 120s
   tmpVolumesStorage: 2Gi
+  tlsSecretName: wildcard-wild-cloud-tls
   cacheStore: memcache
   railsRelativeUrlRoot: ""
 requiredSecrets:
   - apps.openproject.dbPassword
   - apps.openproject.adminPassword
-  - apps.postgres.password
+  - apps.postgres.password

apps/redis/manifest.yaml

@@ -7,3 +7,5 @@ defaultConfig:
   image: redis:alpine
   timezone: UTC
   port: 6379
+requiredSecrets:
+  - apps.redis.password