feat: add linkwarden

[volschin]

No description provided.

[github-actions]

--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/linkwarden

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/linkwarden

@@ -0,0 +1,43 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: cluster-apps
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: linkwarden
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: linkwarden
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  dependsOn:
+  - name: external-secrets-stores
+  interval: 60m
+  path: ./kubernetes/apps/office/linkwarden/app
+  postBuild:
+    substitute:
+      APP: linkwarden
+      VOLSYNC_CAPACITY: 1Gi
+    substituteFrom:
+    - kind: ConfigMap
+      name: cluster-settings
+    - kind: Secret
+      name: cluster-secrets
+    - kind: ConfigMap
+      name: cluster-user-settings
+      optional: true
+    - kind: Secret
+      name: cluster-user-secrets
+      optional: true
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  targetNamespace: office
+  wait: false
+
--- kubernetes/apps/office/linkwarden/app Kustomization: flux-system/linkwarden ExternalSecret: office/linkwarden

+++ kubernetes/apps/office/linkwarden/app Kustomization: flux-system/linkwarden ExternalSecret: office/linkwarden

@@ -0,0 +1,34 @@

+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  labels:
+    app.kubernetes.io/name: linkwarden
+    kustomize.toolkit.fluxcd.io/name: linkwarden
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: linkwarden
+  namespace: office
+spec:
+  dataFrom:
+  - extract:
+      key: linkwarden
+  - extract:
+      key: cnpg
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: bitwarden-secrets-manager
+  target:
+    creationPolicy: Owner
+    name: linkwarden-secret
+    template:
+      data:
+        DATABASE_URL: postgresql://{{ .LINKWARDEN_POSTGRES_USER }}:{{ .LINKWARDEN_POSTGRES_PASS
+          }}@{{ .POSTGRES_HOST }}/{{ .LINKWARDEN_POSTGRES_DBNAME }}
+        INIT_POSTGRES_DBNAME: '{{ .LINKWARDEN_POSTGRES_DBNAME }}'
+        INIT_POSTGRES_HOST: '{{ .POSTGRES_HOST }}'
+        INIT_POSTGRES_PASS: '{{ .LINKWARDEN_POSTGRES_PASS }}'
+        INIT_POSTGRES_SUPER_PASS: '{{ .POSTGRES_SUPER_PASS }}'
+        INIT_POSTGRES_USER: '{{ .LINKWARDEN_POSTGRES_USER }}'
+        NEXTAUTH_SECRET: '{{ .LINKWARDEN_NEXTAUTH_SECRET }}'
+      engineVersion: v2
+
--- kubernetes/apps/office/linkwarden/app Kustomization: flux-system/linkwarden HelmRelease: office/linkwarden

+++ kubernetes/apps/office/linkwarden/app Kustomization: flux-system/linkwarden HelmRelease: office/linkwarden

@@ -0,0 +1,95 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  labels:
+    app.kubernetes.io/name: linkwarden
+    kustomize.toolkit.fluxcd.io/name: linkwarden
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: linkwarden
+  namespace: office
+spec:
+  chartRef:
+    kind: OCIRepository
+    name: app-template
+    namespace: flux-system
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  interval: 60m
+  maxHistory: 2
+  uninstall:
+    keepHistory: false
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+  values:
+    controllers:
+      linkwarden:
+        annotations:
+          reloader.stakater.com/auto: 'true'
+        containers:
+          app:
+            env:
+              DISABLE_NEW_SSO_USERS: false
+              HOME: /data/config
+              NEXT_PUBLIC_CREDENTIALS_ENABLED: false
+              NEXT_PUBLIC_DISABLE_REGISTRATION: true
+              NEXTAUTH_URL: https://link...PLACEHOLDER..
+              STORAGE_FOLDER: config
+              TIMEZONE: Europe/Berlin
+            envFrom:
+            - secretRef:
+                name: linkwarden-secret
+            image:
+              pullPolicy: IfNotPresent
+              repository: ghcr.io/linkwarden/linkwarden
+              tag: v2.6.0@sha256:29451d800fc74f4fda6d607736ea0fa8b69798467994d7f76bedd6b2897e6602
+            resources:
+              limits:
+                memory: 1Gi
+              requests:
+                cpu: 10m
+                memory: 512Mi
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                - ALL
+        initContainers:
+          init-db:
+            envFrom:
+            - secretRef:
+                name: linkwarden-secret
+            image:
+              pullPolicy: IfNotPresent
+              repository: ghcr.io/volschin/postgres-init
+              tag: 16
+    ingress:
+      app:
+        annotations:
+          external-dns.alpha.kubernetes.io/target: internal...PLACEHOLDER..
+        className: internal
+        hosts:
+        - host: link...PLACEHOLDER..
+          paths:
+          - path: /
+            service:
+              identifier: app
+              port: http
+    persistence:
+      data:
+        existingClaim: linkwarden-data
+        globalMounts:
+        - path: /data/config
+      tmp:
+        type: emptyDir
+    service:
+      app:
+        controller: linkwarden
+        ports:
+          http:
+            port: 3000
+
--- kubernetes/apps/office/linkwarden/app Kustomization: flux-system/linkwarden PersistentVolumeClaim: office/linkwarden-data

+++ kubernetes/apps/office/linkwarden/app Kustomization: flux-system/linkwarden PersistentVolumeClaim: office/linkwarden-data

@@ -0,0 +1,18 @@

+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    app.kubernetes.io/name: linkwarden
+    kustomize.toolkit.fluxcd.io/name: linkwarden
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: linkwarden-data
+  namespace: office
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 2Gi
+  storageClassName: longhorn
+

[github-actions]

--- HelmRelease: office/linkwarden Service: office/linkwarden

+++ HelmRelease: office/linkwarden Service: office/linkwarden

@@ -0,0 +1,22 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: linkwarden
+  labels:
+    app.kubernetes.io/instance: linkwarden
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: linkwarden
+    app.kubernetes.io/service: linkwarden
+spec:
+  type: ClusterIP
+  ports:
+  - port: 3000
+    targetPort: 3000
+    protocol: TCP
+    name: http
+  selector:
+    app.kubernetes.io/component: linkwarden
+    app.kubernetes.io/instance: linkwarden
+    app.kubernetes.io/name: linkwarden
+
--- HelmRelease: office/linkwarden Deployment: office/linkwarden

+++ HelmRelease: office/linkwarden Deployment: office/linkwarden

@@ -0,0 +1,93 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: linkwarden
+  labels:
+    app.kubernetes.io/component: linkwarden
+    app.kubernetes.io/instance: linkwarden
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: linkwarden
+  annotations:
+    reloader.stakater.com/auto: 'true'
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: linkwarden
+      app.kubernetes.io/name: linkwarden
+      app.kubernetes.io/instance: linkwarden
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: linkwarden
+        app.kubernetes.io/instance: linkwarden
+        app.kubernetes.io/name: linkwarden
+    spec:
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      initContainers:
+      - envFrom:
+        - secretRef:
+            name: linkwarden-secret
+        image: ghcr.io/volschin/postgres-init:16
+        imagePullPolicy: IfNotPresent
+        name: init-db
+        volumeMounts:
+        - mountPath: /data/config
+          name: data
+        - mountPath: /tmp
+          name: tmp
+      containers:
+      - env:
+        - name: DISABLE_NEW_SSO_USERS
+          value: 'false'
+        - name: HOME
+          value: /data/config
+        - name: NEXTAUTH_URL
+          value: https://link...PLACEHOLDER..
+        - name: NEXT_PUBLIC_CREDENTIALS_ENABLED
+          value: 'false'
+        - name: NEXT_PUBLIC_DISABLE_REGISTRATION
+          value: 'true'
+        - name: STORAGE_FOLDER
+          value: config
+        - name: TIMEZONE
+          value: Europe/Berlin
+        envFrom:
+        - secretRef:
+            name: linkwarden-secret
+        image: ghcr.io/linkwarden/linkwarden:v2.6.0@sha256:29451d800fc74f4fda6d607736ea0fa8b69798467994d7f76bedd6b2897e6602
+        imagePullPolicy: IfNotPresent
+        name: app
+        resources:
+          limits:
+            memory: 1Gi
+          requests:
+            cpu: 10m
+            memory: 512Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+        volumeMounts:
+        - mountPath: /data/config
+          name: data
+        - mountPath: /tmp
+          name: tmp
+      volumes:
+      - name: data
+        persistentVolumeClaim:
+          claimName: linkwarden-data
+      - emptyDir: {}
+        name: tmp
+
--- HelmRelease: office/linkwarden Ingress: office/linkwarden

+++ HelmRelease: office/linkwarden Ingress: office/linkwarden

@@ -0,0 +1,25 @@

+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: linkwarden
+  labels:
+    app.kubernetes.io/instance: linkwarden
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: linkwarden
+  annotations:
+    external-dns.alpha.kubernetes.io/target: internal...PLACEHOLDER..
+spec:
+  ingressClassName: internal
+  rules:
+  - host: link...PLACEHOLDER..
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: linkwarden
+            port:
+              number: 3000
+