Commit new App releases for TrueCharts

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
This commit is contained in:
TrueCharts-Bot 2021-06-01 06:03:16 +00:00
parent 444fd44c4c
commit 795b37a1ae
70 changed files with 2588 additions and 42 deletions

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:39:05.51115025Z"
generated: "2021-06-01T06:01:45.048973997Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:39:04.611842665Z"
generated: "2021-06-01T06:01:44.183646356Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:39.59843172Z"
generated: "2021-06-01T06:01:19.750588652Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:40.52835732Z"
generated: "2021-06-01T06:01:20.562347965Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:41.457219863Z"
generated: "2021-06-01T06:01:21.360692796Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:42.397131885Z"
generated: "2021-06-01T06:01:22.204540453Z"

View File

@ -0,0 +1,8 @@
# Configuration Options
##### Connecting to other apps
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Together" guide:
https://truecharts.org/manual/linking/
##### Available config options
In the future this page is going to contain an automated list of options available in the installation/edit UI.

View File

@ -0,0 +1,9 @@
dependencies:
- name: common
repository: https://truecharts.org/
version: 5.1.3
- name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.4.8
digest: sha256:2ef9469c822d60396b7d9503681cb9888c9502063705d50b603fa14bd4e7c8e7
generated: "2021-06-01T06:01:25.796546861Z"

View File

@ -0,0 +1,30 @@
apiVersion: v2
appVersion: auto
dependencies:
- name: common
repository: https://truecharts.org/
version: 5.1.3
- condition: postgresql.enabled
name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.4.8
deprecated: false
description: A free and open source personal finance manager
home: https://github.com/firefly-iii/firefly-iii/
icon: https://www.firefly-iii.org/assets/logo/color.png
keywords:
- fireflyiii
- finacial
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: truecharts.org
- email: 20650065+warllo54@users.noreply.github.com
name: warllo54
url: truecharts.org
name: fireflyiii
sources:
- https://github.com/firefly-iii/firefly-iii/
type: application
version: 3.2.4

View File

@ -0,0 +1,54 @@
# Introduction
![Version: 1.0.1](https://img.shields.io/badge/Version-1.0.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: auto](https://img.shields.io/badge/AppVersion-auto-informational?style=flat-square)
A free and open source personal finance manager
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
## Source Code
* <https://github.com/firefly-iii/firefly-iii/>
## Requirements
Kubernetes: `>=1.16.0-0`
## Dependencies
| Repository | Name | Version |
|------------|------|---------|
| https://charts.bitnami.com/bitnami | postgresql | 10.4.2 |
| https://truecharts.org/ | common | 3.5.5 |
## Installing the Chart
To install the chart with the release name `fireflyiii`
- Open TrueNAS SCALE
- Go to Apps
- Click "Install" for this specific Apps
- Fill out the configuration form
## Uninstalling the Chart
To uninstall the `fireflyiii` deployment
- Open TrueNAS SCALE
- Go to Apps
- Go to "Installed Apps"
- Expand the menu in the top-right corner of this App
- Click "Remove" for this specific Apps
The command removes all the Kubernetes components associated with the chart **including storage volumes** _(Except hostPath Storage)_ and deletes the release.
## Support
- See the [Wiki](https://truecharts.org)
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
- Ask a [question](https://github.com/truecharts/apps/discussions)
----------------------------------------------
Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0)
All Rights Reserved - The TrueCharts Project

View File

@ -0,0 +1,3 @@
A free and open source personal finance manager
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
A free and open source personal finance manager

Binary file not shown.

View File

@ -0,0 +1,41 @@
##
# This file contains Values.yaml content that gets added to the output of questions.yaml
# It's ONLY meant for content that the user is NOT expected to change.
# Example: Everything under "image" is not included in questions.yaml but is included here.
##
image:
repository: jc5x/firefly-iii
pullPolicy: IfNotPresent
tag: version-5.5.11
env:
DB_USERNAME: fireflyiii
DB_DATABASE: fireflyiii
DB_CONNECTION: pgsql
DB_PORT: 5432
envValueFrom:
DB_HOST:
secretKeyRef:
name: dbcreds
key: postgresql_host
DB_PASSWORD:
secretKeyRef:
name: dbcreds
key: postgresql-password
# Enabled postgres
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/postgresql
postgresql:
enabled: true
postgresqlUsername: fireflyiii
postgresqlDatabase: fireflyiii
existingSecret: dbcreds
persistence:
enabled: true
existingClaim: db
##
# Most other defaults are set in questions.yaml
# For other options please refer to the wiki, default_values.yaml or the common library chart
##

View File

@ -0,0 +1,679 @@
groups:
- name: "Container Image"
description: "Image to be used for container"
- name: "Controller"
description: "Configure workload deployment"
- name: "Container Configuration"
description: "additional container configuration"
- name: "App Configuration"
description: "App specific config options"
- name: "Networking and Services"
description: "Configure Network and Services for container"
- name: "Storage and Persistence"
description: "Persist and share data that is separate from the container"
- name: "Ingress"
description: "Ingress Configuration"
- name: "Security and Permissions"
description: "Configure security context and permissions"
- name: "Resources and Devices"
description: "Specify resources/devices to be allocated to workload"
- name: "Advanced"
description: "Advanced Configuration"
portals:
web_portal:
protocols:
- "$kubernetes-resource_configmap_portal_protocol"
host:
- "$kubernetes-resource_configmap_portal_host"
ports:
- "$kubernetes-resource_configmap_portal_port"
questions:
- variable: portal
group: "Container Image"
label: "Configure Portal Button"
schema:
type: dict
hidden: true
attrs:
- variable: enabled
label: "Enable"
description: "enable the portal button"
schema:
hidden: true
editable: false
type: boolean
default: true
- variable: controller
group: "Controller"
label: ""
schema:
type: dict
attrs:
- variable: type
description: "Please specify type of workload to deploy"
label: "(Advanced) Controller Type"
schema:
type: string
default: "deployment"
required: true
enum:
- value: "deployment"
description: "Deployment"
- value: "statefulset"
description: "Statefulset"
- value: "daemonset"
description: "Daemonset"
- variable: replicas
description: "Number of desired pod replicas"
label: "Desired Replicas"
schema:
type: int
default: 1
required: true
- variable: strategy
description: "Please specify type of workload to deploy"
label: "(Advanced) Update Strategy"
schema:
type: string
default: "Recreate"
required: true
enum:
- value: "Recreate"
description: "Recreate: Kill existing pods before creating new ones"
- value: "RollingUpdate"
description: "RollingUpdate: Create new pods and then kill old ones"
- value: "OnDelete"
description: "(Legacy) OnDelete: ignore .spec.template changes"
# Docker specific env
- variable: env
group: "Container Configuration"
label: "Image Environment"
schema:
type: dict
attrs:
- variable: TZ
label: "Timezone"
schema:
type: string
default: "Etc/UTC"
$ref:
- "definitions/timezone"
- variable: APP_KEY
label: "App Key"
description: "Your unique 32 application character key"
schema:
type: string
default: ""
required: true
- variable: UMASK
label: "UMASK"
description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
schema:
type: string
default: "002"
- variable: envList
label: "Image environment"
group: "Container Configuration"
schema:
type: list
default: []
items:
- variable: envItem
label: "Environment Variable"
schema:
type: dict
attrs:
- variable: name
label: "Name"
schema:
type: string
- variable: value
label: "Value"
schema:
type: string
- variable: hostNetwork
group: "Networking and Services"
label: "Enable Host Networking"
schema:
type: boolean
default: false
- variable: externalInterfaces
description: "External Interfaces"
label: "(Advanced) External Interfaces"
group: "Networking and Services"
schema:
type: list
items:
- variable: interfaceConfiguration
description: "Interface Configuration"
label: "Interface Configuration"
schema:
type: dict
$ref:
- "normalize/interfaceConfiguration"
attrs:
- variable: hostInterface
description: "Please specify host interface"
label: "Host Interface"
schema:
type: string
required: true
$ref:
- "definitions/interface"
- variable: ipam
description: "Define how IP Address will be managed"
label: "IP Address Management"
schema:
type: dict
required: true
attrs:
- variable: type
description: "Specify type for IPAM"
label: "IPAM Type"
schema:
type: string
required: true
enum:
- value: "dhcp"
description: "Use DHCP"
- value: "static"
description: "Use static IP"
show_subquestions_if: "static"
subquestions:
- variable: staticIPConfigurations
label: "Static IP Addresses"
schema:
type: list
items:
- variable: staticIP
label: "Static IP"
schema:
type: ipaddr
cidr: true
- variable: staticRoutes
label: "Static Routes"
schema:
type: list
items:
- variable: staticRouteConfiguration
label: "Static Route Configuration"
schema:
type: dict
attrs:
- variable: destination
label: "Destination"
schema:
type: ipaddr
cidr: true
required: true
- variable: gateway
label: "Gateway"
schema:
type: ipaddr
cidr: false
required: true
- variable: service
group: "Networking and Services"
label: "Configure Service(s)"
schema:
type: dict
attrs:
- variable: main
label: "Main Service"
description: "The Primary service on which the healthcheck runs, often the webUI"
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the service"
schema:
type: boolean
default: true
hidden: true
- variable: type
label: "Service Type"
description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer"
schema:
type: string
default: "NodePort"
enum:
- value: "NodePort"
description: "NodePort"
- value: "ClusterIP"
description: "ClusterIP"
- value: "LoadBalancer"
description: "LoadBalancer"
- variable: loadBalancerIP
label: "LoadBalancer IP"
description: "LoadBalancerIP"
schema:
show_if: [["type", "=", "LoadBalancer"]]
type: string
default: ""
- variable: externalIPs
label: "External IP's"
description: "External IP's"
schema:
show_if: [["type", "=", "LoadBalancer"]]
type: list
default: []
items:
- variable: externalIP
label: "External IP"
schema:
type: string
- variable: ports
label: "Service's Port(s) Configuration"
schema:
type: dict
attrs:
- variable: main
label: "Main Service Port Configuration"
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the port"
schema:
type: boolean
default: true
hidden: true
- variable: protocol
label: "Port Type"
schema:
type: string
default: "HTTP"
enum:
- value: HTTP
description: "HTTP"
- value: "HTTPS"
description: "HTTPS"
- value: TCP
description: "TCP"
- value: "UDP"
description: "UDP"
- variable: port
label: "Container Port"
schema:
type: int
default: 8080
editable: false
hidden: true
- variable: targetport
label: "Target Port"
description: "This port exposes the container port on the service"
schema:
type: int
default: 51080
editable: true
required: true
- variable: nodePort
label: "Node Port (Optional)"
description: "This port gets exposed to the node. Only considered when service type is NodePort"
schema:
type: int
min: 9000
max: 65535
default: 36048
required: true
## TrueCharts Specific
- variable: persistence
label: "Integrated Persistent Storage"
description: "Integrated Persistent Storage"
group: "Storage and Persistence"
schema:
type: dict
attrs:
- variable: data
label: "App Config Storage"
description: "Stores the Application Configuration."
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the storage"
schema:
type: boolean
default: true
- variable: storageClass
label: "Type of Storage"
description: " Warning: Anything other than SCALE-ZFS will break rollback!"
schema:
type: string
default: "SCALE-ZFS"
- variable: mountPath
label: "mountPath"
description: "Path inside the container the storage is mounted"
schema:
type: string
default: "/data"
hidden: true
- variable: emptyDir
label: "EmptyDir Volume"
schema:
type: dict
attrs:
- variable: enabled
label: "Use emptyDir volume"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: medium
label: "EmptyDir Medium"
schema:
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
- variable: accessMode
label: "Access Mode (Advanced)"
description: "Allow or disallow multiple PVC's writhing to the same PVC"
schema:
type: string
default: "ReadWriteOnce"
enum:
- value: "ReadWriteOnce"
description: "ReadWriteOnce"
- value: "ReadOnlyMany"
description: "ReadOnlyMany"
- value: "ReadWriteMany"
description: "ReadWriteMany"
- variable: size
label: "Size quotum of storage"
schema:
type: string
default: "100Gi"
- variable: db
label: "Database Storage"
description: "Stores the Application database."
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the storage"
schema:
type: boolean
default: true
hidden: true
- variable: nameOverride
label: "Override PVC Name (advanced)"
description: "Forces a certain name for the PVC"
schema:
type: string
default: "db"
hidden: true
- variable: storageClass
label: "Type of Storage"
description: " Warning: Anything other than SCALE-ZFS will break rollback!"
schema:
type: string
default: "SCALE-ZFS"
- variable: mountPath
label: "mountPath"
description: "Path inside the container the storage is mounted"
schema:
type: string
default: ""
hidden: true
- variable: emptyDir
label: "EmptyDir Volume"
schema:
type: dict
attrs:
- variable: enabled
label: "Use emptyDir volume"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: medium
label: "EmptyDir Medium"
schema:
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
- variable: accessMode
label: "Access Mode (Advanced)"
description: "Allow or disallow multiple PVC's writhing to the same PVC"
schema:
type: string
default: "ReadWriteOnce"
enum:
- value: "ReadWriteOnce"
description: "ReadWriteOnce"
- value: "ReadOnlyMany"
description: "ReadOnlyMany"
- value: "ReadWriteMany"
description: "ReadWriteMany"
- variable: size
label: "Size quotum of storage"
schema:
type: string
default: "100Gi"
- variable: dbbackup
label: "Database Backup Storage"
description: "Stores the Application database backups."
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the storage"
schema:
type: boolean
default: true
- variable: storageClass
label: "Type of Storage"
description: " Warning: Anything other than SCALE-ZFS will break rollback!"
schema:
type: string
default: "SCALE-ZFS"
- variable: mountPath
label: "mountPath"
description: "Path inside the container the storage is mounted"
schema:
type: string
default: ""
hidden: true
- variable: emptyDir
label: "EmptyDir Volume"
schema:
type: dict
attrs:
- variable: enabled
label: "Use emptyDir volume"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: medium
label: "EmptyDir Medium"
schema:
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
- variable: accessMode
label: "Access Mode (Advanced)"
description: "Allow or disallow multiple PVC's writhing to the same PVC"
schema:
type: string
default: "ReadWriteOnce"
enum:
- value: "ReadWriteOnce"
description: "ReadWriteOnce"
- value: "ReadOnlyMany"
description: "ReadOnlyMany"
- value: "ReadWriteMany"
description: "ReadWriteMany"
- variable: size
label: "Size quotum of storage"
schema:
type: string
default: "100Gi"
- variable: hostPathMounts
label: "Custom app storage"
group: "Storage and Persistence"
schema:
type: list
default: []
items:
- variable: volumeMount
label: "Custom Storage"
schema:
type: dict
attrs:
- variable: enabled
label: "Enabled"
schema:
type: boolean
default: true
hidden: true
- variable: setPermissions
label: "Automatic Permissions"
description: "Automatically set permissions on install"
schema:
type: boolean
default: true
- variable: readOnly
label: "Mount as ReadOnly"
description: "prevent any write from being done to the mounted volume"
schema:
type: boolean
default: false
- variable: emptyDir
label: "EmptyDir Volume"
schema:
type: dict
attrs:
- variable: enabled
label: "Use emptyDir volume"
schema:
type: boolean
default: false
- variable: medium
label: "EmptyDir Medium"
schema:
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
- variable: mountPath
label: "Mount Path"
description: "Path to mount inside the pod"
schema:
type: path
required: true
default: ""
editable: true
- variable: hostPath
label: "Host Path"
description: "Path on the host to mount inside the container, ignored when emptyDir is enabled"
schema:
type: hostpath
required: true
# Enable privileged
- variable: securityContext
group: "Security and Permissions"
label: "Security Context"
schema:
type: dict
attrs:
- variable: privileged
label: "Enable privileged mode for Common-Chart based charts"
schema:
type: boolean
default: false
# Set Pod Security Policy
- variable: podSecurityContext
group: "Security and Permissions"
label: "Pod Security Context"
schema:
type: dict
attrs:
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: false
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 0
- variable: runAsGroup
label: "runAsGroup"
description: The groupID this App of the user running the application"
schema:
type: int
default: 0
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 0
- variable: fsGroupChangePolicy
label: "When should we take ownership?"
schema:
type: string
default: "OnRootMismatch"
enum:
- value: "OnRootMismatch"
description: "OnRootMismatch"
- value: "Always"
description: "Always"
- variable: resources
group: "Resources and Devices"
label: ""
schema:
type: dict
attrs:
- variable: limits
label: "Advanced Limit Resource Consumption"
schema:
type: dict
attrs:
- variable: cpu
label: "CPU"
schema:
type: string
default: "2000m"
- variable: memory
label: "Memory RAM"
schema:
type: string
default: "2Gi"
- variable: requests
label: "Advanced Request minimum resources required"
schema:
type: dict
attrs:
- variable: cpu
label: "CPU"
schema:
type: string
default: "10m"
- variable: memory
label: "Memory RAM"
schema:
type: string
default: "50Mi"

View File

@ -0,0 +1,5 @@
{{/* Make sure all variables are set properly */}}
{{- include "common.values.setup" . }}
{{/* Render the templates */}}
{{ include "common.all" . }}

View File

@ -0,0 +1,19 @@
apiVersion: v1
kind: Secret
metadata:
name: dbcreds
{{- $previous := lookup "v1" "Secret" .Release.Namespace "dbcreds" }}
{{- $dbPass := "" }}
data:
{{- if $previous }}
{{- $dbPass = ( index $previous.data "postgresql-password" ) | b64dec }}
postgresql-password: {{ ( index $previous.data "postgresql-password" ) }}
postgresql-postgres-password: {{ ( index $previous.data "postgresql-postgres-password" ) }}
{{- else }}
{{- $dbPass = randAlphaNum 50 }}
postgresql-password: {{ $dbPass | b64enc | quote }}
postgresql-postgres-password: {{ randAlphaNum 50 | b64enc | quote }}
{{- end }}
url: {{ ( printf "%v%v:%v@%v-%v:%v/%v" "postgresql://" .Values.postgresql.postgresqlUsername $dbPass .Release.Name "postgresql" "5432" .Values.postgresql.postgresqlDatabase ) | b64enc | quote }}
postgresql_host: {{ ( printf "%v-%v" .Release.Name "postgresql" ) | b64enc | quote }}
type: Opaque

View File

@ -0,0 +1,83 @@
# Default values for fireflyIII.
image:
repository: jc5x/firefly-iii
pullPolicy: IfNotPresent
tag: version-5.5.11
strategy:
type: Recreate
podSecurityContext:
runAsNonRoot: false
runAsUser: 0
runAsGroup: 0
fsGroup: 0
service:
main:
ports:
main:
port: 8080
tcp:
enabled: true
type: ClusterIP
ports:
tcp:
enabled: true
port: 51080
protocol: TCP
env:
DB_USERNAME: firefly
DB_DATABASE: firefly
DB_CONNECTION: pgsql
DB_PORT: 5432
APP_Key: AGcfkCUS233ZWmBXztYbdyCs2u7kkz55
envValueFrom:
DB_HOST:
secretKeyRef:
name: dbcreds
key: url
DB_PASSWORD:
secretKeyRef:
name: dbcreds
key: postgresql-password
persistence:
data:
enabled: true
mountPath: "/var/www/html/storage/upload"
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
db:
nameOverride: "db"
enabled: true
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
dbbackup:
enabled: true
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
# Enabled postgres
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/postgresql
postgresql:
enabled: true
postgresqlUsername: firefly
postgresqlDatabase: firefly
existingSecret: dbcreds
persistence:
enabled: false
existingClaim: db

View File

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:49.41269111Z"
generated: "2021-06-01T06:01:29.812497779Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:50.324403287Z"
generated: "2021-06-01T06:01:30.644030508Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:51.306394051Z"
generated: "2021-06-01T06:01:31.495397661Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:52.224347425Z"
generated: "2021-06-01T06:01:32.366066346Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:53.22446343Z"
generated: "2021-06-01T06:01:33.242359308Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:54.131270217Z"
generated: "2021-06-01T06:01:34.128014933Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:55.058371318Z"
generated: "2021-06-01T06:01:34.960777343Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:55.987829979Z"
generated: "2021-06-01T06:01:35.808967854Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:56.928016375Z"
generated: "2021-06-01T06:01:37.085331217Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:57.872860432Z"
generated: "2021-06-01T06:01:37.994556236Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:58.844198443Z"
generated: "2021-06-01T06:01:38.880667556Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:59.761548468Z"
generated: "2021-06-01T06:01:39.728939265Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:39:00.780730188Z"
generated: "2021-06-01T06:01:40.663863252Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:39:01.752815657Z"
generated: "2021-06-01T06:01:41.589863304Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:39:02.691067803Z"
generated: "2021-06-01T06:01:42.46863467Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:39:03.625140424Z"
generated: "2021-06-01T06:01:43.305443582Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:12.646814542Z"
generated: "2021-06-01T06:00:53.591070646Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:13.596931788Z"
generated: "2021-06-01T06:00:54.371180803Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:14.641070609Z"
generated: "2021-06-01T06:00:55.86783538Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:15.579400818Z"
generated: "2021-06-01T06:00:56.647403944Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:16.528507087Z"
generated: "2021-06-01T06:00:57.466975929Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:17.398037561Z"
generated: "2021-06-01T06:00:58.268408032Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:18.354386914Z"
generated: "2021-06-01T06:00:59.075705864Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:19.345548943Z"
generated: "2021-06-01T06:00:59.896981829Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:20.307645837Z"
generated: "2021-06-01T06:01:00.734002016Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:21.214780404Z"
generated: "2021-06-01T06:01:01.595558218Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:22.143263213Z"
generated: "2021-06-01T06:01:02.425955818Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:23.121606157Z"
generated: "2021-06-01T06:01:03.395506742Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:24.030518585Z"
generated: "2021-06-01T06:01:04.330484006Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:24.998340171Z"
generated: "2021-06-01T06:01:05.181491943Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:25.985825516Z"
generated: "2021-06-01T06:01:06.026952851Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:26.905593389Z"
generated: "2021-06-01T06:01:06.825863152Z"

View File

@ -6,4 +6,4 @@ dependencies:
repository: https://helm.traefik.io/traefik
version: 9.19.1
digest: sha256:6837d576d0a80cb63dcd82a8dd3a2e7e5ea10f710b1ef1d5c29ce3af4eb3fbfe
generated: "2021-05-31T09:38:28.249629323Z"
generated: "2021-06-01T06:01:08.201231895Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:30.444716578Z"
generated: "2021-06-01T06:01:10.83672027Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:31.366192787Z"
generated: "2021-06-01T06:01:11.653502931Z"

View File

@ -0,0 +1,8 @@
# Configuration Options
##### Connecting to other apps
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Together" guide:
https://truecharts.org/manual/linking/
##### Available config options
In the future this page is going to contain an automated list of options available in the installation/edit UI.

View File

@ -0,0 +1,9 @@
dependencies:
- name: common
repository: https://truecharts.org/
version: 5.1.3
- name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.4.8
digest: sha256:2ef9469c822d60396b7d9503681cb9888c9502063705d50b603fa14bd4e7c8e7
generated: "2021-06-01T06:01:15.129657076Z"

View File

@ -0,0 +1,34 @@
apiVersion: v2
appVersion: auto
dependencies:
- name: common
repository: https://truecharts.org/
version: 5.1.3
- condition: postgresql.enabled
name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.4.8
deprecated: false
description: Unofficial Bitwarden compatible server written in Rust
home: https://github.com/truecharts/apps/tree/master/charts/stable/vaultwarden
icon: https://raw.githubusercontent.com/bitwarden/brand/master/icons/256x256.png
keywords:
- bitwarden
- bitwardenrs
- bitwarden_rs
- vaultwarden
- password
- rust
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: truecharts.org
- email: kjeld@schouten-lebbing.nl
name: Ornias1993
url: truecharts.org
name: vaultwarden
sources:
- https://github.com/dani-garcia/vaultwarden
type: application
version: 2.2.6

View File

@ -0,0 +1,56 @@
# Introduction
![Version: 1.2.5](https://img.shields.io/badge/Version-1.2.5-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: auto](https://img.shields.io/badge/AppVersion-auto-informational?style=flat-square)
Unofficial Vaultwarden compatible server written in Rust
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
## Source Code
* <https://github.com/truecharts/apps/tree/master/incubator/Vaultwarden>
* <https://github.com/k8s-at-home/charts/tree/master/charts/stable/Vaultwardenrs>
* <https://github.com/dani-garcia/Vaultwarden_rs>
## Requirements
Kubernetes: `>=1.16.0-0`
## Dependencies
| Repository | Name | Version |
|------------|------|---------|
| https://charts.bitnami.com/bitnami | postgresql | 10.4.2 |
| https://truecharts.org/ | common | 3.5.5 |
## Installing the Chart
To install the chart with the release name `Vaultwarden`
- Open TrueNAS SCALE
- Go to Apps
- Click "Install" for this specific Apps
- Fill out the configuration form
## Uninstalling the Chart
To uninstall the `Vaultwarden` deployment
- Open TrueNAS SCALE
- Go to Apps
- Go to "Installed Apps"
- Expand the menu in the top-right corner of this App
- Click "Remove" for this specific Apps
The command removes all the Kubernetes components associated with the chart **including storage volumes** _(Except hostPath Storage)_ and deletes the release.
## Support
- See the [Wiki](https://truecharts.org)
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
- Ask a [question](https://github.com/truecharts/apps/discussions)
----------------------------------------------
Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0)
All Rights Reserved - The TrueCharts Project

View File

@ -0,0 +1,3 @@
Unofficial Bitwarden compatible server written in Rust
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
Unofficial Bitwarden compatible server written in Rust

Binary file not shown.

Binary file not shown.

View File

@ -0,0 +1,54 @@
##
# This file contains Values.yaml content that gets added to the output of questions.yaml
# It's ONLY meant for content that the user is NOT expected to change.
# Example: Everything under "image" is not included in questions.yaml but is included here.
##
image:
repository: vaultwarden/server
pullPolicy: IfNotPresent
tag: 1.21.0
envTpl:
DOMAIN: "https://{{ if .Values.ingress }}{{ if .Values.ingress.main.enabled }}{{ ( index .Values.ingress.main.hosts 0 ).host }}{{ else }}placeholder.com{{ end }}{{ else }}placeholder.com{{ end }}"
envFrom:
- configMapRef:
name: vaultwardenconfig
- secretRef:
name: vaultwardensecret
envValueFrom:
DATABASE_URL:
secretKeyRef:
name: dbcreds
key: url
database:
# Database type, must be one of: 'sqlite', 'mysql' or 'postgresql'.
type: postgresql
# Enable DB Write-Ahead-Log for SQLite, disabled for other databases. https://github.com/dani-garcia/bitwarden_rs/wiki/Running-without-WAL-enabled
wal: false
## URL for external databases (mysql://user:pass@host:port or postgresql://user:pass@host:port).
# url: ""
## Set the size of the database connection pool.
# maxConnections: 10
## Connection retries during startup, 0 for infinite. 1 second between retries.
retries: 30
# Enabled postgres
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/postgresql
postgresql:
enabled: true
postgresqlUsername: homeassistant
postgresqlDatabase: homeassistant
existingSecret: dbcreds
persistence:
enabled: true
existingClaim: db
##
# Most other defaults are set in questions.yaml
# For other options please refer to the wiki, default_values.yaml or the common library chart
##

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,116 @@
{{/* Define the configmap */}}
{{- define "vaultwarden.configmap" -}}
---
apiVersion: v1
kind: ConfigMap
metadata:
name: vaultwardenconfig
data:
ROCKET_PORT: "8080"
SIGNUPS_ALLOWED: {{ .Values.vaultwarden.allowSignups | quote }}
{{- if .Values.vaultwarden.signupDomains }}
SIGNUPS_DOMAINS_WHITELIST: {{ join "," .Values.vaultwarden.signupDomains | quote }}
{{- end }}
{{- if and (eq .Values.vaultwarden.verifySignup true) (eq .Values.vaultwarden.smtp.enabled false) }}{{ required "Signup verification requires SMTP to be enabled" nil}}{{end}}
SIGNUPS_VERIFY: {{ .Values.vaultwarden.verifySignup | quote }}
{{- if and (eq .Values.vaultwarden.requireEmail true) (eq .Values.vaultwarden.smtp.enabled false) }}{{ required "Requiring emails for login depends on SMTP" nil}}{{end}}
REQUIRE_DEVICE_EMAIL: {{ .Values.vaultwarden.requireEmail | quote }}
{{- if .Values.vaultwarden.emailAttempts }}
EMAIL_ATTEMPTS_LIMIT: {{ .Values.vaultwarden.emailAttempts | quote }}
{{- end }}
{{- if .Values.vaultwarden.emailTokenExpiration }}
EMAIL_EXPIRATION_TIME: {{ .Values.vaultwarden.emailTokenExpiration | quote }}
{{- end }}
INVITATIONS_ALLOWED: {{ .Values.vaultwarden.allowInvitation | quote }}
{{- if .Values.vaultwarden.defaultInviteName }}
INVITATION_ORG_NAME: {{ .Values.vaultwarden.defaultInviteName | quote }}
{{- end }}
SHOW_PASSWORD_HINT: {{ .Values.vaultwarden.showPasswordHint | quote }}
WEBSOCKET_ENABLED: {{ .Values.vaultwarden.enableWebsockets | quote }}
WEB_VAULT_ENABLED: {{ .Values.vaultwarden.enableWebVault | quote }}
ORG_CREATION_USERS: {{ .Values.vaultwarden.orgCreationUsers | quote }}
{{- if .Values.vaultwarden.attachmentLimitOrg }}
ORG_ATTACHMENT_LIMIT: {{ .Values.vaultwarden.attachmentLimitOrg | quote }}
{{- end }}
{{- if .Values.vaultwarden.attachmentLimitUser }}
USER_ATTACHMENT_LIMIT: {{ .Values.vaultwarden.attachmentLimitUser | quote }}
{{- end }}
{{- if .Values.vaultwarden.hibpApiKey }}
HIBP_API_KEY: {{ .Values.vaultwarden.hibpApiKey | quote }}
{{- end }}
{{- include "vaultwarden.dbTypeValid" . }}
{{- if .Values.database.retries }}
DB_CONNECTION_RETRIES: {{ .Values.database.retries | quote }}
{{- end }}
{{- if .Values.database.maxConnections }}
DATABASE_MAX_CONNS: {{ .Values.database.maxConnections | quote }}
{{- end }}
{{- if eq .Values.vaultwarden.smtp.enabled true }}
SMTP_HOST: {{ required "SMTP host is required to enable SMTP" .Values.vaultwarden.smtp.host | quote }}
SMTP_FROM: {{ required "SMTP sender address ('from') is required to enable SMTP" .Values.vaultwarden.smtp.from | quote }}
{{- if .Values.vaultwarden.smtp.fromName }}
SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.ssl }}
SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.port }}
SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.authMechanism }}
SMTP_AUTH_MECHANISM: {{ .Values.vaultwarden.smtp.authMechanism | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.heloName }}
HELO_NAME: {{ .Values.vaultwarden.smtp.heloName | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.timeout }}
SMTP_TIMEOUT: {{ .Values.vaultwarden.smtp.timeout | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.invalidHostname }}
SMTP_ACCEPT_INVALID_HOSTNAMES: {{ .Values.vaultwarden.smtp.invalidHostname | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.invalidCertificate }}
SMTP_ACCEPT_INVALID_CERTS: {{ .Values.vaultwarden.smtp.invalidCertificate | quote }}
{{- end }}
{{- end }}
{{- if .Values.vaultwarden.log.file }}
LOG_FILE: {{ .Values.vaultwarden.log.file | quote }}
{{- end }}
{{- if or .Values.vaultwarden.log.level .Values.vaultwarden.log.timeFormat }}
EXTENDED_LOGGING: "true"
{{- end }}
{{- if .Values.vaultwarden.log.level }}
{{- include "vaultwarden.logLevelValid" . }}
LOG_LEVEL: {{ .Values.vaultwarden.log.level | quote }}
{{- end }}
{{- if .Values.vaultwarden.log.timeFormat }}
LOG_TIMESTAMP_FORMAT: {{ .Values.vaultwarden.log.timeFormat | quote }}
{{- end }}
{{- if .Values.vaultwarden.icons.disableDownload }}
DISABLE_ICON_DOWNLOAD: {{ .Values.vaultwarden.icons.disableDownload | quote }}
{{- if and (not .Values.vaultwarden.icons.cache) (eq .Values.vaultwarden.icons.disableDownload "true") }}
ICON_CACHE_TTL: "0"
{{- end }}
{{- end }}
{{- if .Values.vaultwarden.icons.cache }}
ICON_CACHE_TTL: {{ .Values.vaultwarden.icons.cache | quote }}
{{- end }}
{{- if .Values.vaultwarden.icons.cacheFailed }}
ICON_CACHE_NEGTTL: {{ .Values.vaultwarden.icons.cacheFailed | quote }}
{{- end }}
{{- if eq .Values.vaultwarden.admin.enabled true }}
{{- if eq .Values.vaultwarden.admin.disableAdminToken true }}
DISABLE_ADMIN_TOKEN: "true"
{{- end }}
{{- end }}
{{- if eq .Values.vaultwarden.yubico.enabled true }}
{{- if .Values.vaultwarden.yubico.server }}
YUBICO_SERVER: {{ .Values.vaultwarden.yubico.server | quote }}
{{- end }}
{{- end }}
{{- if eq .Values.database.type "sqlite" }}
ENABLE_DB_WAL: {{ .Values.database.wal | quote }}
{{- else }}
ENABLE_DB_WAL: "false"
{{- end }}
{{- end -}}

View File

@ -0,0 +1,59 @@
{{/* Define the secrets */}}
{{- define "vaultwarden.secrets" -}}
{{- $adminToken := "" }}
{{- if eq .Values.vaultwarden.admin.enabled true }}
{{- $adminToken = .Values.vaultwarden.admin.token | default (randAlphaNum 48) | b64enc | quote }}
{{- end -}}
{{- $smtpUser := "" }}
{{- if and (eq .Values.vaultwarden.smtp.enabled true ) (.Values.vaultwarden.smtp.user) }}
{{- $smtpUser = .Values.vaultwarden.smtp.user | b64enc | quote }}
{{- end -}}
{{- $yubicoClientId := "" }}
{{- if eq .Values.vaultwarden.yubico.enabled true }}
{{- $yubicoClientId = required "Yubico Client ID required" .Values.vaultwarden.yubico.clientId | toString | b64enc | quote }}
{{- end -}}
---
apiVersion: v1
kind: Secret
metadata:
name: vaultwardensecret
data:
{{- if ne $adminToken "" }}
ADMIN_TOKEN: {{ $adminToken }}
{{- end }}
{{- if ne $smtpUser "" }}
SMTP_USERNAME: {{ $smtpUser }}
SMTP_PASSWORD: {{ required "Must specify SMTP password" .Values.vaultwarden.smtp.password | b64enc | quote }}
{{- end }}
{{- if ne $yubicoClientId "" }}
YUBICO_CLIENT_ID: {{ $yubicoClientId }}
YUBICO_SECRET_KEY: {{ required "Yubico Secret Key required" .Values.vaultwarden.yubico.secretKey | b64enc | quote }}
{{- end }}
---
apiVersion: v1
kind: Secret
metadata:
labels:
{{- include "common.labels" . | nindent 4 }}
name: dbcreds
{{- $previous := lookup "v1" "Secret" .Release.Namespace "dbcreds" }}
{{- $dbPass := "" }}
data:
{{- if $previous }}
{{- $dbPass = ( index $previous.data "postgresql-password" ) | b64dec }}
postgresql-password: {{ ( index $previous.data "postgresql-password" ) }}
postgresql-postgres-password: {{ ( index $previous.data "postgresql-postgres-password" ) }}
{{- else }}
{{- $dbPass = randAlphaNum 50 }}
postgresql-password: {{ $dbPass | b64enc | quote }}
postgresql-postgres-password: {{ randAlphaNum 50 | b64enc | quote }}
{{- end }}
url: {{ ( printf "%v%v:%v@%v:%v/%v" "postgresql://" .Values.postgresql.postgresqlUsername $dbPass "postgresql" "5432" .Values.postgresql.postgresqlDatabase ) | b64enc | quote }}
type: Opaque
{{- end -}}

View File

@ -0,0 +1,17 @@
{{/*
Ensure valid DB type is select, defaults to SQLite
*/}}
{{- define "vaultwarden.dbTypeValid" -}}
{{- if not (or (eq .Values.database.type "postgresql") (eq .Values.database.type "mysql") (eq .Values.database.type "sqlite")) }}
{{- required "Invalid database type" nil }}
{{- end -}}
{{- end -}}
{{/*
Ensure log type is valid
*/}}
{{- define "vaultwarden.logLevelValid" -}}
{{- if not (or (eq .Values.vaultwarden.log.level "trace") (eq .Values.vaultwarden.log.level "debug") (eq .Values.vaultwarden.log.level "info") (eq .Values.vaultwarden.log.level "warn") (eq .Values.vaultwarden.log.level "error") (eq .Values.vaultwarden.log.level "off")) }}
{{- required "Invalid log level" nil }}
{{- end }}
{{- end }}

View File

@ -0,0 +1,11 @@
{{/* Make sure all variables are set properly */}}
{{- include "common.values.setup" . }}
{{/* Render the templates */}}
{{ include "common.all" . }}
{{/* Render configmap for vaultwarden */}}
{{- include "vaultwarden.configmap" . }}
{{/* Render secrets for vaultwarden */}}
{{- include "vaultwarden.secrets" . }}

View File

@ -0,0 +1,183 @@
# Default values for Bitwarden.
image:
repository: vaultwarden/server
pullPolicy: IfNotPresent
tag: 1.21.0
strategy:
type: Recreate
service:
main:
ports:
main:
port: 8080
ws:
ports:
ws:
enabled: true
port: 3012
env: {}
envTpl:
DOMAIN: "https://{{ if .Values.ingress }}{{ if .Values.ingress.main.enabled }}{{ ( index .Values.ingress.main.hosts 0 ).host }}{{ else }}placeholder.com{{ end }}{{ else }}placeholder.com{{ end }}"
envFrom:
- configMapRef:
name: vaultwardenconfig
- secretRef:
name: vaultwardensecret
envValueFrom:
DATABASE_URL:
secretKeyRef:
name: dbcreds
key: url
database:
# Database type, must be one of: 'sqlite', 'mysql' or 'postgresql'.
type: postgresql
# Enable DB Write-Ahead-Log for SQLite, disabled for other databases. https://github.com/dani-garcia/bitwarden_rs/wiki/Running-without-WAL-enabled
wal: true
## URL for external databases (mysql://user:pass@host:port or postgresql://user:pass@host:port).
# url: ""
## Set the size of the database connection pool.
# maxConnections: 10
## Connection retries during startup, 0 for infinite. 1 second between retries.
# retries: 15
# Set Bitwarden_rs application variables
vaultwarden:
# Allow any user to sign-up: https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-registration-of-new-users
allowSignups: true
## Whitelist domains allowed to sign-up. 'allowSignups' is ignored if set.
# signupDomains:
# - domain.tld
# Verify e-mail before login is enabled. SMTP must be enabled.
verifySignup: false
# When a user logs in an email is required to be sent. If sending the email fails the login attempt will fail. SMTP must be enabled.
requireEmail: false
## Maximum attempts before an email token is reset and a new email will need to be sent.
# emailAttempts: 3
## Email token validity in seconds.
# emailTokenExpiration: 600
# Allow invited users to sign-up even feature is disabled: https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-invitations
allowInvitation: true
# Show password hints: https://github.com/dani-garcia/bitwarden_rs/wiki/Password-hint-display
## Default organization name in invitation e-mails that are not coming from a specific organization.
# defaultInviteName: ""
showPasswordHint: true
# Enable Websockets for notification. https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-WebSocket-notifications
# Redirect HTTP path "/notifications/hub" to port 3012. Ingress/IngressRoute controllers are automatically configured.
enableWebsockets: true
# Enable Web Vault (static content). https://github.com/dani-garcia/bitwarden_rs/wiki/Disabling-or-overriding-the-Vault-interface-hosting
enableWebVault: true
# Restrict creation of orgs. Options are: 'all', 'none' or a comma-separated list of users.
orgCreationUsers: all
## Limit attachment disk usage per organization.
# attachmentLimitOrg:
## Limit attachment disk usage per user.
# attachmentLimitUser:
## HaveIBeenPwned API Key. Can be purchased at https://haveibeenpwned.com/API/Key.
# hibpApiKey:
admin:
# Enable admin portal.
enabled: false
# Disabling the admin token will make the admin portal accessible to anyone, use carefully: https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-admin-token
disableAdminToken: false
## Token for admin login, will be generated if not defined. https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-admin-page
# token:
# Enable SMTP. https://github.com/dani-garcia/bitwarden_rs/wiki/SMTP-configuration
smtp:
enabled: false
# SMTP hostname, required if SMTP is enabled.
host: ""
# SMTP sender e-mail address, required if SMTP is enabled.
from: ""
## SMTP sender name, defaults to 'Bitwarden_RS'.
# fromName: ""
## Enable SSL connection.
# ssl: true
## SMTP port. Defaults to 25 without SSL, 587 with SSL.
# port: 587
## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
# authMechanism: Plain
## Hostname to be sent for SMTP HELO. Defaults to pod name.
# heloName: ""
## SMTP timeout.
# timeout: 15
## Accept SSL session if certificate is valid but hostname doesn't match. DANGEROUS, vulnerable to men-in-the-middle attacks!
# invalidHostname: false
## Accept invalid certificates. DANGEROUS, vulnerable to men-in-the-middle attacks!
# invalidCertificate: false
## SMTP username.
# user: ""
## SMTP password. Required is user is specified, ignored if no user provided.
# password: ""
## Enable Yubico OTP authentication. https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-Yubikey-OTP-authentication
yubico:
enabled: false
## Yubico server. Defaults to YubiCloud.
# server:
## Yubico ID and Secret Key.
# clientId:
# secretKey:
## Logging options. https://github.com/dani-garcia/bitwarden_rs/wiki/Logging
log:
# Log to file.
file: ""
# Log level. Options are "trace", "debug", "info", "warn", "error" or "off".
level: "trace"
## Log timestamp format. See https://docs.rs/chrono/0.4.15/chrono/format/strftime/index.html. Defaults to time in milliseconds.
# timeFormat: ""
icons:
# Disables download of external icons. Setting to true will still serve icons from cache (/data/icon_cache). TTL will default to zero.
disableDownload: false
## Cache time-to-live for icons fetched. 0 means no purging.
# cache: 2592000
## Cache time-to-live for icons that were not available. 0 means no purging.
# cacheFailed: 259200
persistence:
data:
enabled: true
mountPath: "/data"
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
db:
nameOverride: "db"
enabled: true
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
dbbackup:
enabled: true
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
# Enabled postgres
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/postgresql
postgresql:
enabled: true
postgresqlUsername: vaultwarden
postgresqlDatabase: vaultwarden
existingSecret: dbcreds
persistence:
enabled: false
existingClaim: db

View File

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-05-31T09:38:38.647697214Z"
generated: "2021-06-01T06:01:18.96607407Z"