Commit new App releases for TrueCharts

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
This commit is contained in:
TrueCharts-Bot 2021-06-08 09:06:42 +00:00
parent c3b29332d0
commit 7b52576738
70 changed files with 2588 additions and 42 deletions

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:44:04.058021137Z"
generated: "2021-06-08T09:05:14.101184173Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:44:03.240250193Z"
generated: "2021-06-08T09:05:13.374773445Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:39.553913818Z"
generated: "2021-06-08T09:04:52.066691257Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:40.368856663Z"
generated: "2021-06-08T09:04:52.778491546Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:41.233969635Z"
generated: "2021-06-08T09:04:53.54194108Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:42.100980508Z"
generated: "2021-06-08T09:04:54.281699435Z"

View File

@ -0,0 +1,8 @@
# Configuration Options
##### Connecting to other apps
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Together" guide:
https://truecharts.org/manual/linking/
##### Available config options
In the future this page is going to contain an automated list of options available in the installation/edit UI.

View File

@ -0,0 +1,9 @@
dependencies:
- name: common
repository: https://truecharts.org/
version: 5.1.3
- name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.4.9
digest: sha256:299d4839c2ac8b84cf7388efce1d04df7d17e938bcd433a459e64baa21181adc
generated: "2021-06-08T09:04:57.790690673Z"

View File

@ -0,0 +1,30 @@
apiVersion: v2
appVersion: auto
dependencies:
- name: common
repository: https://truecharts.org/
version: 5.1.3
- condition: postgresql.enabled
name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.4.9
deprecated: false
description: A free and open source personal finance manager
home: https://github.com/firefly-iii/firefly-iii/
icon: https://www.firefly-iii.org/assets/logo/color.png
keywords:
- fireflyiii
- finacial
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: truecharts.org
- email: 20650065+warllo54@users.noreply.github.com
name: warllo54
url: truecharts.org
name: fireflyiii
sources:
- https://github.com/firefly-iii/firefly-iii/
type: application
version: 3.2.6

View File

@ -0,0 +1,54 @@
# Introduction
![Version: 1.0.1](https://img.shields.io/badge/Version-1.0.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: auto](https://img.shields.io/badge/AppVersion-auto-informational?style=flat-square)
A free and open source personal finance manager
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
## Source Code
* <https://github.com/firefly-iii/firefly-iii/>
## Requirements
Kubernetes: `>=1.16.0-0`
## Dependencies
| Repository | Name | Version |
|------------|------|---------|
| https://charts.bitnami.com/bitnami | postgresql | 10.4.2 |
| https://truecharts.org/ | common | 3.5.5 |
## Installing the Chart
To install the chart with the release name `fireflyiii`
- Open TrueNAS SCALE
- Go to Apps
- Click "Install" for this specific Apps
- Fill out the configuration form
## Uninstalling the Chart
To uninstall the `fireflyiii` deployment
- Open TrueNAS SCALE
- Go to Apps
- Go to "Installed Apps"
- Expand the menu in the top-right corner of this App
- Click "Remove" for this specific Apps
The command removes all the Kubernetes components associated with the chart **including storage volumes** _(Except hostPath Storage)_ and deletes the release.
## Support
- See the [Wiki](https://truecharts.org)
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
- Ask a [question](https://github.com/truecharts/apps/discussions)
----------------------------------------------
Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0)
All Rights Reserved - The TrueCharts Project

View File

@ -0,0 +1,3 @@
A free and open source personal finance manager
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
A free and open source personal finance manager

Binary file not shown.

View File

@ -0,0 +1,41 @@
##
# This file contains Values.yaml content that gets added to the output of questions.yaml
# It's ONLY meant for content that the user is NOT expected to change.
# Example: Everything under "image" is not included in questions.yaml but is included here.
##
image:
repository: fireflyiii/core
pullPolicy: IfNotPresent
tag: version-5.5.12
env:
DB_USERNAME: fireflyiii
DB_DATABASE: fireflyiii
DB_CONNECTION: pgsql
DB_PORT: 5432
envValueFrom:
DB_HOST:
secretKeyRef:
name: dbcreds
key: postgresql_host
DB_PASSWORD:
secretKeyRef:
name: dbcreds
key: postgresql-password
# Enabled postgres
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/postgresql
postgresql:
enabled: true
postgresqlUsername: fireflyiii
postgresqlDatabase: fireflyiii
existingSecret: dbcreds
persistence:
enabled: true
existingClaim: db
##
# Most other defaults are set in questions.yaml
# For other options please refer to the wiki, default_values.yaml or the common library chart
##

View File

@ -0,0 +1,679 @@
groups:
- name: "Container Image"
description: "Image to be used for container"
- name: "Controller"
description: "Configure workload deployment"
- name: "Container Configuration"
description: "additional container configuration"
- name: "App Configuration"
description: "App specific config options"
- name: "Networking and Services"
description: "Configure Network and Services for container"
- name: "Storage and Persistence"
description: "Persist and share data that is separate from the container"
- name: "Ingress"
description: "Ingress Configuration"
- name: "Security and Permissions"
description: "Configure security context and permissions"
- name: "Resources and Devices"
description: "Specify resources/devices to be allocated to workload"
- name: "Advanced"
description: "Advanced Configuration"
portals:
web_portal:
protocols:
- "$kubernetes-resource_configmap_portal_protocol"
host:
- "$kubernetes-resource_configmap_portal_host"
ports:
- "$kubernetes-resource_configmap_portal_port"
questions:
- variable: portal
group: "Container Image"
label: "Configure Portal Button"
schema:
type: dict
hidden: true
attrs:
- variable: enabled
label: "Enable"
description: "enable the portal button"
schema:
hidden: true
editable: false
type: boolean
default: true
- variable: controller
group: "Controller"
label: ""
schema:
type: dict
attrs:
- variable: type
description: "Please specify type of workload to deploy"
label: "(Advanced) Controller Type"
schema:
type: string
default: "deployment"
required: true
enum:
- value: "deployment"
description: "Deployment"
- value: "statefulset"
description: "Statefulset"
- value: "daemonset"
description: "Daemonset"
- variable: replicas
description: "Number of desired pod replicas"
label: "Desired Replicas"
schema:
type: int
default: 1
required: true
- variable: strategy
description: "Please specify type of workload to deploy"
label: "(Advanced) Update Strategy"
schema:
type: string
default: "Recreate"
required: true
enum:
- value: "Recreate"
description: "Recreate: Kill existing pods before creating new ones"
- value: "RollingUpdate"
description: "RollingUpdate: Create new pods and then kill old ones"
- value: "OnDelete"
description: "(Legacy) OnDelete: ignore .spec.template changes"
# Docker specific env
- variable: env
group: "Container Configuration"
label: "Image Environment"
schema:
type: dict
attrs:
- variable: TZ
label: "Timezone"
schema:
type: string
default: "Etc/UTC"
$ref:
- "definitions/timezone"
- variable: APP_KEY
label: "App Key"
description: "Your unique 32 application character key"
schema:
type: string
default: ""
required: true
- variable: UMASK
label: "UMASK"
description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
schema:
type: string
default: "002"
- variable: envList
label: "Image environment"
group: "Container Configuration"
schema:
type: list
default: []
items:
- variable: envItem
label: "Environment Variable"
schema:
type: dict
attrs:
- variable: name
label: "Name"
schema:
type: string
- variable: value
label: "Value"
schema:
type: string
- variable: hostNetwork
group: "Networking and Services"
label: "Enable Host Networking"
schema:
type: boolean
default: false
- variable: externalInterfaces
description: "External Interfaces"
label: "(Advanced) External Interfaces"
group: "Networking and Services"
schema:
type: list
items:
- variable: interfaceConfiguration
description: "Interface Configuration"
label: "Interface Configuration"
schema:
type: dict
$ref:
- "normalize/interfaceConfiguration"
attrs:
- variable: hostInterface
description: "Please specify host interface"
label: "Host Interface"
schema:
type: string
required: true
$ref:
- "definitions/interface"
- variable: ipam
description: "Define how IP Address will be managed"
label: "IP Address Management"
schema:
type: dict
required: true
attrs:
- variable: type
description: "Specify type for IPAM"
label: "IPAM Type"
schema:
type: string
required: true
enum:
- value: "dhcp"
description: "Use DHCP"
- value: "static"
description: "Use static IP"
show_subquestions_if: "static"
subquestions:
- variable: staticIPConfigurations
label: "Static IP Addresses"
schema:
type: list
items:
- variable: staticIP
label: "Static IP"
schema:
type: ipaddr
cidr: true
- variable: staticRoutes
label: "Static Routes"
schema:
type: list
items:
- variable: staticRouteConfiguration
label: "Static Route Configuration"
schema:
type: dict
attrs:
- variable: destination
label: "Destination"
schema:
type: ipaddr
cidr: true
required: true
- variable: gateway
label: "Gateway"
schema:
type: ipaddr
cidr: false
required: true
- variable: service
group: "Networking and Services"
label: "Configure Service(s)"
schema:
type: dict
attrs:
- variable: main
label: "Main Service"
description: "The Primary service on which the healthcheck runs, often the webUI"
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the service"
schema:
type: boolean
default: true
hidden: true
- variable: type
label: "Service Type"
description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer"
schema:
type: string
default: "NodePort"
enum:
- value: "NodePort"
description: "NodePort"
- value: "ClusterIP"
description: "ClusterIP"
- value: "LoadBalancer"
description: "LoadBalancer"
- variable: loadBalancerIP
label: "LoadBalancer IP"
description: "LoadBalancerIP"
schema:
show_if: [["type", "=", "LoadBalancer"]]
type: string
default: ""
- variable: externalIPs
label: "External IP's"
description: "External IP's"
schema:
show_if: [["type", "=", "LoadBalancer"]]
type: list
default: []
items:
- variable: externalIP
label: "External IP"
schema:
type: string
- variable: ports
label: "Service's Port(s) Configuration"
schema:
type: dict
attrs:
- variable: main
label: "Main Service Port Configuration"
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the port"
schema:
type: boolean
default: true
hidden: true
- variable: protocol
label: "Port Type"
schema:
type: string
default: "HTTP"
enum:
- value: HTTP
description: "HTTP"
- value: "HTTPS"
description: "HTTPS"
- value: TCP
description: "TCP"
- value: "UDP"
description: "UDP"
- variable: port
label: "Container Port"
schema:
type: int
default: 8080
editable: false
hidden: true
- variable: targetport
label: "Target Port"
description: "This port exposes the container port on the service"
schema:
type: int
default: 51080
editable: true
required: true
- variable: nodePort
label: "Node Port (Optional)"
description: "This port gets exposed to the node. Only considered when service type is NodePort"
schema:
type: int
min: 9000
max: 65535
default: 36048
required: true
## TrueCharts Specific
- variable: persistence
label: "Integrated Persistent Storage"
description: "Integrated Persistent Storage"
group: "Storage and Persistence"
schema:
type: dict
attrs:
- variable: data
label: "App Config Storage"
description: "Stores the Application Configuration."
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the storage"
schema:
type: boolean
default: true
- variable: storageClass
label: "Type of Storage"
description: " Warning: Anything other than SCALE-ZFS will break rollback!"
schema:
type: string
default: "SCALE-ZFS"
- variable: mountPath
label: "mountPath"
description: "Path inside the container the storage is mounted"
schema:
type: string
default: "/data"
hidden: true
- variable: emptyDir
label: "EmptyDir Volume"
schema:
type: dict
attrs:
- variable: enabled
label: "Use emptyDir volume"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: medium
label: "EmptyDir Medium"
schema:
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
- variable: accessMode
label: "Access Mode (Advanced)"
description: "Allow or disallow multiple PVC's writhing to the same PVC"
schema:
type: string
default: "ReadWriteOnce"
enum:
- value: "ReadWriteOnce"
description: "ReadWriteOnce"
- value: "ReadOnlyMany"
description: "ReadOnlyMany"
- value: "ReadWriteMany"
description: "ReadWriteMany"
- variable: size
label: "Size quotum of storage"
schema:
type: string
default: "100Gi"
- variable: db
label: "Database Storage"
description: "Stores the Application database."
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the storage"
schema:
type: boolean
default: true
hidden: true
- variable: nameOverride
label: "Override PVC Name (advanced)"
description: "Forces a certain name for the PVC"
schema:
type: string
default: "db"
hidden: true
- variable: storageClass
label: "Type of Storage"
description: " Warning: Anything other than SCALE-ZFS will break rollback!"
schema:
type: string
default: "SCALE-ZFS"
- variable: mountPath
label: "mountPath"
description: "Path inside the container the storage is mounted"
schema:
type: string
default: ""
hidden: true
- variable: emptyDir
label: "EmptyDir Volume"
schema:
type: dict
attrs:
- variable: enabled
label: "Use emptyDir volume"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: medium
label: "EmptyDir Medium"
schema:
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
- variable: accessMode
label: "Access Mode (Advanced)"
description: "Allow or disallow multiple PVC's writhing to the same PVC"
schema:
type: string
default: "ReadWriteOnce"
enum:
- value: "ReadWriteOnce"
description: "ReadWriteOnce"
- value: "ReadOnlyMany"
description: "ReadOnlyMany"
- value: "ReadWriteMany"
description: "ReadWriteMany"
- variable: size
label: "Size quotum of storage"
schema:
type: string
default: "100Gi"
- variable: dbbackup
label: "Database Backup Storage"
description: "Stores the Application database backups."
schema:
type: dict
attrs:
- variable: enabled
label: "Enable the storage"
schema:
type: boolean
default: true
- variable: storageClass
label: "Type of Storage"
description: " Warning: Anything other than SCALE-ZFS will break rollback!"
schema:
type: string
default: "SCALE-ZFS"
- variable: mountPath
label: "mountPath"
description: "Path inside the container the storage is mounted"
schema:
type: string
default: ""
hidden: true
- variable: emptyDir
label: "EmptyDir Volume"
schema:
type: dict
attrs:
- variable: enabled
label: "Use emptyDir volume"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: medium
label: "EmptyDir Medium"
schema:
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
- variable: accessMode
label: "Access Mode (Advanced)"
description: "Allow or disallow multiple PVC's writhing to the same PVC"
schema:
type: string
default: "ReadWriteOnce"
enum:
- value: "ReadWriteOnce"
description: "ReadWriteOnce"
- value: "ReadOnlyMany"
description: "ReadOnlyMany"
- value: "ReadWriteMany"
description: "ReadWriteMany"
- variable: size
label: "Size quotum of storage"
schema:
type: string
default: "100Gi"
- variable: hostPathMounts
label: "Custom app storage"
group: "Storage and Persistence"
schema:
type: list
default: []
items:
- variable: volumeMount
label: "Custom Storage"
schema:
type: dict
attrs:
- variable: enabled
label: "Enabled"
schema:
type: boolean
default: true
hidden: true
- variable: setPermissions
label: "Automatic Permissions"
description: "Automatically set permissions on install"
schema:
type: boolean
default: true
- variable: readOnly
label: "Mount as ReadOnly"
description: "prevent any write from being done to the mounted volume"
schema:
type: boolean
default: false
- variable: emptyDir
label: "EmptyDir Volume"
schema:
type: dict
attrs:
- variable: enabled
label: "Use emptyDir volume"
schema:
type: boolean
default: false
- variable: medium
label: "EmptyDir Medium"
schema:
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
- variable: mountPath
label: "Mount Path"
description: "Path to mount inside the pod"
schema:
type: path
required: true
default: ""
editable: true
- variable: hostPath
label: "Host Path"
description: "Path on the host to mount inside the container, ignored when emptyDir is enabled"
schema:
type: hostpath
required: true
# Enable privileged
- variable: securityContext
group: "Security and Permissions"
label: "Security Context"
schema:
type: dict
attrs:
- variable: privileged
label: "Enable privileged mode for Common-Chart based charts"
schema:
type: boolean
default: false
# Set Pod Security Policy
- variable: podSecurityContext
group: "Security and Permissions"
label: "Pod Security Context"
schema:
type: dict
attrs:
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: false
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 0
- variable: runAsGroup
label: "runAsGroup"
description: The groupID this App of the user running the application"
schema:
type: int
default: 0
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 0
- variable: fsGroupChangePolicy
label: "When should we take ownership?"
schema:
type: string
default: "OnRootMismatch"
enum:
- value: "OnRootMismatch"
description: "OnRootMismatch"
- value: "Always"
description: "Always"
- variable: resources
group: "Resources and Devices"
label: ""
schema:
type: dict
attrs:
- variable: limits
label: "Advanced Limit Resource Consumption"
schema:
type: dict
attrs:
- variable: cpu
label: "CPU"
schema:
type: string
default: "2000m"
- variable: memory
label: "Memory RAM"
schema:
type: string
default: "2Gi"
- variable: requests
label: "Advanced Request minimum resources required"
schema:
type: dict
attrs:
- variable: cpu
label: "CPU"
schema:
type: string
default: "10m"
- variable: memory
label: "Memory RAM"
schema:
type: string
default: "50Mi"

View File

@ -0,0 +1,5 @@
{{/* Make sure all variables are set properly */}}
{{- include "common.values.setup" . }}
{{/* Render the templates */}}
{{ include "common.all" . }}

View File

@ -0,0 +1,19 @@
apiVersion: v1
kind: Secret
metadata:
name: dbcreds
{{- $previous := lookup "v1" "Secret" .Release.Namespace "dbcreds" }}
{{- $dbPass := "" }}
data:
{{- if $previous }}
{{- $dbPass = ( index $previous.data "postgresql-password" ) | b64dec }}
postgresql-password: {{ ( index $previous.data "postgresql-password" ) }}
postgresql-postgres-password: {{ ( index $previous.data "postgresql-postgres-password" ) }}
{{- else }}
{{- $dbPass = randAlphaNum 50 }}
postgresql-password: {{ $dbPass | b64enc | quote }}
postgresql-postgres-password: {{ randAlphaNum 50 | b64enc | quote }}
{{- end }}
url: {{ ( printf "%v%v:%v@%v-%v:%v/%v" "postgresql://" .Values.postgresql.postgresqlUsername $dbPass .Release.Name "postgresql" "5432" .Values.postgresql.postgresqlDatabase ) | b64enc | quote }}
postgresql_host: {{ ( printf "%v-%v" .Release.Name "postgresql" ) | b64enc | quote }}
type: Opaque

View File

@ -0,0 +1,83 @@
# Default values for fireflyIII.
image:
repository: fireflyiii/core
pullPolicy: IfNotPresent
tag: version-5.5.12
strategy:
type: Recreate
podSecurityContext:
runAsNonRoot: false
runAsUser: 0
runAsGroup: 0
fsGroup: 0
service:
main:
ports:
main:
port: 8080
tcp:
enabled: true
type: ClusterIP
ports:
tcp:
enabled: true
port: 51080
protocol: TCP
env:
DB_USERNAME: firefly
DB_DATABASE: firefly
DB_CONNECTION: pgsql
DB_PORT: 5432
APP_Key: AGcfkCUS233ZWmBXztYbdyCs2u7kkz55
envValueFrom:
DB_HOST:
secretKeyRef:
name: dbcreds
key: url
DB_PASSWORD:
secretKeyRef:
name: dbcreds
key: postgresql-password
persistence:
data:
enabled: true
mountPath: "/var/www/html/storage/upload"
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
db:
nameOverride: "db"
enabled: true
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
dbbackup:
enabled: true
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
# Enabled postgres
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/postgresql
postgresql:
enabled: true
postgresqlUsername: firefly
postgresqlDatabase: firefly
existingSecret: dbcreds
persistence:
enabled: false
existingClaim: db

View File

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:49.812258908Z"
generated: "2021-06-08T09:05:01.431338529Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:50.686024414Z"
generated: "2021-06-08T09:05:02.22084895Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:51.550339394Z"
generated: "2021-06-08T09:05:03.02102519Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:52.382185784Z"
generated: "2021-06-08T09:05:03.775781597Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:53.236124235Z"
generated: "2021-06-08T09:05:04.480740381Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:54.049911876Z"
generated: "2021-06-08T09:05:05.291452838Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:54.895767205Z"
generated: "2021-06-08T09:05:06.019154689Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:55.750928495Z"
generated: "2021-06-08T09:05:06.711905621Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:56.564972092Z"
generated: "2021-06-08T09:05:07.439963251Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:57.43704371Z"
generated: "2021-06-08T09:05:08.183783327Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:58.28432009Z"
generated: "2021-06-08T09:05:08.909800947Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:59.092705724Z"
generated: "2021-06-08T09:05:09.630783667Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:59.920535397Z"
generated: "2021-06-08T09:05:10.448559822Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:44:00.739406183Z"
generated: "2021-06-08T09:05:11.133544421Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:44:01.611631533Z"
generated: "2021-06-08T09:05:11.89048916Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:44:02.416208001Z"
generated: "2021-06-08T09:05:12.636722984Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:11.742689496Z"
generated: "2021-06-08T09:04:28.866961257Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:12.950983223Z"
generated: "2021-06-08T09:04:29.731227122Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:13.830439195Z"
generated: "2021-06-08T09:04:30.657015867Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:14.834668437Z"
generated: "2021-06-08T09:04:31.43698468Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:15.673817309Z"
generated: "2021-06-08T09:04:32.183248093Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:16.567148981Z"
generated: "2021-06-08T09:04:32.903588367Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:17.444689764Z"
generated: "2021-06-08T09:04:33.697328566Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:18.31569901Z"
generated: "2021-06-08T09:04:34.477958293Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:19.210022688Z"
generated: "2021-06-08T09:04:35.204614186Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:20.06448564Z"
generated: "2021-06-08T09:04:36.082528808Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:20.957885013Z"
generated: "2021-06-08T09:04:36.841700166Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:21.796377974Z"
generated: "2021-06-08T09:04:37.548714641Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:22.795142745Z"
generated: "2021-06-08T09:04:38.320771467Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:23.672557199Z"
generated: "2021-06-08T09:04:39.12790632Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:24.571116126Z"
generated: "2021-06-08T09:04:39.886312962Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:25.407158231Z"
generated: "2021-06-08T09:04:40.59876015Z"

View File

@ -6,4 +6,4 @@ dependencies:
repository: https://helm.traefik.io/traefik
version: 9.19.1
digest: sha256:6837d576d0a80cb63dcd82a8dd3a2e7e5ea10f710b1ef1d5c29ce3af4eb3fbfe
generated: "2021-06-01T14:43:26.873846566Z"
generated: "2021-06-08T09:04:41.723603198Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:29.688221587Z"
generated: "2021-06-08T09:04:43.49479194Z"

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:30.661570757Z"
generated: "2021-06-08T09:04:44.278971192Z"

View File

@ -0,0 +1,8 @@
# Configuration Options
##### Connecting to other apps
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Together" guide:
https://truecharts.org/manual/linking/
##### Available config options
In the future this page is going to contain an automated list of options available in the installation/edit UI.

View File

@ -0,0 +1,9 @@
dependencies:
- name: common
repository: https://truecharts.org/
version: 5.1.3
- name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.4.9
digest: sha256:299d4839c2ac8b84cf7388efce1d04df7d17e938bcd433a459e64baa21181adc
generated: "2021-06-08T09:04:47.666206592Z"

View File

@ -0,0 +1,34 @@
apiVersion: v2
appVersion: auto
dependencies:
- name: common
repository: https://truecharts.org/
version: 5.1.3
- condition: postgresql.enabled
name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.4.9
deprecated: false
description: Unofficial Bitwarden compatible server written in Rust
home: https://github.com/truecharts/apps/tree/master/charts/stable/vaultwarden
icon: https://raw.githubusercontent.com/bitwarden/brand/master/icons/256x256.png
keywords:
- bitwarden
- bitwardenrs
- bitwarden_rs
- vaultwarden
- password
- rust
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: truecharts.org
- email: kjeld@schouten-lebbing.nl
name: Ornias1993
url: truecharts.org
name: vaultwarden
sources:
- https://github.com/dani-garcia/vaultwarden
type: application
version: 2.2.7

View File

@ -0,0 +1,56 @@
# Introduction
![Version: 1.2.5](https://img.shields.io/badge/Version-1.2.5-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: auto](https://img.shields.io/badge/AppVersion-auto-informational?style=flat-square)
Unofficial Vaultwarden compatible server written in Rust
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
## Source Code
* <https://github.com/truecharts/apps/tree/master/incubator/Vaultwarden>
* <https://github.com/k8s-at-home/charts/tree/master/charts/stable/Vaultwardenrs>
* <https://github.com/dani-garcia/Vaultwarden_rs>
## Requirements
Kubernetes: `>=1.16.0-0`
## Dependencies
| Repository | Name | Version |
|------------|------|---------|
| https://charts.bitnami.com/bitnami | postgresql | 10.4.2 |
| https://truecharts.org/ | common | 3.5.5 |
## Installing the Chart
To install the chart with the release name `Vaultwarden`
- Open TrueNAS SCALE
- Go to Apps
- Click "Install" for this specific Apps
- Fill out the configuration form
## Uninstalling the Chart
To uninstall the `Vaultwarden` deployment
- Open TrueNAS SCALE
- Go to Apps
- Go to "Installed Apps"
- Expand the menu in the top-right corner of this App
- Click "Remove" for this specific Apps
The command removes all the Kubernetes components associated with the chart **including storage volumes** _(Except hostPath Storage)_ and deletes the release.
## Support
- See the [Wiki](https://truecharts.org)
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
- Ask a [question](https://github.com/truecharts/apps/discussions)
----------------------------------------------
Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0)
All Rights Reserved - The TrueCharts Project

View File

@ -0,0 +1,3 @@
Unofficial Bitwarden compatible server written in Rust
This App is supplied by TrueCharts, for more information please visit https://truecharts.org
Unofficial Bitwarden compatible server written in Rust

Binary file not shown.

Binary file not shown.

View File

@ -0,0 +1,54 @@
##
# This file contains Values.yaml content that gets added to the output of questions.yaml
# It's ONLY meant for content that the user is NOT expected to change.
# Example: Everything under "image" is not included in questions.yaml but is included here.
##
image:
repository: vaultwarden/server
pullPolicy: IfNotPresent
tag: 1.21.0
envTpl:
DOMAIN: "https://{{ if .Values.ingress }}{{ if .Values.ingress.main.enabled }}{{ ( index .Values.ingress.main.hosts 0 ).host }}{{ else }}placeholder.com{{ end }}{{ else }}placeholder.com{{ end }}"
envFrom:
- configMapRef:
name: vaultwardenconfig
- secretRef:
name: vaultwardensecret
envValueFrom:
DATABASE_URL:
secretKeyRef:
name: dbcreds
key: url
database:
# Database type, must be one of: 'sqlite', 'mysql' or 'postgresql'.
type: postgresql
# Enable DB Write-Ahead-Log for SQLite, disabled for other databases. https://github.com/dani-garcia/bitwarden_rs/wiki/Running-without-WAL-enabled
wal: false
## URL for external databases (mysql://user:pass@host:port or postgresql://user:pass@host:port).
# url: ""
## Set the size of the database connection pool.
# maxConnections: 10
## Connection retries during startup, 0 for infinite. 1 second between retries.
retries: 30
# Enabled postgres
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/postgresql
postgresql:
enabled: true
postgresqlUsername: homeassistant
postgresqlDatabase: homeassistant
existingSecret: dbcreds
persistence:
enabled: true
existingClaim: db
##
# Most other defaults are set in questions.yaml
# For other options please refer to the wiki, default_values.yaml or the common library chart
##

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,116 @@
{{/* Define the configmap */}}
{{- define "vaultwarden.configmap" -}}
---
apiVersion: v1
kind: ConfigMap
metadata:
name: vaultwardenconfig
data:
ROCKET_PORT: "8080"
SIGNUPS_ALLOWED: {{ .Values.vaultwarden.allowSignups | quote }}
{{- if .Values.vaultwarden.signupDomains }}
SIGNUPS_DOMAINS_WHITELIST: {{ join "," .Values.vaultwarden.signupDomains | quote }}
{{- end }}
{{- if and (eq .Values.vaultwarden.verifySignup true) (eq .Values.vaultwarden.smtp.enabled false) }}{{ required "Signup verification requires SMTP to be enabled" nil}}{{end}}
SIGNUPS_VERIFY: {{ .Values.vaultwarden.verifySignup | quote }}
{{- if and (eq .Values.vaultwarden.requireEmail true) (eq .Values.vaultwarden.smtp.enabled false) }}{{ required "Requiring emails for login depends on SMTP" nil}}{{end}}
REQUIRE_DEVICE_EMAIL: {{ .Values.vaultwarden.requireEmail | quote }}
{{- if .Values.vaultwarden.emailAttempts }}
EMAIL_ATTEMPTS_LIMIT: {{ .Values.vaultwarden.emailAttempts | quote }}
{{- end }}
{{- if .Values.vaultwarden.emailTokenExpiration }}
EMAIL_EXPIRATION_TIME: {{ .Values.vaultwarden.emailTokenExpiration | quote }}
{{- end }}
INVITATIONS_ALLOWED: {{ .Values.vaultwarden.allowInvitation | quote }}
{{- if .Values.vaultwarden.defaultInviteName }}
INVITATION_ORG_NAME: {{ .Values.vaultwarden.defaultInviteName | quote }}
{{- end }}
SHOW_PASSWORD_HINT: {{ .Values.vaultwarden.showPasswordHint | quote }}
WEBSOCKET_ENABLED: {{ .Values.vaultwarden.enableWebsockets | quote }}
WEB_VAULT_ENABLED: {{ .Values.vaultwarden.enableWebVault | quote }}
ORG_CREATION_USERS: {{ .Values.vaultwarden.orgCreationUsers | quote }}
{{- if .Values.vaultwarden.attachmentLimitOrg }}
ORG_ATTACHMENT_LIMIT: {{ .Values.vaultwarden.attachmentLimitOrg | quote }}
{{- end }}
{{- if .Values.vaultwarden.attachmentLimitUser }}
USER_ATTACHMENT_LIMIT: {{ .Values.vaultwarden.attachmentLimitUser | quote }}
{{- end }}
{{- if .Values.vaultwarden.hibpApiKey }}
HIBP_API_KEY: {{ .Values.vaultwarden.hibpApiKey | quote }}
{{- end }}
{{- include "vaultwarden.dbTypeValid" . }}
{{- if .Values.database.retries }}
DB_CONNECTION_RETRIES: {{ .Values.database.retries | quote }}
{{- end }}
{{- if .Values.database.maxConnections }}
DATABASE_MAX_CONNS: {{ .Values.database.maxConnections | quote }}
{{- end }}
{{- if eq .Values.vaultwarden.smtp.enabled true }}
SMTP_HOST: {{ required "SMTP host is required to enable SMTP" .Values.vaultwarden.smtp.host | quote }}
SMTP_FROM: {{ required "SMTP sender address ('from') is required to enable SMTP" .Values.vaultwarden.smtp.from | quote }}
{{- if .Values.vaultwarden.smtp.fromName }}
SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.ssl }}
SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.port }}
SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.authMechanism }}
SMTP_AUTH_MECHANISM: {{ .Values.vaultwarden.smtp.authMechanism | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.heloName }}
HELO_NAME: {{ .Values.vaultwarden.smtp.heloName | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.timeout }}
SMTP_TIMEOUT: {{ .Values.vaultwarden.smtp.timeout | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.invalidHostname }}
SMTP_ACCEPT_INVALID_HOSTNAMES: {{ .Values.vaultwarden.smtp.invalidHostname | quote }}
{{- end }}
{{- if .Values.vaultwarden.smtp.invalidCertificate }}
SMTP_ACCEPT_INVALID_CERTS: {{ .Values.vaultwarden.smtp.invalidCertificate | quote }}
{{- end }}
{{- end }}
{{- if .Values.vaultwarden.log.file }}
LOG_FILE: {{ .Values.vaultwarden.log.file | quote }}
{{- end }}
{{- if or .Values.vaultwarden.log.level .Values.vaultwarden.log.timeFormat }}
EXTENDED_LOGGING: "true"
{{- end }}
{{- if .Values.vaultwarden.log.level }}
{{- include "vaultwarden.logLevelValid" . }}
LOG_LEVEL: {{ .Values.vaultwarden.log.level | quote }}
{{- end }}
{{- if .Values.vaultwarden.log.timeFormat }}
LOG_TIMESTAMP_FORMAT: {{ .Values.vaultwarden.log.timeFormat | quote }}
{{- end }}
{{- if .Values.vaultwarden.icons.disableDownload }}
DISABLE_ICON_DOWNLOAD: {{ .Values.vaultwarden.icons.disableDownload | quote }}
{{- if and (not .Values.vaultwarden.icons.cache) (eq .Values.vaultwarden.icons.disableDownload "true") }}
ICON_CACHE_TTL: "0"
{{- end }}
{{- end }}
{{- if .Values.vaultwarden.icons.cache }}
ICON_CACHE_TTL: {{ .Values.vaultwarden.icons.cache | quote }}
{{- end }}
{{- if .Values.vaultwarden.icons.cacheFailed }}
ICON_CACHE_NEGTTL: {{ .Values.vaultwarden.icons.cacheFailed | quote }}
{{- end }}
{{- if eq .Values.vaultwarden.admin.enabled true }}
{{- if eq .Values.vaultwarden.admin.disableAdminToken true }}
DISABLE_ADMIN_TOKEN: "true"
{{- end }}
{{- end }}
{{- if eq .Values.vaultwarden.yubico.enabled true }}
{{- if .Values.vaultwarden.yubico.server }}
YUBICO_SERVER: {{ .Values.vaultwarden.yubico.server | quote }}
{{- end }}
{{- end }}
{{- if eq .Values.database.type "sqlite" }}
ENABLE_DB_WAL: {{ .Values.database.wal | quote }}
{{- else }}
ENABLE_DB_WAL: "false"
{{- end }}
{{- end -}}

View File

@ -0,0 +1,59 @@
{{/* Define the secrets */}}
{{- define "vaultwarden.secrets" -}}
{{- $adminToken := "" }}
{{- if eq .Values.vaultwarden.admin.enabled true }}
{{- $adminToken = .Values.vaultwarden.admin.token | default (randAlphaNum 48) | b64enc | quote }}
{{- end -}}
{{- $smtpUser := "" }}
{{- if and (eq .Values.vaultwarden.smtp.enabled true ) (.Values.vaultwarden.smtp.user) }}
{{- $smtpUser = .Values.vaultwarden.smtp.user | b64enc | quote }}
{{- end -}}
{{- $yubicoClientId := "" }}
{{- if eq .Values.vaultwarden.yubico.enabled true }}
{{- $yubicoClientId = required "Yubico Client ID required" .Values.vaultwarden.yubico.clientId | toString | b64enc | quote }}
{{- end -}}
---
apiVersion: v1
kind: Secret
metadata:
name: vaultwardensecret
data:
{{- if ne $adminToken "" }}
ADMIN_TOKEN: {{ $adminToken }}
{{- end }}
{{- if ne $smtpUser "" }}
SMTP_USERNAME: {{ $smtpUser }}
SMTP_PASSWORD: {{ required "Must specify SMTP password" .Values.vaultwarden.smtp.password | b64enc | quote }}
{{- end }}
{{- if ne $yubicoClientId "" }}
YUBICO_CLIENT_ID: {{ $yubicoClientId }}
YUBICO_SECRET_KEY: {{ required "Yubico Secret Key required" .Values.vaultwarden.yubico.secretKey | b64enc | quote }}
{{- end }}
---
apiVersion: v1
kind: Secret
metadata:
labels:
{{- include "common.labels" . | nindent 4 }}
name: dbcreds
{{- $previous := lookup "v1" "Secret" .Release.Namespace "dbcreds" }}
{{- $dbPass := "" }}
data:
{{- if $previous }}
{{- $dbPass = ( index $previous.data "postgresql-password" ) | b64dec }}
postgresql-password: {{ ( index $previous.data "postgresql-password" ) }}
postgresql-postgres-password: {{ ( index $previous.data "postgresql-postgres-password" ) }}
{{- else }}
{{- $dbPass = randAlphaNum 50 }}
postgresql-password: {{ $dbPass | b64enc | quote }}
postgresql-postgres-password: {{ randAlphaNum 50 | b64enc | quote }}
{{- end }}
url: {{ ( printf "%v%v:%v@%v:%v/%v" "postgresql://" .Values.postgresql.postgresqlUsername $dbPass "postgresql" "5432" .Values.postgresql.postgresqlDatabase ) | b64enc | quote }}
type: Opaque
{{- end -}}

View File

@ -0,0 +1,17 @@
{{/*
Ensure valid DB type is select, defaults to SQLite
*/}}
{{- define "vaultwarden.dbTypeValid" -}}
{{- if not (or (eq .Values.database.type "postgresql") (eq .Values.database.type "mysql") (eq .Values.database.type "sqlite")) }}
{{- required "Invalid database type" nil }}
{{- end -}}
{{- end -}}
{{/*
Ensure log type is valid
*/}}
{{- define "vaultwarden.logLevelValid" -}}
{{- if not (or (eq .Values.vaultwarden.log.level "trace") (eq .Values.vaultwarden.log.level "debug") (eq .Values.vaultwarden.log.level "info") (eq .Values.vaultwarden.log.level "warn") (eq .Values.vaultwarden.log.level "error") (eq .Values.vaultwarden.log.level "off")) }}
{{- required "Invalid log level" nil }}
{{- end }}
{{- end }}

View File

@ -0,0 +1,11 @@
{{/* Make sure all variables are set properly */}}
{{- include "common.values.setup" . }}
{{/* Render the templates */}}
{{ include "common.all" . }}
{{/* Render configmap for vaultwarden */}}
{{- include "vaultwarden.configmap" . }}
{{/* Render secrets for vaultwarden */}}
{{- include "vaultwarden.secrets" . }}

View File

@ -0,0 +1,183 @@
# Default values for Bitwarden.
image:
repository: vaultwarden/server
pullPolicy: IfNotPresent
tag: 1.21.0
strategy:
type: Recreate
service:
main:
ports:
main:
port: 8080
ws:
ports:
ws:
enabled: true
port: 3012
env: {}
envTpl:
DOMAIN: "https://{{ if .Values.ingress }}{{ if .Values.ingress.main.enabled }}{{ ( index .Values.ingress.main.hosts 0 ).host }}{{ else }}placeholder.com{{ end }}{{ else }}placeholder.com{{ end }}"
envFrom:
- configMapRef:
name: vaultwardenconfig
- secretRef:
name: vaultwardensecret
envValueFrom:
DATABASE_URL:
secretKeyRef:
name: dbcreds
key: url
database:
# Database type, must be one of: 'sqlite', 'mysql' or 'postgresql'.
type: postgresql
# Enable DB Write-Ahead-Log for SQLite, disabled for other databases. https://github.com/dani-garcia/bitwarden_rs/wiki/Running-without-WAL-enabled
wal: true
## URL for external databases (mysql://user:pass@host:port or postgresql://user:pass@host:port).
# url: ""
## Set the size of the database connection pool.
# maxConnections: 10
## Connection retries during startup, 0 for infinite. 1 second between retries.
# retries: 15
# Set Bitwarden_rs application variables
vaultwarden:
# Allow any user to sign-up: https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-registration-of-new-users
allowSignups: true
## Whitelist domains allowed to sign-up. 'allowSignups' is ignored if set.
# signupDomains:
# - domain.tld
# Verify e-mail before login is enabled. SMTP must be enabled.
verifySignup: false
# When a user logs in an email is required to be sent. If sending the email fails the login attempt will fail. SMTP must be enabled.
requireEmail: false
## Maximum attempts before an email token is reset and a new email will need to be sent.
# emailAttempts: 3
## Email token validity in seconds.
# emailTokenExpiration: 600
# Allow invited users to sign-up even feature is disabled: https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-invitations
allowInvitation: true
# Show password hints: https://github.com/dani-garcia/bitwarden_rs/wiki/Password-hint-display
## Default organization name in invitation e-mails that are not coming from a specific organization.
# defaultInviteName: ""
showPasswordHint: true
# Enable Websockets for notification. https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-WebSocket-notifications
# Redirect HTTP path "/notifications/hub" to port 3012. Ingress/IngressRoute controllers are automatically configured.
enableWebsockets: true
# Enable Web Vault (static content). https://github.com/dani-garcia/bitwarden_rs/wiki/Disabling-or-overriding-the-Vault-interface-hosting
enableWebVault: true
# Restrict creation of orgs. Options are: 'all', 'none' or a comma-separated list of users.
orgCreationUsers: all
## Limit attachment disk usage per organization.
# attachmentLimitOrg:
## Limit attachment disk usage per user.
# attachmentLimitUser:
## HaveIBeenPwned API Key. Can be purchased at https://haveibeenpwned.com/API/Key.
# hibpApiKey:
admin:
# Enable admin portal.
enabled: false
# Disabling the admin token will make the admin portal accessible to anyone, use carefully: https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-admin-token
disableAdminToken: false
## Token for admin login, will be generated if not defined. https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-admin-page
# token:
# Enable SMTP. https://github.com/dani-garcia/bitwarden_rs/wiki/SMTP-configuration
smtp:
enabled: false
# SMTP hostname, required if SMTP is enabled.
host: ""
# SMTP sender e-mail address, required if SMTP is enabled.
from: ""
## SMTP sender name, defaults to 'Bitwarden_RS'.
# fromName: ""
## Enable SSL connection.
# ssl: true
## SMTP port. Defaults to 25 without SSL, 587 with SSL.
# port: 587
## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
# authMechanism: Plain
## Hostname to be sent for SMTP HELO. Defaults to pod name.
# heloName: ""
## SMTP timeout.
# timeout: 15
## Accept SSL session if certificate is valid but hostname doesn't match. DANGEROUS, vulnerable to men-in-the-middle attacks!
# invalidHostname: false
## Accept invalid certificates. DANGEROUS, vulnerable to men-in-the-middle attacks!
# invalidCertificate: false
## SMTP username.
# user: ""
## SMTP password. Required is user is specified, ignored if no user provided.
# password: ""
## Enable Yubico OTP authentication. https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-Yubikey-OTP-authentication
yubico:
enabled: false
## Yubico server. Defaults to YubiCloud.
# server:
## Yubico ID and Secret Key.
# clientId:
# secretKey:
## Logging options. https://github.com/dani-garcia/bitwarden_rs/wiki/Logging
log:
# Log to file.
file: ""
# Log level. Options are "trace", "debug", "info", "warn", "error" or "off".
level: "trace"
## Log timestamp format. See https://docs.rs/chrono/0.4.15/chrono/format/strftime/index.html. Defaults to time in milliseconds.
# timeFormat: ""
icons:
# Disables download of external icons. Setting to true will still serve icons from cache (/data/icon_cache). TTL will default to zero.
disableDownload: false
## Cache time-to-live for icons fetched. 0 means no purging.
# cache: 2592000
## Cache time-to-live for icons that were not available. 0 means no purging.
# cacheFailed: 259200
persistence:
data:
enabled: true
mountPath: "/data"
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
db:
nameOverride: "db"
enabled: true
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
dbbackup:
enabled: true
emptyDir:
enabled: true
accessMode: ReadWriteOnce
size: 1Gi
storageClass: ""
# Enabled postgres
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/postgresql
postgresql:
enabled: true
postgresqlUsername: vaultwarden
postgresqlDatabase: vaultwarden
existingSecret: dbcreds
persistence:
enabled: false
existingClaim: db

View File

View File

@ -3,4 +3,4 @@ dependencies:
repository: https://truecharts.org/
version: 5.1.3
digest: sha256:46cfe3fd743066d150b4909dc15f72e333c802c771966ec439e4b1d409c8547b
generated: "2021-06-01T14:43:38.543271961Z"
generated: "2021-06-08T09:04:51.267270396Z"