diff --git a/README.md b/README.md index cfb391ec..1a4f706f 100644 --- a/README.md +++ b/README.md @@ -1,354 +1,14 @@ - - - -* Get: https://mirror.apheleia-it.ch/pub/kolab-kubernetes-latest.tar.gz -* Extract tarball -* Save the following into a values.yaml file: - -# Default values for kolab. -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -domainName: "kolab.local" - -# The admin user is always admin@domainName -adminPassword: "simple123" - -# migrate:status is required to make sure we don't try to run commands before the db is ready -# TODO integrate this into the seeder I guess? -initCommands: [ - "./artisan db:ping --wait", - "./artisan migrate:status", - #FIXME wait for seeding to complete - "./artisan user:password admin@kolab.local simple123", - "./artisan user:create test1@kolab.local --password=simple123 || :", - "./artisan user:create test2@kolab.local --password=simple123 || :", -] - -# Created above -testUser: "test1@kolab.local" -testPassword: "simple123" - -appKey: "base64:FG6ECzyAMSmyX+eYwO/FW3bwnarbKkBhqtO65vlMb1E" - -image: - pullPolicy: Always - -certManager: - letsencrypt: - enabled: false - email: "admin@kolab.local" - -# Deploy a fixed certificate -cert: - enabled: true - crt: | - -----BEGIN CERTIFICATE----- - MIIDUzCCAjugAwIBAgIUOd6enK80Ohcw5kX1xYot+ncVxEwwDQYJKoZIhvcNAQEL - BQAwKzETMBEGA1UECgwKRXhhbXBsZSBDQTEUMBIGA1UEAwwLa29sYWIubG9jYWww - HhcNMjMxMjI2MTA0MjUxWhcNMjQxMjI1MTA0MjUxWjArMRMwEQYDVQQKDApFeGFt - cGxlIENBMRQwEgYDVQQDDAtrb2xhYi5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD - ggEPADCCAQoCggEBAIr/sBVZxD8jIF9w6WbZ7ivu8P6Grh0yMmd/fOi7T8rloE87 - Zi7CtOVyH/axS6I0dtlKYBmqZz7EoXvKMRirf55Hux3IXIRnSW9H8xXhzDHenwGV - eRyxavka++sWPe7tIhx2seJosfOGHRlWpdPwSvMO4tbVJjUtWrMGYdRwrsvcFVIY - hvD/aCreepmvnbR+YKTY6e8qVeTeMXFhb9Gk86H5cwrltIsO6uo1fx1JazXhEe5b - mqPhIKHNQcv8Mfb+JufhPmdq83ZoNygcrh+YG0K8Mz1t3+eLi5ij1QFR7c51Lnaf - deqaJgDKbiNGtrZEenDUZ4OGnuaWZ818jfAQ+RUCAwEAAaNvMG0wHQYDVR0OBBYE - FGNADX2V1X6/om7P38fmz3YHfbqgMB8GA1UdIwQYMBaAFGNADX2V1X6/om7P38fm - z3YHfbqgMA8GA1UdEwEB/wQFMAMBAf8wGgYJYIZIAYb4QgENBA0WC1NlbGYgU2ln - bmVkMA0GCSqGSIb3DQEBCwUAA4IBAQCHx0kaw1Zs9zwaU93BcQLLtwesIvnyWnzN - QrzNzUB88iGnzMraPa5uvyaVkKm3omyNn+B0qy3e9jBSCgVFe9rg66VPIUgGyNuj - La6LBYDlG5iRKHpY99BF4frS8e5pslp3H42waiGIyVYFWeyHSyHbFH/BIRkGhMa2 - 9Wtnvg5FS20/7NkG3QKui9QuzLaPpPN3yLRHpH6eIwkTV1UvvStRx9a6JQZ5crPW - aileFbysEN+CdJJAHCwreYuJD+UbdDP+3Cp9qaTRyY2nNwoyQxUPySWW8UbsljP9 - V6Of5+sYQ+o6n2E6hQOVEGqVP5kf4GoYBmfJTcbGfIFQYqk85vaA - -----END CERTIFICATE----- - key: | - -----BEGIN PRIVATE KEY----- - MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCK/7AVWcQ/IyBf - cOlm2e4r7vD+hq4dMjJnf3zou0/K5aBPO2YuwrTlch/2sUuiNHbZSmAZqmc+xKF7 - yjEYq3+eR7sdyFyEZ0lvR/MV4cwx3p8BlXkcsWr5GvvrFj3u7SIcdrHiaLHzhh0Z - VqXT8ErzDuLW1SY1LVqzBmHUcK7L3BVSGIbw/2gq3nqZr520fmCk2OnvKlXk3jFx - YW/RpPOh+XMK5bSLDurqNX8dSWs14RHuW5qj4SChzUHL/DH2/ibn4T5navN2aDco - HK4fmBtCvDM9bd/ni4uYo9UBUe3OdS52n3XqmiYAym4jRra2RHpw1GeDhp7mlmfN - fI3wEPkVAgMBAAECggEALA4BHas/X3F/K7DKUR5mdgc727gNDFTiE9qc2NixYBHq - fuJJLy3oDsbeqZ4k5iqxtonzrn7LTWId+nGpoPOONbjvbe+YnyBrbnlD6t4PjYjN - Jb/dzIHQ8VYjnS2GAKmpA5N9KtDbAd+yblr/oQ5KewHvVH7nJriSxCYUMLRsOlE1 - xhhGZpynTg/CmT6xVwSlBIVDCPIfQEKiCBtpUEUwSMhcjETVfAXeNAtluXII3YnG - uhErY4P97ON98CrbcsiWM4GO+nC0pLi3j9oEvkFVGPLFX7aj5WawaJHWjqdUcrG8 - 2R62Ob8Inyg2R9hK3pwEEYH8pwB7cLjfAexxPzF7qwKBgQDEcyZjL6lmPNOosmU5 - ZO84uh/+ppQH1zObVH+Cv4Cj5/SX8i0QbjDopbMoZou0lHJUfBU8JcZYzhN4fGFt - TEpHwHT7gcyDddoSlADB6SRcysFMuRhPOHAfdS99ItZtna+9/uS/TA6cJOlmBPIW - 6/Znb2MexS8SkBxKKxZ3FjbuhwKBgQC1IjzKKb/HMcVspp0gLYsmZh/5/Yjf9ZkO - poFxrlytXoBB/izx62qqn1ihCHGUpQkoVuKA60VjKuLcM9u5Ny2AzuX9ywUrApQE - qcfmElo9eFIUn5VuBttpMJIpNugRE/XTOe7kMKGbd+dyil+Coz5e22IvQBGgGpmx - 1XQ3oGRGgwKBgAJxaCXNnu6tjPhJF6cqESuEbQdurOKYE4U3/Mn0dbYUGV+WXGca - 57LM9Lho5g3d1rokPONdmOTb0zQpX9DLJRVVWF8UUyXDXm3it0uyCYi54MOCfcHm - csaBX5DP0RjV4CydsdyLJpdcgiaJozUTxCGvKe1lCFvTvPZTKNlcRlybAoGAfoA8 - yEvD/g/Ke4kZL0Hfbp/gMS1aDF9v14V93bESVJotJOmo5gOt6R+EPGKzQEbKUHvt - kG+/c/Sdn4AwMfhRNSZKBadmIpWYXnFchFfI4ilH2dNh/weW8K3VRidsh5DTHAPX - zVIRa4yf/aSZ85iilIjO14T9Sj2JnWMf2UGRBpUCgYBd17muOTXJ0BzD34K+vAeH - 9c7S9PZZNuAfF/WWskIuBGhCNuIHFO7ot5IBAoTkudDTVieQXxBo/jTyidr87gUZ - 7kI4YjFMYkH9rAolrUutVo1aKpEHcC2+1ciz8ztiyk9cUZ0s10X+h2Svsnp/HvS9 - R4X5reaQgGrUYaU6SccGoQ== - -----END PRIVATE KEY----- - -passport: - # PASSPORT_PROXY_OAUTH_CLIENT_ID=$(uuidgen); - proxyOauthClientId: "942edef5-3dbd-4a14-8e3e-d5d59b727bee" - proxyOauthClientSecret: "L6L0n56ecvjjK0cJMjeeV1pPAeffUBO0YSSH63wf" - # PASSPORT_PRIVATE_KEY=$(openssl genrsa 4096); - privateKey: | - -----BEGIN PRIVATE KEY----- - MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQDM6WuCzf/sJLP+ - C1c4zq9YpOlEx2EIo1qVQ6ZcfPuD5pcV70QAYXVAFNldRzoUX3ms5JUVbJQQk8VV - UX9rsQEnwFBeQDnQ7Z8in4aNoBvtaz/F07/nudr0s/Ebv5TvsGPlkc/Mx+W/pGxx - yYzJzdJzVlxj+Ptl6vyiMqpxVwlxgRn58n3q9+L0U4jQZqWjM1npigcjuxeiXEf1 - RPwk3Ox8MF86bCLwGwq2twCODXtGTY4j6RnA/F+li6ri/OPGR5z/Ch2TbISUlZAu - TNelAJtmzb4u9niqMqyasegzNQIKw7td5Tyifxyd5NXnOH220blePi0OnBdTXHXV - KLipXlIn02woaBLm7MrKSlxAbZM3yKFOkYcTk7wGYYBfFU5N9EYT4mqsoVwrABS0 - rGAExZAILsiADUoa8uew2m+o7P82N2jYCL6EJF7rRbW2TNcnyOtMNfRz5eFNS0IP - PI/d9Ge9qY6a0RKa7b+KrbhsTCPKD27T4Rwi7489Qp65vrT7lr4wAKxqVqN7S6wI - 31tfLxnd8CSu3S49aqv5pcEmsc9EwvhwYqiUydWMrsDBrlNLMhrwjptlDMW+/fn4 - SGsHdr6ERFBEFRjI9vLio+W/Ec8KCLNUfZdFmJEEo1kyxFuzamfOzZPkB0xgwK0P - AjO+PjpjXyT3epEd5y/4AEjgHp/7BwIDAQABAoICABqw0ty0aYAAXeOa5Y8UOPnS - bUIUuFpwMLXdnHdSnk5VhFuKkXB9QVEKBjAkvXd24jn3gkXKoVSxctREq9TCtxRO - 9Aj6060XrpFLdzLOZqTbwfBKPyZ3aoJSR/cl0sgP0UtPXWJerVnzmF6P8sM8iIuW - da1d+p0RaTvVXqcpv6SlvNT2VZl8FXdexCTlIfEqmK0XWgu47ICtBYB4rmE8157r - jBPnjvt4gkI/fxaBwgtrwbaCv+SH2wuMsEMlzqN+o4AC+MxBp9lUy/WD89jdxeAz - r3CdkSUWOa5iuwykfHIbgbXezLGb3gXhD02xaYqdMciJT8Ql59Hnar/LsJX7H7ct - lRvGnhAujc+Fsd6jEJNRGPLOKo84dkjm0Sq0z6OvtZRtVg/j0AUokcPH2B4v8bm8 - OWzwbfav2ekyMdBIHbO+cuEJ7n5fTkNCDTd1aem42faFu2uAShqqXwVQWo2jpZn4 - z2Jk6j6YgSIddKUGi2vehfdXQyCBEEt4P3U9iuANu3BhO6xkm5MeLnwy4P7KOUb6 - gz5xKwReh1//d5M+rAsM2h+sQXOtksfhozA3GZMgX1LxTVrEPak8+Ww9zr4TUulm - 6tjzeEIgMhNoBP80ILAmu0gCSCIwVI+g4JMvBcsvvr0FLTPy2jO98CHqQP2e6GNT - iXOxaBaLQvzM9rPrDgflAoIBAQDvPkhYk5Sjwqt4gRVXozpah98JFYHLy07fqnib - uKuKPUElXTdxOEL+qlF2SbDe503NU494V9nsCpmRDgQo7lXdxYCIb0+uZWF6J9CI - y0vYSlHprlMdBC8PpAxsJPEjl2exX68q6o786XzfhIkvU5wjNjH/X+VSQEauBdKv - kDHvIe8DS2Y4k5ZeBtvmk8QVaz9IXoR9QU2Ns2t9hFd1owC/qjDfeO/74No2jnlx - 2oVChSzQb1WubKObcMGTCoP9QioMuQaO6CLnZ2gnQBwxR5mG/O7cohOiJXgQS0Om - eGrNubjY+8cDWK/rDTGZFtfc5/MnorXiHKFp7kICuMyWzJmVAoIBAQDbQ4+6g4LJ - 7JLFhNmypyaKJV/JDweIG9wisZzxYTLvYxIT1zdTI9UI7hpo92StjENi6AwSKvHJ - adt4fl+onJGYR/dRTQWIxhNQjkHQD4sv3qsqnPgGAgVQGBM8nxsczGODGJZxEmyh - 5gjPRkVZtQrDL7b425IxP+SOTUGJGt+eTI4Z2g/4N5Pn2rHEP5YV6p8U3e7dS5Sq - ZwDmOtbBPWmjGJy8iTzNZvxwhGVoIHqqV5pt7Y+od73BblJ8fRTbzf2G1DJYBBE+ - CVqLv9MnyS6EwiU5yrOqYDbtlbEcoQRXWRbfZn41LJOqhOyeTQ0CRaQdZSj+cFG+ - oaiOkunto7MrAoIBAQCva+W0PRJCOV1tkIjLp74D35ikmoZ/neWJjv+8ft4ZEO0R - rpYWiIBnJw9wQnxUFRoxMdIDFbeOof8UI0jdklSXtleWsrekUmX1IfiANUC5qVUC - mXYL0qOHPmx1Z2kBBeVcY6KXP0H1JGcRpabJcu8LypNCg1gsxUCOHWrsnDhg9WrB - 6alcVqts6m6XVUXzxp2yPMu85AMvoZ1xfXZ7pTfJUctgMNcWwzp9wl4+I1KPAgNo - GhqjOLmGIlltrco2Cyu2BH1Qj9n3/xSZoyKI580k85VZZeYrgHnWyLkj+SunCUUG - pSa5x2/GU/hIHj3Nlq3uJBplX0Tj3XW9dS9ea0s5AoIBAQChhJpbBceRobDYya1o - OlNcjn2J6YVd0VAPSpFXCofv6iYF8ZLyrsGey28vBZbndRyqvk8uDu5/tXgTwdwL - pBJogBMCk99QysCtpa17bAfXIosqX+kg29o4DxQUowvg4fsoNjOUZcMaXA7/ST+K - /p9H+10o4u5FU1C1Ntng+qfhv3kqOAVtjttofyRWcZTI3kWDpJzx7Vw9TpVOA+fw - /6FSoK3NALeGg6fP5uegldRmqRO8iLQ7oMFqvS8MP0PfS1XIPYY8afqdnVxS9+K/ - OycGatHrSZOiHTA5QfzvHvnIsnrz5FdyKj047qQzVIURuGVVthBFpk3BROqa5ERo - Zx9zAoIBAGVmK8ZmOydsPc3eTIcwHg8Kmhe64AzAwoR2UmtJqi54bkdYIPInZdfL - U/f84SspPk0yEJrtiU/6VpA5lspqt2e84pJ+Fr2ynhUc1EOxTMuC+3Yr5jPDde7J - 1KLC5D/ANqSkf7KbfTKePQKCX6Ftyk+kRx8OTAV0379/9/lwpLasND9VtWvGIfd1 - VwQsDRh2p7SreG/8iwUb6nhEurAcci6lXHWla6eNv6JsqGVvK541UaIS/vdxUisE - gsuFEZj6rTWKN5tA/319/fVvtY4oNKJwI5Unk9yNCWLn7ShnhR++rsvt3qQUXVrK - ML8s2QtAD92q3i6X+kLlZ1DxgD3h0rw= - -----END PRIVATE KEY----- - # PASSPORT_PUBLIC_KEY=$(echo "$PASSPORT_PRIVATE_KEY" | openssl rsa -pubout 2>/dev/null) - publicKey: | - -----BEGIN PUBLIC KEY----- - MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzOlrgs3/7CSz/gtXOM6v - WKTpRMdhCKNalUOmXHz7g+aXFe9EAGF1QBTZXUc6FF95rOSVFWyUEJPFVVF/a7EB - J8BQXkA50O2fIp+GjaAb7Ws/xdO/57na9LPxG7+U77Bj5ZHPzMflv6RsccmMyc3S - c1ZcY/j7Zer8ojKqcVcJcYEZ+fJ96vfi9FOI0GalozNZ6YoHI7sXolxH9UT8JNzs - fDBfOmwi8BsKtrcAjg17Rk2OI+kZwPxfpYuq4vzjxkec/wodk2yElJWQLkzXpQCb - Zs2+LvZ4qjKsmrHoMzUCCsO7XeU8on8cneTV5zh9ttG5Xj4tDpwXU1x11Si4qV5S - J9NsKGgS5uzKykpcQG2TN8ihTpGHE5O8BmGAXxVOTfRGE+JqrKFcKwAUtKxgBMWQ - CC7IgA1KGvLnsNpvqOz/Njdo2Ai+hCRe60W1tkzXJ8jrTDX0c+XhTUtCDzyP3fRn - vamOmtESmu2/iq24bEwjyg9u0+EcIu+PPUKeub60+5a+MACsalaje0usCN9bXy8Z - 3fAkrt0uPWqr+aXBJrHPRML4cGKolMnVjK7Awa5TSzIa8I6bZQzFvv35+EhrB3a+ - hERQRBUYyPby4qPlvxHPCgizVH2XRZiRBKNZMsRbs2pnzs2T5AdMYMCtDwIzvj46 - Y18k93qRHecv+ABI4B6f+wcCAwEAAQ== - -----END PUBLIC KEY----- - -kolab: - resources: - limits: - memory: 1000Mi - requests: - memory: 100Mi - -horizon: - resources: - limits: - memory: 500Mi - requests: - memory: 200Mi - -meet: - webhookToken: "simple123" - serverToken: "simple123" - resources: - limits: - memory: 500Mi - -coturn: - resources: - limits: - memory: 30Mi - -collabora: - resources: - requests: - memory: 400Mi - -imap: - tlsSecretName: kolab-cert - adminLogin: "cyrus-admin" - adminPassword: "simple123" - resources: - limits: - memory: 500Mi - requests: - memory: 60Mi - volumes: - spool: - storageClassName: local-path - capacity: 100Mi - lib: - storageClassName: local-path - capacity: 100Mi - -roundcube: - resources: - limits: - memory: 500Mi - requests: - memory: 500Mi - -mariadb: - rootPassword: "VzNsY29tMzJAcGgzbGlh" - # Used by kolab to access the roundcube mfa db - mfaDsn: "mysql://roundcube:simple123@mariadb/roundcube" - kolabPassword: "simple123" - kolabLegacyPassword: "simple123" - roundcubePassword: "simple123" - volumes: - data: - storageClassName: local-path - capacity: 100Mi - resources: - limits: - memory: 500Mi - requests: - memory: 120Mi - -redis: - password: "VzNsY29tMzJAcGgzbGlh" - resources: - limits: - memory: 500Mi - requests: - memory: 20Mi - -postfix: - volumes: - spool: - storageClassName: local-path - capacity: 100Mi - lib: - storageClassName: local-path - capacity: 100Mi - resources: - limits: - memory: 500Mi - requests: - memory: 20Mi - -mail: - # Used for the noreply@domainName sender - noreplyPassword: "simple123" - -minio: - rootUser: "admin" - rootPassword: "simple123" - volumes: - data: - storageClassName: local-path - capacity: 100Mi - -openshift: false - -prometheus: - clusterMonitoring: true - - - +* Go to ./kubernetes/ * Try this: ./kolabctl deploy --k3s apheleiait+interns VXTPUB22XZGMTR30PDB4X9FWX5AIBNIOHT3HXL1EC5ZDUOHYA1QH70C14T19MM5S -# Ignore below this line - - - - - - -## Quickstart Instructions to try it out - -* Make sure you have docker and docker-compose available. -* Change to the base directory of this repository. -* Run 'HOST=kolab.local ADMIN_PASSWORD="simple123" bin/configure.sh config.prod' to configure this deployment. -* Run 'env ADMIN_PASSWORD="simple123" bin/deploy.sh' to start the deployment. -* Add an /etc/hosts entry "127.0.0.1 kolab.local" -* navigate to https://kolab.local -* login as "admin@kolab.local" with password "simple123" (or whatever you have set), and create your users. - -# Customization - -To customize the installation, copy config.prod and adjust to your liking. You can then install the configuration using 'bin/configure.sh $YOURCONFIG', -and afterwards 'bin/deploy.sh' again. - -Please note that bin/deploy.sh will remove any existing data. - -## Alternative configurations - -Everything but config.prod is for development or demo purposes: -* config.prod: A docker environment with just an admin account prepared. A starting point for a production environment. -* config.demo: A docker environment with demo data included. -* config.docker-dev: A development environment with everything running in docker. Includes a cyrus-murder. Don't use unless you know what you're doing. -* config.host-dev: Run only dependencies in docker with ports exposed, and expect kolab4 to be run locally. Don't use unless you know what you're doing. -* config.legacy: A docker environment that includes ldap and other legacy components. Don't use unless you know what you're doing. - - -# Use the ansible setup - -The ansible/ directory contains setup scripts to setup a fresh Fedora system with a kolab deployment. -Modify the Makefile with the required variables and then execute `make setup`. - -This will configure the remote system and execute the above steps. - -### Update - -To update the containers without removing the data: - -* git pull -* Run "bin/update.sh" - -### Backup / Restore - -The "bin/backup.sh" script will stop all containers, snapshot the volumes to the backup/ directory, and restart the containers. - -"bin/restore.sh" will stop all containers, restore the volumes from tarballs in the backup/ directory, and restart the containers. - - -### Requirements -* docker -* openssl diff --git a/kubernetes/values.yaml b/kubernetes/values.yaml index c6a2ff05..b59a9e28 100644 --- a/kubernetes/values.yaml +++ b/kubernetes/values.yaml @@ -1,274 +1,341 @@ # Default values for kolab. # This is a YAML-formatted file. # Declare variables to be passed into your templates. domainName: "kolab.local" # The admin user is always admin@domainName adminPassword: "simple123" # migrate:status is required to make sure we don't try to run commands before the db is ready # TODO integrate this into the seeder I guess? initCommands: [ "./artisan db:ping --wait", "./artisan migrate:status", #FIXME wait for seeding to complete "./artisan user:password admin@kolab.local simple123", "./artisan user:create test1@kolab.local --password=simple123 || :", "./artisan user:create test2@kolab.local --password=simple123 || :", ] # Created above testUser: "test1@kolab.local" testPassword: "simple123" appKey: "base64:FG6ECzyAMSmyX+eYwO/FW3bwnarbKkBhqtO65vlMb1E" image: pullPolicy: Always certManager: - letsencrypt: - enabled: false + letsencryptIssuer: + enabled: true email: "admin@kolab.local" -# Deploy a fixed certificate -cert: - enabled: true +tlsSecret: + # type: letsencrypt + # To deploy a static certificate instead, delete the letsencrypt entry, and insert this one + name: kolab-cert-static + type: static crt: | -----BEGIN CERTIFICATE----- MIIDUzCCAjugAwIBAgIUOd6enK80Ohcw5kX1xYot+ncVxEwwDQYJKoZIhvcNAQEL BQAwKzETMBEGA1UECgwKRXhhbXBsZSBDQTEUMBIGA1UEAwwLa29sYWIubG9jYWww HhcNMjMxMjI2MTA0MjUxWhcNMjQxMjI1MTA0MjUxWjArMRMwEQYDVQQKDApFeGFt cGxlIENBMRQwEgYDVQQDDAtrb2xhYi5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAIr/sBVZxD8jIF9w6WbZ7ivu8P6Grh0yMmd/fOi7T8rloE87 Zi7CtOVyH/axS6I0dtlKYBmqZz7EoXvKMRirf55Hux3IXIRnSW9H8xXhzDHenwGV eRyxavka++sWPe7tIhx2seJosfOGHRlWpdPwSvMO4tbVJjUtWrMGYdRwrsvcFVIY hvD/aCreepmvnbR+YKTY6e8qVeTeMXFhb9Gk86H5cwrltIsO6uo1fx1JazXhEe5b mqPhIKHNQcv8Mfb+JufhPmdq83ZoNygcrh+YG0K8Mz1t3+eLi5ij1QFR7c51Lnaf deqaJgDKbiNGtrZEenDUZ4OGnuaWZ818jfAQ+RUCAwEAAaNvMG0wHQYDVR0OBBYE FGNADX2V1X6/om7P38fmz3YHfbqgMB8GA1UdIwQYMBaAFGNADX2V1X6/om7P38fm z3YHfbqgMA8GA1UdEwEB/wQFMAMBAf8wGgYJYIZIAYb4QgENBA0WC1NlbGYgU2ln bmVkMA0GCSqGSIb3DQEBCwUAA4IBAQCHx0kaw1Zs9zwaU93BcQLLtwesIvnyWnzN QrzNzUB88iGnzMraPa5uvyaVkKm3omyNn+B0qy3e9jBSCgVFe9rg66VPIUgGyNuj La6LBYDlG5iRKHpY99BF4frS8e5pslp3H42waiGIyVYFWeyHSyHbFH/BIRkGhMa2 9Wtnvg5FS20/7NkG3QKui9QuzLaPpPN3yLRHpH6eIwkTV1UvvStRx9a6JQZ5crPW aileFbysEN+CdJJAHCwreYuJD+UbdDP+3Cp9qaTRyY2nNwoyQxUPySWW8UbsljP9 V6Of5+sYQ+o6n2E6hQOVEGqVP5kf4GoYBmfJTcbGfIFQYqk85vaA -----END CERTIFICATE----- key: | -----BEGIN PRIVATE KEY----- MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCK/7AVWcQ/IyBf cOlm2e4r7vD+hq4dMjJnf3zou0/K5aBPO2YuwrTlch/2sUuiNHbZSmAZqmc+xKF7 yjEYq3+eR7sdyFyEZ0lvR/MV4cwx3p8BlXkcsWr5GvvrFj3u7SIcdrHiaLHzhh0Z VqXT8ErzDuLW1SY1LVqzBmHUcK7L3BVSGIbw/2gq3nqZr520fmCk2OnvKlXk3jFx YW/RpPOh+XMK5bSLDurqNX8dSWs14RHuW5qj4SChzUHL/DH2/ibn4T5navN2aDco HK4fmBtCvDM9bd/ni4uYo9UBUe3OdS52n3XqmiYAym4jRra2RHpw1GeDhp7mlmfN fI3wEPkVAgMBAAECggEALA4BHas/X3F/K7DKUR5mdgc727gNDFTiE9qc2NixYBHq fuJJLy3oDsbeqZ4k5iqxtonzrn7LTWId+nGpoPOONbjvbe+YnyBrbnlD6t4PjYjN Jb/dzIHQ8VYjnS2GAKmpA5N9KtDbAd+yblr/oQ5KewHvVH7nJriSxCYUMLRsOlE1 xhhGZpynTg/CmT6xVwSlBIVDCPIfQEKiCBtpUEUwSMhcjETVfAXeNAtluXII3YnG uhErY4P97ON98CrbcsiWM4GO+nC0pLi3j9oEvkFVGPLFX7aj5WawaJHWjqdUcrG8 2R62Ob8Inyg2R9hK3pwEEYH8pwB7cLjfAexxPzF7qwKBgQDEcyZjL6lmPNOosmU5 ZO84uh/+ppQH1zObVH+Cv4Cj5/SX8i0QbjDopbMoZou0lHJUfBU8JcZYzhN4fGFt TEpHwHT7gcyDddoSlADB6SRcysFMuRhPOHAfdS99ItZtna+9/uS/TA6cJOlmBPIW 6/Znb2MexS8SkBxKKxZ3FjbuhwKBgQC1IjzKKb/HMcVspp0gLYsmZh/5/Yjf9ZkO poFxrlytXoBB/izx62qqn1ihCHGUpQkoVuKA60VjKuLcM9u5Ny2AzuX9ywUrApQE qcfmElo9eFIUn5VuBttpMJIpNugRE/XTOe7kMKGbd+dyil+Coz5e22IvQBGgGpmx 1XQ3oGRGgwKBgAJxaCXNnu6tjPhJF6cqESuEbQdurOKYE4U3/Mn0dbYUGV+WXGca 57LM9Lho5g3d1rokPONdmOTb0zQpX9DLJRVVWF8UUyXDXm3it0uyCYi54MOCfcHm csaBX5DP0RjV4CydsdyLJpdcgiaJozUTxCGvKe1lCFvTvPZTKNlcRlybAoGAfoA8 yEvD/g/Ke4kZL0Hfbp/gMS1aDF9v14V93bESVJotJOmo5gOt6R+EPGKzQEbKUHvt kG+/c/Sdn4AwMfhRNSZKBadmIpWYXnFchFfI4ilH2dNh/weW8K3VRidsh5DTHAPX zVIRa4yf/aSZ85iilIjO14T9Sj2JnWMf2UGRBpUCgYBd17muOTXJ0BzD34K+vAeH 9c7S9PZZNuAfF/WWskIuBGhCNuIHFO7ot5IBAoTkudDTVieQXxBo/jTyidr87gUZ 7kI4YjFMYkH9rAolrUutVo1aKpEHcC2+1ciz8ztiyk9cUZ0s10X+h2Svsnp/HvS9 R4X5reaQgGrUYaU6SccGoQ== -----END PRIVATE KEY----- passport: - # PASSPORT_PROXY_OAUTH_CLIENT_ID=$(uuidgen); - proxyOauthClientId: "942edef5-3dbd-4a14-8e3e-d5d59b727bee" - proxyOauthClientSecret: "L6L0n56ecvjjK0cJMjeeV1pPAeffUBO0YSSH63wf" - # PASSPORT_PRIVATE_KEY=$(openssl genrsa 4096); + proxyOauthClientId: "6e65ae14-f486-4edf-81d1-dfabde16939d" + proxyOauthClientSecret: "D6I95te0+hZBdGpwPqCFXjhZKvTfMZFgX+u4hE/F2WE=" privateKey: | -----BEGIN PRIVATE KEY----- - MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQDM6WuCzf/sJLP+ - C1c4zq9YpOlEx2EIo1qVQ6ZcfPuD5pcV70QAYXVAFNldRzoUX3ms5JUVbJQQk8VV - UX9rsQEnwFBeQDnQ7Z8in4aNoBvtaz/F07/nudr0s/Ebv5TvsGPlkc/Mx+W/pGxx - yYzJzdJzVlxj+Ptl6vyiMqpxVwlxgRn58n3q9+L0U4jQZqWjM1npigcjuxeiXEf1 - RPwk3Ox8MF86bCLwGwq2twCODXtGTY4j6RnA/F+li6ri/OPGR5z/Ch2TbISUlZAu - TNelAJtmzb4u9niqMqyasegzNQIKw7td5Tyifxyd5NXnOH220blePi0OnBdTXHXV - KLipXlIn02woaBLm7MrKSlxAbZM3yKFOkYcTk7wGYYBfFU5N9EYT4mqsoVwrABS0 - rGAExZAILsiADUoa8uew2m+o7P82N2jYCL6EJF7rRbW2TNcnyOtMNfRz5eFNS0IP - PI/d9Ge9qY6a0RKa7b+KrbhsTCPKD27T4Rwi7489Qp65vrT7lr4wAKxqVqN7S6wI - 31tfLxnd8CSu3S49aqv5pcEmsc9EwvhwYqiUydWMrsDBrlNLMhrwjptlDMW+/fn4 - SGsHdr6ERFBEFRjI9vLio+W/Ec8KCLNUfZdFmJEEo1kyxFuzamfOzZPkB0xgwK0P - AjO+PjpjXyT3epEd5y/4AEjgHp/7BwIDAQABAoICABqw0ty0aYAAXeOa5Y8UOPnS - bUIUuFpwMLXdnHdSnk5VhFuKkXB9QVEKBjAkvXd24jn3gkXKoVSxctREq9TCtxRO - 9Aj6060XrpFLdzLOZqTbwfBKPyZ3aoJSR/cl0sgP0UtPXWJerVnzmF6P8sM8iIuW - da1d+p0RaTvVXqcpv6SlvNT2VZl8FXdexCTlIfEqmK0XWgu47ICtBYB4rmE8157r - jBPnjvt4gkI/fxaBwgtrwbaCv+SH2wuMsEMlzqN+o4AC+MxBp9lUy/WD89jdxeAz - r3CdkSUWOa5iuwykfHIbgbXezLGb3gXhD02xaYqdMciJT8Ql59Hnar/LsJX7H7ct - lRvGnhAujc+Fsd6jEJNRGPLOKo84dkjm0Sq0z6OvtZRtVg/j0AUokcPH2B4v8bm8 - OWzwbfav2ekyMdBIHbO+cuEJ7n5fTkNCDTd1aem42faFu2uAShqqXwVQWo2jpZn4 - z2Jk6j6YgSIddKUGi2vehfdXQyCBEEt4P3U9iuANu3BhO6xkm5MeLnwy4P7KOUb6 - gz5xKwReh1//d5M+rAsM2h+sQXOtksfhozA3GZMgX1LxTVrEPak8+Ww9zr4TUulm - 6tjzeEIgMhNoBP80ILAmu0gCSCIwVI+g4JMvBcsvvr0FLTPy2jO98CHqQP2e6GNT - iXOxaBaLQvzM9rPrDgflAoIBAQDvPkhYk5Sjwqt4gRVXozpah98JFYHLy07fqnib - uKuKPUElXTdxOEL+qlF2SbDe503NU494V9nsCpmRDgQo7lXdxYCIb0+uZWF6J9CI - y0vYSlHprlMdBC8PpAxsJPEjl2exX68q6o786XzfhIkvU5wjNjH/X+VSQEauBdKv - kDHvIe8DS2Y4k5ZeBtvmk8QVaz9IXoR9QU2Ns2t9hFd1owC/qjDfeO/74No2jnlx - 2oVChSzQb1WubKObcMGTCoP9QioMuQaO6CLnZ2gnQBwxR5mG/O7cohOiJXgQS0Om - eGrNubjY+8cDWK/rDTGZFtfc5/MnorXiHKFp7kICuMyWzJmVAoIBAQDbQ4+6g4LJ - 7JLFhNmypyaKJV/JDweIG9wisZzxYTLvYxIT1zdTI9UI7hpo92StjENi6AwSKvHJ - adt4fl+onJGYR/dRTQWIxhNQjkHQD4sv3qsqnPgGAgVQGBM8nxsczGODGJZxEmyh - 5gjPRkVZtQrDL7b425IxP+SOTUGJGt+eTI4Z2g/4N5Pn2rHEP5YV6p8U3e7dS5Sq - ZwDmOtbBPWmjGJy8iTzNZvxwhGVoIHqqV5pt7Y+od73BblJ8fRTbzf2G1DJYBBE+ - CVqLv9MnyS6EwiU5yrOqYDbtlbEcoQRXWRbfZn41LJOqhOyeTQ0CRaQdZSj+cFG+ - oaiOkunto7MrAoIBAQCva+W0PRJCOV1tkIjLp74D35ikmoZ/neWJjv+8ft4ZEO0R - rpYWiIBnJw9wQnxUFRoxMdIDFbeOof8UI0jdklSXtleWsrekUmX1IfiANUC5qVUC - mXYL0qOHPmx1Z2kBBeVcY6KXP0H1JGcRpabJcu8LypNCg1gsxUCOHWrsnDhg9WrB - 6alcVqts6m6XVUXzxp2yPMu85AMvoZ1xfXZ7pTfJUctgMNcWwzp9wl4+I1KPAgNo - GhqjOLmGIlltrco2Cyu2BH1Qj9n3/xSZoyKI580k85VZZeYrgHnWyLkj+SunCUUG - pSa5x2/GU/hIHj3Nlq3uJBplX0Tj3XW9dS9ea0s5AoIBAQChhJpbBceRobDYya1o - OlNcjn2J6YVd0VAPSpFXCofv6iYF8ZLyrsGey28vBZbndRyqvk8uDu5/tXgTwdwL - pBJogBMCk99QysCtpa17bAfXIosqX+kg29o4DxQUowvg4fsoNjOUZcMaXA7/ST+K - /p9H+10o4u5FU1C1Ntng+qfhv3kqOAVtjttofyRWcZTI3kWDpJzx7Vw9TpVOA+fw - /6FSoK3NALeGg6fP5uegldRmqRO8iLQ7oMFqvS8MP0PfS1XIPYY8afqdnVxS9+K/ - OycGatHrSZOiHTA5QfzvHvnIsnrz5FdyKj047qQzVIURuGVVthBFpk3BROqa5ERo - Zx9zAoIBAGVmK8ZmOydsPc3eTIcwHg8Kmhe64AzAwoR2UmtJqi54bkdYIPInZdfL - U/f84SspPk0yEJrtiU/6VpA5lspqt2e84pJ+Fr2ynhUc1EOxTMuC+3Yr5jPDde7J - 1KLC5D/ANqSkf7KbfTKePQKCX6Ftyk+kRx8OTAV0379/9/lwpLasND9VtWvGIfd1 - VwQsDRh2p7SreG/8iwUb6nhEurAcci6lXHWla6eNv6JsqGVvK541UaIS/vdxUisE - gsuFEZj6rTWKN5tA/319/fVvtY4oNKJwI5Unk9yNCWLn7ShnhR++rsvt3qQUXVrK - ML8s2QtAD92q3i6X+kLlZ1DxgD3h0rw= + MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDJ/+c8GuQnFBtp + KQuCaZarz83lE+JI1FQ22fRf+uVMOxEmHgMRsz1T0dtgooi25FAhhxFV1m6vfUbU + v0iQkbEBQ3psg8yYUJl8wfS1dD9T5uzxLBVMqcDGnW97NXJVoYVEpafkMo6D0g64 + F8gi+1DZqDqzhS/E6xGIcWDYFr68qaKIPXDFaCaBsxHeyJAmXiE8z07KiQQSuIvI + iPFDn/eOboP055Hx+D3EHMKsj9hCsf8yzJwdhjV0nWydsxNDOFcyqybsVDQpAU0u + s35Gxt0aFk2F1xwd5S9kUOuhz7uOiw8OxX+9RlQttGNwnCUfdJ6PB9ZATQNtzGSj + rUJwKFsaWAFbZpnH1jnd9ehaIg5j5nTbEo6DYWbd4zgyB4uKxJ3riz338y5rZ0aD + +pk7wCfLASI+OuGNxhv5FGF+Og0SC8wHDWaZXT34fXtFhskl+NFwX8xVZLyx28RS + VU0Im618Krq/YR1ZYdZCCWsulJSA/6/lAWJTPJLlkLU3y9ZjkKYn5lCrrkzd/mcV + fIem2WCDEPLsJz8fdB6RF5/FuMLJfrGSCo6X6PWECQaFCbrjD5xbir4b4pKuHKK3 + fxDOb1TMT/yEq+/RVtAIXrpK8kDYkedgpHFBIlm7qzIDjwYWrvjYN1k46pKxR8v0 + GHeAtrmIJAYPEDT5JlT95MhxjMQSjwIDAQABAoICAEdXU+mMbcvHdC7dyizS8d3Y + VJV1QlQKeXut2nsTd2xG6DWYH+lebmhuE5a7kKFXXV2aAGtaglkEW8HDlPNKIUOa + +1/b5KRewvam4bA8UClnw4Mh2Jvs0CLVc4wGQk0v8ItgHj2gBWlVBNHLxGlmbRWS + Lrk8brSTeOvBbzyiO9cR6k9Hs85kjET+Y29VUmPals6NQPyTC5c5ClVW2C7UDnCF + Y6FZL9hPnjDnH3Imk3BqwQDF9tUOk06OUtAXcNQqz9EbVXHeA1YAGaxGxHBmx6vw + +IwufsWoLea2FaJeZZVgU38aDZVhg1VpAj3BR/MmEuHdGLQ4/t8GcvzDslU+S34P + FbsFrTBmTvHTAUBlbELqQ4RPTUkQWHwFgfvMcp6OImUooJ+SBbWyjfTc2rD4t/18 + M0rUVkOR/VuGqIf7tz8DhH5FvBSsXCBT/M8qjgPq4XV8+pI6t/hxklMvIX2pO29S + MR/6w7OZzBTTHFLHX3IMgqJsXTl34SlrSgUCeiGs94+SaQXeyDO35Yfih+aEd8hY + eVVtQZwmCZwQ/XQjTyMla952vwDv6rEqJjM7lB4l2QYnPop/LWmjgsDHN6QH2Mmx + q+uXb8LeDvRxoEnhUBwhDAdahTiaAKcK+Rm1xZdJgz00sUIp8ydOkNRsLUD3W1vv + ylWDC2IZvDAbcxQikr/BAoIBAQD4qddfEGu5FN27KyXmBVnWJ4VxOT/osgaUWi/B + rnH9J9hpqCVM2IvpeMxVKsQTTOWx4YksAnlPZ1YlMKS0SX+ox4pS2GuOBu8QfQg2 + xt4DFIxH6RyYnMdbeREfz7ze0+WIlNXfM0AMlEENDRdTeZTpn+9bQsqOBJ1mEYn3 + H/Gtu9gdrbHBRBrq06We5wec+0twwH/2P9ppOjxelg3lyDaI1m835QHZOAsc/LcK + 9GkqaycsYP19Vr6iMP2LrY27/53+gMG6UOiITI8pDZQRE9+kgtABkOwWEjZ5qCpa + jsHtvuQIs8zidAi54RjVxagE2Jf1fRbHLWXv5FzpbLo4ZdDRAoIBAQDP9ZwDusEC + wxgkaFtKsaM99DRwwtJ2UoigLpRJBbLn98CtTOlh5xjNdpG5CQC9dPZibC9HFum5 + Y3WypYGAo/nKnPGWrA8lRt4RgzFaNyp2pABbwKJdMDpiF067BezVPJfrpkDLxzYB + tl9no5gyosrcm6PQdzL5moAJr6SUPbWyD0TbRxAMbB8eW10yBPLkMqQUWuHMoAw4 + EIbGVnECFM3LavE+gWs/i+kbj1/yyw7gfV2CepBc9kqPY1KgXXGA/+liyTD0uYoA + HA4HlvQMC5Of/dr0cz5tZXtgTK2HjuwAktNsLh3u40ubecm1N0OvSXcU6qOucSSv + vs3j8RP5T4VfAoIBAQCjLODV0zK9a4HtluzxusUvERQyLn1Pt7M1mtEH6e+HTqRn + AR4pBVkaxlhf8wZkG+wHBJc9OApfHtKa6QbMAAczvG162+YId2hdi47eUzXRE6TS + c5h+VTNFRXcFRw8LskVHkVOfekQnfQoLBHIwJvKfNIKfgn7lHwYiupOshVvUxBWX + tCmXR5faTTS7x6NpUkY5ITlXYKN0tfBzqUhJZ07SENU++ppx7qLsTLHZEHYKjfJQ + 3vy5STkjub5H8IW3vo/xOJDoMLvG5WZ0bCKj6kSx8d2JiY5DFYSF5OKWNmPwHXoK + c+KZH8eyIpJnhaMyOufNAl72KUZhW5vU2bKB295hAoIBADGrYwENCO6E9G41sqBL + f0bb3e6UybnTCqjflzE9uDZpWU7LEO7+SFFCoZmFSfT2S6bEWiJrmZVa6RCrMRwt + jgrTo2wuWku3+nBKWm5GwNCnaSKBBwak7zzgfkBzMNbZaxuwkMdbJE4SZgUV8NMf + SL6aOe0fm0A8o5ospm11s8D8nqCU/4NIC8KvZbn9rpnMcp4d+tJp46E8aURT/xfV + KjYMq+QW+yupWhroCq2tzDbYGo6AgZyCgtpuiZyd1O9PsEmU7il1az2NddhgOJfr + 5+2Nr081e1Kbq3Ubu1KmUz3r062B8kpNZZCT7RZoRbVHIbcQN9oBUhbbxsdLnE6u + rJcCggEAGlWMqWBQFRgEfcMoqkmgsZCfgOiJKMCeD8kebo5/ZOkevOaTLWAADffm + C3gvxbLbOmY5MPNMJUOHfwfSd9OdC1vSp2Ur+vbfbGbMLpl3HtG5OBzGFGJGwek8 + gaYBgNNrmRfuDHzyT5vlUtET+yqxUAgRj9KXYQxGIuw90nOTHGxqZeegbFbMMl6c + Qj67ri3Li4K9akeLW40jPC9CLm0K4Ee9SaSpF3pg0fbu64VvQ1aUILPDMc1YZFJR + 0Todz6UP2SXJ0FwlzliA1nEFDwPyCs/6fTu8LFpSjHhMBWMfixQcM78XdDD/WbJq + p3AI3lceufH5bPGrk3VzepWXC/tleg== -----END PRIVATE KEY----- - # PASSPORT_PUBLIC_KEY=$(echo "$PASSPORT_PRIVATE_KEY" | openssl rsa -pubout 2>/dev/null) publicKey: | -----BEGIN PUBLIC KEY----- - MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzOlrgs3/7CSz/gtXOM6v - WKTpRMdhCKNalUOmXHz7g+aXFe9EAGF1QBTZXUc6FF95rOSVFWyUEJPFVVF/a7EB - J8BQXkA50O2fIp+GjaAb7Ws/xdO/57na9LPxG7+U77Bj5ZHPzMflv6RsccmMyc3S - c1ZcY/j7Zer8ojKqcVcJcYEZ+fJ96vfi9FOI0GalozNZ6YoHI7sXolxH9UT8JNzs - fDBfOmwi8BsKtrcAjg17Rk2OI+kZwPxfpYuq4vzjxkec/wodk2yElJWQLkzXpQCb - Zs2+LvZ4qjKsmrHoMzUCCsO7XeU8on8cneTV5zh9ttG5Xj4tDpwXU1x11Si4qV5S - J9NsKGgS5uzKykpcQG2TN8ihTpGHE5O8BmGAXxVOTfRGE+JqrKFcKwAUtKxgBMWQ - CC7IgA1KGvLnsNpvqOz/Njdo2Ai+hCRe60W1tkzXJ8jrTDX0c+XhTUtCDzyP3fRn - vamOmtESmu2/iq24bEwjyg9u0+EcIu+PPUKeub60+5a+MACsalaje0usCN9bXy8Z - 3fAkrt0uPWqr+aXBJrHPRML4cGKolMnVjK7Awa5TSzIa8I6bZQzFvv35+EhrB3a+ - hERQRBUYyPby4qPlvxHPCgizVH2XRZiRBKNZMsRbs2pnzs2T5AdMYMCtDwIzvj46 - Y18k93qRHecv+ABI4B6f+wcCAwEAAQ== + MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyf/nPBrkJxQbaSkLgmmW + q8/N5RPiSNRUNtn0X/rlTDsRJh4DEbM9U9HbYKKItuRQIYcRVdZur31G1L9IkJGx + AUN6bIPMmFCZfMH0tXQ/U+bs8SwVTKnAxp1vezVyVaGFRKWn5DKOg9IOuBfIIvtQ + 2ag6s4UvxOsRiHFg2Ba+vKmiiD1wxWgmgbMR3siQJl4hPM9OyokEEriLyIjxQ5/3 + jm6D9OeR8fg9xBzCrI/YQrH/MsycHYY1dJ1snbMTQzhXMqsm7FQ0KQFNLrN+Rsbd + GhZNhdccHeUvZFDroc+7josPDsV/vUZULbRjcJwlH3SejwfWQE0Dbcxko61CcChb + GlgBW2aZx9Y53fXoWiIOY+Z02xKOg2Fm3eM4MgeLisSd64s99/Mua2dGg/qZO8An + ywEiPjrhjcYb+RRhfjoNEgvMBw1mmV09+H17RYbJJfjRcF/MVWS8sdvEUlVNCJut + fCq6v2EdWWHWQglrLpSUgP+v5QFiUzyS5ZC1N8vWY5CmJ+ZQq65M3f5nFXyHptlg + gxDy7Cc/H3QekRefxbjCyX6xkgqOl+j1hAkGhQm64w+cW4q+G+KSrhyit38Qzm9U + zE/8hKvv0VbQCF66SvJA2JHnYKRxQSJZu6syA48GFq742DdZOOqSsUfL9Bh3gLa5 + iCQGDxA0+SZU/eTIcYzEEo8CAwEAAQ== -----END PUBLIC KEY----- kolab: resources: limits: memory: 1000Mi requests: memory: 100Mi horizon: resources: limits: memory: 500Mi requests: memory: 200Mi meet: - webhookToken: "simple123" - serverToken: "simple123" + webhookToken: "23e65a13c99abb098128aa530bcb9178075de478f59af83580db176a548512fa" + serverToken: "71a2a4119f23e67c0dd642c6ef4fe62e85c451a88d65ec4b8ea6ca2a8349a76f" resources: limits: memory: 500Mi coturn: + staticSecret: "6e56b17e2b19d8d375b8593f136da31db13d9ec4cccf38dbba8a9a4cb2bd3b1f" + publicIp: "192.168.1.29" resources: limits: memory: 30Mi collabora: resources: requests: memory: 400Mi imap: - tlsSecretName: kolab-cert adminLogin: "cyrus-admin" adminPassword: "simple123" resources: limits: memory: 500Mi requests: memory: 60Mi volumes: spool: storageClassName: local-path capacity: 100Mi lib: storageClassName: local-path capacity: 100Mi roundcube: + desKey: "EhZ2xOkX6clR5LsCFeRjKz35cUrZLMJu" resources: limits: memory: 500Mi requests: memory: 500Mi mariadb: - rootPassword: "VzNsY29tMzJAcGgzbGlh" + rootPassword: "simple123" # Used by kolab to access the roundcube mfa db - mfaDsn: "mysql://roundcube:simple123@mariadb/roundcube" + mfaDsn: "mysql://roundcube:ROUNDCUBE_PASSWORD@mariadb/roundcube" kolabPassword: "simple123" kolabLegacyPassword: "simple123" roundcubePassword: "simple123" volumes: data: storageClassName: local-path capacity: 100Mi resources: limits: memory: 500Mi requests: memory: 120Mi redis: - password: "VzNsY29tMzJAcGgzbGlh" + password: "simple123" resources: limits: memory: 500Mi requests: memory: 20Mi postfix: volumes: spool: storageClassName: local-path capacity: 100Mi lib: storageClassName: local-path capacity: 100Mi resources: limits: memory: 500Mi requests: memory: 20Mi +amavis: + resources: + limits: + memory: 500Mi + requests: + memory: 20Mi + dkim: + identifier: dkim20240318 + # Generated via amavis genrsa, must match the public key in the DNS record + key: | + -----BEGIN PRIVATE KEY----- + MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCcBokH3jkEmCax + pdse5y4JSVqHh7ieHHX2t4O8ygyYKbBDcGJHQFN6bB+FJrXCIPMNpk9eEfxECq6R + KI31OvHach+haxfmclehOAcj/RVUTjLJ1cBx5Om+yRV2b/R0nZz21JreBY6ZBioY + 3mclduyv+to9JzoaNyAx/GO/IVqYcSa921Q7tZfeSUiwsDH2JfUIkOPhlj3SyuHP + N1kNnyOs2FwSjZ7qmkZbBFlZ+pcyw6Ug+jVp/bkwzTjG4f1nU2MpYw4+chhYxzdf + n1Sa152KoHxR0xahLbLIPjUUiOlwp45ITMKU4hiPydS3WW9AkQuR+Soekj1n3HU5 + wLU8jn2LAgMBAAECggEAQptRnV/DNJBlmFoHEIq9bu53LLuGV00sGL5gCVSyCrVl + T2znL6ao3G7TB+suFakuSWnxoOWJrVxoCITpEULwI4KruSO4SMMQYL1D4xu0ItDd + QqezJ4wDM1SximWh1LTCYOcDE/wIU5A7oXE0VFyQD1JGH2wjFDTrVBt8U4hAHiop + F4t63ucMVrVPdg29y/ZLHkBItbS2bUdcnvxjVMSyoAgDbBq2rBhY9IXcBKsRQ0VS + fzFSk6yvonXJEY6B7zyBqKSuQBtUsl0Lk60B2RNv7T+TCyMMY+bIMmWzYsS701T5 + iUqZtrkJxs9Pw+23Q4jdMDUn6Jb0XgnXRnYEv/qeNQKBgQDOWTuTaxAYp1buKPYF + tXW4sbJGz6h7iMXX4bEm74SyLjb1W8TdOLu72KrC1ZYntu/5CY0mWP4f9OuJnu6f + XOXyzbj/4z+qL4z6ygF7w5E7ZRIILw9Xr8o8x395QQkMhzWH+hk4zxxrUoQkYcdz + QFTD1zIWBcZgD6wK4g1qTu8jrwKBgQDBkXpLAdRgNhzXUUI+D8xLSSnY0QEPYmJR + ItsqkmJHLWqg5QAsHjnVDXQBFbcV298J9p/I/6pgEQ8wHIV22WtlELm8ZlYtar2j + iAvKidMv0aBLPKwwO20Fov4xQEfYMJXmNEAE3gudyTlP/U/kAbwkp/wLHkYk03RL + GdshelAO5QKBgACsfetPUDAka74/V/5Qx1+hBOoCR5SPr8WysPdllNNYH0nR0OTA + CKzmWjhkpibfDA2OIG3doIbOL+61HCZdEUsnrND5Fv4hRZ6UBkk3LEQ7YkGwlaY9 + prVoGVx1/+eQkXYuNOLgmkEnddMAlrwjm6NAEqPLxQgPRQqMDmsoctN1AoGANW7e + LlRr9r8ZSQrCWXVs9J9WsOZI/6Et+K3BiEfuXy2XUKDGYmdZmYlkK2R+LMeMEykE + RKzmsCwlYCePZBZygeyTCQHK6jCb9sd4UcmoBXw9Xmd6NLpCxxqORrQy4OfQiUKF + JZLR7BV+/6iyZANil0/T0JHj1QiWAqE5j00/Sk0CgYB5gdPukALpwIYaBZB94dFW + vUp82R9q7/LTbzEWeAgaqH/n1juRwRqoOn7y8MMtm7syOfItqP7ad5YF5WcVLdnC + YtP/sQbIr+y/SgVPTiXkhF87knzdrxZlEvJ8u0+8hxTf2FCEcgrq6d5rS8jvITke + 6KeTcaXd5VKkpjxBdq0Xfw== + -----END PRIVATE KEY----- + +fluentbit: + resources: + limits: + memory: 200Mi + requests: + cpu: 100m + memory: 200Mi + mail: # Used for the noreply@domainName sender noreplyPassword: "simple123" minio: rootUser: "admin" rootPassword: "simple123" volumes: data: storageClassName: local-path capacity: 100Mi +alertmanager: + enabled: false + externalUrl: http://localhost:9093 + openshift: false prometheus: clusterMonitoring: true + +loki: + storage: + bucketNames: + chunks: chunks + ruler: ruler + admin: admin + type: s3 + s3: + endpoint: http://minio:9000 + region: local + secretAccessKey: admin + accessKeyId: simple123 + s3ForcePathStyle: true + insecure: true