Compare commits

..
6 Commits
Author SHA1 Message Date
pi-ux-ce cff45d361a purge
Gitea Actions Demo / Explore-Gitea-Actions (push) Successful in 13m29s
2024-10-28 12:54:38 +00:00
pi-ux-ce 57b82e55db remove useless line 2024-10-28 12:54:04 +00:00
pi-ux-ce 6434494fe3 remove useless line 2024-10-28 12:53:38 +00:00
pi-ux-ce 86caf7e734 move to jobs 2024-10-28 12:52:21 +00:00
pi-ux-ce 28513528f2 cleaning 2024-10-28 12:31:14 +00:00
pi-ux-ce 0d5b703fbf before comment purge 2024-10-28 12:30:53 +00:00
8 changed files with 75 additions and 160 deletions
+64
View File
@@ -0,0 +1,64 @@
apiVersion: v1
kind: Namespace
metadata:
name: bwbackup
---
apiVersion: batch/v1
kind: Job
metadata:
name: bitwarden-backup
namespace: bwbackup
spec:
ttlSecondsAfterFinished: 100
template:
spec:
containers:
- name: bitwarden-backup
image: gitea.tryton.geeraert.eu/pi-ux-ce/bitwarden_cli:1.0.1
command:
- /bin/sh
- "-c"
- "/config/export_bitwarden.sh"
env:
- name: BITWARDEN_USERNAME
valueFrom:
secretKeyRef:
name: bitwarden-credentials
key: BITWARDEN_USERNAME
- name: BITWARDEN_PASSWORD
valueFrom:
secretKeyRef:
name: bitwarden-credentials
key: BITWARDEN_PASSWORD
volumeMounts:
- name: scripts
mountPath: /config
- name: bitwarden-vault-backup
mountPath: /backup
restartPolicy: Always
volumes:
- name: scripts
configMap:
name: bitwarden-export-scripts
defaultMode: 0555
- name: bitwarden-vault-backup
persistentVolumeClaim:
claimName: bitwarden-vault-backup
restartPolicy: Never
backoffLimit: 4
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: bitwarden-vault-backup
namespace: bwbackup
annotations:
fileType: Backup
spec:
storageClassName: nfs-storage-fastaccess
accessModes:
- ReadWriteMany
resources:
requests:
storage: 10Gi
-11
View File
@@ -2,18 +2,7 @@ FROM debian
WORKDIR /usr/src/app
#COPY requirements.txt ./
#RUN pip install --no-cache-dir -r requirements.txt
RUN apt -y update
RUN apt -y install npm
RUN npm -y install -g @bitwarden/cli
#RUN bw config server https://bitwarden.tryton.geeraert.eu/
#RUN export BW_key=$(bw login valvankart@orange.fr Impreza555 --raw)
#COPY . .
#RUN echo "nameserver 8.8.8.8" >> /etc/resolv.conf
#CMD [ "python", "./nextcloud_ics_sync.py",">>","/var/log/nextcloud-ics-sync.log"]
#CMD [ "sleep","3600" ]
#CMD echo "==================================================================================" >> /var/log/nextcloud-ics-sync.log 2>&1 ; echo $(date) >> /var/log/nextcloud-ics-sync.log 2>&1 ; python ./nextcloud_ics_sync.py >> /var/log/nextcloud-ics-sync.log 2>&1 ; echo "==================================================================================" >> /var/log/nextcloud-ics-sync.log 2>&1
+9
View File
@@ -0,0 +1,9 @@
apiVersion: v1
data:
BITWARDEN_PASSWORD: SW1wcmV6YTU1NQ==
BITWARDEN_USERNAME: dmFsdmFua2FydEBvcmFuZ2UuZnI=
kind: Secret
metadata:
name: bitwarden-credentials
namespace: bwbackup
type: Opaque
@@ -3,10 +3,8 @@ data:
export_bitwarden.sh: |
#!/usr/bin/env bash
bw config server https://bitwarden.tryton.geeraert.eu/
echo $BITWARDEN_USERNAME
echo $BITWARDEN_PASSWORD
# export BW_key=$(bw login valvankart@orange.fr Impreza555 --raw)
# bw list items --session $BW_key >> /backup/backup_$(date "+%Y-%m-%d_%Hh-%m").json
export BW_key=$(bw login $BITWARDEN_USERNAME $BITWARDEN_PASSWORD --raw)
bw list items --session $BW_key >> /backup/backup_$(date "+%Y-%m-%d_%Hh-%m").json
kind: ConfigMap
metadata:
creationTimestamp: null
-62
View File
@@ -1,62 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: bwbackup
---
apiVersion: v1
kind: Pod
metadata:
name: debian
namespace: bwbackup
spec:
containers:
- image: gitea.tryton.geeraert.eu/pi-ux-ce/bitwarden_cli:1.0.1
command:
- /bin/sh
- "-c"
- "/config/export_bitwarden.sh"
env:
- name: BITWARDEN_USERNAME
valueFrom:
secretKeyRef:
name: bitwarden-credentials
key: BITWARDEN_USERNAME
- name: BITWARDEN_PASSWORD
valueFrom:
secretKeyRef:
name: bitwarden-credentials
key: BITWARDEN_PASSWORD
volumeMounts:
- name: scripts
mountPath: /config
- name: bitwarden-vault-backup
mountPath: /backup
imagePullPolicy: IfNotPresent
name: debian
restartPolicy: Always
volumes:
- name: scripts
configMap:
name: bitwarden-export-scripts
defaultMode: 0555
- name: bitwarden-vault-backup
persistentVolumeClaim:
claimName: bitwarden-vault-backup
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: bitwarden-vault-backup
namespace: bwbackup
annotations:
fileType: Backup
spec:
storageClassName: nfs-storage-fastaccess
accessModes:
- ReadWriteMany
resources:
requests:
storage: 10Gi
-25
View File
@@ -1,25 +0,0 @@
FROM vaultwarden/server:latest
RUN apt update && apt install -y curl unzip libsecret-1-0 jq
RUN export VER=$(curl -H "Accept: application/vnd.github+json" https://api.github.com/repos/bitwarden/clients/releases | jq -r .[4].name | sed 's:.*v::') && \
curl -LO "https://github.com/bitwarden/clients/releases/download/cli-v{$VER}/bw-linux-{$VER}.zip" \
&& unzip bw-linux-*.zip && chmod +x ./bw
RUN rm bw-linux-*.zip
RUN mv /bw /usr/local/bin
RUN bw --version
https://www.reddit.com/r/Bitwarden/comments/xhir0q/how_to_install_bw_cli_in_docker/
$sessionkey = bw login valvankart@orange.fr Impreza555 --raw
/bin/sh: 37: =: not found
# export BW_key=$(bw login valvankart@orange.fr Impreza555 --raw)
# echo $BW_key
Q8lQlXFuQKxxYz5UXr+JcU1oM7F53S6AkmTnPFEh5+I2khV1w77hBaDUGvsHcbdqH+tIUEE+r5FZboVNyHMgNg==
# bw list items --session $BW_key
-57
View File
@@ -1,57 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: bwbackup
---
apiVersion: v1
kind: Pod
metadata:
name: node
namespace: bwbackup
spec:
containers:
- image: node:22-alpine
command:
# - "npm install -g @bitwarden/cli@1.0.1"
- "/bin/sh"
- "-c"
- "sleep 60m"
imagePullPolicy: IfNotPresent
name: alpine
restartPolicy: Always
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: node
namespace: bwbackup
spec:
replicas: 1
selector:
matchLabels:
app: node
template:
metadata:
labels:
app: node
spec:
hostNetwork: false
containers:
- name: node-d
image: node:22-alpine
imagePullPolicy: Always
command:
# - "npm install -g @bitwarden/cli@1.0.1"
- "/bin/sh"
- "-c"
- "sleep 60m"
securityContext:
# sysctls:
# - name: net.ipv4.conf.all.src_valid_mark
# value: "1"
# - name: net.ipv6.conf.all.disable_ipv6
# value: "1"
privileged: true
capabilities:
add: ["NET_ADMIN", "NET_RAW"]
File diff suppressed because one or more lines are too long