add caching

.gitea/workflows/dockerfile_runner.yaml

@@ -1,6 +1,13 @@
 name: Gitea Actions Demo
 run-name: ${{ gitea.actor }} is testing out Gitea Actions 🚀
-on: [push]
+on:
+  push:
+    branches:
+      - "*"
+    paths:
+      - 'dockerfile'
+    tags-ignore:
+      - '*'
 
 jobs:
   Explore-Gitea-Actions:
@@ -29,5 +36,8 @@ jobs:
           context: "{{defaultContext}}:bitwarden"
           push: true
           tags: gitea.tryton.geeraert.eu/pi-ux-ce/bitwarden_cli:latest
+          cache-from: type=registry,ref=gitea.tryton.geeraert.eu/pi-ux-ce/bitwarden_cli:buildcache
+          cache-to: type=registry,ref=gitea.tryton.geeraert.eu/pi-ux-ce/bitwarden_cli:buildcache,mode=max
+
 
       - run: echo "🍏 This job's status is ${{ job.status }}."

.gitea/workflows/kubectl_runner.yaml

@@ -0,0 +1,41 @@
+name: Gitea Actions Demo
+run-name: ${{ gitea.actor }} is testing out Gitea Actions 🚀
+on: [push]
+
+jobs:
+  Explore-Gitea-Actions:
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "🔎 The name of your branch is ${{ gitea.ref }} and your repository is ${{ gitea.repository }}."
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - run: echo "💡 The ${{ gitea.repository }} repository has been cloned to the runner."
+      - name: List files in the repository
+        run: |
+          ls ${{ gitea.workspace }}
+
+      - name: Perform kubectl tasks for Bitwarden
+        uses: actions-hub/kubectl@master
+        env:
+          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
+        with:
+          args: apply -f bitwarden
+      - name: Perform kubectl tasks for Gitea
+        uses: actions-hub/kubectl@master
+        env:
+          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
+        with:
+          args: apply -f Gitea
+      - name: Perform kubectl tasks for Nextcloud
+        uses: actions-hub/kubectl@master
+        env:
+          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
+        with:
+          args: apply -f Nextcloud
+      - name: Perform kubectl tasks for Paperless
+        uses: actions-hub/kubectl@master
+        env:
+          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
+        with:
+          args: apply -f Paperless
+      - run: echo "🍏 This job's status is ${{ job.status }}."

Infrequent_access/backup.namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: backup

Infrequent_access/openmediavault_pod.yaml

@@ -0,0 +1,38 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: rsync-glacier-job
+  namespace: backup
+spec:
+  backoffLimit: 6
+  template:
+    spec:
+      containers:
+      - command:
+        - /bin/sh
+        - /config/rsync.sh
+        image: alpine
+        imagePullPolicy: Always
+        name: rsync-glacier
+        volumeMounts:
+        - name: glacier-backup
+          mountPath: /destination
+        - name: ssd 
+          mountPath: /source
+        - mountPath: /config
+          name: scripts
+      restartPolicy: Never
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: ssd
+        hostPath:
+           path: /ssd/
+           type: Directory 
+      - name: glacier-backup
+        persistentVolumeClaim:
+          claimName: openmediavault-backup
+      - configMap:
+          defaultMode: 365
+          name: rsync-scripts
+        name: scripts
+  ttlSecondsAfterFinished: 100

Infrequent_access/pvc.claim.yaml

@@ -0,0 +1,31 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: synology-backup
+  namespace: backup
+  annotations:
+    fileType: Backup
+spec:
+  storageClassName: nfs-storage-infrequentaccess
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 20Gi
+
+---
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: openmediavault-backup
+  namespace: backup
+  annotations:
+    fileType: Backup
+spec:
+  storageClassName: nfs-storage-glacier
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 20Gi
+

Infrequent_access/rsync_scripts.configmap.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+data:
+  rsync.sh: |
+    #!/usr/bin/env bash
+    #sleep 3600
+    apk update
+    apk add rsync
+    chown -R pi-ux-ce:pi-ux-ce /source/Backup
+    chown -R pi-ux-ce:pi-ux-ce /source/Image
+    rsync -avvt /source/Backup /destination
+    rsync -avvt /source/Image /destination
+
+kind: ConfigMap
+metadata:
+  creationTimestamp: null
+  name: rsync-scripts
+  namespace: backup

Infrequent_access/synology_pod.yaml

@@ -0,0 +1,38 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: rsync-synology-job
+  namespace: backup
+spec:
+  backoffLimit: 6
+  template:
+    spec:
+      containers:
+      - command:
+        - /bin/sh
+        - /config/rsync.sh
+        image: alpine
+        imagePullPolicy: Always
+        name: rsync-synology
+        volumeMounts:
+        - name: synology-backup
+          mountPath: /destination
+        - name: ssd 
+          mountPath: /source
+        - mountPath: /config
+          name: scripts
+      restartPolicy: Never
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: ssd
+        hostPath:
+           path: /ssd/
+           type: Directory 
+      - name: synology-backup
+        persistentVolumeClaim:
+          claimName: synology-backup
+      - configMap:
+          defaultMode: 365
+          name: rsync-scripts
+        name: scripts
+  ttlSecondsAfterFinished: 100

bitwarden/Bitwarden_export_Cronjobs.yaml

@@ -33,6 +33,11 @@ spec:
                  secretKeyRef:
                    name: bitwarden-credentials
                    key: BW_CLIENTSECRET
+            - name: BW_PASSWORD
+              valueFrom:
+                 secretKeyRef:
+                   name: bitwarden-credentials
+                   key: BW_PASSWORD
             volumeMounts:
             - name: scripts
               mountPath: /config

bitwarden/bitwarden.secret.yaml

@@ -2,8 +2,9 @@ apiVersion: v1
 data:
   BW_CLIENTID: dXNlci43MGVmNGYxNi1kM2MwLTRmYWItYWI3OC1hZjg5MDEwNmE2ZDk=
   BW_CLIENTSECRET: UlJZVGd3R0pUSjlHVDQwc3dZTklobzlrNUVYYTJv
+  BW_PASSWORD: V2luc3RvbkNodXJjaGlsbGlzMTAwJWhhbmRzb21l
 kind: Secret
 metadata:
+  creationTimestamp: null
   name: bitwarden-credentials
   namespace: bwbackup
-type: Opaque

bitwarden/bitwarden.secret.yaml.old

@@ -0,0 +1,13 @@
+apiVersion: v1
+data:
+  BW_CLIENTID: dXNlci43MGVmNGYxNi1kM2MwLTRmYWItYWI3OC1hZjg5MDEwNmE2ZDk=
+  BW_CLIENTSECRET: UlJZVGd3R0pUSjlHVDQwc3dZTklobzlrNUVYYTJv
+  BW_PASSWORD: V2luc3RvbkNodXJjaGlsbGlzMTAwJWhhbmRzb21l
+kind: Secret
+metadata:
+  creationTimestamp: "2024-10-29T14:50:23Z"
+  name: bitwarden-credentials
+  namespace: bwbackup
+  resourceVersion: "59808090"
+  uid: 7b213bf5-9143-4d4d-9987-07ec41e2caf2
+type: Opaque

bitwarden/bitwarden_export_scripts.configmap.yaml

@@ -4,7 +4,8 @@ data:
     #!/usr/bin/env bash
     bw config server https://bitwarden.tryton.geeraert.eu/
     bw login --apikey
-    bw list items  >> /backup/backup_$(date "+%Y-%m-%d_%Hh-%m").json
+    export BW_key=$(bw unlock $BW_PASSWORD --raw)
+    bw list items --session $BW_key >> /backup/backup_$(date "+%Y-%m-%d_%Hh-%m").json
 kind: ConfigMap
 metadata:
   creationTimestamp: null

bitwarden/curl/Dockerfile

@@ -1,26 +0,0 @@
-FROM debian
-
-WORKDIR /usr/src/app
-
-#COPY requirements.txt ./
-#RUN pip install --no-cache-dir -r requirements.txt
-
-RUN apt -y update
-RUN apt -y update && apt install -y curl unzip libsecret-1-0 jq
-
-RUN export VER=$(curl -H "Accept: application/vnd.github+json" https://api.github.com/repos/bitwarden/clients/releases | jq  -r .[4].name | sed 's:.*v::') && \
-curl -LO "https://github.com/bitwarden/clients/releases/download/cli-v{$VER}/bw-linux-{$VER}.zip" \
-&& unzip bw-linux-*.zip && chmod +x ./bw
-
-RUN rm bw-linux-*.zip
-
-RUN mv /bw /usr/local/bin
-
-RUN bw --version
-
-#COPY . .
-
-#RUN echo "nameserver 8.8.8.8" >> /etc/resolv.conf
-#CMD [ "python", "./nextcloud_ics_sync.py",">>","/var/log/nextcloud-ics-sync.log"]
-CMD [ "sleep","3600" ]
-#CMD echo "==================================================================================" >> /var/log/nextcloud-ics-sync.log 2>&1 ; echo $(date) >> /var/log/nextcloud-ics-sync.log 2>&1 ; python ./nextcloud_ics_sync.py >> /var/log/nextcloud-ics-sync.log 2>&1 ; echo "==================================================================================" >> /var/log/nextcloud-ics-sync.log 2>&1