From 3a616a024b21748490f577f3c7916c4f3cc1d250 Mon Sep 17 00:00:00 2001
From: pierre <pierre@geeraert.eu>
Date: Tue, 25 Nov 2025 23:03:19 +0000
Subject: [PATCH] adding required files

---
 ...itwarden-identity-cert-password.secret.yml |  6 ++++
 .../bitwarden-mssql-nodeport.svc.yaml         | 15 ++++++++++
 .../bitwarden/config.configmap.yml            | 11 ++++++++
 .../bitwarden/global.env.configmap.yml        | 20 +++++++++++++
 .../global.override.env.configmap.yml         | 28 +++++++++++++++++++
 .../bitwarden/identity-svc.svc.yaml           | 16 +++++++++++
 .../bitwarden/mssql.env.configmap.yml         |  9 ++++++
 .../mssql.override.env.configmap.yml          |  7 +++++
 .../bitwarden/uid.env.configmap.yml           |  8 ++++++
 9 files changed, 120 insertions(+)
 create mode 100644 external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml
 create mode 100644 external_manifests/bitwarden/bitwarden-mssql-nodeport.svc.yaml
 create mode 100644 external_manifests/bitwarden/config.configmap.yml
 create mode 100644 external_manifests/bitwarden/global.env.configmap.yml
 create mode 100644 external_manifests/bitwarden/global.override.env.configmap.yml
 create mode 100644 external_manifests/bitwarden/identity-svc.svc.yaml
 create mode 100644 external_manifests/bitwarden/mssql.env.configmap.yml
 create mode 100644 external_manifests/bitwarden/mssql.override.env.configmap.yml
 create mode 100644 external_manifests/bitwarden/uid.env.configmap.yml

diff --git a/external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml b/external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml
new file mode 100644
index 0000000..d8cd56a
--- /dev/null
+++ b/external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: bitwarden-identity-cert-password
+  namespace: bitwardent
+type: Opaque
diff --git a/external_manifests/bitwarden/bitwarden-mssql-nodeport.svc.yaml b/external_manifests/bitwarden/bitwarden-mssql-nodeport.svc.yaml
new file mode 100644
index 0000000..d2988a9
--- /dev/null
+++ b/external_manifests/bitwarden/bitwarden-mssql-nodeport.svc.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: bitwarden-mssql-nodeport
+  namespace: bitwardent
+spec:
+  ports:
+  - name: 1433bitwarden-m
+    nodePort: 31433
+    port: 1433
+    protocol: TCP
+    targetPort: 1433
+  selector:
+    app: bitwarden-mssql
+  type: NodePort
diff --git a/external_manifests/bitwarden/config.configmap.yml b/external_manifests/bitwarden/config.configmap.yml
new file mode 100644
index 0000000..9a9e54f
--- /dev/null
+++ b/external_manifests/bitwarden/config.configmap.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+data:
+  APP_URL: https://bookstack.tryton.geeraert.eu
+  LOCAL_GID: "1000"
+  LOCAL_UID: "1000"
+  TZ: Europe/London
+kind: ConfigMap
+metadata:
+  name: config
+  namespace: bitwardent
+
diff --git a/external_manifests/bitwarden/global.env.configmap.yml b/external_manifests/bitwarden/global.env.configmap.yml
new file mode 100644
index 0000000..a43dcf4
--- /dev/null
+++ b/external_manifests/bitwarden/global.env.configmap.yml
@@ -0,0 +1,20 @@
+apiVersion: v1
+data:
+  ACCEPT_EULA: "Y"
+  ASPNETCORE_ENVIRONMENT: Production
+  globalSettings__baseServiceUri__vault: http://localhost
+  globalSettings__pushRelayBaseUri: https://push.bitwarden.com
+  globalSettings__selfHosted: "true"
+  globalSettings__baseServiceUri__internalNotifications: "http://bitwarden-notifications-svc:5000"
+  globalSettings__baseServiceUri__internalAdmin: "http://bitwarden-admin-svc:5000"
+  globalSettings__baseServiceUri__internalIdentity: "http://bitwarden-identity-svc:5000"
+  globalSettings__baseServiceUri__internalApi: "http://bitwarden-api-svc:5000"
+  globalSettings__baseServiceUri__internalVault: "http://bitwarden-web-svc:5000"
+  globalSettings__baseServiceUri__internalSso: "http://bitwarden-sso-svc:5000"
+  globalSettings__baseServiceUri__internalScim: "http://bitwarden-self-host-scim:5000"
+
+kind: ConfigMap
+metadata:
+  name: global.env
+  namespace: bitwardent
+
diff --git a/external_manifests/bitwarden/global.override.env.configmap.yml b/external_manifests/bitwarden/global.override.env.configmap.yml
new file mode 100644
index 0000000..2ec88a4
--- /dev/null
+++ b/external_manifests/bitwarden/global.override.env.configmap.yml
@@ -0,0 +1,28 @@
+apiVersion: v1
+data:
+  ACCEPT_EULA: "Y"
+  adminSettings__admins: pierre@geeraert.eu
+  globalSettings__baseServiceUri__vault: http://bitwarden.tryton.geeraert.eu
+  globalSettings__disableUserRegistration: "false"
+  globalSettings__duo__aKey: p9jCHtnG4NZNZu4SThpVlCuOF1oePGhu53Wa4RJwuyeqRAWQ0aJN7GsKYrGbYIYO
+  globalSettings__hibpApiKey: REPLACE
+  globalSettings__identityServer__certificatePassword: test
+  globalSettings__installation__id: c36aded0-b0f1-4252-920b-ac4c008fc920
+  globalSettings__installation__key: CtQE5U1tMJE4Dzk7N9DU
+  globalSettings__internalIdentityKey: I5TMbqmEjhw9uBNmFZ9rU6s1KN5xqAKXh7RSPfgyj2XQ4sjlP22SCupFn4IVhYX7
+  globalSettings__mail__replyToEmail: no-reply@bitwarden.tryton.geeraert.eu
+  globalSettings__mail__smtp__host: smtp.gmail.com
+  globalSettings__mail__smtp__password: vmxkiidikqwirpuh
+  globalSettings__mail__smtp__port: "587"
+  globalSettings__mail__smtp__ssl: "false"
+  globalSettings__mail__smtp__username: p3jh6qa2@gmail.com
+  globalSettings__oidcIdentityClientKey: w47pWOkPa6mrTkiPuKizitsiRTR6NH8ufI01u77zbZt3LUcKWJ4wchMn6ouiwN7V
+  globalSettings__sqlServer__connectionString: Data Source=tcp:bitwarden-mssql-svc,1433;Initial
+    Catalog=bitwarden_vault;Persist Security Info=False;User ID=sa;Password=ChQKWDIW73eSHzX1UyvGDAv4pFw6DVKM;MultipleActiveResultSets=False;Connect
+    Timeout=30;Encrypt=True;TrustServerCertificate=True
+  globalSettings__yubico__clientId: REPLACE
+  globalSettings__yubico__key: REPLACE
+kind: ConfigMap
+metadata:
+  name: global.override.env
+  namespace: bitwardent
diff --git a/external_manifests/bitwarden/identity-svc.svc.yaml b/external_manifests/bitwarden/identity-svc.svc.yaml
new file mode 100644
index 0000000..fa4f8b7
--- /dev/null
+++ b/external_manifests/bitwarden/identity-svc.svc.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    deployment_method: manually
+  name: identity
+  namespace: bitwardent
+spec:
+  ports:
+  - name: 5000bitwarden-i
+    port: 5000
+    protocol: TCP
+    targetPort: 5000
+  selector:
+    app: bitwarden-identity
+  type: ClusterIP
diff --git a/external_manifests/bitwarden/mssql.env.configmap.yml b/external_manifests/bitwarden/mssql.env.configmap.yml
new file mode 100644
index 0000000..d453d34
--- /dev/null
+++ b/external_manifests/bitwarden/mssql.env.configmap.yml
@@ -0,0 +1,9 @@
+apiVersion: v1
+data:
+  ACCEPT_EULA: "Y"
+  MSSQL_PID: Express
+  SA_PASSWORD: SECRET
+kind: ConfigMap
+metadata:
+  name: mssql.env
+  namespace: bitwardent
diff --git a/external_manifests/bitwarden/mssql.override.env.configmap.yml b/external_manifests/bitwarden/mssql.override.env.configmap.yml
new file mode 100644
index 0000000..006d580
--- /dev/null
+++ b/external_manifests/bitwarden/mssql.override.env.configmap.yml
@@ -0,0 +1,7 @@
+apiVersion: v1
+data:
+  SA_PASSWORD: ChQKWDIW73eSHzX1UyvGDAv4pFw6DVKM
+kind: ConfigMap
+metadata:
+  name: mssql.override.env
+  namespace: bitwardent
diff --git a/external_manifests/bitwarden/uid.env.configmap.yml b/external_manifests/bitwarden/uid.env.configmap.yml
new file mode 100644
index 0000000..e428a96
--- /dev/null
+++ b/external_manifests/bitwarden/uid.env.configmap.yml
@@ -0,0 +1,8 @@
+apiVersion: v1
+data:
+  LOCAL_GID: "1001"
+  LOCAL_UID: "1001"
+kind: ConfigMap
+metadata:
+  name: uid.env
+  namespace: bitwardent