A lowly tech priest's attempt to please Mars
feat: configure PDS mails
+6
-4
+2
-2
kubernetes/apps/at/pds/helmrelease.yaml
+2
-2
kubernetes/apps/at/pds/helmrelease.yaml
···
119
119
# PDS_INVITE_EPOCH: ''
120
120
121
121
# email
122
-
# PDS_EMAIL_SMTP_URL: ''
123
-
# PDS_EMAIL_FROM_ADDRESS: ''
122
+
# PDS_EMAIL_SMTP_URL: set via secret
123
+
PDS_EMAIL_FROM_ADDRESS: '${SECRET_SYSTEM_EMAIL}'
124
124
# PDS_MODERATION_EMAIL_SMTP_URL: ''
125
125
# PDS_MODERATION_EMAIL_ADDRESS: ''
126
126
+4
-2
kubernetes/apps/at/pds/secrets.yaml
+4
-2
kubernetes/apps/at/pds/secrets.yaml
···
3
3
metadata:
4
4
name: pds-secrets
5
5
stringData:
6
+
PDS_EMAIL_SMTP_URL: ENC[AES256_GCM,data:Y/kAFVA1k/MhFqD59KddyspJS8d+tA8R4KLEKnzzuCrhMy8EM7qNOwqFg6ggHpwFOBcLOzQ5,iv:EImOA4ZlC1pirJDvFzrHDKRUplSb3agq54kgY8WKDMc=,tag:DCGgIWsyko7qCbj4xUGPcg==,type:str]
6
7
PDS_DPOP_SECRET: ENC[AES256_GCM,data:g5E5hwsDU/3/kF1NMa7PlhK35Qxu1JQ9zvKPWWbFL/lLxuAs2BUi+FASNmU5C7sxSu7MM4j8/iZROZGbjppRjA==,iv:MZ0BQZk/wafkBy/cXn+kVLLWcHzikhz3QbyEhOXxaK4=,tag:MZPmVpcjTh8aRiOXIEOKgA==,type:str]
7
8
PDS_JWT_SECRET: ENC[AES256_GCM,data:fP4HMcaHNGjCndEDkBvC90lNRP1VD1AZ+3N5pLxMHng=,iv:VPljOatCXsy5EE5XzlTzQHMr5woQfxwH+buLz9BLF9E=,tag:wq608dHdf82jEye0L5E1xw==,type:str]
8
9
PDS_ADMIN_PASSWORD: ENC[AES256_GCM,data:pP4KqRXe+aWjOfGhXtALXssQJXwMsqRaSQy6e1MxBLs=,iv:LeQ8jgMLjA9Crav1DBs0sD4UKSfCwimN5LbiUw1LnDo=,tag:6nTY43Y/iVW/QQh7tCcT9Q==,type:str]
9
10
PDS_PLC_ROTATION_KEY_K256_PRIVATE_KEY_HEX: ENC[AES256_GCM,data:7tYJX2JInpw1ddtiC4WDs5472p1Rn5U630NM8aJ/UUXoqvUKbWp8JwTl8Sce8wOiE2ZQZjOXNYW4BNNW8Za/yA==,iv:jhjfs5rrNhObn7kf70gEh+m70bKX5kHUp6ZZdgRw+Jo=,tag:BScxQo9DQ4eUmoShCLY2SQ==,type:str]
11
+
PDS_SERVICE_HANDLE_DOMAINS: ENC[AES256_GCM,data:W4BeVyi7GDH8ycAn2s8Kws7HtarRLPW+8XUoB6TP+CU=,iv:NqSh7ckTp4LAJTNmgCsHZ2CcwX+MsFiIJ8lfa8ub62w=,tag:d1VdPNmvmb0Zf3tF6mWSvQ==,type:str]
10
12
sops:
11
13
age:
12
14
- recipient: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
···
27
29
T0NvQ0p3SHlNZm5ETmo1VitzRWhobWsKDL26hIDYVlyUhMUZ/T4zASdLSZp6ZOTs
28
30
57TRvz73ueG4h9EKq3zIrQBmofE33tBUa8edL4k5Udg2IAE/7phTSw==
29
31
-----END AGE ENCRYPTED FILE-----
30
-
lastmodified: "2025-11-09T21:37:51Z"
31
-
mac: ENC[AES256_GCM,data:wi59VE4/+aWJEJXyJnCZPJrnMd9Uk0wssZE9QkYULqhQ/YBhPVecm+IMVh8G5mQhqoXmPZm32gmnSR1jbxpJYzlhXN5PyJS0GPcv2HODUiZ3uUMg8ooIsmH4VcLmjaFdwwddR1tlfszrYzg65mDHZ0XEDz3AxJ32bZh6d2wq1Bo=,iv:zZWnhZAjDfllfrRqV7W5C2FhcvThfIBVoOimIRrStTE=,tag:UhBvYBSnls4WBVK5Vfo2Fw==,type:str]
32
+
lastmodified: "2025-11-09T22:41:05Z"
33
+
mac: ENC[AES256_GCM,data:0ICs1hWJu36mq0AnnyySJQDpiGVBOKU4dKt7i87NIR9/BUuKbyJn3FA0nyAR0Kc1Xfr/LTCERr6qGjoHwNFdnyPpLUtX2pKydgaDb3jzktJ9wsJWPsozUiBrVsKmVPzuDIDL/izI5LOcZPgf6xaH2DQHqU3Ljwd5b3T4dCA6Dcw=,iv:n7H7c50it1NhHcoP5ywj1/Gjt3fzm4oxrEYCar6swjA=,tag:5eIYaqYyt4xX0G61D1q+gg==,type:str]
32
34
encrypted_regex: ^(data|stringData)$
33
35
version: 3.11.0