From d12f733cf7e82d2b5b8756ea09f7b4fe41e9d84c Mon Sep 17 00:00:00 2001 From: Noratrieb <48135649+Noratrieb@users.noreply.github.com> Date: Wed, 7 Aug 2024 15:56:53 +0200 Subject: [PATCH] grafana --- newinfra/nix/hive.nix | 2 +- newinfra/nix/modules/dns/noratrieb.dev.nix | 1 + newinfra/nix/modules/ingress/default.nix | 4 +- .../ingress/{Caddyfile => vps1.Caddyfile} | 0 newinfra/nix/modules/ingress/vps3.Caddyfile | 4 ++ newinfra/nix/modules/prometheus/default.nix | 42 +++++++++++++++++- .../{apps => modules}/registry/default.nix | 9 ++++ newinfra/nix/secrets/caddy_s3_key_secret.age | Bin 661 -> 661 bytes .../nix/secrets/docker_registry_password.age | Bin 233 -> 233 bytes newinfra/nix/secrets/garage_secrets.age | Bin 795 -> 795 bytes .../nix/secrets/grafana_admin_password.age | Bin 0 -> 282 bytes newinfra/nix/secrets/hugochat_db_password.age | Bin 339 -> 339 bytes newinfra/nix/secrets/minio_env_file.age | Bin 397 -> 397 bytes newinfra/nix/secrets/registry_htpasswd.age | Bin 278 -> 278 bytes .../nix/secrets/registry_s3_key_secret.age | Bin 364 -> 364 bytes newinfra/nix/secrets/secrets.nix | 1 + newinfra/nix/secrets/wg_private_vps1.age | 9 ++-- newinfra/nix/secrets/wg_private_vps3.age | Bin 257 -> 257 bytes newinfra/nix/secrets/wg_private_vps4.age | 8 ++-- newinfra/nix/secrets/wg_private_vps5.age | 8 ++-- newinfra/nix/secrets/widetom_bot_token.age | Bin 272 -> 272 bytes newinfra/nix/secrets/widetom_config_toml.age | Bin 4006 -> 4006 bytes .../secrets-git-crypt/grafana_admin_password | Bin 0 -> 92 bytes 23 files changed, 72 insertions(+), 16 deletions(-) rename newinfra/nix/modules/ingress/{Caddyfile => vps1.Caddyfile} (100%) create mode 100644 newinfra/nix/modules/ingress/vps3.Caddyfile rename newinfra/nix/{apps => modules}/registry/default.nix (85%) create mode 100644 newinfra/nix/secrets/grafana_admin_password.age create mode 100644 newinfra/secrets-git-crypt/grafana_admin_password diff --git a/newinfra/nix/hive.nix b/newinfra/nix/hive.nix index 232b5e1..5ad7694 100644 --- a/newinfra/nix/hive.nix +++ b/newinfra/nix/hive.nix @@ -148,13 +148,13 @@ ./modules/ingress ./modules/garage ./modules/podman + ./modules/registry # apps ./apps/widetom ./apps/hugo-chat ./apps/uptime ./apps/cargo-bisect-rustc-service - ./apps/registry ]; deployment.tags = [ "ingress" "eu" "apps" "wg" ]; diff --git a/newinfra/nix/modules/dns/noratrieb.dev.nix b/newinfra/nix/modules/dns/noratrieb.dev.nix index 93497f7..0cf899e 100644 --- a/newinfra/nix/modules/dns/noratrieb.dev.nix +++ b/newinfra/nix/modules/dns/noratrieb.dev.nix @@ -61,6 +61,7 @@ let ]; # --- infra + grafana = vps3; infra.subdomains = hostsToDns; }; }; diff --git a/newinfra/nix/modules/ingress/default.nix b/newinfra/nix/modules/ingress/default.nix index 38e02eb..0748ffc 100644 --- a/newinfra/nix/modules/ingress/default.nix +++ b/newinfra/nix/modules/ingress/default.nix @@ -71,8 +71,8 @@ in } ${ - if name == "vps1" then - builtins.readFile ./Caddyfile else "" + if name == "vps1" || name == "vps3" then + builtins.readFile ./${name}.Caddyfile else "" } '' ); diff --git a/newinfra/nix/modules/ingress/Caddyfile b/newinfra/nix/modules/ingress/vps1.Caddyfile similarity index 100% rename from newinfra/nix/modules/ingress/Caddyfile rename to newinfra/nix/modules/ingress/vps1.Caddyfile diff --git a/newinfra/nix/modules/ingress/vps3.Caddyfile b/newinfra/nix/modules/ingress/vps3.Caddyfile new file mode 100644 index 0000000..bc9b1aa --- /dev/null +++ b/newinfra/nix/modules/ingress/vps3.Caddyfile @@ -0,0 +1,4 @@ +grafana.noratrieb.dev { + encode zstd gzip + reverse_proxy * localhost:3000 +} diff --git a/newinfra/nix/modules/prometheus/default.nix b/newinfra/nix/modules/prometheus/default.nix index 0fecef1..e591593 100644 --- a/newinfra/nix/modules/prometheus/default.nix +++ b/newinfra/nix/modules/prometheus/default.nix @@ -1,4 +1,4 @@ -{ ... }: { +{ config, ... }: { services.prometheus = { enable = true; globalConfig = { }; @@ -27,6 +27,46 @@ { targets = [ "vps5.local:9010" ]; } ]; } + { + job_name = "docker-registry"; + static_configs = [ + { targets = [ "vps1.local:9011" ]; } + ]; + } ]; }; + + age.secrets.grafana_admin_password.file = ../../secrets/grafana_admin_password.age; + + systemd.services.grafana.serviceConfig.EnvironmentFile = config.age.secrets.grafana_admin_password.path; + services.grafana = { + enable = true; + settings = { + security = { + admin_user = "admin"; + }; + server = { + root_url = "https://grafana.noratrieb.dev"; + }; + }; + + provision = { + enable = true; + datasources.settings = { + apiVersion = 1; + datasources = [ + { + name = "Prometheus"; + type = "prometheus"; + access = "proxy"; + url = "http://vps3.local:9090"; + jsonData = { + httpMethod = "POST"; + prometheusType = "Prometheus"; + }; + } + ]; + }; + }; + }; } diff --git a/newinfra/nix/apps/registry/default.nix b/newinfra/nix/modules/registry/default.nix similarity index 85% rename from newinfra/nix/apps/registry/default.nix rename to newinfra/nix/modules/registry/default.nix index 4de51ae..c49ec87 100644 --- a/newinfra/nix/apps/registry/default.nix +++ b/newinfra/nix/modules/registry/default.nix @@ -10,6 +10,8 @@ }; }; + networking.firewall.interfaces.wg0.allowedTCPPorts = [ 9011 ]; # metrics + systemd.services.docker-registry.serviceConfig.EnvironmentFile = config.age.secrets.registry_s3_key_secret.path; services.dockerRegistry = { enable = true; @@ -37,6 +39,13 @@ http = { host = "https://docker.noratrieb.dev"; draintimeout = "60s"; + debug = { + addr = ":9011"; + prometheus = { + enabled = true; + path = "/metrics"; + }; + }; }; auth.htpasswd = { # TODO: ugh :( diff --git a/newinfra/nix/secrets/caddy_s3_key_secret.age b/newinfra/nix/secrets/caddy_s3_key_secret.age index b99b7b9439568a18261952572141e890a7792173..a9bf7849b5e3c07ece25e82c212440400c3969c6 100644 GIT binary patch delta 590 zcmbQrI+b;TPJNV7VR3nRi9wk`L0CmqSeR!>sdG@ax1&pxmszA^U}9KOQizLrMxtM( zCzqRFiIZ=c)7o6m}#b) zZ%9yhmRDsqS71;{qKkV#mSwq_SE`%2r)y4XP)dGUvVmoONR**Lae=#$b4IDDerk61 z#E;_P-uf*edMurAlKK_oL zsfj6h7U}ukr6Iwk+GTm}p4oY>Zdp-|1rccxK8Ai~E9Fr5va+6(yql~gFEVUiEbaizV67wod{rt+cv&(%`joqA_3IaU} zoV=5qOH49Tf&(4R^PH;c%Ogw!1Ebs{xy*6}li!^$HL_Zj)boqSL2A+L!<#Qk{q8f$ zDpYM{yqy(uw(P-buS<8IN^kk7ahZ3KPkBg~NqAyvq(^#oNL6Zjsk3%rSzub0 z1y@F5ae!-RXtIfRRg#ybQBH)3iLZ8Pv5BE`d4YbiYfgHgd3vIwPqIa}1(&X!LUD11 zZfc5=si~o*LPV9Lb5x*$Nx5Z6MtEU*X?dz!YD7}0zFW3-vbl3|RF%K4kC{`bL9x5B zpLbP;e_@aTS80exmW#fBX}*PJim7|5K}4BPc0@^7K}J|vnvqd*VL^mW-QRykh0R=wh!NJLs;~B;4J&he5BaECg z)60E*(nI~DO8tV3eT;+sD@t99Es8??{R+!{61}rsv@_DV%)JAQ%EAp(jUy^^ee#mh zEHiz*j02pi!V3J7{5>tQOmnKz9R13CDwC4AbaizV3=P9PiVX@2vqLH?tK2gDi!8h{ zwG%VV46{9RgM%W<3%rZ#jSR{IO58F-xn8WQVbk++{d?5XzAay^^*y_DTova#MIP@B zDPm{XlO?hYYUh01`$*`A`tvZRt^;oJXIvZkyJz{We6}aKGd5mYbLhjSi%S?BBd*JYzCWIOC~dMb>(zeV2cjo}M5Isdh;8>cqysgPQAW&nNev#qEVu8mbOn~qN!_{o0C~pQHf!QS4xO?VpUjhwz-L4saJ?c zF;`%uu|=^ zGiF^qX+39On%LBv8_vvSxMj=uYmI4p?ZY`=?<`#;YEZT3P5I0(>5`iQLfH5KcbH0& delta 197 zcmaFK_>ysgPJOYtV~~qcWR6RUc|dAzQiYR$pru7dxPP&ir%8pcOM!2)TUbT8VW4Gp zD3^IunOnZLn|66gN_IhEx=)UWp+%lwc%GwqSZKLRrlYn`PI+);v3p^Z1(&X_u0l?R zr-fmDnq{eemPcAjQbj?efw^N)Xt`x@dSaqwXlkXIt6e~le|}JLvIQ5{4TaVhZkOye z{5^6QSRciFTj0&I>%^MyHBaA$T=;j_BR#!x z0*fNNEA&&Gs|>=-+_SR7d`kTD@&c18EhD*fb#)bjot;Xf3VpoX{Y$G7E6Wly6AO%r z{UR;(i;GLl@;xkkqO|Mt%2OgeO#BSEn5REbV(8k&_xq}M>a)|V%s7`3^m{7rVIeIIHB*r-F)NQTa7mrXI4sn_I`>#*Y%s_1jq9IZtEow< z((0UBqjp8;A@k#>Ke*+e%5=7@dCt0yb8X|2fP00CHS4akta(`TQqef0USic*vHxf4 z4ZmGJHBqcm*!K9g$;)N$P5<<8y|$TyO^mw9SK%v7Q%VIrWD-g`Zhv2y^P07K>Kk#_ z`aF-awu5``Zu!r8G|l+r%q>?vCg0ALivITYOz9lXuOf4MX0@)UzrptGv$ov*$ZX6a!?IhK)rWqw|1g}GJP7D0(_f$ovvp_%D{DOs+CMZwuzE}>299h2Cn`gk%7hqL8*BmPGQcTDM=B==0%g^7$xenlJb1q{qjqK zLrRj&OhU>dEDLjt1ItZ)v<*F+O)M+YiY>eXLkiq;Lkzf_^-EHm(zL@IjWdFa3QaSE z-Ho)JJp2nSQlo;y95eHZ)AP+U!vg|x4MMqeb#)cW5<^`QT}^UJLjrsZ%c>$%oQ=}5 zlAVfuEPX8^%1xZ}LQU#jQ&XKy(~|?a+Wgl?v`*Nzr6uOis)tH3Va7`)&U(xFYe(=z zzoi%J92QS<)E50`x{`^{Bgm6yE`0riej!6p5?&nocd8z*US}>`k zNz3)lzUMz2i=MCAe@)N)*zQ?7xmSL=BJII2x$)lSYf7&sUfNrsKJE3%-@-=QN{puZ zp8v*o#a?Xl{1a*mOm^MLTo@_y+B_|1f`<28A@PV!+8hcYAMU&_40-*U`-ols%Ie0> U$J*~(587O*>}XzG{I2B!0HseJy#N3J diff --git a/newinfra/nix/secrets/grafana_admin_password.age b/newinfra/nix/secrets/grafana_admin_password.age new file mode 100644 index 0000000000000000000000000000000000000000..9860b556dd7a0d08cab70a6f4cc2382d89e6988b GIT binary patch literal 282 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCTSsB(0U3RK85F?LD} zC^1Vh$kxwxG4gRq^DPXEaI-Mcb}jJ_N;XeSG)cce=}E*YzO!n`P6+Ys zkPp#bc7x%Ur}FbdDKB5Gjjc>bFMhrL@xwi<9aHzziJvVp@eFbE?OYj^`(git%p+HM i0?M@(TXL{I`}R6lq-$HN-mLdG5*xQme1Bl!Uj_i3A!~R5 literal 0 HcmV?d00001 diff --git a/newinfra/nix/secrets/hugochat_db_password.age b/newinfra/nix/secrets/hugochat_db_password.age index 63e13b00d3c483305a21a63383323104d3f67cc7..f9aa17e44f7f77abcc350b2f7412192e86fea531 100644 GIT binary patch delta 304 zcmcc2beU;_PJLy7N0ff1aY;phiDiIKaImvUp-WLtMzMF8Ww>K@XhE@SxLZK7vuk;t z0heW7aHg?|cUpjX-H;Dp{Yw?c#vaJF_*5cu7aPR zWsXOfg|}gGMtYvVL4admfOkkL5^u6_Nvi}lI8 zh8r!*HIKS8edRFj6qvB0`M0;eS*DQGak&)^ic-Aqdw*~BZ@#Q=x?-d0oOf5=@Uq8f zI2%lwwn5GCTTO)~Z;!i{%Dfux70=dWGR#d|bzZv7=D~t%TKy4Et(`e-|1$>iWOgsS HpOp&$qqBKo delta 304 zcmcc2beU;_PJM26o<~GjxshpcS(R~4UPWbbrLRRsR#9?jvUa7XOLlIGV_vDJk#Syz z30HVUNk~vxp|_=PX{DJ#Zkn%aL56vfsi(JvhhbS(Sc+$Wo41#xf2LucCzr0Su7Y-0 zex9kHWlmV7lUZ(hSc+GAQE5n`L1Kt=afZ2@NoKB_S-pN~dRByCMK;%It_ar!x8014 zF8$wY`Oi5&ZC}+i`Ac=bjLueP8H@hX_l`XKM-M4p+BcE;<;^qZ zTb2d=N{^FfTWh<->F`IVnZ~O#r2LjV^+Pg|p_uZeAJo)kED+2EU!} zhXy?ku2)>OST3PNQ=tCbj1S);a_VpYC|EXGyzcQj4XNw?>NEen|K8=v=p9>q-g8pi I-6W?s0Ew}LGXMYp diff --git a/newinfra/nix/secrets/minio_env_file.age b/newinfra/nix/secrets/minio_env_file.age index e3facf35425cd0a30ede5f6a2ae381a5e78b5ef1..5328ccbdf9ee6ca761f7381298d67b6cbe863e8f 100644 GIT binary patch delta 362 zcmeBW?q!~!Q}3P>l^^L96;_a{9TwyrSZ1c3S&|WIY!vJo;pS?TZRuic7+DdOY8nz@ z!d0&ASLK`=WMQVCoZ*ra6j^BCQk3joSsrN~QbC-Qjunmo#JNh>*bZr zrK_u}5E7V}>SPjP;G&(Uo$iqxk>VIw%k``84V<*W_1EIuu0YB82baoTnbG?oa%StkLx)?`{%CTU z=lou@s_^g&X5We8&!45fmd%>ZI=x`$Wcew|-cbze_C5%FZ}28#TnQRaTjjUKZ)+8MWszE1knZVZrd^~T7UY~1;-p>fTvF)~RaoKXlbYh@nd0Qj zrK_u}5a?NA8fxI3RghS2p6s1b8XA@F*#BaDDk(^;+}QTrWyzHBFSg=-V(=eXZO>*5z4e zde7bsd#G`JcZ1{EgVpDwWtYFYWxO!(?*ktXhil*Mj0zWB>pxs+zFxbZZQjG9SGiuO MeR+9JZ+VCe0J0B`EdT%j diff --git a/newinfra/nix/secrets/registry_htpasswd.age b/newinfra/nix/secrets/registry_htpasswd.age index 8414c477480333a52acbc6cc4b47bf569c087a16..ef92c6248f34eed2b4810f5d1c3696806bc38a33 100644 GIT binary patch delta 242 zcmbQnG>vJ3PQ8hFW@MmQeqd^{v2$L5c2Ho7b4E(4n`xrHQLe9VX0BPKv3`C^R;p)^ z30F~JWO!Cul3zrzbFg!9rnjeSWkz^ZM7e8jYED3wzN1fao5oYXt-l~PPuzfm1$*CfVoe&zGFpEd3H#WYq4RGiwRfsjuJa&-7{(C z>}%Pi%`WXuJRJIGQii`&oWA(}lgUq_U5w5|=!!peQf+bnziGzyJwH7s7u;yOvHrPU uR`bJ6>wB2)&t=a!Rm#wmTBmFFUA2kR|Jl^P2jb7%eP%7~Sy`-k!U+HZE?wXN delta 242 zcmbQnG>vJ3PJMByi@Ak?b3|^IX_l*DRaT%yrCWegg?_GAL9%vXNl|cKg^{7VUqFy+ zF;{thPKuwKvA$EGtCw3;YErO|c7{brQHn{ZPrh@6Yk<3Fh?lmnS#D;e0hg|>u7Z9@ zn2V2_Nse)erCDA`cCw>cc0fpadPzyXVVb#HQb>ufUv`AMwt1u7Z1E zN@_^3Q>d3)a7l@FrN3ElUT$inb7`c1Xs)ZaX;7wHczsS{W?6+{cqG@}jO)_jKd$_? zVNcl~eKK8^k-N}SSK3a?D}RgkD^b%AHu0nET znMIX{WuZZ~VY!FDrE#i@n`c2(s;`$%NL8_!p;MJtM17!th`({7r!QCAAD(|!bIiV4 zH8k(KzuSDD8jIWe>+h4U9-Y{t`0azmcB8-b=PiCSH#hc9_Y6ON>g3<$+PnSqycl{; zJze72*8lK2b5nT9v5i%WHD2kJOJ6rCoymAfn8TO*VfvmePmg~TwzAq@y!#%?U#>8CS9oIMB&7 ssh-ed25519 qM6TYg O7IcxaeSOGfOmQJudTMomwnl/bsPhAUKCPeidwbThXs -e4Llj1rpB0QtY08AOQYSr9450fdLd7Io8MpXzCAma5c ---- DnobWf9zRcr2T9fV32wFhZDmHoXdrLGoEbiOMg+ixyE -ZeNKh, $! Ϲbz/:q^u1 qEF-F=7C%Іڥq \ No newline at end of file +-> ssh-ed25519 qM6TYg vqaZ8FrH2/iw1skzhxcDVtTGNrvgacXe6yZ6FLR5NxA +YsksjwIhIsGqSuHsgE2bxEChfhezUiab1KCR2JwGJog +--- tBUyV+jlTZVRhpzYloVwoKozRDOgOv6lLsLj9y8yxqI +%xTEcɐc1e#= )h&KU㆑G}Jo|4M*ԩ]xhpoe +) \ No newline at end of file diff --git a/newinfra/nix/secrets/wg_private_vps3.age b/newinfra/nix/secrets/wg_private_vps3.age index 532de4522c9783bbae00830d2372b955b7233092..aabf1dddd667da46f03d8ce4778c6d1d78665ec0 100644 GIT binary patch delta 221 zcmZo*WMCFjk?WydoEzZo>>C!I5t`|iUs>jC z!DU`j;9X*1=Iotj?vs;~;!$cDQWRqBn^|ZaVeC=iV(guoRbCoW8JJn&$)&5StB_n- zVCdslVW3}Tze?6qf0l9v%?r5z6(U`Ay*SIgfw# zNY}pH?=!07}tmE9JtOft4ia=#Utx(U#qgyJYpBF8X{%5#-K1) YXOo?Q!Xm!Y!V{&Azr6n7YnWvnwaKdQf2Jzl9N(eRbrU#Q{?I!mE_^>VwhNA;bNH) z$mJPiT%1yslwq2YZ%|yGS(25To#$L?5|$qjQRI|kQd(+J?(UyeQCN^z&ZVoXs}SlO z=;PwkZ=j!(mS$>d>F%mu5L{K@6P9Hf9^p|`R?HP?cJtm1gY%^s z(vAB+F8x2tW<%1!S3Pk%BiAolIx*!$v{cHYCl6{~6@0E$dU#WF%R{#|V-21ty}m_r Y*SP!0<)=!&`h9teM2y@$=Mr-h03BObR{#J2 diff --git a/newinfra/nix/secrets/wg_private_vps4.age b/newinfra/nix/secrets/wg_private_vps4.age index 10b0d3b..a4fb419 100644 --- a/newinfra/nix/secrets/wg_private_vps4.age +++ b/newinfra/nix/secrets/wg_private_vps4.age @@ -1,5 +1,5 @@ age-encryption.org/v1 --> ssh-ed25519 51bcvA CjxIs41xJfD5FLvhNePVx4Z+oxLNGs18rIqA1oePZUA -vbbgC5XDSpheko+opZcGdGOLRTkpy9oOKUDqJB5mHrA ---- zIA/cJR2IvTe9PrxvsqYUtx3CVDMadur9Zab5yklQHk -9_n5~\C'q]+~jw&O4N vUo$ʐbEͅGkmk\ \ No newline at end of file +-> ssh-ed25519 51bcvA cvlpm3reQDmA9Faca2wB1M8a4diEUTAYnZ7scmbt+i0 +DNQrAzPoVvbDR7UVCft8m/6kjHySIpT1l+xl22TW9bk +--- PELEXNV7Ottz1Jgc+5U0ew9t2YEKfUVSsiaYehvwqnc +WLe7M?V69)Y%y1J(u눿0)x@Y~h┈Y5Nd \ No newline at end of file diff --git a/newinfra/nix/secrets/wg_private_vps5.age b/newinfra/nix/secrets/wg_private_vps5.age index 5529669..39e89f5 100644 --- a/newinfra/nix/secrets/wg_private_vps5.age +++ b/newinfra/nix/secrets/wg_private_vps5.age @@ -1,5 +1,5 @@ age-encryption.org/v1 --> ssh-ed25519 vT7ExA hiEMWjjGY/Elfd8oc9gB7p1bcV0G4u+NpvcChl06Kko -TANojl91jyH5dIjj0e7FlyvWfblRWd1psLerI3AxKe4 ---- EZL4OcGAkc70DMOiFaiZab64IX+Cv952bGXgF/5XZNc -{KNn0ojMrTOq3Map&;D qAStrY@ m4rOm \ No newline at end of file +-> ssh-ed25519 vT7ExA ZtMI/PoOE6fF7heY5Eq12bhzgn/ViE/PzeLRJlFOZxo +kdRK08mwj0vCjhvJzX4TmI4H0dnRbnDC7kK+U7BW4mM +--- QSYK8SFsCQK0hrCG2ZjAG3KIpXPQTJqolMLj6aWHkcs + ՚bCCxT>Ine3Fn.=V~(G8ӚGi(3Yd:eu \ No newline at end of file diff --git a/newinfra/nix/secrets/widetom_bot_token.age b/newinfra/nix/secrets/widetom_bot_token.age index 08e20fd941d24c7428a261bc1a42be4792a0965f..0fea19d2281d8328b96c5086c76d218abcbdbe65 100644 GIT binary patch delta 236 zcmbQhG=XV?PJMBatG~Wss<%%_qI*zCxl>4nzE@yrWQ3!(uUS-phrfT0k)^k9M47&O zIhUV>zJ6qwW43>wb4pQhkY`r0iD7D$hrdgBd3kAavZ=qbZ%|@scxs55374*}u0p73 znYW*zxsz9-X<=DVkdwPnS!!`wNQ8w+i9wKWMrOEEWol_*QDRtAx^a$Qj(&lwW4UEYvSXH$LAq-}n08uerCEw;VP$GX zK3BM-i+^5}YkHnjNOFL=i+Nx`n6|cIc9fHLs<}Z#nRkktex6fFVwSnSCzr0Su7Yu4 zT5wQsSaMKlut{=2Vy?DPj&XWqhNZ8*fxCsPV}PZ3R%&jbi$PkrV?GzF9`o}*8~>HR zfAiJS|K5eAn|*8=tLoAhxSQ#UNBD<)Z(X&Rcd5!*uDA1Mf28~ zUbo4Yd>;vD~GQQ_CbQ|6v-Q`7 z+J4+jo3o?iq*M0ckI!ziy?AADgUjKz)xMIJ|9@r6=A8KMy=yAdAH9ElYdAwq8K!J5 zzUlM(=9%Js6Ky`L)mQDAb?Vu@{_rh%{}vqAE8NXB$;j1e@y5TEQtl!_*;AezcdaV7 zxt8erWTIZ`i|fK^JK2hqA2c=I@L$ok{;+)j7w?NxeoJ|dCfu~xG9mhYRNdlV->(R8 z?O9gR8l`g7)m2~o0%!2~hCSgC8=pum)KO&1QV5B9-v8oXaos7^ttT1llRHIQi*pzef<;@RP+65#Z z(J=Lqnjc!KXyswIRCH1NF@r_frAK+%UsRr&$L_cCVzkSPxg}j4(`WK+aadCA`)= zt3Eid#*FKH*n{f%m$L8uYcE${wBt%G=fAROmgkk-H8 ztKqDhOP)v;JM7j=&AT5l|AWT4I|47aJPKKV=>4_B_1j{Ke(Po2%C`KO82Hj;%94F| zQ|Ne!AtEn=gK7x z*9_0pyx!}VoW4h~zK-|2(Cq~i*lb-EpWJ#xZI|u>pEaujV^=Hg+xYbbM^VLwqSK!z zxbn<1?$}ko<9p}IFq_bQ&*S44v@B}bEY8IHS3EelVmvV@<~H4L?mmGNa>&6DEcRJOE=stWLU zJL%g(`K*od=L*D*d{E;%zAvBkETjHK`)WqMws)NwaXh`Q)>4uBvI%cD@~@uVxHvQ5 zXUzZdG<|38r;C>Uf8+OJ-yLItON#~a2rXAmMV%;zKu+P&}`aW9Cv%l^Bu}4Sfmfs6W&(*(vvd_|= zw|4%Wi$-FXeG7~qpI>r%pFQ7Xy*x_9CwI%D1|5sGZku{z0OXPj3t*Gt4ro0ln@$9nSS)M~r6Fm6ZE#h+yZo30D@+A*!i zjVZ1`?e}A;9L1ugZYK}r{5)FG-Jq!bti@)&rOgSO`JB>Mo=!bt`m`T*z$V~L(PG@iM`9%dh>t#Y*;^m-~VDw zo88+J-bYND?LS-$^SZD%Z99*1%8_^C*~Y1lzSedK_0N9r_tSw3Vr80*KYHEze|fDu zvvT+R3s3e1?RP6oewO;{xLi<^oqZ9b_2=`N|5ZHdiI{v*roO51>(AEdyQCFWdYcBlu%-eWpK(6S7CvRCp zYv=xXGbdd!ueB+YtD^73%z{-Rv;Mc0WJ}and`LBZpWt6$T0YljHa+YXALP zzo2hvZ1CDIlkz$1&78hP^Jt{4TBN*8Jol}Cf53WatIk041&302+vNFQYTelFw6cCR zD+Bw+ld;~fzRX|2Agwgvt!nq~6ISOOq-JV3%oJo0meP5#$5S&w>Vot9j7-ielTMY@ zeV+8@eD-Of=J{{i?bFt+n4gp1cyrnGc*s&(I4mB~7>Q(fit+p}%E;c&*vLz)Yg1k8>Qm%b`rO0c_`e#FkTM&EPR=3^cS_j`=%nKQZ+xhsr2|J>AT z@UGf@XG+-RJvBkEf?}st@11{Blx0$kP{7Y?;Zf}paY0$3*UU3ju5v!Obwp&>^}|`F zcN@=sy4+qO#QtYuk9VNSnbaj`oh&CQ@Y*li`Ju(|%09+fzp|FCU4Hu@yO^ZOewoEe z8qH;oIw#FI>!yat1IfIR;n45s&0~>((G%NS?%N;!I>;~xMzK`Sn!Tn-(|GI zPBdrtSQ_WUpIFER>$mNxBH^M$`| zi_)e3{qH&4y*B6g?{}&@Uu{u(W^CHIsk?uM^1iBxWf|wLh4~&{Sn^)Iy2z|}MZIGT zchaM~A5T7P%}F?ECSk6;cVVrP_%rpymESMSeega~XSwv#JO7Wp^qDUf=2hdi`z*tn zzOQQ;Gn;#+u)e&0_S^QX{i}YQlV>)b=DAPq=EnnvHs6^rU*TEI!x;((?)L654132F zZs(UIFLD3c(abhOwE%NrLH|RxJ4_2VN-0gdUcctF?x}FD34O{TixT%|)}2vz`>!i} zziIO&&w~-4Tgyy79JCgkRTr;lHfveme8w_2#_hT4G8H{n&!ju-l@4%Ne|RmEs_*^h z!9s@~?_2+bE7`c)^CkD{Ss4M>mU9~?E#cyhoVxeo|5IPzrmgds_%vo#msxzG*5T`i zf;uvI?x!BAU+8u&v*_p{g*C0)^5*fkcU}s#6jJ`>lD~3ZgS<;^_(JQy{hvA)I;K3j zs?9Ll`r@(bWhZ#~oAwwbKV5YoZQc9CrOn@3tgqKytJolWaPnuL6@G43+5HzJe+ler zf8n)qqoJ)}n8>5{$BtjUuc$E}JrpZ*VNTX;1{MaB1CfU>imB9VRi#G9FFmFIPv4}| z;#qT+#pC&Ys^+=x2)t|5;`f)QuW7VA9u|Ry;V*NkH459!eesk zyB|c!3SKsnGc;e zQWsj6SbgdK(G{+?dgT)&EhB%qYF<@)BK@jf-+xi&r?V?F}d#rT1vM&JQgE5{3o-IIPhHoq1t_3n)O?*B>a{-nzsDR;^_+a7A#PSmUWpWIsZ z``XRVm+Mn~ZDhVX{EgRlS+Xp0R#qw77ME$3oW`fce&oOA$tZMQS$_HEH~k&%J{^jF z=NrprKG5A|SW$icK;X`)htF|jdgcnfjGipH_?%IF8@Elsa*rE#%Qk6>h?YojGa9!~ zu({H3AvN(`!^Xn`&2DN**)qqj8WtXQTX&5O*qH{O>1I4izL_+?GE_?JM3wUzg8%FLVh zFYL_Bq=3-LvM1NK{E}TEdw=elJGBQ_9NMpw+dQFi)@NZw(UK6QuP2%=+2tDbFAO`& zwda7d<)^t8b8l1|Jg=X*ao^n_x$uySA=O8vxT_L;mzBLV>bxE_@kvxfrCRUjz5J#N zZcol&vh~XdIXY+K#9J$uwEuT~^7@>W9P=fnwY8gHuaf*?7}FH9={;NZoSa#~Q_ZjD z$TNTcJ@=~Lx@lU*73;5S@IDITZrFOV{iIdrn`KA0$!M|uR_^5Ax^#YUZvA8ZJuZ3E z`V048dnT;Q>~LxQy>xffy?o-XxW9Psjlf$Bf@ z3rktkB3@}F)oiz1k@WMt%tb~)3;7B~$$gfWzTafmIV*azD#xC0xqB%`*}gaYOS#Gc DEF!B` delta 4000 zcmZ1`zf69DPJLB!igT)WT5(undWlg$afwHEqNAUAnOkN+wtl#YYfx3Vf2B`xVoGS3 z30GRBp-*zCab8+UnVWf-nT2swP=tkVSb&jXVn|`2r%P#Ng?_SeNNH$rHkYohu7a_C zNI+?3kgu_`yNgA!drGiJxQDh+a&ClMm|I$bv4@w7TfK8ZNw7t>lLgnd@b!%+7U;0P zmN9s{h~@CwN7rA7OjX#cEMDcZsO8goHbwn#vp?lE?DGH2p4qS5`{~mGp$~@3>(r`3 z&Si&f<2wELp6^G&nM-ekSe|BTr{Ow`?d;9%(z zGrJ|Z3OhMU^92;@XMVJpe2QsC$?=yVo+{f{_5a|JXV1U${QBI7H_oWAFI>-jQ0~wX z-J*j$<^G?i6xBVcHhZ*XMi%4cnPFSHo6f&he6Vw)>kFQL(elfumRp{j5yc|cdos2Uq{>(@myNZYgYKPt6t}5 ziu}5gjBjDnzupp#nqktHbMHa_stG|-`8(M@+x#h%Em}46f4cJKwR5&_xNGB6(|-MX=9y z`QS^bsV)M?_IU4QpLN%9&Cd_VPS$@t{%RvjFT;Z1;;qvyPu9+4D^jx~jk8#M5PmR{s*Sc=G4$x3bNeOYSYN_-MCp#S-B?Qz8PE9+MJW{C8@( zn1=Vs^_`2SuDe(M+~}aO<%t&g@76D~ln-C9_@dIZsN>2u;T^2`d!3Z#L|?58b-Xp< zNtqNQSAAS+q4d8lkArO@vMjfs*G9fP?!w2DbbQs-de^4>_DLdnFMprE!u?}bzd>J3 ztyS3jn`#$X;v(+^E^JtncP3wCgLLzq+$8n(Lz7DWD3|NMlm8^kF}YUVD)HNa;=LDt z^v?dvnyRMaR`l0)&z!p4o;$fewz{nl*3&#Br8YU>B*SB&yL;rS)K3{s-q>09MlxA> zf%fB5@9)oEQ_xV~;yI(KQAK5*zET|f<)ao;x`V%d^=(=rwl(av{WO1tA7$I0hRj>C zq)KwduI`epJV}W$JR9C^PI&cFNGZ%U>51s3(ADxeoPr*=zFAeiQQi6MaI{%&QBcd= zS=L?EUf;IVsa31|ZC3YAw9Qvdm#K!pj?$x_1Ce;gA&2BeuXXb13 zKc4;2wOcH zPKYhyG!9L(-ESd#B|O?}zPEsxaN>`JMTd1h=`-_xe1G@JuN#Y`MR^sjPCj=jYI*2- z^94CMQ67@~R^j{hX=j%REedno?zb*%!^92gGb(s|BR5^%z**Ii!ElpLZrxhpru_PL z(+Rt_&A&MF&z*Aa1;?jL{=C$v9&q!VRdcsQX0x7Tm?6(JAw!Y&Pz|9IudHLPr#MD- zwz;M7XOh3d-`({0 z-Q@>XTWaTqecW!a@Tk>2p9%cc-*3ciuiKP(xK*kwVm<4M_Qb9maV7uw1S1@8&N!Co zl#-c!&$~Tn^UcF$sdcKNE}i?I|6Xu+;%<52H>ix00de5T(GJ6{sax=-4F>w9HU|Md!&E)eXUx}>9xnDwsrGWr)e(#*%`RaOvCNS;*YPm z5)RLF)LCd3x#Yrz>C0wnym612>b3a0s=Ld&#>Y(;VoSO&*j3dh*?jWvRj->j(frrr z&s{st26G>(QGPfhBW>61y7UXBmJg3S4sTNP46V{X68lc`{^8<);+`Fjowm|}O$Rv` zC-BP{Gflq1?-#2T(32j2vFXziv5YFO=k1GFT8}D6Dm)L0`#wAR>Au;!9n(E#yBfzN zooUD&mU##SoyAfA>ksU7k2cD>zpd-&_$P%jQ%ENs~@Zn-#usN zBDqB1c^Ip7T*Mq0~!uvj*?R=J5X{9@9-nBV(6E7SIFs#s;ZSs-b zEvLm@y>O3p&dx{gHdrhIKa5$(}|EwO?wxW~>Z6o5O!8+S6L+Zo;OWk%GzjziC6 zXP3uITzx*XAcK!Lug8x~>f!_cZP#4G`a-LoTQG?RL~%})XwcP^_*5)2D_`+Sf!h3^ zuSI4qntHYH-h4xu9PxuZyr<{YwQ|3e|E_W~W~o5bITw@qClf0g;uuAqGrPRM*8bwp ztsRA}UcCAnpWR+r_ufNsMs{I`#0N*_8(R|Zo!8&K?pAZCW}!t>hQZk8y2En>RFRR91Y0{f z{Rv+=qkT?_awksrJGgqLfAz$a<$KKQRy>=s{ny*uk{Kq`+a4^<=R7IW`-OY!4C_6u zud^AmZk*xU5p0^-*u;B0f1e_^yhTj?ivI4}|Ico2NE7To&|Nv_@mC-{zL%+rDml zxxIeJad{?J)?K+%zE|fykh;gaRYpqHlYbh^71JD9?aex0i(AfIFP@uQp&0%tf5z=L z$v&5r#`l!vn(UTEL})%2zaQ)`^qxcF>;z^FzT>*me`>pUq_*m9Typ#W0Rv+NzQB@7 zg^Dym?B zd=g??%Jl85@4L;n%=zKC-}l;^8<|+6Zm)j zG(J4*KC_W&=UJaiq0(D=(_SibGE9xm5q|H^@H0%R%4B}Y67G#|pO43_nzl0`_i&QV z`|LTPk_*#iS*q)Qt`v{sXYs2(-@T{M-|mf0>hq#6!e{Ltyk&dd@u@UBX`5Wb{L{Br zdAa$&X5W`!`PKi(@7LQON*FLRR;gH=xNZBb!R+G!UAL3#Zic)4Tp|2H^8=sN?;4+L zi~XwkT1?JezB)C*L_p|EStLiWr0lN5r&s};y=&x>C}8RT3EUB*y8#GfwlE# zwkh9#^SEi#E_>eihhM)gG5q_|`CQF*1D?J@qpre?hJ9TRN@gcmM9=40f3GujChKRf zdP9~qY*tKS)*<3=1lmltHBRtdzBRAae_?&YVgByYqPcP!k2jScYI+oXx!LJ~?Cnc@ zXP3?R(aw2UM4rcDt;`g=(4-r6Ch2O4+oP><X+vEM1?sy=~K*j!VCSd8WkgGdV97 zd^Aqyj&#pv%P!lE3a1aI?Y?ZfMfT}I$#aZ5h40sk7_XI_ZuK%+i(OAS zWc|X63m;9o99z%Epu4@G0jn0rWV|#q=yd75Qz@7~+{A2_I)OLTXim$CE`v5VR0tXaRhwf@D9`>Kx$9T!Ob ztPV0%}b6168r{de?ae8fW!t>!$Lf4@sca_64lBH^Tlo>>{&|H!9=Z9CsT zr7K53!{ka=Yin`l4j;YwvzTVf6UzR!Kw=nOjh2!ymaqU$qb2h;{c5Zes<B;L#K-nbyt%BpAKWd9rh>r9?K diff --git a/newinfra/secrets-git-crypt/grafana_admin_password b/newinfra/secrets-git-crypt/grafana_admin_password new file mode 100644 index 0000000000000000000000000000000000000000..e7d317b76d19e94144be1afc49afe082aaf00bb9 GIT binary patch literal 92 zcmZQ@_Y83kiVO&0`15s#TVl09y6x8ao8J`F{`Pf0VZu6JJl9r5#LrW$=-#=VTl^dt y0|V|{s{WOgtj!yF|H-vpz2&twhZVmD*U!{FP$7Tva-C6H6vN%{n1g&%8CwBAv?%!i literal 0 HcmV?d00001