some fixes

apps/todos/deployment.yaml

@@ -24,30 +24,20 @@ spec:
           limits:
             cpu: 200m
             memory: 200Mi
-        env:
-        - name: VIKUNJA_SERVICE_PUBLICURL
-          value: https://todos.kluster.moll.re
-        - name: VIKUNJA_DATABASE_TYPE
-          value: sqlite
-        - name: VIKUNJA_DATABASE_PATH
-          value: /app/vikunja/files/vikunja.db
-        - name: VIKUNJA_SERVICE_ENABLEREGISTRATION
-          value: false
-        - name: VIKUNJA_AUTH_LOCAL_ENABLED
-          value: false
-        - name: VIKUNJA_AUTH_OPENID_ENABLED
-          value: true
-        envFrom:
-          - secretRef:
-              name: todos-oidc
 
         ports:
         - containerPort: 3456
           name: web
         volumeMounts:
         - name: data
-          mountPath: /app/vikunja/files
+          mountPath: /db
+        - name: config
+          mountPath: /app/vikunja/config.yml
+          subPath: config.yml
       volumes:
       - name: data
         persistentVolumeClaim:
           claimName: data
+      - name: config
+        secret:
+          secretName: todos-config

apps/todos/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: todos
 resources:
   - namespace.yaml
   - pvc.yaml
-  - todos-oidc.sealedsecret.yaml
+  - todos-config.secret.yaml
   - deployment.yaml
   - service.yaml
   - ingress.yaml

apps/todos/todos-config.sealedsecret.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: todos-config
+  namespace: todos
+spec:
+  encryptedData:
+    config.yml: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: todos-config
+      namespace: todos
+    type: Opaque

apps/todos/todos-oidc.sealedsecret.yaml

@@ -1,20 +0,0 @@
----
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: todos-oidc
-  namespace: todos
-spec:
-  encryptedData:
-    VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHELIA_AUTHURL: AgAVa6YuhpAr6EFubgEusTAWkTY+AH6ScQMlfqJXPWx9oIf7KWkJ5FW4QMWSkCB8KjTvtAeQ5NeEU4a5R6J8BVddGN9K7Etlr5N4I/lyCUm/D3CMi6AThb+4KO1k7UYFpOnQ8HO8nYprawieV2xkhExBEqaxguQ4PplF9G68Cs+kp36rmEyg5YC3th3KacPF1tC0GJ+g+mgNFHTQmCgDl9CVSJ87pgRocQ9JYePuYOLHkYsVxXd03kDlAa/+ZIz/NgoLImnAIeHq2oZYNnTQaa4fp4Eve9xnIyK2RkGt2IlnDjZZqmF8x++fYhVgowcBajVUsra0GhY4jA8b2yqkK1s5IaJWwxkEmmYPt83dOcgOQyZMgo2pWceG/yIjScawzIr4YwzRe9mQVfaphJ7CyaeJSy8mGCCpQ6v2QHrPfbINWY45yM6TNbiy5NsfYMn9ak+cP7DuQ2oxU0rAblDei6uJ19VHVujGITm4F7hwI1JyJcSAAGUl/QH+8zS/Xr3Mwwfbm564iSlE41P1/s6FcI4ozPzTcH30fyiHLqAcYBOVKM5k+6phM4BA4VKctD8NY074fiyEMu5/gX2sCwPSNnCO/+aijs+358vAEF1cebjp2MrKk9htUOhGPp36n4Q/x0j+eZCguafcfrXUdRmatJbC4aITR3sLR7c5wxe1qpkFLrybh3KyRs3OaEAKKwHGVRE5LxxKmvFk8Vmry3UA3H8NKY5cqo+sbqKSJpKr+Q==
-    VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHELIA_CLIENTID: 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
-    VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHELIA_CLIENTSECRET: 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
-    VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHELIA_LOGOUTURL: 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
-    VIKUNJA_AUTH_OPENID_PROVIDERS_AUTHELIA_NAME: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: todos-oidc
-      namespace: todos
-    type: Opaque

apps/todos/values.yaml

@@ -1,54 +0,0 @@
-######################
-# VIKUNJA COMPONENTS #
-######################
-
-image:
-  tag: 0.22.1
-# You can find the default values that this `values.yaml` overrides, in the comment at the top of this file.
-api:
-  enabled: true
-  image:
-    tag: 0.22.1
-  persistence:
-    # This is your Vikunja data will live, you can either let
-    # the chart create a new PVC for you or provide an existing one.
-    data:
-      enabled: true
-      existingClaim: data
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      mountPath: /app/vikunja/files
-
-  ingress:
-    main:
-      enabled: false
-
-  configMaps:
-    # The configuration for Vikunja's api.
-    # https://vikunja.io/docs/config-options/
-    config:
-      enabled: true
-      data:
-        config.yml: |
-          service:
-              frontendUrl: https://todos.kluster.moll.re
-          database:
-            type: sqlite
-            path: /app/vikunja/files/vikunja.db
-          registration: false
-
-
-frontend:
-  enabled: true
-  image:
-    tag: 0.22.1
-  ingress:
-    main:
-      enabled: false
-
-postgresql:
-  enabled: false
-redis:
-  enabled: false
-typesense:
-  enabled: false

kluster-deployments/todos/kustomization.yaml

@@ -2,4 +2,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - application.yaml
-  # - repo.yaml

kluster-deployments/todos/repo.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  labels:
-    argocd.argoproj.io/secret-type: repository
-  name: kolaente-helm-oci
-
-stringData:
-  url: kolaente.dev/vikunja
-  name: vikunja
-  type: helm
-  enableOCI: "true"