add email configuration

apps/zurrli/baserow/kustomization.yaml

@@ -4,3 +4,5 @@ resources:
   - statefulset.yaml
   - service.yaml
   - ingress.yaml
+generators:
+  - secret-generator.yaml

apps/zurrli/baserow/secret-generator.yaml

@@ -0,0 +1,6 @@
+apiVersion: viaduct.ai/v1
+kind: ksops
+metadata:
+  name: secret-generator
+files:
+  - secret.sops.yaml

apps/zurrli/baserow/secret.sops.yaml

@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: baserow
+stringData:
+    FROM_EMAIL: ENC[AES256_GCM,data:1hVr9ADxfUIQT5Au5ce+Eu83IOc=,iv:mkwq4YB8NrfUtXV75jFCpkr+9IhMnEDp5VJBlXW1bT0=,tag:T9HgiZh2MOs+1zJDX4S1cA==,type:str]
+    EMAIL_SMTP: ENC[AES256_GCM,data:lAy+eQ==,iv:YcZ3hmel8RWQsmAnJGAXL2ZhmoSG2Ueq+BpxtFl6zno=,tag:jr/gGdlz+hOQ9T6H8z1lXw==,type:str]
+    EMAIL_SMTP_USE_TLS: ENC[AES256_GCM,data:qiLvOQ==,iv:kFC5mEP65A37Lr9V7YICIBGGovqCGA+66jWEfN2VWY8=,tag:ouucwc7hQDVbzj0+7CiS6A==,type:str]
+    EMAIL_SMTP_USER: ENC[AES256_GCM,data:XgZomQGk96A/4kjPctWmG2spemM=,iv:10EEk+GL8L3DruUkdwQbjXJKkaBSm0t9nPlR9GWznRI=,tag:q5GKLSDKEkrbzu7W7xMZ2A==,type:str]
+    EMAIL_SMTP_PASSWORD: ENC[AES256_GCM,data:yetVCaqetepO5BMT+LMfk422pINsIqEXTGJeIrOuPo3JM55KKRvVi/pmNidp9tIGSQM=,iv:4LXuGbKolho/MPsUwKXzsWcM+R6VPE4z6ppyXp82rBA=,tag:hytK2CJbBGDEZnR3f8Zgxw==,type:str]
+    EMAIL_SMTP_HOST: ENC[AES256_GCM,data:e6Dzm9lPsX9Vw6KYlL23ro2pWw==,iv:DtO5qLLP8P8bqGZai+zj0/4AyqpTb2cUEAZmkIxqAYU=,tag:+5nkGjGxEDiksG57YVWtEg==,type:str]
+    EMAIL_SMTP_PORT: ENC[AES256_GCM,data:YvKx,iv:I+SxNjzDmycRYX8am6LAD1aWN2801D3vhU/SqF4FIjY=,tag:WN/4bjhk+JpcRzGgRkzyJA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1dfk8euu7afvw7ge5l2qek45z23hdq5anjd56cy4d7kcsf0e0e5pqfjylx8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTWZ1MWkrcmxUNVg4MjNX
+            YmltUXdSazBKMklzbUd0aXZBeHVTZ1RZcVhFClFyc2dNMzhJWFZKM3d1SEE0ZVhC
+            aFhyTmRyZTNPcHQ4ZUVqVVcwVHIxNFEKLS0tIFBoVDUzSUNNcTh5RzBMc1M4bnlO
+            OXNrSmp5RXM1Ui96ZkdxWUxOZTExajQKJ9t9tLQ70wadqtfYUHqyML8MfVKtlVpK
+            6/WXdmvTXYjsse4vJOEMfWGFanLiwWT4sAYxE3QzFmHHwkgnrVfg2A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-01-28T20:30:14Z"
+    mac: ENC[AES256_GCM,data:LkCuxmu3LzbbyJwowiF8XrZ+L1Q2HdRZRmA65zO3Ulp5+WLY/6MJtin6NTnAdKvCRCTBmnf620SL98OrrO+cHJ9WpkhMxVIYEpTJcdlH8PLAtYzMJ/ztOnIkZA5NchAlo2JeMH0WU9N5+Xiv8HaYLXOl4hsduRd+e/JdGMBqRWo=,iv:NZZqkFefIdrxJ4SipIShb9sMGANPt3ocJvJLcfacqfA=,tag:BS3dOzBSFd9DjQk3ZOMj0w==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

apps/zurrli/baserow/statefulset.yaml

@@ -29,6 +29,9 @@ spec:
           env:
             - name: BASEROW_PUBLIC_URL
               value: "https://baserow.tbrnt.ch"
+          envFrom:
+            - secretRef:
+                name: baserow
           volumeMounts:
             - mountPath: /baserow/data
               name: baserow-data