Prepare Asciinema GitOps application

apps/asciinema/README.md

@@ -0,0 +1,17 @@
+# Asciinema homelab values
+
+The published `asciinema` chart owns the application Deployment, PostgreSQL
+StatefulSet, Services, Ingress, probes, and optional bucket-bootstrap Job.
+This directory supplies the homelab hostname, Traefik integration, local RGW
+endpoint, sizing/storage selection, and the existing Secret name.
+
+`asciinema-secrets` remains cluster-managed because it contains the PostgreSQL,
+Phoenix, and Rook object-user credentials. Restore it before synchronizing a
+new cluster, then ensure its Rook access keys match the generated
+`rook-ceph-object-user-my-store-asciinema` Secret. The existing
+`data-postgresql-0` claim is deliberately preserved by the chart's
+StatefulSet volume-claim template; do not delete it during recovery.
+
+The CephObjectStoreUser is a cluster-specific Rook integration. Its bucket is
+already initialized. The chart's optional bucket-bootstrap hook remains off so
+routine Argo synchronization never recreates a completed Job.

apps/asciinema/resources/ceph-object-user.yaml

@@ -0,0 +1,8 @@
+apiVersion: ceph.rook.io/v1
+kind: CephObjectStoreUser
+metadata:
+  name: asciinema
+  namespace: rook-ceph
+spec:
+  store: my-store
+  displayName: asciinema recordings

apps/asciinema/values.yaml

@@ -0,0 +1,40 @@
+fullnameOverride: asciinema
+
+secret:
+  existingSecret: asciinema-secrets
+
+config:
+  urlHost: asciinema.brunner.ninja
+  urlScheme: https
+  timezone: Europe/Vienna
+  dbPoolSize: "5"
+  s3:
+    bucket: asciinema
+    endpoint: http://rook-ceph-rgw-my-store.rook-ceph.svc.cluster.local
+    region: keller
+  smtp:
+    host: smtp-relay.gmail.com
+    port: "587"
+    tls: if_available
+    fromAddress: asciinema@brunner.ninja
+    replyToAddress: daniel@brunner.ninja
+  contactEmailAddress: daniel@brunner.ninja
+  adminPanelOnMainEndpoint: true
+  adminBindAll: false
+  uploadAuthRequired: true
+  unregisteredUploadCountLimit: "0"
+  defaultRecordingVisibility: unlisted
+  defaultStreamVisibility: unlisted
+  signUpDisabled: false
+
+ingress:
+  enabled: true
+  className: traefik
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+  host: asciinema.brunner.ninja
+
+postgresql:
+  persistence:
+    storageClass: rook-ceph-block-ec
+    size: 8Gi