From 3745714c1cf30c29a6e00005dc0bfa42a3302709 Mon Sep 17 00:00:00 2001
From: Jose Henrique <jose.henrique.ivan@gmail.com>
Date: Thu, 20 Aug 2026 20:57:45 -0300
Subject: [PATCH] small changes

---
 default/homepage.yaml |  2 +-
 infra/wg-easy.yaml    |  4 ++--
 secrets/affine.yaml   | 30 ++++++++++++++++++++++++++++++
 3 files changed, 33 insertions(+), 3 deletions(-)
 create mode 100644 secrets/affine.yaml

diff --git a/default/homepage.yaml b/default/homepage.yaml
index a4e396d..9d6d64c 100644
--- a/default/homepage.yaml
+++ b/default/homepage.yaml
@@ -113,7 +113,7 @@ spec:
           imagePullPolicy: Always
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
-              value: homepage.haven # required, may need port. See gethomepage.dev/installation/#homepage_allowed_hosts
+              value: "*"
           ports:
             - name: http
               containerPort: 3000
diff --git a/infra/wg-easy.yaml b/infra/wg-easy.yaml
index af25372..628c3fb 100644
--- a/infra/wg-easy.yaml
+++ b/infra/wg-easy.yaml
@@ -33,13 +33,13 @@ spec:
       affinity:
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 100
-              preference:
+            - preference:
                 matchExpressions:
                   - key: kubernetes.io/hostname
                     operator: In
                     values:
                       - nexus
+              weight: 100
       containers:
         - name: wg-easy
           image: ghcr.io/wg-easy/wg-easy:latest
diff --git a/secrets/affine.yaml b/secrets/affine.yaml
new file mode 100644
index 0000000..2c0e56b
--- /dev/null
+++ b/secrets/affine.yaml
@@ -0,0 +1,30 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata: { name: affine, namespace: cloud }
+spec:
+  refreshInterval: 1h
+  target:
+    name: affine-secret
+    deletionPolicy: Retain
+    template:
+      type: Opaque
+      data:
+        DB_USERNAME: "{{ .DB_USERNAME }}"
+        DB_PASSWORD: "{{ .DB_PASSWORD }}"
+        DB_NAME: "{{ .DB_NAME }}"
+  data:
+    - secretKey: DB_USERNAME
+      remoteRef:
+        { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: username }
+      sourceRef:
+        { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } }
+    - secretKey: DB_PASSWORD
+      remoteRef:
+        { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: password }
+      sourceRef:
+        { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } }
+    - secretKey: DB_NAME
+      remoteRef:
+        { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: DB_NAME }
+      sourceRef:
+        { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } }