small changes

default/homepage.yaml

@@ -113,7 +113,7 @@ spec:
           imagePullPolicy: Always
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
-              value: homepage.haven # required, may need port. See gethomepage.dev/installation/#homepage_allowed_hosts
+              value: "*"
           ports:
             - name: http
               containerPort: 3000

infra/wg-easy.yaml

@@ -33,13 +33,13 @@ spec:
       affinity:
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 100
-              preference:
+            - preference:
                 matchExpressions:
                   - key: kubernetes.io/hostname
                     operator: In
                     values:
                       - nexus
+              weight: 100
       containers:
         - name: wg-easy
           image: ghcr.io/wg-easy/wg-easy:latest

secrets/affine.yaml

@@ -0,0 +1,30 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata: { name: affine, namespace: cloud }
+spec:
+  refreshInterval: 1h
+  target:
+    name: affine-secret
+    deletionPolicy: Retain
+    template:
+      type: Opaque
+      data:
+        DB_USERNAME: "{{ .DB_USERNAME }}"
+        DB_PASSWORD: "{{ .DB_PASSWORD }}"
+        DB_NAME: "{{ .DB_NAME }}"
+  data:
+    - secretKey: DB_USERNAME
+      remoteRef:
+        { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: username }
+      sourceRef:
+        { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } }
+    - secretKey: DB_PASSWORD
+      remoteRef:
+        { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: password }
+      sourceRef:
+        { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } }
+    - secretKey: DB_NAME
+      remoteRef:
+        { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: DB_NAME }
+      sourceRef:
+        { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } }