affine deployment

apps/cloud/affine.yaml

@@ -44,7 +44,10 @@ spec:
             - name: AFFINE_ENABLE_SYNC_FROM_STARTUP
               value: "true"
             - name: DATABASE_URL
-              value: "postgres://affine:affine@postgresql.haven:5432/affine"
+              valueFrom:
+                secretKeyRef:
+                  name: affine-secret
+                  key: DB_CONNECTION_URL
             - name: REDIS_SERVER_HOST
               value: "redis.haven"
             - name: REDIS_SERVER_PORT

renovate.json

@@ -1,13 +1,19 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "kubernetes": {
-    "managerFilePatterns": ["/\\.yaml$/"]
+    "managerFilePatterns": [
+      "/\\.yaml$/"
+    ]
   },
   "packageRules": [
     {
       "description": "Skip local registry images (built by CI, not upstream deps)",
-      "matchDatasources": ["docker"],
-      "matchPackageNames": ["git.ivanch.me/**"],
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "git.ivanch.me/**"
+      ],
       "enabled": false
     }
   ]

secrets/affine.yaml

@@ -12,6 +12,8 @@ spec:
         DB_USERNAME: "{{ .DB_USERNAME }}"
         DB_PASSWORD: "{{ .DB_PASSWORD }}"
         DB_NAME: "{{ .DB_NAME }}"
+        DB_URL: { { . DB_URL } }
+        DB_CONNECTION_URL: "postgres://{{ .DB_USERNAME }}:{{ .DB_PASSWORD }}@{{ .DB_URL }}:5432/{{ .DB_NAME }}"
   data:
     - secretKey: DB_USERNAME
       remoteRef:
@@ -28,3 +30,7 @@ spec:
         { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: DB_NAME }
       sourceRef:
         { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } }
+    - secretKey: DB_URL
+      remoteRef: { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: DB_URL }
+      sourceRef:
+        { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } }