From 7ae5220ea81795aaab01a3709b58e417951b63f2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?M=C3=A1rcio=20Fernandes?= <marcio.fernandes@outlook.pt>
Date: Thu, 16 Jul 2026 20:10:41 +0000
Subject: [PATCH] add onlyoffice to fluxcd

---
 README.md                                 |  3 ++-
 deploy/kustomization.yaml                 |  2 +-
 deploy/onlyoffice/.env.d/.gitignore       |  2 --
 deploy/onlyoffice/kustomization.yaml      | 11 ++---------
 deploy/onlyoffice/onlyoffice-secrets.yaml | 22 ++++++++++++++++++++++
 5 files changed, 27 insertions(+), 13 deletions(-)
 delete mode 100644 deploy/onlyoffice/.env.d/.gitignore
 create mode 100644 deploy/onlyoffice/onlyoffice-secrets.yaml

diff --git a/README.md b/README.md
index c500441..39310d8 100644
--- a/README.md
+++ b/README.md
@@ -151,7 +151,8 @@ su -s /bin/bash www-data -c "php occ maintenance:repair --include-expensive"
 **Required encrypted filed on repo:**
 
 ``` bash
-sops -e ./deploy/whiteboard/whiteboard-secrets.dec.yaml ./deploy/whiteboard/whiteboard-secrets.yaml
+sops -e ./deploy/whiteboard/whiteboard-secrets.dec.yaml > ./deploy/whiteboard/whiteboard-secrets.yaml
+sops -e ./deploy/onlyoffice/onlyoffice-secrets.dec.yaml > ./deploy/onlyoffice/onlyoffice-secrets.yaml
 ```
 
 ## internal logs
diff --git a/deploy/kustomization.yaml b/deploy/kustomization.yaml
index 249fbf2..bb2c6ab 100644
--- a/deploy/kustomization.yaml
+++ b/deploy/kustomization.yaml
@@ -5,7 +5,7 @@ resources:
   - global
   #- nextcloud
   #- backups
-  #- onlyoffice
+  - onlyoffice
   - whiteboard
 generatorOptions:
   disableNameSuffixHash: true
diff --git a/deploy/onlyoffice/.env.d/.gitignore b/deploy/onlyoffice/.env.d/.gitignore
deleted file mode 100644
index d29675e..0000000
--- a/deploy/onlyoffice/.env.d/.gitignore
+++ /dev/null
@@ -1,2 +0,0 @@
-**
-!.gitignore
\ No newline at end of file
diff --git a/deploy/onlyoffice/kustomization.yaml b/deploy/onlyoffice/kustomization.yaml
index 5843e94..a1f1ed5 100644
--- a/deploy/onlyoffice/kustomization.yaml
+++ b/deploy/onlyoffice/kustomization.yaml
@@ -1,18 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-secretGenerator:
-  - name: onlyoffice
-    envs:
-      - ./.env.d/onlyoffice.env
-
-generatorOptions:
-  disableNameSuffixHash: true
-
 resources:
   - ./deployment.yaml
   - ./service.yaml
   - ./pvc.yaml
   - ./middlewares.yaml
   - ./network-policies.yaml
-  - ./ingress-web-public.yaml
\ No newline at end of file
+  - ./ingress-web-public.yaml
+  - ./onlyoffice-secrets.yaml
\ No newline at end of file
diff --git a/deploy/onlyoffice/onlyoffice-secrets.yaml b/deploy/onlyoffice/onlyoffice-secrets.yaml
new file mode 100644
index 0000000..9b45890
--- /dev/null
+++ b/deploy/onlyoffice/onlyoffice-secrets.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: onlyoffice
+type: Opaque
+stringData:
+    secret: ENC[AES256_GCM,data:by/9Gql3Acy67DnYa01dpvhkm0Szy9S0oDleVS7nf6DRM2/3Qn273xLk/+c=,iv:G8ixxd9eKmqrI/ujnmG/+xJNAMBOoYEDqbj9QLfXgiQ=,tag:ESj8Xd1+q35UUuKR6Ntxnw==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSlJYZTVQS1JhN0RYYy9q
+            WFZsQXFFb1k5THRoVmhTRG9GQmtlUGlYVXdvCm1ONmVNVFZOTnNEckNRbG9wTG56
+            c1kwc0RKbkVaOVlYYVZJUUt2YnAreFUKLS0tIENhTlNMKzIvMzRtQ0JaalY4emZ1
+            bTEwQ1VSamtHcWhnZ0o4OVJBR2F4ZGcKwPYzDsacfntHOoQbFx4p7twsyENDmUn3
+            M1mH1ZPcHwJ7g56AM+WF2YdV5GRwNJeuUr74Y156YTBK9IxB4DEIcw==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age17efn4arj07weaak2qmsgh53qvmfhpeun4xxanakd9q7xwqxyvcpsw0zn5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-07-16T20:09:26Z"
+    mac: ENC[AES256_GCM,data:8jO7A2HpVSA7F4imPNppHLRnvNtzBYV+6COivMVCV0zuGpjrbpmd/dTE1PJGnOf+R62eF/lyI+Lzi/9jNVU61me1GvjXBqk84L1CV1gBLAdN+nRxtwBB3AyxQMsXjx3qMhIuwlo61qUy17vaOLwLLDHP76Vaa3J0sQDHEh6qAtM=,iv:7A11jhjeaCP1V5tsFu4mdGcWniQxUs/S1ApJMGx70Wg=,tag:k4K10S5uPCLvmpWd8idStg==,type:str]
+    version: 3.13.1