add onlyoffice to fluxcd

README.md

@@ -151,7 +151,8 @@ su -s /bin/bash www-data -c "php occ maintenance:repair --include-expensive"
 **Required encrypted filed on repo:**
 
 ``` bash
-sops -e ./deploy/whiteboard/whiteboard-secrets.dec.yaml ./deploy/whiteboard/whiteboard-secrets.yaml
+sops -e ./deploy/whiteboard/whiteboard-secrets.dec.yaml > ./deploy/whiteboard/whiteboard-secrets.yaml
+sops -e ./deploy/onlyoffice/onlyoffice-secrets.dec.yaml > ./deploy/onlyoffice/onlyoffice-secrets.yaml
 ```
 
 ## internal logs

deploy/kustomization.yaml

@@ -5,7 +5,7 @@ resources:
   - global
   #- nextcloud
   #- backups
-  #- onlyoffice
+  - onlyoffice
   - whiteboard
 generatorOptions:
   disableNameSuffixHash: true

deploy/onlyoffice/.env.d/.gitignore

@@ -1,2 +0,0 @@
-**
-!.gitignore

deploy/onlyoffice/kustomization.yaml

@@ -1,14 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-secretGenerator:
-  - name: onlyoffice
-    envs:
-      - ./.env.d/onlyoffice.env
-
-generatorOptions:
-  disableNameSuffixHash: true
-
 resources:
   - ./deployment.yaml
   - ./service.yaml
@@ -16,3 +8,4 @@ resources:
   - ./middlewares.yaml
   - ./network-policies.yaml
   - ./ingress-web-public.yaml
+  - ./onlyoffice-secrets.yaml

deploy/onlyoffice/onlyoffice-secrets.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: onlyoffice
+type: Opaque
+stringData:
+    secret: ENC[AES256_GCM,data:by/9Gql3Acy67DnYa01dpvhkm0Szy9S0oDleVS7nf6DRM2/3Qn273xLk/+c=,iv:G8ixxd9eKmqrI/ujnmG/+xJNAMBOoYEDqbj9QLfXgiQ=,tag:ESj8Xd1+q35UUuKR6Ntxnw==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSlJYZTVQS1JhN0RYYy9q
+            WFZsQXFFb1k5THRoVmhTRG9GQmtlUGlYVXdvCm1ONmVNVFZOTnNEckNRbG9wTG56
+            c1kwc0RKbkVaOVlYYVZJUUt2YnAreFUKLS0tIENhTlNMKzIvMzRtQ0JaalY4emZ1
+            bTEwQ1VSamtHcWhnZ0o4OVJBR2F4ZGcKwPYzDsacfntHOoQbFx4p7twsyENDmUn3
+            M1mH1ZPcHwJ7g56AM+WF2YdV5GRwNJeuUr74Y156YTBK9IxB4DEIcw==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age17efn4arj07weaak2qmsgh53qvmfhpeun4xxanakd9q7xwqxyvcpsw0zn5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-07-16T20:09:26Z"
+    mac: ENC[AES256_GCM,data:8jO7A2HpVSA7F4imPNppHLRnvNtzBYV+6COivMVCV0zuGpjrbpmd/dTE1PJGnOf+R62eF/lyI+Lzi/9jNVU61me1GvjXBqk84L1CV1gBLAdN+nRxtwBB3AyxQMsXjx3qMhIuwlo61qUy17vaOLwLLDHP76Vaa3J0sQDHEh6qAtM=,iv:7A11jhjeaCP1V5tsFu4mdGcWniQxUs/S1ApJMGx70Wg=,tag:k4K10S5uPCLvmpWd8idStg==,type:str]
+    version: 3.13.1