initial: yandex-prod gitops infrastructure

Gitea + ArgoCD + cert-manager + Traefik + CNPG + monitoring + loki + alloy
Matrix homeservers for mrt0rtikize.ru, t0rt1k.tech, roglog.space

manifests/cnpg/cluster.yaml

@@ -0,0 +1,41 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: shared-pg
+  namespace: cnpg
+spec:
+  instances: 3
+  imageName: ghcr.io/cloudnative-pg/postgresql:16
+
+  resources:
+    requests:
+      memory: 1Gi
+      cpu: 250m
+    limits:
+      memory: 2Gi
+      cpu: 1000m
+
+  storage:
+    size: 20Gi
+    storageClass: yc-network-ssd
+
+  affinity:
+    podAntiAffinityType: required
+
+  bootstrap:
+    initdb:
+      database: postgres
+      owner: postgres
+
+  postgresql:
+    parameters:
+      shared_buffers: "512MB"
+      effective_cache_size: "1536MB"
+      maintenance_work_mem: "64MB"
+      max_connections: "200"
+      work_mem: "16MB"
+      random_page_cost: "1.1"
+      effective_io_concurrency: "200"
+
+  monitoring:
+    enablePodMonitor: true

manifests/cnpg/databases.yaml

@@ -0,0 +1,66 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: synapse-mrt0rtikize
+  namespace: cnpg
+spec:
+  name: synapse_mrt0rtikize
+  owner: synapse_mrt0rtikize
+  cluster:
+    name: shared-pg
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: mas-mrt0rtikize
+  namespace: cnpg
+spec:
+  name: mas_mrt0rtikize
+  owner: mas_mrt0rtikize
+  cluster:
+    name: shared-pg
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: synapse-t0rt1k
+  namespace: cnpg
+spec:
+  name: synapse_t0rt1k
+  owner: synapse_t0rt1k
+  cluster:
+    name: shared-pg
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: mas-t0rt1k
+  namespace: cnpg
+spec:
+  name: mas_t0rt1k
+  owner: mas_t0rt1k
+  cluster:
+    name: shared-pg
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: synapse-roglog
+  namespace: cnpg
+spec:
+  name: synapse_roglog
+  owner: synapse_roglog
+  cluster:
+    name: shared-pg
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: mas-roglog
+  namespace: cnpg
+spec:
+  name: mas_roglog
+  owner: mas_roglog
+  cluster:
+    name: shared-pg
+

manifests/cnpg/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cnpg