añadido apolo

2025-08-17 10:15:19 +02:00
parent 2a3067dc0b
commit 31a109fd5c
68 changed files with 2416 additions and 26 deletions
--- a/apolo/secrets/secret-backend.yaml
+++ b/apolo/secrets/secret-backend.yaml
@@ -0,0 +1,155 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-backend-secret
+  namespace: apolo
+  labels:
+    app.kubernetes.io/part-of: apolo
+    app.kubernetes.io/component: php
+type: Opaque
+stringData:
+  APP_ENV: "prod"
+  APP_DEBUG: "0"
+  APP_SECRET: "d64fea16476693f5a8fa7d4b3a2b8b83"
+
+  INTERNET_ALLOWED: "false"
+
+  ADMIN_USERNAME: "admin"
+  ADMIN_PASSWORD: "123456"
+
+  # OJO: apuntamos al Service de Postgres en K8s
+  DATABASE_URL: "pgsql://xrf_user:nxVZGx80231tQ3@apolo-postgres:5432/xrf_db"
+
+  # CORS (temporal amplio; afinaremos luego)
+  CORS_ALLOW_ORIGIN: "^.*$"
+
+  MESSENGER_TRANSPORT_DSN: "amqp://xrf_user:cDyj6e8ql6R0ZQHu@xrf-rabbitmq:5672/%2f"
+  MESSENGER_EXCHANGE: "xrf_exchange"
+  MESSENGER_VHOST: "xrf_vhost"
+
+  JWT_SECRET_KEY: "%kernel.project_dir%/config/jwt/private.pem"
+  JWT_PUBLIC_KEY: "%kernel.project_dir%/config/jwt/public.pem"
+  JWT_PASSPHRASE: "g3bed4qa52lw5cxay3hzs58tzjkm43ot"
+  JWT_ACCESS_TOKEN_EXPIRATION: "86400"
+  JWT_REFRESH_TOKEN_EXPIRATION: "788400000"
+
+  MIN_PASSWORD_LENGTH: "6"
+  PASSWORD_STRENGTH: "weak"
+  PASSWORD_FORMAT: "alphanumeric"
+  PASSWORD_RESET_EXPIRATION: "1440"
+  EMAIL_CONFIRMATION_EXPIRATION: "1440"
+
+  MAILER_DSN: "smtp://AKIAXYKJQE4JML3F2XEX:BMAH8%2FLZwfs0wGTfAMXFzsRrSuUMgYzq4h%2FKpzG2po4m@email-smtp.eu-west-1.amazonaws.com:587"
+  MAILER_DEFAULT_SENDER: "noreply@xrf.ai"
+  EMAIL_LOGO: ""
+  EMAIL_BACKGROUND: ""
+
+  AWS_BUCKET: ""
+  AWS_KEY: ""
+  AWS_SECRET: ""
+  AWS_REGION: "eu-west-1"
+  AWS_S3_LINK_EXPIRATION: "+24 hours"
+  AWS_CHIME_REGION: "eu-west-1"
+  AWS_CHIME_KEY: ""
+  AWS_CHIME_SECRET: ""
+
+  MONOLOG_SWIFT_FROM: "noreply@xrf.ai"
+  MONOLOG_SWIFT_TO: "notifications@xrf.ai"
+  MONOLOG_SWIFT_SUBJECT: "[XRSandbox][PRO]"
+
+  # dominio .c2et.net
+  FRONTEND_HOST: "https://portal.apolo.c2et.net"
+  RESET_PASSWORD_EXPIRATION_MINUTES: "1440"
+  CHANGE_EMAIL_EXPIRATION_MINUTES: "1440"
+  USER_ROOM_INACTIVITY_MINUTES: "5"
+  ENVIRONMENT: "development"
+
+  UNION_AVATAR_USER: ""
+  UNION_AVATAR_PASSWORD: ""
+  UNION_AVATAR_OUTPUT_FORMAT: "fbx"
+  UNION_AVATAR_BASE_URL: ""
+  UNION_AVATAR_COLLECTION: ""
+  UNION_AVATAR_CONFIG: "[]"
+
+  BROADCAST_DRIVER: "pusher"
+  PUSHER_APP_ID: "37248458"
+  PUSHER_KEY: "xrf-qa2LW55393Ok-external"
+  PUSHER_SECRET: "n0Gb43G4eLi39wZz"
+  PUSHER_CLUSTER: "eu"
+  PUSHER_HOST: "backend.apolo.c2et.net"
+  PUSHER_PORT: "6001"
+  PUSHER_SCHEME: "wss"
+  PUSHER_ENABLED: "yes"
+
+  WEBSOCKET_CONFIGURATION: "{\"enabled\":true,\"connections\":{\"client\":{\"enabled\":true,\"key\":\"xrf-qa2LW55393Ok-external\",\"host\":\"backend.apolo.c2et.net\",\"port\":443,\"scheme\":\"wss\"},\"system\":[],\"external\":[]}}"
+
+  FFT_NODE_URL: "http://localhost:8080"
+
+  PLAYER_ASSET: "https://backend.apolo.c2et.net/media/TriangulatedAvatar.fbx"
+  MAX_CONTENT_DISTANCE: "10000"
+
+  MONITORING_DSN: ""
+  MONITORING_EMAIL_TO: "[]"
+
+  SENTRY_DSN: ""
+  SENTRY_TRACES_SAMPLE_RATE: "1.0"
+  SENTRY_ALLOWED_EVENTS: "[]"
+  SENTRY_ENVIRONMENT: "production"
+
+  MAVLINK_SERVICE_URL: "https://backend.apolo.c2et.net"
+  MAVLINK_MAX_DISTANCE: "10000"
+  MAVLINK_MAX_HEIGHT: "10000"
+
+  FFMPEG_SERVICE_KEY: "e436b20441e41efb60872da285a13b55ac9a02acf6dfa46604d9af071b26c1bc"
+  FFMPEG_EC2_INSTANCE: ""
+  FFMPEG_EC2_REGION: "eu-west-1"
+
+  API_KEY_SECRET: "my-secret"
+  SECURITY_LEVEL: "CommercialStandards"
+
+  VIMEO_FOLDER: ""
+  VIMEO_ID: ""
+  VIMEO_KEY: ""
+  VIMEO_SECRET: ""
+  VIMEO_TOKEN: ""
+  VIMEO_ENABLED: "true"
+
+  NVGServerUrl: "http://3.253.103.103:18083"
+
+  AI_ASSISTANT_EMAIL: "noreply@xrf.ai"
+  AI_ASSISTANT_TOKEN: ""
+  AI_ASSISTANT_URL: ""
+
+  HERMES_GOLD: "dev/gold/medatada_test_files"
+  HERMES_PROFILE: "default_profile"
+  HERMES_SILVER: "dev/silver/metadata_test_files"
+
+  MAINTENANCE_USERS: "[]"
+
+  MENU_FEATURES: "[\"Map\",\"FullScreen\",\"Locations\",\"Tools\"]"
+
+  ODM_TOKEN: "06a5a50cda6a43abb1a7c4bd0bfcedcdd97ee468a75e27c78cbdbb2916ffc7f3f633e080841155cd2bfee6052c1f69cdddd88919c71f4378a7a4edf4"
+
+  ROOM_ACTIVITY_MAX_TIME: "120"
+  ROOM_FEATURES: "[\"ChangeRoom\",\"EditRoom\"]"
+
+  FFMPEG_DEFAULT_STREAMING: "https://backend.apolo.c2et.net/fallback"
+  FFMPEG_SERVICE_ENABLED: "yes"
+  FFMPEG_SERVICE_HIGH_BITRATE: "8000"
+  FFMPEG_SERVICE_HIGH_RESOLUTION: "1920x1080"
+  FFMPEG_SERVICE_LOW_BITRATE: "800"
+  FFMPEG_SERVICE_LOW_RESOLUTION: "640x360"
+  FFMPEG_SERVICE_MEDIUM_BITRATE: "4000"
+  FFMPEG_SERVICE_SSL_URL: "http://streaming.apolo.c2et.net"
+  FFMPEG_SERVICE_URL: "http://streaming.apolo.c2et.net"
+
+  XMPP_API_PORT: "5443"
+  XMPP_CHAT_HOST: "muc.chat.apolo.c2et.net"
+  XMPP_HOST: "chat.apolo.c2et.net"
+  XMPP_PASS: "Tv7RfaP4KZXizdq"
+  XMPP_USER: "admin@chat.apolo.c2et.net"
+  XMPP_WS_PORT: "5443"
+  XMPP_TCP_PORT: "5222"
+
+  MEETING_SERVICE_ENABLED: "yes"
+  MEETING_SERVICE_URL: "wss://meeting.apolo.c2et.net:3000/ws"
--- a/apolo/secrets/secret-db.yaml
+++ b/apolo/secrets/secret-db.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-db-secret
+  namespace: apolo
+  labels:
+    app.kubernetes.io/part-of: apolo
+    app.kubernetes.io/component: postgres
+type: Opaque
+stringData:
+  POSTGRES_USER: xrf_user
+  POSTGRES_PASSWORD: nxVZGx80231tQ3
+  POSTGRES_DB: xrf_db
--- a/apolo/secrets/secret-dburl.yaml
+++ b/apolo/secrets/secret-dburl.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-db-url
+  namespace: apolo
+  labels:
+    app.kubernetes.io/part-of: apolo
+type: Opaque
+stringData:
+  DATABASE_URL: pgsql://xrf_user:nxVZGx80231tQ3@apolo-postgres:5432/xrf_db
--- a/apolo/secrets/secret-drone.yaml
+++ b/apolo/secrets/secret-drone.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-drone-secret
+  namespace: apolo
+  labels:
+    app.kubernetes.io/part-of: apolo
+    app.kubernetes.io/component: drone
+type: Opaque
+stringData:
+  # Equivalentes a tu drone.env (adaptados a K8s)
+  MESSENGER_USER: xrf_user
+  MESSENGER_PASSWORD: cDyj6e8ql6R0ZQHu
+  MESSENGER_SERVER: apolo-rabbitmq
+  MESSENGER_PORT: "5672"
+  # En docker-compose era %2f (vhost "/"). Aquí usamos tu vhost real:
+  MESSENGER_VHOST: xrf_vhost
--- a/apolo/secrets/secret-ejabberd.yaml
+++ b/apolo/secrets/secret-ejabberd.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-ejabberd-secret
+  namespace: apolo
+  labels:
+    app.kubernetes.io/part-of: apolo
+    app.kubernetes.io/component: ejabberd
+type: Opaque
+stringData:
+  XRF_URL: "http://xrf-web:80"
+  CHAT_ADMIN: "admin"
+  CHAT_ADMIN_PASSWORD: "Tv7RfaP4KZXizdq"
+  CHAT_DOMAIN: "chat.apolo.c2et.net"
+  XRF_TOKEN: "214defebd6ed636c801845f0b56968799de60d6a4fdac20a0e6a2287ca3ae58c9f542e61b98d047b5e7a1764d5226810ff33ee5678cefdea15705eb2"
--- a/apolo/secrets/secret-harbor-cred.yaml
+++ b/apolo/secrets/secret-harbor-cred.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+data:
+  .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3IuYzJldC5jb20iOnsidXNlcm5hbWUiOiJ4YXZvciIsInBhc3N3b3JkIjoiTUBuYWJvMjAyNSIsImVtYWlsIjoibm8tcmVwbHlAYzJldC5jb20iLCJhdXRoIjoiZUdGMmIzSTZUVUJ1WVdKdk1qQXlOUT09In19fQ==
+kind: Secret
+metadata:
+  creationTimestamp: null
+  name: harbor-cred
+  namespace: apolo
+type: kubernetes.io/dockerconfigjson
--- a/apolo/secrets/secret-kms-api.yaml
+++ b/apolo/secrets/secret-kms-api.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-kurento-api-secret
+  namespace: apolo
+  labels:
+    app.kubernetes.io/name: apolo-kurento-api
+    app.kubernetes.io/part-of: apolo
+    app.kubernetes.io/component: kurento-api
+type: Opaque
+stringData:
+  DASHBOARD_PASSWORD: "mgebdCDT"
--- a/apolo/secrets/secret-rabbit-dsn.yaml
+++ b/apolo/secrets/secret-rabbit-dsn.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-rabbit-dsn
+  namespace: apolo
+  labels:
+    app.kubernetes.io/part-of: apolo
+type: Opaque
+stringData:
+  # Usando el vhost correcto: xrf_vhost
+  MESSENGER_TRANSPORT_DSN: amqp://xrf_user:cDyj6e8ql6R0ZQHu@apolo-rabbitmq:5672/xrf_vhost
--- a/apolo/secrets/secret-rabbitmq.yaml
+++ b/apolo/secrets/secret-rabbitmq.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-rabbitmq-secret
+  namespace: apolo
+  labels:
+    app.kubernetes.io/part-of: apolo
+    app.kubernetes.io/component: rabbitmq
+type: Opaque
+stringData:
+  RABBITMQ_ERLANG_COOKIE: wa13JmE4YWFUdxW5F7g1DFsrQhd0I3D7
+  RABBITMQ_DEFAULT_USER: xrf_user
+  RABBITMQ_DEFAULT_PASS: cDyj6e8ql6R0ZQHu
+  RABBITMQ_DEFAULT_VHOST: xrf_vhost
--- a/apolo/secrets/secret-streamer.yaml
+++ b/apolo/secrets/secret-streamer.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apolo-streamer-secret
+  namespace: apolo
+  labels:
+    app.kubernetes.io/name: apolo-streamer
+    app.kubernetes.io/part-of: apolo
+    app.kubernetes.io/component: streamer
+type: Opaque
+stringData:
+  TOKEN_SECRET: "4709bdaa95ce976ec89a4d0fa159be54cf138508ae6ef3aee152234af8cd7b03884019b5447ce3a94da3ab458ab9800462045f94aae8a459ef6db7628287e2f0"
+  API_KEY: "e436b20441e41efb60872da285a13b55ac9a02acf6dfa46604d9af071b26c1bc"
+  XRF_TOKEN: "aae0be610505880019630c98b46bcf1510ba0ad5ff7b2cf401b654529d95320297dcca04a9fd1d4fce4edb6769093ce6e7dccb1899c21f335530cfc7"
+  PUSHER_APP_ID: "30781558"
+  PUSHER_KEY: "xrf-7J58roVrSvdb-client"
+  PUSHER_SECRET: "Y8C7wRgv5T9K2ms8"