init: basic k8s deployment on DO

1password-connect-server/1password-secret-store.yaml

@@ -0,0 +1,16 @@
+apiVersion: external-secrets.io/v1beta1
+kind: SecretStore
+metadata:
+  name: kemkas-secret-store
+  namespace: kemkas
+spec:
+  provider:
+    onepassword:
+      connectHost: https://1password-connect.dev.kemkas.hu
+      vaults:
+        kemkas: 1  # look in this vault first
+      auth:
+        secretRef:
+          connectTokenSecretRef:
+            name: onepassword-connect-token
+            key: token

1password-connect-server/connect-server-access-token-secret.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: onepassword-connect-token
+  namespace: kemkas
+type: Opaque
+stringData:
+  token: <insert-token-from-1password>

1password-connect-server/connect-server.conf

@@ -0,0 +1,14 @@
+server {
+    listen 80;
+    server_name 1password-connect.dev.kemkas.hu;
+
+    location / {
+            proxy_pass_request_headers on;
+            proxy_pass http://localhost:8080;
+    }
+
+    error_page   500 502 503 504  /50x.html;
+    location = /50x.html {
+        root   /usr/share/nginx/html;
+    }
+}

1password-connect-server/docker-compose.yaml

@@ -0,0 +1,20 @@
+version: "3.4"
+
+services:
+  op-connect-api:
+    image: 1password/connect-api:latest
+    ports:
+      - "8080:8080"
+    volumes:
+      - "./1password-credentials.json:/home/opuser/.op/1password-credentials.json"
+      - "data:/home/opuser/.op/data"
+  op-connect-sync:
+    image: 1password/connect-sync:latest
+    ports:
+      - "8081:8080"
+    volumes:
+      - "./1password-credentials.json:/home/opuser/.op/1password-credentials.json"
+      - "data:/home/opuser/.op/data"
+
+volumes:
+  data: