vaultwarden config

vaultwarden/secret-vaultwarden.yaml

@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  labels:
+    app.kubernetes.io/component: vaultwarden
+    app.kubernetes.io/instance: vaultwarden
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: vaultwarden
+    app.kubernetes.io/version: 1.33.2
+    helm.sh/chart: vaultwarden-0.31.8
+  name: vaultwarden
+  namespace: vaultwarden
+type: Opaque
+data:
+  ADMIN_TOKEN: PTE5PTY1NTQwLHQ9MyxwPTQrU01pMkRmZkVIbGtqYWkrVDJmd1IrZCt0TXM=
+  DUO_SKEY: ""
+  PUSH_INSTALLATION_ID: ""
+  PUSH_INSTALLATION_KEY: ""
+  SMTP_PASSWORD: ZEc3NzhkVnVWU3k2Tm93Y0M1Ym1DR2FHdmg1Zkdm
+  SMTP_USERNAME: cGhpbGlwLmhhdXB0QGJvcm5pbnBhaW4uZGU=
+  YUBICO_SECRET_KEY: ""

vaultwarden/vaultwarden.yaml

@@ -98,19 +98,38 @@ subjects:
 ---
 apiVersion: v1
 data:
+  _enable_duo: "true"
+  _enable_email_2fa: "false"
+  _enable_smtp: "true"
+  _enable_yubico: "true"
   ADMIN_RATELIMIT_MAX_BURST: "3"
   ADMIN_RATELIMIT_SECONDS: "300"
+  admin_session_lifetime: "20"
+  authenticator_disable_time_drift: "false"
   DATABASE_MAX_CONNS: "10"
   DB_CONNECTION_RETRIES: "15"
-  DOMAIN: ""
+  disable_2fa_remember: "false"
+  disable_icon_download: "false"
+  DOMAIN: "https://vault.borninpain.de"
+  email_2fa_enforce_on_verified_invite": "false"
+  email_2fa_auto_fallback": "false"
+  email_attempts_limit": "3"
   EMAIL_CHANGE_ALLOWED: "true"
+  email_expiration_time": "600"
+  email_token_size": "6"
   EMERGENCY_ACCESS_ALLOWED: "true"
   EMERGENCY_NOTIFICATION_REMINDER_SCHEDULE: 0 3 * * * *
   EMERGENCY_REQUEST_TIMEOUT_SCHEDULE: 0 7 * * * *
   EXTENDED_LOGGING: "true"
+  http_request_block_non_global_ips: "true"
   ICON_BLACKLIST_NON_GLOBAL_IPS: "true"
+  icon_cache_ttl: "2592000"
+  icon_cache_negttl: "259200"
+  icon_download_timeout: "10"
   ICON_REDIRECT_CODE: "302"
   ICON_SERVICE: internal
+  incomplete_2fa_time_limit: "3"
+  increase_note_size_limit: "false"
   INVITATION_EXPIRATION_HOURS: "120"
   INVITATION_ORG_NAME: Vaultwarden
   INVITATIONS_ALLOWED: "true"
@@ -118,6 +137,9 @@ data:
   LOG_TIMESTAMP_FORMAT: '%Y-%m-%d %H:%M:%S.%3f'
   ORG_EVENTS_ENABLED: "false"
   ORG_GROUPS_ENABLED: "false"
+  password_hints_allowed: "true"
+  password_iterations: "600000"
+  reload_templates: "false"
   REQUIRE_DEVICE_EMAIL: "false"
   ROCKET_ADDRESS: 0.0.0.0
   ROCKET_PORT: "8080"
@@ -126,7 +148,19 @@ data:
   SHOW_PASSWORD_HINT: "false"
   SIGNUPS_ALLOWED: "true"
   SIGNUPS_VERIFY: "true"
+  signups_verify_resend_limit: "6"
+  signups_verify_resend_time: "3600"
+  smtp_host: "mxe965.netcup.net"
+  smtp_security: "starttls"
+  smtp_port: "587"
+  smtp_from: "noreply@borninpain.de"
+  smtp_from_name: "Vaultwarden"
+  smtp_timeout: "15"
+  smtp_embed_images: "true"
+  smtp_accept_invalid_certs: "false"
+  smtp_accept_invalid_hostnames: "false"
   TRASH_AUTO_DELETE_DAYS: ""
+  use_sendmail: "false"
   WEB_VAULT_ENABLED: "true"
 kind: ConfigMap
 metadata:
@@ -141,28 +175,6 @@ metadata:
   namespace: vaultwarden
 ---
 apiVersion: v1
-data:
-  ADMIN_TOKEN: JGFyZ29uMmlkJHY9MTkkbT0xOTQ1Nix0PTIscD0xJFZreDFWa0U0Um1oRE1VaHdObTlZVmxoUFFrVk9aazFZYzFkdVNEZEdSVll6ZDBZNVprZ3dhVmcwWXowJFBLK2gxQU5DYnp6bUVLYWlRZkNqV3craFdGYU1LdkxoRzJQalJhbkg1S2s=
-  DUO_SKEY: ""
-  PUSH_INSTALLATION_ID: ""
-  PUSH_INSTALLATION_KEY: ""
-  SMTP_PASSWORD: ""
-  SMTP_USERNAME: ""
-  YUBICO_SECRET_KEY: ""
-kind: Secret
-metadata:
-  labels:
-    app.kubernetes.io/component: vaultwarden
-    app.kubernetes.io/instance: vaultwarden
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: vaultwarden
-    app.kubernetes.io/version: 1.33.2
-    helm.sh/chart: vaultwarden-0.31.8
-  name: vaultwarden
-  namespace: vaultwarden
-type: Opaque
----
-apiVersion: v1
 kind: Service
 metadata:
   labels: