refactor(db): Migrate to CloudNativePG operator

manifests/database.yaml

@@ -1,26 +1,26 @@
-kind: "postgresql"
+apiVersion: postgresql.cnpg.io/v1
-apiVersion: "acid.zalan.do/v1"
+kind: Cluster
-
 metadata:
-  name: "vaultwarden"
+  name: vaultwarden-db
-  namespace: "vaultwarden"
+  namespace: vaultwarden
-  labels:
-    team: acid
-
 spec:
-  teamId: "acid"
+  instances: 1
+
+  storage: 
+    size: 1Gi
+    storageClass: flat-storage-class
+
+  bootstrap:
+    initdb:
+      database: vaultwarden
+      owner: vaultwarden
+      secret:
+        name: vaultwarden-db
+
   postgresql:
-    version: "15"
+    pg_hba:
-  numberOfInstances: 1
+      - host all all all md5
-  volume:
+
-    size: "1Gi"
-    storageClass: "flat-storage-class"
-  users:
-    vaultwarden: []
-  databases:
-    vaultwarden: vaultwarden
-  allowedSourceRanges:
-    # IP ranges to access your cluster go here
   resources:
     requests:
       cpu: 100m

manifests/deployment.yaml

@@ -24,12 +24,12 @@ spec:
                   - name: DB_PASSWORD
                     valueFrom:
                       secretKeyRef:
-                        name: vaultwarden.vaultwarden.credentials.postgresql.acid.zalan.do
+                        name: vaultwarden-db
                         key: password
                   - name: SIGNUPS_ALLOWED
                     value: "true"
                   - name: DATABASE_URL
-                    value: "postgresql://vaultwarden:$(DB_PASSWORD)@vaultwarden.vaultwarden.svc.cluster.local:5432/vaultwarden"
+                    value: "postgresql://vaultwarden:$(DB_PASSWORD)@vaultwarden-db-rw.vaultwarden.svc.cluster.local:5432/vaultwarden"
                   - name: ADMIN_TOKEN
                     valueFrom:
                       secretKeyRef: