Compare commits
298 Commits
feature/un
...
ab63d1b819
Author | SHA1 | Date | |
---|---|---|---|
ab63d1b819 | |||
f3a1e927ff | |||
6f29475d25 | |||
e988f55ba8 | |||
bb259be422 | |||
ac45bb0958 | |||
e3580c6170 | |||
a801d8ffa8 | |||
53d6029e84 | |||
239e2fdf49 | |||
ae45a87b8a | |||
9cabd42c53 | |||
d45374fe4a | |||
e350de1a3e | |||
8eb64ff444 | |||
e8b786e210 | |||
37dfd07ea9 | |||
0f872ec949 | |||
3b1ab8e595 | |||
e35da6fc63 | |||
da4363262c | |||
ebc787030f | |||
5b2cc939a5 | |||
f45faf4509 | |||
7433dd17f4 | |||
055d091447 | |||
1aa86ef16c | |||
dd5e738cab | |||
7e5a1afb90 | |||
175817190c | |||
31141c6ef1 | |||
e581c3a488 | |||
4ce4e816c1 | |||
f50a2a61fc | |||
ee6e4f1e32 | |||
40454d871f | |||
e503ae6d30 | |||
5233956a09 | |||
e7118e9182 | |||
e79da15d16 | |||
1bcaafd14e | |||
6a10c8a908 | |||
7f61158564 | |||
2f17e6d47a | |||
466d58b26b | |||
03f873ecf4 | |||
56cca145b4 | |||
3ecd55787a | |||
45e46cf6e9 | |||
c19d6d8244 | |||
c5250c5a45 | |||
e70c1c9685 | |||
b5d6f28178 | |||
14a54e691d | |||
d6eb7b8f84 | |||
025e0c4ff1 | |||
d76455787a | |||
252b732bd8 | |||
93ca89060c | |||
8e043fdd58 | |||
d87b8bcff2 | |||
4be1c00592 | |||
9b1303d10e | |||
36f2596dfb | |||
abf59c480f | |||
c521a23a16 | |||
b646968c16 | |||
a1afc7d736 | |||
799d084471 | |||
511ed7e78d | |||
0d1d10a103 | |||
de667a31ad | |||
ef2b1d393d | |||
0402d54fda | |||
d80dfc35fd | |||
9d47443573 | |||
806b42874c | |||
3c71ac8411 | |||
c2db5eb712 | |||
040771494a | |||
57c57b7620 | |||
a41ec520a2 | |||
9057768561 | |||
db3dc9a8af | |||
31a968ef87 | |||
9778d796a9 | |||
7a44938d6d | |||
689038a808 | |||
88ca15d995 | |||
249b335ccb | |||
8c33c50457 | |||
4f1cbbabe6 | |||
4f4e6bdf13 | |||
ebbece048e | |||
9987aa9d0b | |||
14cc093e51 | |||
18576ff7f2 | |||
bee9243407 | |||
8223b336ed | |||
1fd0da6778 | |||
6be344fc8d | |||
d46ee3894e | |||
b282f363ce | |||
4b494642f5 | |||
08c508862f | |||
3d63498b25 | |||
4ef6b01a92 | |||
7cf2c9c479 | |||
a11f3e24f8 | |||
adff6180ea | |||
99dd81531e | |||
4f18adf1da | |||
7e3f8a2764 | |||
3a94d7a7b7 | |||
9f8ae4b0fa | |||
d53ee0079e | |||
f844eb8caa | |||
fb645058ac | |||
261790e329 | |||
645c8edde7 | |||
c7b52155ac | |||
46a2c8998e | |||
fbba22cb07 | |||
f03c76c53b | |||
c7f5cb8773 | |||
206f8e4c50 | |||
03df5e4663 | |||
72906d205b | |||
c6f7471ebb | |||
a3550d10cb | |||
f22d25b101 | |||
b7b9afa1a5 | |||
835f05866c | |||
1aa2e55f22 | |||
3c777a92c0 | |||
7d893d27ec | |||
d0fcf951cc | |||
1e9959e3d1 | |||
ce821b6abe | |||
1de224ea77 | |||
103f4c8a9f | |||
124881d3a8 | |||
0b5d2a5fe6 | |||
332082c9fc | |||
0eaa9fe774 | |||
192e2e869f | |||
0fd9936db5 | |||
1a9d0fc00c | |||
a8dfca3c43 | |||
42e2bc35a5 | |||
7e2e5a56db | |||
01279dd023 | |||
d6ce07a8a0 | |||
6eb617086a | |||
8137bf8f1b | |||
5f1dcaabba | |||
37bdb32f43 | |||
ca15a6497c | |||
095d2d6392 | |||
b2993c9395 | |||
d7b0f658de | |||
391c71729b | |||
bee5dd0c0b | |||
25ab46e69a | |||
123412e073 | |||
39818887fa | |||
0700609568 | |||
198b24132e | |||
f6e45d089b | |||
23eab57208 | |||
a94521f197 | |||
38f58d86c9 | |||
76d1c51157 | |||
7aaeeded89 | |||
9b93016f93 | |||
aaf624bb42 | |||
8536d91288 | |||
3f62bee199 | |||
f9f39818a1 | |||
a73e6dc4db | |||
1df7abf987 | |||
0e1bb58c24 | |||
fcd2d2eaa2 | |||
455790d3c6 | |||
cdbcdba25d | |||
9dcb06678b | |||
a4fe0a7fe4 | |||
ece9faa60c | |||
d4bea2994c | |||
0ec3bf9ea8 | |||
0c5760b22b | |||
e144722d59 | |||
bf6e7aa10c | |||
ae53c44428 | |||
05d5b02347 | |||
337237a0f8 | |||
ccc4b13c35 | |||
a6a9c7c217 | |||
bc0f29f028 | |||
e2c9d73728 | |||
442c07f031 | |||
8fd9fa6f11 | |||
516d7e8e09 | |||
acf9d34b10 | |||
3ffead0a14 | |||
b6bdc09efc | |||
49b21cde52 | |||
deed24aa01 | |||
9cfb98248d | |||
7bc4beefce | |||
ce9ff68c26 | |||
8249e7ef01 | |||
14e65df483 | |||
f6fef4278b | |||
ef50df8386 | |||
b6df7604ed | |||
a03d869d0c | |||
1063349fbe | |||
b88c212b57 | |||
38a522a8d6 | |||
046936f8f6 | |||
309cbc08f5 | |||
08b4c7eb5e | |||
58e632e0b8 | |||
30d02edebc | |||
e30bfe64ae | |||
764a3eafb7 | |||
eff07665de | |||
571aebe78d | |||
91a2ae5fe8 | |||
f12c21ef18 | |||
2a96b288bf | |||
6f3a5aeab2 | |||
b001bd3efc | |||
b54794df35 | |||
51c8f7c092 | |||
cfb1a87a5b | |||
10483431c6 | |||
3a9450da9d | |||
374e23ba1e | |||
66f703f5e1 | |||
4b05b53d72 | |||
cfbc7fcd0d | |||
ffed2aea50 | |||
e674bf5b94 | |||
133af74ae0 | |||
f648064304 | |||
c7180f793a | |||
4fcdaad297 | |||
f4b99ca037 | |||
588bf774f9 | |||
e18c661dbd | |||
7d65ffea6a | |||
e460b5324a | |||
6fe166e60c | |||
6ceb3816fb | |||
19b63263e6 | |||
20d46d89d2 | |||
7aee6c7cf0 | |||
443da20ff9 | |||
84a47b15b6 | |||
40259ee57e | |||
619368a2fd | |||
3288966b95 | |||
d12d50b906 | |||
c7f0221062 | |||
7819867091 | |||
dd4c3d7a36 | |||
e66905402e | |||
1bdb4522c3 | |||
b5845479c2 | |||
f2f31c4f4e | |||
ded829500c | |||
f762f5451b | |||
709f21998e | |||
47f091be83 | |||
da8be916bf | |||
ad67acb9e7 | |||
5a7b5a82d7 | |||
2c32db61ec | |||
141b80d15c | |||
bf1d4badbe | |||
be48049e22 | |||
3a629284f3 | |||
28c92e727f | |||
9a65c531f1 | |||
52a086df73 | |||
b728e21a15 | |||
da32c9c2ce | |||
846390600e | |||
18d7a6b4cb | |||
31c8e91502 | |||
f0adf6b5db | |||
b24ae9c698 | |||
f3c108e362 | |||
d2a8d92864 | |||
10816c4bd9 | |||
aca0d4ba21 |
6
.gitignore
vendored
6
.gitignore
vendored
@@ -1,2 +1,6 @@
|
|||||||
|
# Kubernetes secrets
|
||||||
*.secret.yaml
|
*.secret.yaml
|
||||||
charts/
|
main.key
|
||||||
|
|
||||||
|
# Helm Chart files
|
||||||
|
charts/
|
3
.gitmodules
vendored
3
.gitmodules
vendored
@@ -1,3 +0,0 @@
|
|||||||
[submodule "infrastructure/external-dns/octodns"]
|
|
||||||
path = infrastructure/external-dns/octodns
|
|
||||||
url = ssh://git@git.kluster.moll.re:2222/remoll/dns.git
|
|
17
README.md
17
README.md
@@ -1,7 +1,6 @@
|
|||||||
# Kluster setup and IaaC using argoCD
|
# Kluster setup and IaaC using argoCD
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
### Initial setup
|
### Initial setup
|
||||||
#### Requirements:
|
#### Requirements:
|
||||||
- A running k3s instance
|
- A running k3s instance
|
||||||
@@ -28,5 +27,21 @@ The app-of-apps will bootstrap a fully featured cluster with the following compo
|
|||||||
- immich
|
- immich
|
||||||
- ...
|
- ...
|
||||||
|
|
||||||
|
#### Recap
|
||||||
|
- install sealedsecrets see [README](./infrastructure/sealedsecrets/README.md)
|
||||||
|
```bash
|
||||||
|
kubectl apply -k infrastructure/sealedsecrets
|
||||||
|
kubectl apply -f infrastructure/sealedsecrets/main.key
|
||||||
|
kubectl delete pod -n kube-system -l name=sealed-secrets-controller
|
||||||
|
```
|
||||||
|
- install argocd
|
||||||
|
```bash
|
||||||
|
kubectl apply -k infrastructure/argocd
|
||||||
|
```
|
||||||
|
- wait...
|
||||||
|
|
||||||
|
|
||||||
### Adding an application
|
### Adding an application
|
||||||
|
todo
|
||||||
|
|
||||||
|
|
||||||
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRouteTCP
|
kind: IngressRouteTCP
|
||||||
metadata:
|
metadata:
|
||||||
name: adguard-tls-ingress
|
name: adguard-tls-ingress
|
||||||
|
@@ -10,7 +10,7 @@ resources:
|
|||||||
images:
|
images:
|
||||||
- name: adguard/adguardhome
|
- name: adguard/adguardhome
|
||||||
newName: adguard/adguardhome
|
newName: adguard/adguardhome
|
||||||
newTag: v0.107.44
|
newTag: v0.107.52
|
||||||
|
|
||||||
namespace: adguard
|
namespace: adguard
|
||||||
|
|
||||||
|
48
apps/files/deployment.yaml
Normal file
48
apps/files/deployment.yaml
Normal file
@@ -0,0 +1,48 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: StatefulSet
|
||||||
|
metadata:
|
||||||
|
name: ocis-statefulset
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: ocis
|
||||||
|
serviceName: ocis-web
|
||||||
|
replicas: 1
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: ocis
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: ocis
|
||||||
|
image: ocis
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
memory: "1Gi"
|
||||||
|
cpu: "1000m"
|
||||||
|
env:
|
||||||
|
- name: OCIS_INSECURE
|
||||||
|
value: "true"
|
||||||
|
- name: OCIS_URL
|
||||||
|
value: "https://ocis.kluster.moll.re"
|
||||||
|
- name: OCIS_LOG_LEVEL
|
||||||
|
value: "debug"
|
||||||
|
ports:
|
||||||
|
- containerPort: 9200
|
||||||
|
volumeMounts:
|
||||||
|
- name: config
|
||||||
|
mountPath: /etc/ocis
|
||||||
|
# - name: ocis-config-file
|
||||||
|
# mountPath: /etc/ocis/config.yaml
|
||||||
|
- name: data
|
||||||
|
mountPath: /var/lib/ocis
|
||||||
|
volumes:
|
||||||
|
# - name: ocis-config
|
||||||
|
# persistentVolumeClaim:
|
||||||
|
# claimName: ocis-config
|
||||||
|
- name: config
|
||||||
|
secret:
|
||||||
|
secretName: ocis-config
|
||||||
|
- name: data
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: ocis
|
18
apps/files/ingress.yaml
Normal file
18
apps/files/ingress.yaml
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
apiVersion: traefik.io/v1alpha1
|
||||||
|
kind: IngressRoute
|
||||||
|
metadata:
|
||||||
|
name: ocis-ingressroute
|
||||||
|
|
||||||
|
spec:
|
||||||
|
entryPoints:
|
||||||
|
- websecure
|
||||||
|
routes:
|
||||||
|
- match: Host(`ocis.kluster.moll.re`)
|
||||||
|
kind: Rule
|
||||||
|
services:
|
||||||
|
- name: ocis-web
|
||||||
|
port: 9200
|
||||||
|
scheme: https
|
||||||
|
|
||||||
|
tls:
|
||||||
|
certResolver: default-tls
|
16
apps/files/kustomization.yaml
Normal file
16
apps/files/kustomization.yaml
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
|
kind: Kustomization
|
||||||
|
resources:
|
||||||
|
- namespace.yaml
|
||||||
|
- ingress.yaml
|
||||||
|
- service.yaml
|
||||||
|
- pvc.yaml
|
||||||
|
- deployment.yaml
|
||||||
|
- ocis-config.sealedsecret.yaml
|
||||||
|
|
||||||
|
namespace: files
|
||||||
|
|
||||||
|
images:
|
||||||
|
- name: ocis
|
||||||
|
newName: owncloud/ocis
|
||||||
|
newTag: "5.0.6"
|
17
apps/files/ocis-config.sealedsecret.yaml
Normal file
17
apps/files/ocis-config.sealedsecret.yaml
Normal file
File diff suppressed because one or more lines are too long
@@ -1,11 +1,11 @@
|
|||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
metadata:
|
metadata:
|
||||||
name: syncthing-claim
|
name: ocis
|
||||||
spec:
|
spec:
|
||||||
storageClassName: nfs-client
|
storageClassName: "nfs-client"
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: 10Gi
|
storage: 150Gi
|
10
apps/files/service.yaml
Normal file
10
apps/files/service.yaml
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: ocis-web
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: ocis
|
||||||
|
ports:
|
||||||
|
- port: 9200
|
||||||
|
targetPort: 9200
|
@@ -22,13 +22,13 @@ spec:
|
|||||||
- name: TZ
|
- name: TZ
|
||||||
value: Europe/Berlin
|
value: Europe/Berlin
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: actualbudget-data-nfs
|
- name: data
|
||||||
mountPath: /data
|
mountPath: /data
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 5006
|
- containerPort: 5006
|
||||||
name: http
|
name: http
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
volumes:
|
volumes:
|
||||||
- name: actualbudget-data-nfs
|
- name: data
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: actualbudget-data-nfs
|
claimName: data
|
||||||
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: actualbudget
|
name: actualbudget
|
||||||
|
@@ -1,27 +1,11 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: "actualbudget-data-nfs"
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: "5Gi"
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /export/kluster/actualbudget
|
|
||||||
server: 192.168.1.157
|
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: "actualbudget-data-nfs"
|
name: "data"
|
||||||
spec:
|
spec:
|
||||||
storageClassName: ""
|
storageClassName: "nfs-client"
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: "5Gi"
|
storage: "5Gi"
|
||||||
|
|
||||||
volumeName: actualbudget-data-nfs
|
|
||||||
|
@@ -13,4 +13,4 @@ resources:
|
|||||||
images:
|
images:
|
||||||
- name: actualbudget
|
- name: actualbudget
|
||||||
newName: actualbudget/actual-server
|
newName: actualbudget/actual-server
|
||||||
newTag: 24.2.0
|
newTag: 24.7.0
|
||||||
|
@@ -1,4 +1,3 @@
|
|||||||
|
|
||||||
apiVersion: apps/v1
|
apiVersion: apps/v1
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
@@ -22,7 +21,7 @@ spec:
|
|||||||
- name: TZ
|
- name: TZ
|
||||||
value: Europe/Berlin
|
value: Europe/Berlin
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: config
|
- name: config-dir
|
||||||
mountPath: /config
|
mountPath: /config
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
@@ -32,6 +31,7 @@ spec:
|
|||||||
cpu: "2"
|
cpu: "2"
|
||||||
memory: "1Gi"
|
memory: "1Gi"
|
||||||
volumes:
|
volumes:
|
||||||
- name: config
|
- name: config-dir
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: homeassistant-nfs
|
claimName: config
|
||||||
|
|
||||||
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: homeassistant-ingress
|
name: homeassistant-ingress
|
||||||
@@ -6,7 +6,7 @@ spec:
|
|||||||
entryPoints:
|
entryPoints:
|
||||||
- websecure
|
- websecure
|
||||||
routes:
|
routes:
|
||||||
- match: Host(`home.kluster.moll.re`)
|
- match: Host(`home.kluster.moll.re`) && !Path(`/api/prometheus`)
|
||||||
middlewares:
|
middlewares:
|
||||||
- name: homeassistant-websocket
|
- name: homeassistant-websocket
|
||||||
kind: Rule
|
kind: Rule
|
||||||
@@ -15,9 +15,8 @@ spec:
|
|||||||
port: 8123
|
port: 8123
|
||||||
tls:
|
tls:
|
||||||
certResolver: default-tls
|
certResolver: default-tls
|
||||||
|
|
||||||
---
|
---
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: homeassistant-websocket
|
name: homeassistant-websocket
|
||||||
@@ -27,6 +26,3 @@ spec:
|
|||||||
X-Forwarded-Proto: "https"
|
X-Forwarded-Proto: "https"
|
||||||
# enable websockets
|
# enable websockets
|
||||||
Upgrade: "websocket"
|
Upgrade: "websocket"
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@@ -9,8 +9,10 @@ resources:
|
|||||||
- pvc.yaml
|
- pvc.yaml
|
||||||
- service.yaml
|
- service.yaml
|
||||||
- deployment.yaml
|
- deployment.yaml
|
||||||
|
- servicemonitor.yaml
|
||||||
|
|
||||||
|
|
||||||
images:
|
images:
|
||||||
- name: homeassistant/home-assistant
|
- name: homeassistant/home-assistant
|
||||||
newName: homeassistant/home-assistant
|
newName: homeassistant/home-assistant
|
||||||
newTag: "2024.2"
|
newTag: "2024.7"
|
||||||
|
@@ -1,28 +1,11 @@
|
|||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: homeassistant-nfs
|
|
||||||
spec:
|
|
||||||
# storageClassName: slow
|
|
||||||
capacity:
|
|
||||||
storage: "1Gi"
|
|
||||||
# volumeMode: Filesystem
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /kluster/homeassistant
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: homeassistant-nfs
|
name: config
|
||||||
spec:
|
spec:
|
||||||
storageClassName: ""
|
storageClassName: "nfs-client"
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: "1Gi"
|
storage: "1Gi"
|
||||||
volumeName: homeassistant-nfs
|
|
||||||
|
@@ -2,9 +2,12 @@ apiVersion: v1
|
|||||||
kind: Service
|
kind: Service
|
||||||
metadata:
|
metadata:
|
||||||
name: homeassistant-web
|
name: homeassistant-web
|
||||||
|
labels:
|
||||||
|
app: homeassistant
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
app: homeassistant
|
app: homeassistant
|
||||||
ports:
|
ports:
|
||||||
- port: 8123
|
- port: 8123
|
||||||
targetPort: 8123
|
targetPort: 8123
|
||||||
|
name: http
|
13
apps/homeassistant/servicemonitor.yaml
Normal file
13
apps/homeassistant/servicemonitor.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: monitoring.coreos.com/v1
|
||||||
|
kind: ServiceMonitor
|
||||||
|
metadata:
|
||||||
|
name: homeassistant-servicemonitor
|
||||||
|
labels:
|
||||||
|
app: homeassistant
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: homeassistant
|
||||||
|
endpoints:
|
||||||
|
- port: http
|
||||||
|
path: /api/prometheus
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: stripprefix
|
name: stripprefix
|
||||||
@@ -7,7 +7,7 @@ spec:
|
|||||||
prefixes:
|
prefixes:
|
||||||
- /api
|
- /api
|
||||||
---
|
---
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: websocket
|
name: websocket
|
||||||
@@ -18,7 +18,7 @@ spec:
|
|||||||
# enable websockets
|
# enable websockets
|
||||||
Upgrade: "websocket"
|
Upgrade: "websocket"
|
||||||
---
|
---
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: immich-ingressroute
|
name: immich-ingressroute
|
||||||
|
@@ -1,25 +1,33 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
resources:
|
resources:
|
||||||
- namespace.yaml
|
- namespace.yaml
|
||||||
- ingress.yaml
|
- ingress.yaml
|
||||||
- pvc.yaml
|
- pvc.yaml
|
||||||
- postgres.yaml
|
- postgres.yaml
|
||||||
- postgres.sealedsecret.yaml
|
- postgres.sealedsecret.yaml
|
||||||
|
|
||||||
|
|
||||||
namespace: immich
|
namespace: immich
|
||||||
|
|
||||||
|
|
||||||
helmCharts:
|
helmCharts:
|
||||||
- name: immich
|
- name: immich
|
||||||
releaseName: immich
|
releaseName: immich
|
||||||
version: 0.3.1
|
version: 0.7.1
|
||||||
valuesFile: values.yaml
|
valuesFile: values.yaml
|
||||||
repo: https://immich-app.github.io/immich-charts
|
repo: https://immich-app.github.io/immich-charts
|
||||||
|
|
||||||
|
|
||||||
images:
|
images:
|
||||||
- name: ghcr.io/immich-app/immich-machine-learning
|
- name: ghcr.io/immich-app/immich-machine-learning
|
||||||
newTag: v1.95.1
|
newTag: v1.110.0
|
||||||
- name: ghcr.io/immich-app/immich-server
|
- name: ghcr.io/immich-app/immich-server
|
||||||
newTag: v1.95.1
|
newTag: v1.110.0
|
||||||
|
|
||||||
|
|
||||||
|
patches:
|
||||||
|
- path: patch-redis-pvc.yaml
|
||||||
|
target:
|
||||||
|
kind: StatefulSet
|
||||||
|
name: immich-redis-master
|
17
apps/immich/patch-redis-pvc.yaml
Normal file
17
apps/immich/patch-redis-pvc.yaml
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: StatefulSet
|
||||||
|
metadata:
|
||||||
|
name: immich-redis-master
|
||||||
|
spec:
|
||||||
|
volumeClaimTemplates:
|
||||||
|
- apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: redis-data
|
||||||
|
spec:
|
||||||
|
storageClassName: nfs-client
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 2Gi
|
@@ -1,4 +1,3 @@
|
|||||||
|
|
||||||
apiVersion: postgresql.cnpg.io/v1
|
apiVersion: postgresql.cnpg.io/v1
|
||||||
kind: Cluster
|
kind: Cluster
|
||||||
metadata:
|
metadata:
|
||||||
@@ -10,16 +9,23 @@ spec:
|
|||||||
initdb:
|
initdb:
|
||||||
owner: immich
|
owner: immich
|
||||||
database: immich
|
database: immich
|
||||||
secret:
|
secret:
|
||||||
name: postgres-password
|
name: postgres-password
|
||||||
|
|
||||||
postgresql:
|
postgresql:
|
||||||
shared_preload_libraries:
|
shared_preload_libraries:
|
||||||
- "vectors.so"
|
- "vectors.so"
|
||||||
|
|
||||||
|
# Persistent storage configuration
|
||||||
storage:
|
storage:
|
||||||
size: 1Gi
|
size: 1Gi
|
||||||
storageClass: nfs-client
|
pvcTemplate:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 1Gi
|
||||||
|
storageClassName: nfs-client
|
||||||
|
volumeMode: Filesystem
|
||||||
monitoring:
|
monitoring:
|
||||||
enablePodMonitor: true
|
enablePodMonitor: true
|
||||||
|
@@ -1,26 +1,11 @@
|
|||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: immich-nfs
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: "50Gi"
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /kluster/immich
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: immich-nfs
|
name: data
|
||||||
spec:
|
spec:
|
||||||
storageClassName: ""
|
storageClassName: "nfs-client"
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: "50Gi"
|
storage: "100Gi"
|
||||||
volumeName: immich-nfs
|
|
||||||
|
@@ -22,16 +22,19 @@ env:
|
|||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: postgres-password
|
name: postgres-password
|
||||||
key: password
|
key: password
|
||||||
IMMICH_WEB_URL: '{{ printf "http://%s-web:3000" .Release.Name }}'
|
|
||||||
IMMICH_MACHINE_LEARNING_URL: '{{ printf "http://%s-machine-learning:3003" .Release.Name }}'
|
IMMICH_MACHINE_LEARNING_URL: '{{ printf "http://%s-machine-learning:3003" .Release.Name }}'
|
||||||
|
IMMICH_METRICS: true
|
||||||
|
|
||||||
immich:
|
immich:
|
||||||
|
metrics:
|
||||||
|
# Enabling this will create the service monitors needed to monitor immich with the prometheus operator
|
||||||
|
enabled: true
|
||||||
persistence:
|
persistence:
|
||||||
# Main data store for all photos shared between different components.
|
# Main data store for all photos shared between different components.
|
||||||
library:
|
library:
|
||||||
# Automatically creating the library volume is not supported by this chart
|
# Automatically creating the library volume is not supported by this chart
|
||||||
# You have to specify an existing PVC to use
|
# You have to specify an existing PVC to use
|
||||||
existingClaim: immich-nfs
|
existingClaim: data
|
||||||
|
|
||||||
# Dependencies
|
# Dependencies
|
||||||
|
|
||||||
@@ -52,16 +55,6 @@ server:
|
|||||||
main:
|
main:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
microservices:
|
|
||||||
enabled: true
|
|
||||||
persistence:
|
|
||||||
geodata-cache:
|
|
||||||
enabled: true
|
|
||||||
size: 1Gi
|
|
||||||
# Optional: Set this to pvc to avoid downloading the geodata every start.
|
|
||||||
type: emptyDir
|
|
||||||
accessMode: ReadWriteMany
|
|
||||||
|
|
||||||
machine-learning:
|
machine-learning:
|
||||||
enabled: true
|
enabled: true
|
||||||
persistence:
|
persistence:
|
||||||
|
@@ -18,6 +18,9 @@ spec:
|
|||||||
limits:
|
limits:
|
||||||
memory: "2Gi"
|
memory: "2Gi"
|
||||||
cpu: "2"
|
cpu: "2"
|
||||||
|
requests:
|
||||||
|
memory: "128Mi"
|
||||||
|
cpu: "250m"
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 8096
|
- containerPort: 8096
|
||||||
name: jellyfin
|
name: jellyfin
|
||||||
@@ -25,9 +28,9 @@ spec:
|
|||||||
- name: TZ
|
- name: TZ
|
||||||
value: Europe/Berlin
|
value: Europe/Berlin
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: jellyfin-config
|
- name: config
|
||||||
mountPath: /config
|
mountPath: /config
|
||||||
- name: jellyfin-data
|
- name: media
|
||||||
mountPath: /media
|
mountPath: /media
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
httpGet:
|
httpGet:
|
||||||
@@ -36,10 +39,10 @@ spec:
|
|||||||
initialDelaySeconds: 100
|
initialDelaySeconds: 100
|
||||||
periodSeconds: 15
|
periodSeconds: 15
|
||||||
volumes:
|
volumes:
|
||||||
- name: jellyfin-config
|
- name: config
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: jellyfin-config-nfs
|
claimName: config
|
||||||
- name: jellyfin-data
|
- name: media
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: jellyfin-data-nfs
|
claimName: media
|
||||||
|
|
@@ -1,23 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
|
||||||
metadata:
|
|
||||||
name: jellyfin-vue-ingress
|
|
||||||
namespace: media
|
|
||||||
spec:
|
|
||||||
entryPoints:
|
|
||||||
- websecure
|
|
||||||
routes:
|
|
||||||
- match: Host(`media.kluster.moll.re`)
|
|
||||||
middlewares:
|
|
||||||
- name: jellyfin-websocket
|
|
||||||
kind: Rule
|
|
||||||
services:
|
|
||||||
- name: jellyfin-web
|
|
||||||
port: 80
|
|
||||||
tls:
|
|
||||||
certResolver: default-tls
|
|
||||||
---
|
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: jellyfin-backend-ingress
|
name: jellyfin-backend-ingress
|
||||||
@@ -26,7 +7,7 @@ spec:
|
|||||||
entryPoints:
|
entryPoints:
|
||||||
- websecure
|
- websecure
|
||||||
routes:
|
routes:
|
||||||
- match: Host(`media-backend.kluster.moll.re`) && !Path(`/metrics`)
|
- match: Host(`media.kluster.moll.re`) && !Path(`/metrics`)
|
||||||
middlewares:
|
middlewares:
|
||||||
- name: jellyfin-websocket
|
- name: jellyfin-websocket
|
||||||
- name: jellyfin-server-headers
|
- name: jellyfin-server-headers
|
||||||
@@ -37,7 +18,7 @@ spec:
|
|||||||
tls:
|
tls:
|
||||||
certResolver: default-tls
|
certResolver: default-tls
|
||||||
---
|
---
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: jellyfin-websocket
|
name: jellyfin-websocket
|
||||||
@@ -48,7 +29,7 @@ spec:
|
|||||||
Connection: keep-alive, Upgrade
|
Connection: keep-alive, Upgrade
|
||||||
Upgrade: WebSocket
|
Upgrade: WebSocket
|
||||||
---
|
---
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: jellyfin-server-headers
|
name: jellyfin-server-headers
|
||||||
@@ -60,4 +41,4 @@ spec:
|
|||||||
accessControlAllowMethods: [ "GET","HEAD","OPTIONS" ] # "POST","PUT"
|
accessControlAllowMethods: [ "GET","HEAD","OPTIONS" ] # "POST","PUT"
|
||||||
accessControlAllowOriginList:
|
accessControlAllowOriginList:
|
||||||
- "*"
|
- "*"
|
||||||
accessControlMaxAge: 100
|
accessControlMaxAge: 100
|
@@ -1,17 +0,0 @@
|
|||||||
apiVersion: monitoring.coreos.com/v1
|
|
||||||
kind: ServiceMonitor
|
|
||||||
metadata:
|
|
||||||
name: jellyfin
|
|
||||||
labels:
|
|
||||||
metrics: prometheus
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: jellyfin-server-service
|
|
||||||
endpoints:
|
|
||||||
- path: /metrics
|
|
||||||
targetPort: jellyfin
|
|
||||||
|
|
||||||
# this exposes metrics on port 8096 as enabled in the jellyfin config
|
|
||||||
# https://jellyfin.org/docs/general/networking/monitoring/
|
|
||||||
# the metrics are available at /metrics but blocked by the ingress
|
|
@@ -5,17 +5,11 @@ namespace: media
|
|||||||
resources:
|
resources:
|
||||||
- namespace.yaml
|
- namespace.yaml
|
||||||
- pvc.yaml
|
- pvc.yaml
|
||||||
- server.deployment.yaml
|
- deployment.yaml
|
||||||
- server.service.yaml
|
- service.yaml
|
||||||
- web.deployment.yaml
|
|
||||||
- web.service.yaml
|
|
||||||
- ingress.yaml
|
- ingress.yaml
|
||||||
- jellyfin.servicemonitor.yaml
|
|
||||||
|
|
||||||
images:
|
images:
|
||||||
- name: jellyfin/jellyfin
|
- name: jellyfin/jellyfin
|
||||||
newName: jellyfin/jellyfin
|
newName: jellyfin/jellyfin
|
||||||
newTag: 10.8.13
|
newTag: 10.9.9
|
||||||
- name: ghcr.io/jellyfin/jellyfin-vue
|
|
||||||
newName: ghcr.io/jellyfin/jellyfin-vue
|
|
||||||
newTag: stable-rc.0.3.1
|
|
||||||
|
@@ -1,39 +1,21 @@
|
|||||||
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
namespace: media
|
|
||||||
name: jellyfin-config-nfs
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: "1Gi"
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /export/kluster/jellyfin-config
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
namespace: media
|
name: config
|
||||||
name: jellyfin-config-nfs
|
|
||||||
spec:
|
spec:
|
||||||
storageClassName: ""
|
storageClassName: "nfs-client"
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: "1Gi"
|
storage: "1Gi"
|
||||||
volumeName: jellyfin-config-nfs
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolume
|
kind: PersistentVolume
|
||||||
metadata:
|
metadata:
|
||||||
namespace: media
|
name: media
|
||||||
name: jellyfin-data-nfs
|
|
||||||
spec:
|
spec:
|
||||||
capacity:
|
capacity:
|
||||||
storage: "1Ti"
|
storage: "1Ti"
|
||||||
@@ -46,8 +28,7 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
namespace: media
|
name: media
|
||||||
name: jellyfin-data-nfs
|
|
||||||
spec:
|
spec:
|
||||||
storageClassName: ""
|
storageClassName: ""
|
||||||
accessModes:
|
accessModes:
|
||||||
@@ -55,4 +36,4 @@ spec:
|
|||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: "1Ti"
|
storage: "1Ti"
|
||||||
volumeName: jellyfin-data-nfs
|
volumeName: media
|
||||||
|
@@ -1,27 +0,0 @@
|
|||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: jellyfin-web
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: jellyfin-web
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: jellyfin-web
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: jellyfin-web
|
|
||||||
image: ghcr.io/jellyfin/jellyfin-vue
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
memory: "128Mi"
|
|
||||||
cpu: "30m"
|
|
||||||
ports:
|
|
||||||
- containerPort: 80
|
|
||||||
env:
|
|
||||||
- name: TZ
|
|
||||||
value: Europe/Berlin
|
|
||||||
- name: DEFAULT_SERVERS
|
|
||||||
value: "https://media-backend.kluster.moll.re"
|
|
@@ -1,12 +0,0 @@
|
|||||||
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: jellyfin-web
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: jellyfin-web
|
|
||||||
ports:
|
|
||||||
- protocol: TCP
|
|
||||||
port: 80
|
|
||||||
targetPort: 80
|
|
7
apps/minecraft/README.md
Normal file
7
apps/minecraft/README.md
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
## Sending a command
|
||||||
|
```
|
||||||
|
kubectl exec -it -n minecraft deploy/minecraft-server -- /bin/bash
|
||||||
|
mc-send-to-console /help
|
||||||
|
# or directly
|
||||||
|
kubectl exec -it -n minecraft deploy/minecraft-server -- mc-send-to-console /help
|
||||||
|
```
|
16
apps/minecraft/curseforge.sealedsecret.yaml
Normal file
16
apps/minecraft/curseforge.sealedsecret.yaml
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
---
|
||||||
|
apiVersion: bitnami.com/v1alpha1
|
||||||
|
kind: SealedSecret
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: curseforge-api
|
||||||
|
namespace: minecraft
|
||||||
|
spec:
|
||||||
|
encryptedData:
|
||||||
|
key: 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
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: curseforge-api
|
||||||
|
namespace: minecraft
|
||||||
|
type: Opaque
|
57
apps/minecraft/job.yaml
Normal file
57
apps/minecraft/job.yaml
Normal file
@@ -0,0 +1,57 @@
|
|||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: start-server
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
spec:
|
||||||
|
restartPolicy: OnFailure
|
||||||
|
containers:
|
||||||
|
- name: minecraft-server
|
||||||
|
image: minecraft
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
memory: "10000Mi"
|
||||||
|
cpu: "5"
|
||||||
|
requests:
|
||||||
|
memory: "1500Mi"
|
||||||
|
cpu: "500m"
|
||||||
|
ports:
|
||||||
|
- containerPort: 25565
|
||||||
|
env:
|
||||||
|
- name: EULA
|
||||||
|
value: "TRUE"
|
||||||
|
- name: TYPE
|
||||||
|
value: "AUTO_CURSEFORGE"
|
||||||
|
- name: CF_API_KEY
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: curseforge-api
|
||||||
|
key: key
|
||||||
|
- name: CF_PAGE_URL
|
||||||
|
value: "https://www.curseforge.com/minecraft/modpacks/vault-hunters-1-18-2/files/5413446"
|
||||||
|
- name: VERSION
|
||||||
|
value: "1.18.2"
|
||||||
|
- name: INIT_MEMORY
|
||||||
|
value: "1G"
|
||||||
|
- name: MAX_MEMORY
|
||||||
|
value: "8G"
|
||||||
|
- name: MOTD
|
||||||
|
value: "VaultHunters baby!"
|
||||||
|
- name: ENABLE_RCON
|
||||||
|
value: "false"
|
||||||
|
- name: CREATE_CONSOLE_IN_PIPE
|
||||||
|
value: "true"
|
||||||
|
- name: ONLINE_MODE
|
||||||
|
value: "true"
|
||||||
|
- name: ENABLE_AUTOSTOP
|
||||||
|
value: "true"
|
||||||
|
|
||||||
|
volumeMounts:
|
||||||
|
- name: minecraft-data
|
||||||
|
mountPath: /data
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
- name: minecraft-data
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: minecraft-data
|
17
apps/minecraft/kustomization.yaml
Normal file
17
apps/minecraft/kustomization.yaml
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
|
kind: Kustomization
|
||||||
|
|
||||||
|
namespace: minecraft
|
||||||
|
|
||||||
|
resources:
|
||||||
|
- namespace.yaml
|
||||||
|
- pvc.yaml
|
||||||
|
- job.yaml
|
||||||
|
- service.yaml
|
||||||
|
- curseforge.sealedsecret.yaml
|
||||||
|
|
||||||
|
|
||||||
|
images:
|
||||||
|
- name: minecraft
|
||||||
|
newName: itzg/minecraft-server
|
||||||
|
newTag: java21
|
@@ -1,13 +1,11 @@
|
|||||||
```
|
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
metadata:
|
metadata:
|
||||||
name: test-claim
|
name: minecraft-data
|
||||||
spec:
|
spec:
|
||||||
storageClassName: nfs-client
|
storageClassName: "nfs-client"
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteMany
|
- ReadWriteOnce
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: 1Mi
|
storage: 1Gi
|
||||||
```
|
|
12
apps/minecraft/service.yaml
Normal file
12
apps/minecraft/service.yaml
Normal file
@@ -0,0 +1,12 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: minecraft-server
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: minecraft-server
|
||||||
|
ports:
|
||||||
|
- port: 25565
|
||||||
|
targetPort: 25565
|
||||||
|
type: LoadBalancer
|
||||||
|
loadBalancerIP: 192.168.3.4
|
17
apps/monitoring/grafana-admin.sealedsecret.yaml
Normal file
17
apps/monitoring/grafana-admin.sealedsecret.yaml
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
---
|
||||||
|
apiVersion: bitnami.com/v1alpha1
|
||||||
|
kind: SealedSecret
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: grafana-admin-secret
|
||||||
|
namespace: monitoring
|
||||||
|
spec:
|
||||||
|
encryptedData:
|
||||||
|
password: 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
|
||||||
|
user: AgAdiOivMn0d+nYjYycMZz9QSiS/9QqwHPJQMHkE7/IOou+CJtBknlETNtdv84KZgBQTucufYqu3LR3djOBpdnQsYbIXDxPFgRZQ11pwu/sO2EGifDk218yyzzfZMvx1FL7JL4LI1rKoiHycZowCwsAjEtlICVOOYv1/Plki+6MHXiAGG4r/yUhugGx3VLLX+Poq8oaTeHndgSsFXJege8SfgYR4TsC7pQgsM1UQEFncGIhJYTD2ashmUxFJ+7CJjHqPR0lFRrZXmFvPwTYTCMT+tnSHnCFWtTht8cEi1NxA4kD/eKEX0rOol15EUZnFUws2WqWI634TbyGwZ7km/Yw4XoDxiQR4ar6ulkqb/djcc3cWDYE7PF1m1c+r3iog85S5CSfZ5EvdCHHrbPN9uO2gmoRQWiR5qI70YMxBSnkeLZWN05O1vUuopdXFDTafY7YskxLEdIGHGqFUpUrJZOvBB0zNBdHGgYxFzb5pNmMCC5LPlOuoKjV4yskh9Tgovz06aAvsPxn2WWx6NOJambeziKB5OmSKvPsFofViyGBekVAWSWtt9yJe6lu5OKpBEiA6xhGhQ4ZryTXu9wvVALuPSIwBFITv85sIxjJb80qhJ51wb12QgzLLcPby0HSanyBI1M4jfsXWpK8gIAbDNO+eD7z3PhD9Y/5hPqYKXZ37Geyq23xiyxG8XDj6cL+Ie6k8XipayI4=
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: grafana-admin-secret
|
||||||
|
namespace: monitoring
|
||||||
|
type: Opaque
|
@@ -1,5 +1,5 @@
|
|||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
metadata:
|
metadata:
|
||||||
name: grafana-ingress
|
name: grafana-ingress
|
||||||
spec:
|
spec:
|
||||||
|
@@ -1,25 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: grafana-nfs
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: "1Gi"
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /export/kluster/grafana
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: grafana-nfs
|
|
||||||
spec:
|
|
||||||
storageClassName: ""
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: "1Gi"
|
|
||||||
volumeName: grafana-nfs
|
|
@@ -1,4 +1,3 @@
|
|||||||
|
|
||||||
replicas: 1
|
replicas: 1
|
||||||
|
|
||||||
## Create a headless service for the deployment
|
## Create a headless service for the deployment
|
||||||
@@ -10,13 +9,6 @@ headlessService: false
|
|||||||
##
|
##
|
||||||
service:
|
service:
|
||||||
enabled: true
|
enabled: true
|
||||||
type: ClusterIP
|
|
||||||
port: 80
|
|
||||||
targetPort: 3000
|
|
||||||
# targetPort: 4181 To be used with a proxy extraContainer
|
|
||||||
annotations: {}
|
|
||||||
labels: {}
|
|
||||||
portName: service
|
|
||||||
|
|
||||||
serviceMonitor:
|
serviceMonitor:
|
||||||
## If true, a ServiceMonitor CRD is created for a prometheus operator
|
## If true, a ServiceMonitor CRD is created for a prometheus operator
|
||||||
@@ -24,42 +16,54 @@ serviceMonitor:
|
|||||||
##
|
##
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
|
|
||||||
ingress:
|
ingress:
|
||||||
enabled: false
|
enabled: false
|
||||||
persistence:
|
|
||||||
type: pvc
|
|
||||||
enabled: true
|
|
||||||
# storageClassName: default
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
size: 10Gi
|
|
||||||
# annotations: {}
|
|
||||||
finalizers:
|
|
||||||
- kubernetes.io/pvc-protection
|
|
||||||
# selectorLabels: {}
|
|
||||||
## Sub-directory of the PV to mount. Can be templated.
|
|
||||||
# subPath: ""
|
|
||||||
## Name of an existing PVC. Can be templated.
|
|
||||||
existingClaim: grafana-nfs
|
|
||||||
|
|
||||||
## If persistence is not enabled, this allows to mount the
|
# credentials
|
||||||
## local storage in-memory to improve performance
|
admin:
|
||||||
##
|
existingSecret: grafana-admin-secret
|
||||||
inMemory:
|
userKey: user
|
||||||
|
passwordKey: password
|
||||||
|
|
||||||
|
datasources:
|
||||||
|
datasources.yaml:
|
||||||
|
apiVersion: 1
|
||||||
|
datasources:
|
||||||
|
- name: Thanos
|
||||||
|
type: prometheus
|
||||||
|
url: http://thanos-querier.prometheus.svc:10902
|
||||||
|
isDefault: true
|
||||||
|
- name: Prometheus
|
||||||
|
type: prometheus
|
||||||
|
url: http://prometheus.prometheus.svc:9090
|
||||||
|
isDefault: false
|
||||||
|
|
||||||
|
dashboardProviders:
|
||||||
|
dashboardproviders.yaml:
|
||||||
|
apiVersion: 1
|
||||||
|
providers:
|
||||||
|
- name: 'default'
|
||||||
|
orgId: 1
|
||||||
|
folder: ''
|
||||||
|
type: file
|
||||||
|
disableDeletion: false
|
||||||
|
editable: true
|
||||||
|
options:
|
||||||
|
path: /var/lib/grafana/dashboards/default
|
||||||
|
## Reference to external ConfigMap per provider. Use provider name as key and ConfigMap name as value.
|
||||||
|
## A provider dashboards must be defined either by external ConfigMaps or in values.yaml, not in both.
|
||||||
|
## ConfigMap data example:
|
||||||
|
##
|
||||||
|
## data:
|
||||||
|
## example-dashboard.json: |
|
||||||
|
## RAW_JSON
|
||||||
|
##
|
||||||
|
dashboardsConfigMaps:
|
||||||
|
default: grafana-dashboards
|
||||||
|
|
||||||
|
|
||||||
|
grafana.ini:
|
||||||
|
wal: true
|
||||||
|
default_theme: dark
|
||||||
|
unified_alerting:
|
||||||
enabled: false
|
enabled: false
|
||||||
## The maximum usage on memory medium EmptyDir would be
|
|
||||||
## the minimum value between the SizeLimit specified
|
|
||||||
## here and the sum of memory limits of all containers in a pod
|
|
||||||
##
|
|
||||||
# sizeLimit: 300Mi
|
|
||||||
|
|
||||||
initChownData:
|
|
||||||
## If false, data ownership will not be reset at startup
|
|
||||||
## This allows the prometheus-server to be run with an arbitrary user
|
|
||||||
##
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
# Administrator credentials when not using an existing secret (see below)
|
|
||||||
adminUser: admin
|
|
||||||
# adminPassword: strongpassword
|
|
||||||
|
@@ -1,25 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: influxdb-nfs
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: "10Gi"
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /export/kluster/influxdb
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: influxdb-nfs
|
|
||||||
spec:
|
|
||||||
storageClassName: ""
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: "10Gi"
|
|
||||||
volumeName: influxdb-nfs
|
|
@@ -1,26 +0,0 @@
|
|||||||
## Create default user through docker entrypoint
|
|
||||||
## Defaults indicated below
|
|
||||||
##
|
|
||||||
adminUser:
|
|
||||||
organization: "influxdata"
|
|
||||||
bucket: "default"
|
|
||||||
user: "admin"
|
|
||||||
retention_policy: "0s"
|
|
||||||
## Leave empty to generate a random password and token.
|
|
||||||
## Or fill any of these values to use fixed values.
|
|
||||||
password: ""
|
|
||||||
token: ""
|
|
||||||
|
|
||||||
|
|
||||||
## Persist data to a persistent volume
|
|
||||||
##
|
|
||||||
persistence:
|
|
||||||
enabled: true
|
|
||||||
## If true will use an existing PVC instead of creating one
|
|
||||||
useExisting: true
|
|
||||||
## Name of existing PVC to be used in the influx deployment
|
|
||||||
name: influxdb-nfs
|
|
||||||
|
|
||||||
|
|
||||||
ingress:
|
|
||||||
enabled: false
|
|
@@ -5,30 +5,16 @@ namespace: monitoring
|
|||||||
|
|
||||||
resources:
|
resources:
|
||||||
- namespace.yaml
|
- namespace.yaml
|
||||||
- grafana.pvc.yaml
|
|
||||||
- influxdb.pvc.yaml
|
|
||||||
- grafana.ingress.yaml
|
- grafana.ingress.yaml
|
||||||
# prometheus-operator crds
|
- grafana-admin.sealedsecret.yaml
|
||||||
- https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.70.0/bundle.yaml
|
# grafana dashboards are provisioned from a git repository
|
||||||
- prometheus.yaml
|
# in the initial bootstrap of the app of apps, the git repo won't be available, so this sync will initially fail
|
||||||
- thanos-objstore-config.sealedsecret.yaml
|
- https://git.kluster.moll.re/remoll/grafana-dashboards//?timeout=10&ref=main
|
||||||
|
|
||||||
|
|
||||||
helmCharts:
|
helmCharts:
|
||||||
- releaseName: grafana
|
- releaseName: grafana
|
||||||
name: grafana
|
name: grafana
|
||||||
repo: https://grafana.github.io/helm-charts
|
repo: https://grafana.github.io/helm-charts
|
||||||
version: 7.3.0
|
version: 8.4.1
|
||||||
valuesFile: grafana.values.yaml
|
valuesFile: grafana.values.yaml
|
||||||
|
|
||||||
- releaseName: influxdb
|
|
||||||
name: influxdb2
|
|
||||||
repo: https://helm.influxdata.com/
|
|
||||||
version: 2.1.2
|
|
||||||
valuesFile: influxdb.values.yaml
|
|
||||||
|
|
||||||
- releaseName: telegraf-speedtest
|
|
||||||
name: telegraf
|
|
||||||
repo: https://helm.influxdata.com/
|
|
||||||
version: 1.8.39
|
|
||||||
valuesFile: telegraf-speedtest.values.yaml
|
|
||||||
|
@@ -1,52 +0,0 @@
|
|||||||
env:
|
|
||||||
- name: HOSTNAME
|
|
||||||
value: "telegraf-speedtest"
|
|
||||||
|
|
||||||
service:
|
|
||||||
enabled: false
|
|
||||||
rbac:
|
|
||||||
# Specifies whether RBAC resources should be created
|
|
||||||
create: false
|
|
||||||
|
|
||||||
serviceAccount:
|
|
||||||
# Specifies whether a ServiceAccount should be created
|
|
||||||
create: false
|
|
||||||
|
|
||||||
|
|
||||||
## Exposed telegraf configuration
|
|
||||||
## For full list of possible values see `/docs/all-config-values.yaml` and `/docs/all-config-values.toml`
|
|
||||||
## ref: https://docs.influxdata.com/telegraf/v1.1/administration/configuration/
|
|
||||||
config:
|
|
||||||
agent:
|
|
||||||
interval: "2h"
|
|
||||||
round_interval: true
|
|
||||||
metric_batch_size: 1000
|
|
||||||
metric_buffer_limit: 10000
|
|
||||||
collection_jitter: "0s"
|
|
||||||
flush_interval: "10s"
|
|
||||||
flush_jitter: "0s"
|
|
||||||
precision: ""
|
|
||||||
debug: false
|
|
||||||
quiet: false
|
|
||||||
logfile: ""
|
|
||||||
hostname: "$HOSTNAME"
|
|
||||||
omit_hostname: false
|
|
||||||
processors:
|
|
||||||
- enum:
|
|
||||||
mapping:
|
|
||||||
field: "status"
|
|
||||||
dest: "status_code"
|
|
||||||
value_mappings:
|
|
||||||
healthy: 1
|
|
||||||
problem: 2
|
|
||||||
critical: 3
|
|
||||||
outputs:
|
|
||||||
- influxdb_v2:
|
|
||||||
urls:
|
|
||||||
- "http://influxdb-influxdb2.monitoring:80"
|
|
||||||
token: We64mk4L4bqYCL77x3fAUSYfOse9Kktyf2eBLyrryG9c3-y8PQFiKPIh9EvSWuq78QSQz6hUcsm7XSFR2Zj1MA==
|
|
||||||
organization: "influxdata"
|
|
||||||
bucket: "homeassistant"
|
|
||||||
inputs:
|
|
||||||
- internet_speed:
|
|
||||||
enable_file_download: false
|
|
@@ -1,16 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: bitnami.com/v1alpha1
|
|
||||||
kind: SealedSecret
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: thanos-objstore-config
|
|
||||||
namespace: monitoring
|
|
||||||
spec:
|
|
||||||
encryptedData:
|
|
||||||
thanos.yaml: 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
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: thanos-objstore-config
|
|
||||||
namespace: monitoring
|
|
||||||
type: Opaque
|
|
@@ -1,5 +0,0 @@
|
|||||||
### Runninf `occ` commands:
|
|
||||||
|
|
||||||
```
|
|
||||||
su -s /bin/bash www-data -c "php occ user:list"
|
|
||||||
```
|
|
@@ -1,16 +0,0 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
|
||||||
kind: IngressRoute
|
|
||||||
metadata:
|
|
||||||
name: nextcloud-ingressroute
|
|
||||||
|
|
||||||
spec:
|
|
||||||
entryPoints:
|
|
||||||
- websecure
|
|
||||||
routes:
|
|
||||||
- match: Host(`nextcloud.kluster.moll.re`)
|
|
||||||
kind: Rule
|
|
||||||
services:
|
|
||||||
- name: nextcloud
|
|
||||||
port: 8080
|
|
||||||
tls:
|
|
||||||
certResolver: default-tls
|
|
@@ -1,16 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
resources:
|
|
||||||
- namespace.yaml
|
|
||||||
- ingress.yaml
|
|
||||||
- pvc.yaml
|
|
||||||
- postgres.sealedsecret.yaml
|
|
||||||
|
|
||||||
namespace: nextcloud
|
|
||||||
|
|
||||||
helmCharts:
|
|
||||||
- name: nextcloud
|
|
||||||
releaseName: nextcloud
|
|
||||||
version: 4.5.5
|
|
||||||
valuesFile: values.yaml
|
|
||||||
repo: https://nextcloud.github.io/helm/
|
|
@@ -1,22 +0,0 @@
|
|||||||
{
|
|
||||||
"kind": "SealedSecret",
|
|
||||||
"apiVersion": "bitnami.com/v1alpha1",
|
|
||||||
"metadata": {
|
|
||||||
"name": "postgres-password",
|
|
||||||
"namespace": "nextcloud",
|
|
||||||
"creationTimestamp": null
|
|
||||||
},
|
|
||||||
"spec": {
|
|
||||||
"template": {
|
|
||||||
"metadata": {
|
|
||||||
"name": "postgres-password",
|
|
||||||
"namespace": "nextcloud",
|
|
||||||
"creationTimestamp": null
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"encryptedData": {
|
|
||||||
"password": "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",
|
|
||||||
"username": "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"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
@@ -1,25 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: nextcloud-nfs
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: "150Gi"
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /kluster/nextcloud
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: nextcloud-nfs
|
|
||||||
spec:
|
|
||||||
storageClassName: ""
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: "150Gi"
|
|
||||||
volumeName: nextcloud-nfs
|
|
@@ -1,17 +0,0 @@
|
|||||||
## Running occ commands
|
|
||||||
|
|
||||||
Sometimes you need to run a command on the Nextcloud container directly. You can do that by running commands as the user www-data via the kubectl exec command.
|
|
||||||
```
|
|
||||||
# $NEXTCLOUD_POD should be the name of *your* nextcloud pod :)
|
|
||||||
kubectl exec $NEXTCLOUD_POD -- su -s /bin/sh www-data -c "php occ myocccomand"
|
|
||||||
```
|
|
||||||
Here are some examples below.
|
|
||||||
Putting Nextcloud into maintanence mode
|
|
||||||
|
|
||||||
Some admin actions require you to put your Nextcloud instance into
|
|
||||||
|
|
||||||
(e.g. backups):
|
|
||||||
```
|
|
||||||
# $NEXTCLOUD_POD should be the name of *your* nextcloud pod :)
|
|
||||||
kubectl exec $NEXTCLOUD_POD -- su -s /bin/sh www-data -c "php occ maintenance:mode --on"
|
|
||||||
```
|
|
@@ -1,171 +0,0 @@
|
|||||||
## Official nextcloud image version
|
|
||||||
## ref: https://hub.docker.com/r/library/nextcloud/tags/
|
|
||||||
|
|
||||||
image:
|
|
||||||
tag: "28"
|
|
||||||
|
|
||||||
ingress:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
nextcloud:
|
|
||||||
host: nextcloud.kluster.moll.re
|
|
||||||
username: admin
|
|
||||||
password: changeme
|
|
||||||
## Use an existing secret
|
|
||||||
existingSecret:
|
|
||||||
enabled: false
|
|
||||||
update: 0
|
|
||||||
# If web server is not binding default port, you can define it
|
|
||||||
# containerPort: 8080
|
|
||||||
datadir: /var/www/html/data
|
|
||||||
persistence:
|
|
||||||
subPath:
|
|
||||||
mail:
|
|
||||||
enabled: false
|
|
||||||
# PHP Configuration files
|
|
||||||
# Will be injected in /usr/local/etc/php/conf.d for apache image and in /usr/local/etc/php-fpm.d when nginx.enabled: true
|
|
||||||
phpConfigs: {}
|
|
||||||
# Default config files
|
|
||||||
# IMPORTANT: Will be used only if you put extra configs, otherwise default will come from nextcloud itself
|
|
||||||
# Default confgurations can be found here: https://github.com/nextcloud/docker/tree/master/16.0/apache/config
|
|
||||||
defaultConfigs:
|
|
||||||
# To protect /var/www/html/config
|
|
||||||
.htaccess: true
|
|
||||||
# Redis default configuration
|
|
||||||
redis.config.php: true
|
|
||||||
# Apache configuration for rewrite urls
|
|
||||||
apache-pretty-urls.config.php: true
|
|
||||||
# Define APCu as local cache
|
|
||||||
apcu.config.php: true
|
|
||||||
# Apps directory configs
|
|
||||||
apps.config.php: true
|
|
||||||
# Used for auto configure database
|
|
||||||
autoconfig.php: true
|
|
||||||
# SMTP default configuration
|
|
||||||
smtp.config.php: true
|
|
||||||
# Extra config files created in /var/www/html/config/
|
|
||||||
# ref: https://docs.nextcloud.com/server/15/admin_manual/configuration_server/config_sample_php_parameters.html#multiple-config-php-file
|
|
||||||
configs: {}
|
|
||||||
|
|
||||||
# For example, to use S3 as primary storage
|
|
||||||
# ref: https://docs.nextcloud.com/server/13/admin_manual/configuration_files/primary_storage.html#simple-storage-service-s3
|
|
||||||
#
|
|
||||||
# configs:
|
|
||||||
# s3.config.php: |-
|
|
||||||
# <?php
|
|
||||||
# $CONFIG = array (
|
|
||||||
# 'objectstore' => array(
|
|
||||||
# 'class' => '\\OC\\Files\\ObjectStore\\S3',
|
|
||||||
# 'arguments' => array(
|
|
||||||
# 'bucket' => 'my-bucket',
|
|
||||||
# 'autocreate' => true,
|
|
||||||
# 'key' => 'xxx',
|
|
||||||
# 'secret' => 'xxx',
|
|
||||||
# 'region' => 'us-east-1',
|
|
||||||
# 'use_ssl' => true
|
|
||||||
# )
|
|
||||||
# )
|
|
||||||
# );
|
|
||||||
|
|
||||||
nginx:
|
|
||||||
## You need to set an fpm version of the image for nextcloud if you want to use nginx!
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
internalDatabase:
|
|
||||||
enabled: true
|
|
||||||
name: nextcloud
|
|
||||||
|
|
||||||
##
|
|
||||||
## External database configuration
|
|
||||||
##
|
|
||||||
externalDatabase:
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
## Supported database engines: mysql or postgresql
|
|
||||||
type: postgresql
|
|
||||||
|
|
||||||
## Database host
|
|
||||||
host: postgres-postgresql.postgres
|
|
||||||
|
|
||||||
## Database user
|
|
||||||
# user: nextcloud
|
|
||||||
|
|
||||||
# ## Database password
|
|
||||||
# password: test
|
|
||||||
|
|
||||||
## Database name
|
|
||||||
database: nextcloud
|
|
||||||
|
|
||||||
## Use a existing secret
|
|
||||||
existingSecret:
|
|
||||||
enabled: true
|
|
||||||
secretName: postgres-password
|
|
||||||
usernameKey: username
|
|
||||||
passwordKey: password
|
|
||||||
|
|
||||||
##
|
|
||||||
## MariaDB chart configuration
|
|
||||||
##
|
|
||||||
mariadb:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
postgresql:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
redis:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
## Cronjob to execute Nextcloud background tasks
|
|
||||||
## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#webcron
|
|
||||||
##
|
|
||||||
cronjob:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
## Enable persistence using Persistent Volume Claims
|
|
||||||
## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
|
|
||||||
##
|
|
||||||
persistence:
|
|
||||||
# Nextcloud Data (/var/www/html)
|
|
||||||
enabled: true
|
|
||||||
annotations: {}
|
|
||||||
|
|
||||||
## If defined, PVC must be created manually before volume will be bound
|
|
||||||
existingClaim: nextcloud-nfs
|
|
||||||
|
|
||||||
## Use an additional pvc for the data directory rather than a subpath of the default PVC
|
|
||||||
## Useful to store data on a different storageClass (e.g. on slower disks)
|
|
||||||
nextcloudData:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
resources:
|
|
||||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
||||||
# choice for the user. This also increases chances charts run on environments with little
|
|
||||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
||||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
||||||
limits:
|
|
||||||
cpu: 2000m
|
|
||||||
memory: 2Gi
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 128Mi
|
|
||||||
|
|
||||||
livenessProbe:
|
|
||||||
enabled: true
|
|
||||||
# disable when upgrading from a previous chart version
|
|
||||||
|
|
||||||
## Enable pod autoscaling using HorizontalPodAutoscaler
|
|
||||||
## ref: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
|
|
||||||
##
|
|
||||||
hpa:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
## Prometheus Exporter / Metrics
|
|
||||||
##
|
|
||||||
metrics:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
|
|
||||||
rbac:
|
|
||||||
enabled: false
|
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: websocket
|
name: websocket
|
||||||
@@ -9,7 +9,7 @@ spec:
|
|||||||
# enable websockets
|
# enable websockets
|
||||||
Upgrade: "websocket"
|
Upgrade: "websocket"
|
||||||
---
|
---
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: ntfy-ingressroute
|
name: ntfy-ingressroute
|
||||||
|
@@ -13,4 +13,4 @@ resources:
|
|||||||
images:
|
images:
|
||||||
- name: binwiederhier/ntfy
|
- name: binwiederhier/ntfy
|
||||||
newName: binwiederhier/ntfy
|
newName: binwiederhier/ntfy
|
||||||
newTag: v2.8.0
|
newTag: v2.11.0
|
||||||
|
@@ -34,4 +34,4 @@ spec:
|
|||||||
volumes:
|
volumes:
|
||||||
- name: mealie-data
|
- name: mealie-data
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: mealie-data
|
claimName: mealie
|
||||||
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: mealie-ingressroute
|
name: mealie-ingressroute
|
||||||
|
@@ -12,5 +12,5 @@ resources:
|
|||||||
|
|
||||||
images:
|
images:
|
||||||
- name: mealie
|
- name: mealie
|
||||||
newTag: v1.2.0
|
newTag: v1.11.0
|
||||||
newName: ghcr.io/mealie-recipes/mealie
|
newName: ghcr.io/mealie-recipes/mealie
|
@@ -1,12 +1,12 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: mealie-data
|
name: mealie
|
||||||
spec:
|
spec:
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: 1Gi
|
storage: 5Gi
|
||||||
volumeMode: Filesystem
|
volumeMode: Filesystem
|
||||||
storageClassName: nfs-client
|
storageClassName: "nfs-client"
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
|
@@ -18,9 +18,9 @@ spec:
|
|||||||
ports:
|
ports:
|
||||||
- containerPort: 7070
|
- containerPort: 7070
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: rss-data
|
- name: data
|
||||||
mountPath: /data
|
mountPath: /data
|
||||||
volumes:
|
volumes:
|
||||||
- name: rss-data
|
- name: data
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: rss-claim
|
claimName: data
|
||||||
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: rss-ingressroute
|
name: rss-ingressroute
|
||||||
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Namespace
|
kind: Namespace
|
||||||
metadata:
|
metadata:
|
||||||
name: placeholder
|
name: placeholder
|
||||||
|
@@ -1,9 +1,9 @@
|
|||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
metadata:
|
metadata:
|
||||||
name: rss-claim
|
name: data
|
||||||
spec:
|
spec:
|
||||||
storageClassName: nfs-client
|
storageClassName: "nfs-client"
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
resources:
|
resources:
|
||||||
|
@@ -1,35 +0,0 @@
|
|||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: syncthing
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: syncthing
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: syncthing
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: syncthing
|
|
||||||
image: syncthing
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
memory: "256Mi"
|
|
||||||
cpu: "500m"
|
|
||||||
ports:
|
|
||||||
- containerPort: 8384
|
|
||||||
protocol: TCP
|
|
||||||
name: syncthing-web
|
|
||||||
- containerPort: 22000
|
|
||||||
protocol: TCP
|
|
||||||
- containerPort: 22000
|
|
||||||
protocol: UDP
|
|
||||||
volumeMounts:
|
|
||||||
- name: persistence
|
|
||||||
mountPath: /var/syncthing
|
|
||||||
volumes:
|
|
||||||
- name: persistence
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: syncthing-claim
|
|
@@ -1,16 +0,0 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
|
||||||
kind: IngressRoute
|
|
||||||
metadata:
|
|
||||||
name: rss-ingressroute
|
|
||||||
|
|
||||||
spec:
|
|
||||||
entryPoints:
|
|
||||||
- websecure
|
|
||||||
routes:
|
|
||||||
- match: Host(`syncthing.kluster.moll.re`)
|
|
||||||
kind: Rule
|
|
||||||
services:
|
|
||||||
- name: syncthing-web
|
|
||||||
port: 8384
|
|
||||||
tls:
|
|
||||||
certResolver: default-tls
|
|
@@ -1,18 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
|
|
||||||
namespace: syncthing
|
|
||||||
|
|
||||||
resources:
|
|
||||||
- namespace.yaml
|
|
||||||
- pvc.yaml
|
|
||||||
- deployment.yaml
|
|
||||||
- service.yaml
|
|
||||||
- ingress.yaml
|
|
||||||
- servicemonitor.yaml
|
|
||||||
- syncthing-api.sealedsecret.yaml
|
|
||||||
|
|
||||||
images:
|
|
||||||
- name: syncthing
|
|
||||||
newName: syncthing/syncthing
|
|
||||||
newTag: "1.27"
|
|
@@ -1,46 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: syncthing-web
|
|
||||||
labels:
|
|
||||||
app: syncthing
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: syncthing
|
|
||||||
type: ClusterIP
|
|
||||||
ports:
|
|
||||||
- port: 8384
|
|
||||||
targetPort: 8384
|
|
||||||
name: syncthing-web
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: syncthing-listen
|
|
||||||
annotations:
|
|
||||||
metallb.universe.tf/allow-shared-ip: syncthing-service
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: syncthing
|
|
||||||
type: LoadBalancer
|
|
||||||
LoadBalancerIP: 192.168.3.4
|
|
||||||
ports:
|
|
||||||
- port: 22000
|
|
||||||
targetPort: 22000
|
|
||||||
protocol: TCP
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: syncthing-discover
|
|
||||||
annotations:
|
|
||||||
metallb.universe.tf/allow-shared-ip: syncthing-service
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: syncthing
|
|
||||||
type: LoadBalancer
|
|
||||||
LoadBalancerIP: 192.168.3.4
|
|
||||||
ports:
|
|
||||||
- port: 22000
|
|
||||||
targetPort: 22000
|
|
||||||
protocol: UDP
|
|
@@ -1,17 +0,0 @@
|
|||||||
apiVersion: monitoring.coreos.com/v1
|
|
||||||
kind: ServiceMonitor
|
|
||||||
metadata:
|
|
||||||
name: syncthing-servicemonitor
|
|
||||||
labels:
|
|
||||||
app: syncthing
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: syncthing
|
|
||||||
endpoints:
|
|
||||||
- port: syncthing-web
|
|
||||||
path: /metrics
|
|
||||||
bearerTokenSecret:
|
|
||||||
name: syncthing-api
|
|
||||||
key: token
|
|
||||||
namespace: syncthing
|
|
@@ -1,16 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: bitnami.com/v1alpha1
|
|
||||||
kind: SealedSecret
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: syncthing-api
|
|
||||||
namespace: syncthing
|
|
||||||
spec:
|
|
||||||
encryptedData:
|
|
||||||
token: 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
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: syncthing-api
|
|
||||||
namespace: syncthing
|
|
||||||
type: Opaque
|
|
6
apps/todos/README.md
Normal file
6
apps/todos/README.md
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
### Adding a user
|
||||||
|
```bash
|
||||||
|
kubectl exec -it -n todos deployments/todos-vikunja -- /app/vikunja/vikunja user create -u <username> -e "<user-email>"
|
||||||
|
```
|
||||||
|
|
||||||
|
Password will be prompted.
|
21
apps/todos/ingress.yaml
Normal file
21
apps/todos/ingress.yaml
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
apiVersion: traefik.io/v1alpha1
|
||||||
|
kind: IngressRoute
|
||||||
|
metadata:
|
||||||
|
name: todos-ingressroute
|
||||||
|
|
||||||
|
spec:
|
||||||
|
entryPoints:
|
||||||
|
- websecure
|
||||||
|
routes:
|
||||||
|
- match: Host(`todos.kluster.moll.re`) && PathPrefix(`/api/v1`)
|
||||||
|
kind: Rule
|
||||||
|
services:
|
||||||
|
- name: todos-api
|
||||||
|
port: 3456
|
||||||
|
- match: Host(`todos.kluster.moll.re`) && PathPrefix(`/`)
|
||||||
|
kind: Rule
|
||||||
|
services:
|
||||||
|
- name: todos-frontend
|
||||||
|
port: 80
|
||||||
|
tls:
|
||||||
|
certResolver: default-tls
|
18
apps/todos/kustomization.yaml
Normal file
18
apps/todos/kustomization.yaml
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
|
kind: Kustomization
|
||||||
|
|
||||||
|
namespace: todos
|
||||||
|
|
||||||
|
resources:
|
||||||
|
- namespace.yaml
|
||||||
|
- pvc.yaml
|
||||||
|
- ingress.yaml
|
||||||
|
|
||||||
|
|
||||||
|
# helmCharts:
|
||||||
|
# - name: vikunja
|
||||||
|
# version: 0.1.5
|
||||||
|
# repo: https://charts.oecis.io
|
||||||
|
# valuesFile: values.yaml
|
||||||
|
# releaseName: todos
|
||||||
|
# managed by argocd directly
|
4
apps/todos/namespace.yaml
Normal file
4
apps/todos/namespace.yaml
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: placeholder
|
12
apps/todos/pvc.yaml
Normal file
12
apps/todos/pvc.yaml
Normal file
@@ -0,0 +1,12 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: data
|
||||||
|
spec:
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 5Gi
|
||||||
|
volumeMode: Filesystem
|
||||||
|
storageClassName: "nfs-client"
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
51
apps/todos/values.yaml
Normal file
51
apps/todos/values.yaml
Normal file
@@ -0,0 +1,51 @@
|
|||||||
|
######################
|
||||||
|
# VIKUNJA COMPONENTS #
|
||||||
|
######################
|
||||||
|
# You can find the default values that this `values.yaml` overrides, in the comment at the top of this file.
|
||||||
|
api:
|
||||||
|
enabled: true
|
||||||
|
image:
|
||||||
|
tag: 0.22.1
|
||||||
|
persistence:
|
||||||
|
# This is your Vikunja data will live, you can either let
|
||||||
|
# the chart create a new PVC for you or provide an existing one.
|
||||||
|
data:
|
||||||
|
enabled: true
|
||||||
|
existingClaim: data
|
||||||
|
accessMode: ReadWriteOnce
|
||||||
|
size: 10Gi
|
||||||
|
mountPath: /app/vikunja/files
|
||||||
|
|
||||||
|
ingress:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
configMaps:
|
||||||
|
# The configuration for Vikunja's api.
|
||||||
|
# https://vikunja.io/docs/config-options/
|
||||||
|
config:
|
||||||
|
enabled: true
|
||||||
|
data:
|
||||||
|
config.yml: |
|
||||||
|
service:
|
||||||
|
frontendUrl: https://todos.kluster.moll.re
|
||||||
|
database:
|
||||||
|
type: sqlite
|
||||||
|
path: /app/vikunja/files/vikunja.db
|
||||||
|
registration: false
|
||||||
|
env:
|
||||||
|
|
||||||
|
frontend:
|
||||||
|
enabled: true
|
||||||
|
image:
|
||||||
|
tag: 0.22.1
|
||||||
|
ingress:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
postgresql:
|
||||||
|
enabled: false
|
||||||
|
redis:
|
||||||
|
enabled: false
|
||||||
|
typesense:
|
||||||
|
enabled: false
|
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
namespace: whoami
|
namespace: whoami
|
||||||
|
@@ -12,7 +12,9 @@ spec:
|
|||||||
destination:
|
destination:
|
||||||
server: https://kubernetes.default.svc
|
server: https://kubernetes.default.svc
|
||||||
namespace: argocd
|
namespace: argocd
|
||||||
syncPolicy:
|
# syncPolicy:
|
||||||
automated:
|
# automated:
|
||||||
prune: true
|
# prune: true
|
||||||
# selfHeal: true
|
# selfHeal: false
|
||||||
|
# DO NOT AUTO SYNC THE APP OF APPS.
|
||||||
|
# all other apps are auto-synced, but adding new apps should be done manually.
|
@@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: argocd-ingressroute
|
name: argocd-ingressroute
|
||||||
|
15
infrastructure/backup/README.md
Normal file
15
infrastructure/backup/README.md
Normal file
@@ -0,0 +1,15 @@
|
|||||||
|
# How to restore
|
||||||
|
|
||||||
|
1. Port forward the rest api for gcloud
|
||||||
|
```bash
|
||||||
|
kubectl port-forward -n backup service/rclone-gcloud 8000
|
||||||
|
```
|
||||||
|
|
||||||
|
2. Load the snapshots locally
|
||||||
|
```bash
|
||||||
|
restic -r rest:http://127.0.0.1:8000/kluster mount /mnt/restic
|
||||||
|
```
|
||||||
|
(The password is in a secret)
|
||||||
|
|
||||||
|
3. Copy relevant files to the correct location on the NAS
|
||||||
|
|
@@ -4,7 +4,7 @@ kind: Kustomization
|
|||||||
namespace: backup
|
namespace: backup
|
||||||
# nameSuffix: -backup
|
# nameSuffix: -backup
|
||||||
resources:
|
resources:
|
||||||
- ../../base
|
- ../../cronjobs-base
|
||||||
# - ./restic-commands.yaml
|
# - ./restic-commands.yaml
|
||||||
|
|
||||||
|
|
@@ -3,7 +3,7 @@ kind: Kustomization
|
|||||||
|
|
||||||
namespace: backup
|
namespace: backup
|
||||||
resources:
|
resources:
|
||||||
- ../../base
|
- ../../cronjobs-base
|
||||||
|
|
||||||
|
|
||||||
# patch the cronjob args field:
|
# patch the cronjob args field:
|
@@ -1,6 +1,14 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
|
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
|
|
||||||
|
namespace: backup
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
- rclone-config.sealedsecret.yaml
|
- namespace.yaml
|
||||||
|
- pvc.yaml
|
||||||
- restic-password.sealedsecret.yaml
|
- restic-password.sealedsecret.yaml
|
||||||
- pvc.yaml
|
- rclone-config.sealedsecret.yaml
|
||||||
|
- rclone-gcloud.deployment.yaml
|
||||||
|
- cronjobs-overlays/prune/
|
||||||
|
- cronjobs-overlays/backup/
|
4
infrastructure/backup/namespace.yaml
Normal file
4
infrastructure/backup/namespace.yaml
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: placeholder
|
@@ -1,3 +1,16 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolume
|
||||||
|
metadata:
|
||||||
|
name: pg-backup-data
|
||||||
|
spec:
|
||||||
|
capacity:
|
||||||
|
storage: "50Gi"
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
||||||
|
nfs:
|
||||||
|
path: /kluster/pg-backup
|
||||||
|
server: 192.168.1.157
|
||||||
|
---
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
|
|
||||||
@@ -5,9 +18,10 @@ metadata:
|
|||||||
name: postgres-backup-claim
|
name: postgres-backup-claim
|
||||||
|
|
||||||
spec:
|
spec:
|
||||||
storageClassName: nfs-client
|
storageClassName: ""
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: 10Gi
|
storage: 10Gi
|
||||||
|
volumeName: pg-backup-data
|
||||||
|
@@ -11,8 +11,8 @@ resources:
|
|||||||
images:
|
images:
|
||||||
- name: octodns
|
- name: octodns
|
||||||
newName: octodns/octodns # has all plugins
|
newName: octodns/octodns # has all plugins
|
||||||
newTag: "2024.02"
|
newTag: "2024.06"
|
||||||
|
|
||||||
- name: git
|
- name: git
|
||||||
newName: alpine/git
|
newName: alpine/git
|
||||||
newTag: "2.43.0"
|
newTag: "v2.45.2"
|
Submodule infrastructure/external-dns/octodns deleted from ba74e801c1
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user