This commit is contained in:
parent
094551e019
commit
be094a3ccb
23
_apps/miniflux.yaml
Normal file
23
_apps/miniflux.yaml
Normal file
|
@ -0,0 +1,23 @@
|
||||||
|
apiVersion: argoproj.io/v1alpha1
|
||||||
|
kind: Application
|
||||||
|
metadata:
|
||||||
|
name: miniflux
|
||||||
|
namespace: argocd
|
||||||
|
finalizers:
|
||||||
|
- resources-finalizer.argocd.argoproj.io
|
||||||
|
spec:
|
||||||
|
destination:
|
||||||
|
namespace: miniflux
|
||||||
|
server: https://kubernetes.default.svc
|
||||||
|
project: apps
|
||||||
|
source:
|
||||||
|
path: miniflux
|
||||||
|
repoURL: https://git.tbrnt.ch/tobru/gitops-tbrnt.git
|
||||||
|
targetRevision: HEAD
|
||||||
|
directory:
|
||||||
|
recurse: true
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: miniflux
|
37
miniflux/app/deployment.yaml
Normal file
37
miniflux/app/deployment.yaml
Normal file
|
@ -0,0 +1,37 @@
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: miniflux
|
||||||
|
name: miniflux
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: minflux
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: minflux
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- image: docker.io/miniflux/miniflux:2.0.32
|
||||||
|
name: minflux
|
||||||
|
- secretRef:
|
||||||
|
name: miniflux
|
||||||
|
ports:
|
||||||
|
- containerPort: 8080
|
||||||
|
livenessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /
|
||||||
|
port: 8080
|
||||||
|
initialDelaySeconds: 15
|
||||||
|
periodSeconds: 10
|
||||||
|
readinessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /
|
||||||
|
port: 8080
|
||||||
|
initialDelaySeconds: 15
|
||||||
|
periodSeconds: 10
|
24
miniflux/app/ingress.yaml
Normal file
24
miniflux/app/ingress.yaml
Normal file
|
@ -0,0 +1,24 @@
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||||
|
ingress.kubernetes.io/ssl-redirect: "true"
|
||||||
|
name: miniflux
|
||||||
|
spec:
|
||||||
|
rules:
|
||||||
|
- host: miniflux.tbrnt.ch
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: miniflux
|
||||||
|
port:
|
||||||
|
number: 8080
|
||||||
|
pathType: Exact
|
||||||
|
tls:
|
||||||
|
- hosts:
|
||||||
|
- miniflux.tbrnt.ch
|
||||||
|
secretName: miniflux-tbrnt-ch-cert
|
||||||
|
|
15
miniflux/app/service.yaml
Normal file
15
miniflux/app/service.yaml
Normal file
|
@ -0,0 +1,15 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: miniflux
|
||||||
|
name: miniflux
|
||||||
|
spec:
|
||||||
|
ports:
|
||||||
|
- name: "8080"
|
||||||
|
port: 8080
|
||||||
|
protocol: TCP
|
||||||
|
targetPort: 8080
|
||||||
|
selector:
|
||||||
|
app: miniflux
|
||||||
|
type: ClusterIP
|
15
miniflux/postgres/service.yaml
Normal file
15
miniflux/postgres/service.yaml
Normal file
|
@ -0,0 +1,15 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: postgres
|
||||||
|
name: postgres
|
||||||
|
spec:
|
||||||
|
ports:
|
||||||
|
- name: "5432"
|
||||||
|
port: 5432
|
||||||
|
protocol: TCP
|
||||||
|
targetPort: 5432
|
||||||
|
selector:
|
||||||
|
app: postgres
|
||||||
|
type: ClusterIP
|
65
miniflux/postgres/statefulset.yaml
Normal file
65
miniflux/postgres/statefulset.yaml
Normal file
|
@ -0,0 +1,65 @@
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: StatefulSet
|
||||||
|
metadata:
|
||||||
|
name: postgres
|
||||||
|
spec:
|
||||||
|
updateStrategy:
|
||||||
|
type: RollingUpdate
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: postgres
|
||||||
|
serviceName: postgres
|
||||||
|
replicas: 1
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: postgres
|
||||||
|
annotations:
|
||||||
|
k8up.syn.tools/backupcommand: /bin/bash -c 'PGPASSWORD=${POSTGRES_PASSWORD} pg_dump -U ${POSTGRES_USER} -Fc ${POSTGRES_DB}'
|
||||||
|
spec:
|
||||||
|
terminationGracePeriodSeconds: 10
|
||||||
|
containers:
|
||||||
|
- name: postgres
|
||||||
|
image: docker.io/postgres:13.4
|
||||||
|
imagePullPolicy: IfNotPresent
|
||||||
|
ports:
|
||||||
|
- name: postgres
|
||||||
|
containerPort: 5432
|
||||||
|
protocol: TCP
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
|
env:
|
||||||
|
- name: POSTGRES_USER
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: miniflux
|
||||||
|
key: DB_USER
|
||||||
|
- name: POSTGRES_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: miniflux
|
||||||
|
key: DB_PASS
|
||||||
|
- name: POSTGRES_DB
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: miniflux
|
||||||
|
key: DB_NAME
|
||||||
|
- name: PGUSER
|
||||||
|
value: postgres
|
||||||
|
- name: PGDATA
|
||||||
|
value: /var/lib/postgresql/data/pgdata
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /var/lib/postgresql/data/pgdata
|
||||||
|
name: postgres
|
||||||
|
subPath: postgres-db
|
||||||
|
volumeClaimTemplates:
|
||||||
|
- metadata:
|
||||||
|
name: postgres
|
||||||
|
spec:
|
||||||
|
accessModes: ["ReadWriteOnce"]
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 1Gi
|
||||||
|
|
20
miniflux/secret.yaml
Normal file
20
miniflux/secret.yaml
Normal file
|
@ -0,0 +1,20 @@
|
||||||
|
apiVersion: bitnami.com/v1alpha1
|
||||||
|
kind: SealedSecret
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: miniflux
|
||||||
|
namespace: miniflux
|
||||||
|
spec:
|
||||||
|
encryptedData:
|
||||||
|
DATABASE_URL: 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
|
||||||
|
DB_NAME: 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
|
||||||
|
DB_PASS: AgBes17m5mxTD42oi+uaugg/7zaknDBJBy/37QjnpiZ1t6NQgzLvlfI8rw0eOP0DF+aKfxGoajRO/vgVPVAHZuqu7hEmScuUmpRg63NJV6TmZQdJFpUOlwxJDzS5kTYQ2AF1h/JcAJaEabcWridP7jin1o0RnzKLBeHdDjHGZsbdlvBv9/jtWd6xTcUIGvRg8noOQUcjbF5jomf4YMJcfF0HKmPuuwv36rZMGBncN382ExcJxFiStDu/QCz9bpWY8Ns1kpmZrSB8fAg1uqoFhgZCTmtn0HSyfvOGMIbeu9uoQjCUE5NH6tCpFYvgFEmjCCmqo9e/ZqTjxCzIa51GOktdjMuOMalApYnmg8+8VmRxjsaR6dAEMvWvELwrhGbzcMLOnPD2Nm5sOCrQDmnbcEtsjccrs2U0rwA5Er/q9ohMl5854nMRSpLn1xf6CvITSNgzLVHpQTmCSec0QMVk5Is61DjwWVkPYu45JTP1C4TMOberm35dwqR3tuFuz01w4JQ92tsri9u5yv1wVlLtx9unaLgSf68td2UgEtSyFOCCY+3jLUXfAfZxNMmbseC+vWuNHJ8JG/gDmzbsInwvOyJa+MgzAM+lwy4g9ULyNTT8HpR5akeluzQda2JNP2Dc1dBWOMqAFK09049C46MHvd+a5nzPMM1QQrZCUgK8mQGKcamfV8KHwtPtMidmNY8au+kcivxtl71CDYKODIlORfJ1ubYOeMPIVCRnRvsep0ryHg==
|
||||||
|
DB_USER: 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
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: miniflux
|
||||||
|
namespace: miniflux
|
||||||
|
type: Opaque
|
||||||
|
status: {}
|
||||||
|
|
Reference in a new issue