enable maxmind geoip

ipapi/deployment.yaml

@@ -30,10 +30,27 @@ spec:
         args:
         - -H
         - X-Forwarded-For
+        - -f
+        - /data/geoip/GeoLite2-Country.mmdb
+        - -c
+        - /data/geoip/GeoLite2-City.mmdb
+        - -a
+        - /data/geoip/GeoLite2-ASN.mmdb
+        - -r
+        - -p
+        - -C
+        - "1000"
         ports:
         - containerPort: 8080
           name: http
           protocol: TCP
+        volumeMounts:
+        - name: geoip
+          mountPath: /data/geoip
+      volumes:
+      - name: geoip
+        persistentVolumeClaim:
+          claimName: ipapi-geodb
       dnsPolicy: ClusterFirst
       restartPolicy: Always
       securityContext: {}

ipapi/job-db-init.yaml

@@ -0,0 +1,37 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: geoip-db-init
+spec:
+  template:
+    metadata:
+      creationTimestamp: null
+    spec:
+      containers:
+      - command:
+        - sh
+        - -c
+        - |
+          wget -O geoip.tar.gz "https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-Country&license_key=${API_KEY}&suffix=tar.gz" && \
+          tar -C /tmp -xvzf geoip.tar.gz && rm geoip.tar.gz && \
+          wget -O geoip.tar.gz "https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-City&license_key=${API_KEY}&suffix=tar.gz" && \
+          tar -C /tmp -xvzf geoip.tar.gz && rm geoip.tar.gz && \
+          wget -O geoip.tar.gz "https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-ASN&license_key=${API_KEY}&suffix=tar.gz" && \
+          tar -C /tmp -xvzf geoip.tar.gz && rm geoip.tar.gz && \
+          find /tmp -name '*.mmdb' -exec cp {} /data/geoip \;
+        image: busybox
+        name: geoip-db-init
+        env:
+        - name: API_KEY
+          valueFrom:
+            secretKeyRef:
+              name: maxmind-api-key
+              key: API_KEY
+        volumeMounts:
+        - name: geoip
+          mountPath: /data/geoip
+      volumes:
+      - name: geoip
+        persistentVolumeClaim:
+          claimName: ipapi-geodb
+      restartPolicy: Never

ipapi/maxmind-secret.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: maxmind-api-key
+  namespace: ipapi
+spec:
+  encryptedData:
+    API_KEY: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: maxmind-api-key
+      namespace: ipapi
+status: {}
+

ipapi/pvc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: ipapi-geodb
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: local-path