-
-
Notifications
You must be signed in to change notification settings - Fork 44
/
Copy pathhelmrelease.yaml
178 lines (172 loc) · 4.86 KB
/
helmrelease.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: hoarder
spec:
interval: 30m
chart:
spec:
chart: app-template
version: 3.7.2
interval: 30m
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
dependsOn:
- name: rook-ceph-cluster
namespace: rook-ceph
values:
defaultPodOptions:
securityContext:
runAsUser: 1000
runAsGroup: 1000
runAsNonRoot: true
fsGroup: 1000
fsGroupChangePolicy: "OnRootMismatch"
controllers:
hoarder:
annotations:
reloader.stakater.com/auto: "true"
containers:
app:
image:
repository: ghcr.io/hoarder-app/hoarder
tag: 0.22.0
env:
BROWSER_WEB_URL: http://hoarder-chrome.selfhosted.svc.cluster.local:9222
CRAWLER_DOWNLOAD_BANNER_IMAGE: true
CRAWLER_ENABLE_ADBLOCKER: true
CRAWLER_STORE_SCREENSHOT: true
DATA_DIR: /data
DISABLE_SIGNUPS: true
MEILI_ADDR: http://hoarder-meilisearch.selfhosted.svc.cluster.local:7700
MEILI_MASTER_KEY:
valueFrom:
secretKeyRef:
name: hoarder-secret
key: meilisearch_master_key
NEXTAUTH_SECRET:
valueFrom:
secretKeyRef:
name: hoarder-secret
key: encryption_key
NEXTAUTH_URL: https://hoarder.bjw-s.dev
DISABLE_NEW_RELEASE_CHECK: true
COREPACK_INTEGRITY_KEYS: 0
probes:
liveness:
enabled: true
readiness:
enabled: true
resources:
requests:
cpu: 10m
limits:
memory: 1Gi
chrome:
annotations:
reloader.stakater.com/auto: "true"
containers:
app:
image:
repository: gcr.io/zenika-hub/alpine-chrome
tag: 124
command:
- chromium-browser
args:
- --headless
- --no-sandbox
- --disable-gpu
- --disable-dev-shm-usage
- --remote-debugging-address=0.0.0.0
- --remote-debugging-port=9222
- --hide-scrollbars
securityContext:
capabilities:
drop:
- ALL
resources:
requests:
cpu: 10m
limits:
memory: 1Gi
meilisearch:
annotations:
reloader.stakater.com/auto: "true"
pod:
affinity:
podAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: app.kubernetes.io/name
operator: In
values:
- hoarder
- key: app.kubernetes.io/component
operator: In
values:
- hoarder
topologyKey: kubernetes.io/hostname
containers:
app:
image:
repository: docker.io/getmeili/meilisearch
tag: v1.13.3
args:
- /bin/meilisearch
- --experimental-dumpless-upgrade
env:
MEILI_NO_ANALYTICS: true
MEILI_MASTER_KEY:
valueFrom:
secretKeyRef:
name: hoarder-secret
key: meilisearch_master_key
resources:
requests:
cpu: 10m
limits:
memory: 4Gi
service:
app:
primary: true
controller: hoarder
ports:
http:
port: 3000
chrome:
controller: chrome
ports:
http:
port: 9222
meilisearch:
controller: meilisearch
ports:
http:
port: 7700
ingress:
app:
className: "internal-nginx"
hosts:
- host: hoarder.bjw-s.dev
paths:
- path: /
service:
identifier: app
port: http
persistence:
data:
existingClaim: hoarder-data
advancedMounts:
hoarder:
app:
- path: /data
subPath: hoarder
meilisearch:
app:
- path: /meili_data
subPath: meilisearch