Dan V
deb6c38d7b
- Add .gitignore: exclude compiled binaries, build artifacts, and Helm values files containing real secrets (authentik, prometheus) - Add all Kubernetes deployment manifests (deployment/) - Add services source code: ha-sync, device-inventory, games-console, paperclip, parts-inventory - Add Ansible orchestration: playbooks, roles, inventory, cloud-init - Add hardware specs, execution plans, scripts, HOMELAB.md - Add skills/homelab/SKILL.md + skills/install.sh to preserve Copilot skill - Remove previously-tracked inventory-cli binary from git index Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
133 lines
3.1 KiB
YAML
133 lines
3.1 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
annotations: {}
|
|
name: speedtest-tracker-config
|
|
namespace: infrastructure
|
|
data:
|
|
APP_KEY: base64:F1lxPXfl42EXK1PTsi5DecMkyvTMPZgfAYDdSYwd9ME=
|
|
APP_URL: http://192.168.2.100:20000
|
|
DB_CONNECTION: mysql
|
|
DB_DATABASE: general_db
|
|
DB_HOST: general-purpose-db.infrastructure.svc.cluster.local
|
|
DB_PORT: '3306'
|
|
DISPLAY_TIMEZONE: Etc/UTC
|
|
PGID: '1000'
|
|
PRUNE_RESULTS_OLDER_THAN: '7'
|
|
PUID: '1000'
|
|
SPEEDTEST_SCHEDULE: '*/5 * * * *'
|
|
SPEEDTEST_SERVERS: 31470,1584,60747
|
|
TZ: Etc/UTC
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
annotations: {}
|
|
name: speedtest-tracker-v2-pvc
|
|
namespace: infrastructure
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 1Gi
|
|
storageClassName: nfs-speedtest
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
annotations: {}
|
|
name: speedtest-tracker
|
|
namespace: infrastructure
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: speedtest-tracker
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: speedtest-tracker
|
|
spec:
|
|
containers:
|
|
- env:
|
|
- name: DB_USERNAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: user
|
|
name: general-db-secret
|
|
- name: DB_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: password
|
|
name: general-db-secret
|
|
envFrom:
|
|
- configMapRef:
|
|
name: speedtest-tracker-config
|
|
- secretRef:
|
|
name: general-db-secret
|
|
image: lscr.io/linuxserver/speedtest-tracker:latest
|
|
name: speedtest-tracker
|
|
ports:
|
|
- containerPort: 80
|
|
name: http
|
|
resources:
|
|
limits:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
volumeMounts:
|
|
- mountPath: /config
|
|
name: config
|
|
volumes:
|
|
- name: config
|
|
persistentVolumeClaim:
|
|
claimName: speedtest-tracker-v2-pvc
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
annotations: {}
|
|
name: speedtest-tracker
|
|
namespace: infrastructure
|
|
spec:
|
|
ports:
|
|
- name: http
|
|
nodePort: 30200
|
|
port: 80
|
|
targetPort: 80
|
|
selector:
|
|
app: speedtest-tracker
|
|
type: NodePort
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
nginx.ingress.kubernetes.io/auth-url: "https://auth.vandachevici.ro/outpost.goauthentik.io/auth/nginx"
|
|
nginx.ingress.kubernetes.io/auth-signin: "https://auth.vandachevici.ro/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri"
|
|
nginx.ingress.kubernetes.io/auth-response-headers: >-
|
|
Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
|
|
name: speedtest-tracker
|
|
namespace: infrastructure
|
|
spec:
|
|
ingressClassName: nginx
|
|
rules:
|
|
- host: speedtest.vandachevici.ro
|
|
http:
|
|
paths:
|
|
- backend:
|
|
service:
|
|
name: speedtest-tracker
|
|
port:
|
|
number: 80
|
|
path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- hosts:
|
|
- speedtest.vandachevici.ro
|
|
secretName: speedtest-tls
|