Dan V
88540b6ded
- Add ZFS NFS datasets: media-pool/git (50G) and media-pool/git-db (10G) - Add nfs-git and nfs-git-db NFS subdir provisioner Helm values - Deploy Forgejo 10 (StatefulSet) + PostgreSQL 16 (StatefulSet) in infrastructure namespace - StorageClasses: nfs-git (repos/LFS, 50Gi) and nfs-git-db (postgres, 10Gi) - Ingress: git.vandachevici.ro with TLS via cert-manager - SSH NodePort 30022 for git clone ssh://git@host:30022/user/repo.git - Authentik OIDC provider configured (client ID: ZdnrHgyfUncSIPPrOe1o7UAA42N7BMhUHXjQVw4Y) - Add 'git' subdomain to dns-updater configmap Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
72 lines
1.8 KiB
YAML
72 lines
1.8 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
annotations: {}
|
|
name: dns-updater-config
|
|
namespace: infrastructure
|
|
data:
|
|
DOMAIN: vandachevici.ro
|
|
NAME: photos;backup;media;chat;openttd;excalidraw;prv;drive;grafana;paperclip;proxmox;parts;dns;games;git
|
|
REMOVE_DUPLICATES: 'true'
|
|
SLEEP_INTERVAL: '60'
|
|
---
|
|
# NOTE: Secret 'dns-updater-secret' must be created manually:
|
|
# kubectl create secret generic dns-updater-secret \
|
|
# --from-literal=digitalocean-token=<YOUR_TOKEN> \
|
|
# -n infrastructure
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
annotations: {}
|
|
labels:
|
|
app: dns-updater
|
|
name: dns-updater
|
|
namespace: infrastructure
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: dns-updater
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: dns-updater
|
|
spec:
|
|
containers:
|
|
- env:
|
|
- name: DIGITALOCEAN_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: digitalocean-token
|
|
name: dns-updater-secret
|
|
- name: DOMAIN
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
key: DOMAIN
|
|
name: dns-updater-config
|
|
- name: NAME
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
key: NAME
|
|
name: dns-updater-config
|
|
- name: SLEEP_INTERVAL
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
key: SLEEP_INTERVAL
|
|
name: dns-updater-config
|
|
- name: REMOVE_DUPLICATES
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
key: REMOVE_DUPLICATES
|
|
name: dns-updater-config
|
|
image: tunix/digitalocean-dyndns:latest
|
|
name: dns-updater
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
restartPolicy: Always
|