Compare commits
1 Commits
main
...
feat/nextc
Author | SHA1 | Date |
---|---|---|
Anton Livaja | 86e736a0c9 |
|
@ -63,6 +63,9 @@ module "digitalocean_database_cluster" {
|
|||
}, {
|
||||
name = "forgejo",
|
||||
create_default_superuser = true,
|
||||
}, {
|
||||
name = "nextcloud",
|
||||
create_default_superuser = true,
|
||||
}]
|
||||
|
||||
vpc_id = digitalocean_vpc.main.id
|
||||
|
|
|
@ -0,0 +1,14 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: app
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: app
|
||||
env:
|
||||
- name: PG_HOST
|
||||
value: $(DB_SERVICE)
|
||||
- name: REDIS_HOST
|
||||
value: $(REDIS_SERVICE)
|
|
@ -0,0 +1,24 @@
|
|||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: nextcloud
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt
|
||||
external-dns.alpha.kubernetes.io/hostname: nextcloud.distrust.co
|
||||
spec:
|
||||
ingressClassName: nginx
|
||||
rules:
|
||||
- host: nextcloud.distrust.co
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: nextcloud
|
||||
port:
|
||||
number: 80
|
||||
tls:
|
||||
- hosts:
|
||||
- nextcloud.distrust.co
|
||||
secretName: website-tls
|
|
@ -0,0 +1,9 @@
|
|||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: nextcloud
|
||||
resources:
|
||||
- resources.yaml
|
||||
- ingress.yaml
|
||||
- namespace.yaml
|
||||
- pvc.yaml
|
||||
- service.yaml
|
|
@ -0,0 +1,4 @@
|
|||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: nextcloud
|
|
@ -0,0 +1,10 @@
|
|||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: app-pvc
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 500Gi
|
|
@ -0,0 +1,75 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: nextcloud
|
||||
labels:
|
||||
app: nextcloud
|
||||
spec:
|
||||
ports:
|
||||
- name: http
|
||||
port: 80
|
||||
targetPort: 8080
|
||||
selector:
|
||||
app: nextcloud
|
||||
type: ClusterIP
|
||||
...
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: nextcloud
|
||||
labels:
|
||||
app: nextcloud
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: nextcloud
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: nextcloud
|
||||
spec:
|
||||
securityContext:
|
||||
runAsNonRoot: true
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
containers:
|
||||
- name: nextcloud
|
||||
image: nextcloud:apache
|
||||
securityContext:
|
||||
allowPrivilegedEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
args: ["start"]
|
||||
env:
|
||||
- name: NC_PROXY
|
||||
value: "edge"
|
||||
- name: NC_HEALTH_ENABLED
|
||||
value: "true"
|
||||
- name: NC_PG_DATABASE
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
key: NC_PG_DATABASE
|
||||
name: nc-db-secret
|
||||
volumeMounts:
|
||||
- mountPath: /var/www/html
|
||||
name: app-persistent-storage
|
||||
restartPolicy: Always
|
||||
volumes:
|
||||
- name: app-persistent-storage
|
||||
persistentVolumeClaim:
|
||||
claimName: app-pvc
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 8080
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health/ready
|
||||
port: 8080
|
||||
initialDelaySeconds: 60
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health/live
|
||||
port: 8080
|
||||
initialDelaySeconds: 60
|
|
@ -0,0 +1,8 @@
|
|||
apiVersion: v1
|
||||
kind: Service
|
||||
...
|
||||
spec:
|
||||
ports:
|
||||
- port: 80
|
||||
selector:
|
||||
component: app
|
|
@ -0,0 +1,7 @@
|
|||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: redis
|
||||
resources:
|
||||
- resources.yaml
|
||||
- namespace.yaml
|
||||
- services.yaml
|
|
@ -0,0 +1,4 @@
|
|||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: redis
|
|
@ -0,0 +1,22 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
component: redis
|
||||
name: redis
|
||||
spec:
|
||||
selector:
|
||||
matchLabels:
|
||||
component: redis
|
||||
replicas: 1
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
component: redis
|
||||
spec:
|
||||
containers:
|
||||
- image: redis:alpine
|
||||
name: redis
|
||||
ports:
|
||||
- containerPort: 6379
|
||||
restartPolicy: Always
|
|
@ -0,0 +1,11 @@
|
|||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: redis
|
||||
labels:
|
||||
component: redis
|
||||
spec:
|
||||
ports:
|
||||
- port: 6379
|
||||
selector:
|
||||
component: redis
|
Loading…
Reference in New Issue