124 lines
2.9 KiB
YAML
124 lines
2.9 KiB
YAML
image:
|
|
repository: tccr.io/truecharts/recipes
|
|
tag: 1.4.6@sha256:0e56f6b9db1f6210f9a351ee653fc1a0d0af5c81e8a1f72eea4ffa9fd3acfb9a
|
|
pullPolicy: IfNotPresent
|
|
|
|
nginxImage:
|
|
repository: tccr.io/truecharts/nginx
|
|
tag: 1.23.3@sha256:716a4db158dea3113a6a8ff403a2e69b249dc8278ff0983ca14f80c77dd02ca8
|
|
|
|
securityContext:
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: false
|
|
|
|
podSecurityContext:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
|
|
configmap:
|
|
config:
|
|
enabled: true
|
|
data:
|
|
nginx-config: |-
|
|
events {
|
|
worker_connections 1024;
|
|
}
|
|
http {
|
|
include /etc/nginx/mime.types;
|
|
server {
|
|
listen 80;
|
|
server_name _;
|
|
client_max_body_size 16M;
|
|
# serve media files
|
|
location /media/ {
|
|
alias /media/;
|
|
}
|
|
# serve static files
|
|
location /static/ {
|
|
alias /static/;
|
|
}
|
|
# pass requests for dynamic content to gunicorn
|
|
location / {
|
|
proxy_set_header Host $http_host;
|
|
proxy_pass http://localhost:8080;
|
|
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
|
|
}
|
|
}
|
|
}
|
|
|
|
env:
|
|
DEBUG: 0
|
|
ALLOWED_HOSTS: "*"
|
|
CSRF_TRUSTED_ORIGINS: ""
|
|
GUNICORN_MEDIA: 0
|
|
FRACTION_PREF_DEFAULT: 0
|
|
COMMENT_PREF_DEFAULT: 1
|
|
SHOPPING_MIN_AUTOSYNC_INTERVAL: 5
|
|
TIMEZONE: "{{ .Values.TZ }}"
|
|
DB_ENGINE: "django.db.backends.postgresql"
|
|
POSTGRES_DB: "{{ .Values.postgresql.postgresqlDatabase }}"
|
|
POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}"
|
|
POSTGRES_PORT: "5432"
|
|
POSTGRES_PASSWORD:
|
|
secretKeyRef:
|
|
name: dbcreds
|
|
key: postgresql-password
|
|
POSTGRES_HOST:
|
|
secretKeyRef:
|
|
name: dbcreds
|
|
key: plainhost
|
|
SECRET_KEY:
|
|
secretKeyRef:
|
|
name: recipes-secrets
|
|
key: SECRET_KEY
|
|
|
|
additionalContainers:
|
|
nginx:
|
|
name: nginx
|
|
image: "{{ .Values.nginxImage.repository }}:{{ .Values.nginxImage.tag }}"
|
|
ports:
|
|
- containerPort: 80
|
|
name: main
|
|
volumeMounts:
|
|
- name: recipes-config
|
|
mountPath: "/etc/nginx/nginx.conf"
|
|
subPath: nginx-config
|
|
readOnly: true
|
|
- name: media
|
|
mountPath: "/media"
|
|
- name: static
|
|
mountPath: "/static"
|
|
|
|
service:
|
|
main:
|
|
ports:
|
|
main:
|
|
port: 10029
|
|
targetPort: 80
|
|
|
|
persistence:
|
|
media:
|
|
enabled: true
|
|
mountPath: "/opt/recipes/mediafiles"
|
|
static:
|
|
enabled: true
|
|
type: emptyDir
|
|
mountPath: "/opt/recipes/staticfiles"
|
|
recipes-config:
|
|
enabled: "true"
|
|
mountPath: "/etc/nginx/nginx.conf"
|
|
subPath: "nginx.conf"
|
|
type: "custom"
|
|
volumeSpec:
|
|
configMap:
|
|
name: '{{ printf "%v-config" (include "tc.common.names.fullname" .) }}'
|
|
|
|
postgresql:
|
|
enabled: true
|
|
existingSecret: "dbcreds"
|
|
postgresqlUsername: recipes
|
|
postgresqlDatabase: recipes
|
|
|
|
portal:
|
|
enabled: true
|