From bcd3cb6c09ece36a725877c831c3e48729827e82 Mon Sep 17 00:00:00 2001 From: Sam Smucny Date: Wed, 9 Nov 2022 03:28:51 -0500 Subject: [PATCH] feat(Misskey): Add Misskey (#4315) * Importing original chart files for misskey * update chart.yaml * Adding truecharts common library * debugging setup * Edits to password management * updated TrueNAS questions for misskey * Update to Chart.yaml * Fix chart version Signed-off-by: Sam Smucny * Add target port UI question * Cleanup and comment values.yaml * Addressing review comments * Apply suggestions from code review Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com> * Addressing PR Reviews: - remove targetPort (only using port) - update image src to tccr.io - remove vestigial nextcloud values - remove auto file permissions * Update charts/incubator/misskey/values.yaml The hash value from truecharts is different than docker.io Co-authored-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com> Signed-off-by: Sam Smucny * Add back targetPort in questions.yaml * Move configmap to tpl format and include in common * Move secrets into configfile templates: - remove initcontainer - update host/pass values in default.yml - remove misskeyconfig-src pvc - remove secret env vars * trim " from passwords * Add other misskey configuration options * typo * Fix indentation * adds couple more options * whoops Signed-off-by: Sam Smucny Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com> Co-authored-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com> Co-authored-by: Stavros kois --- charts/incubator/misskey/.helmignore | 30 +++ charts/incubator/misskey/CHANGELOG.md | 0 charts/incubator/misskey/Chart.yaml | 41 +++ charts/incubator/misskey/README.md | 0 charts/incubator/misskey/icon.png | Bin 0 -> 9348 bytes charts/incubator/misskey/questions.yaml | 241 ++++++++++++++++++ .../misskey/templates/_configmap.tpl | 181 +++++++++++++ .../incubator/misskey/templates/common.yaml | 8 + charts/incubator/misskey/values.yaml | 65 +++++ cspell.config.yaml | 1 + 10 files changed, 567 insertions(+) create mode 100644 charts/incubator/misskey/.helmignore create mode 100644 charts/incubator/misskey/CHANGELOG.md create mode 100644 charts/incubator/misskey/Chart.yaml create mode 100644 charts/incubator/misskey/README.md create mode 100644 charts/incubator/misskey/icon.png create mode 100644 charts/incubator/misskey/questions.yaml create mode 100644 charts/incubator/misskey/templates/_configmap.tpl create mode 100644 charts/incubator/misskey/templates/common.yaml create mode 100644 charts/incubator/misskey/values.yaml diff --git a/charts/incubator/misskey/.helmignore b/charts/incubator/misskey/.helmignore new file mode 100644 index 00000000000..77ca5567b26 --- /dev/null +++ b/charts/incubator/misskey/.helmignore @@ -0,0 +1,30 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ +# OWNERS file for Kubernetes +OWNERS +# helm-docs templates +*.gotmpl +# docs folder +/docs +# icon +icon.png diff --git a/charts/incubator/misskey/CHANGELOG.md b/charts/incubator/misskey/CHANGELOG.md new file mode 100644 index 00000000000..e69de29bb2d diff --git a/charts/incubator/misskey/Chart.yaml b/charts/incubator/misskey/Chart.yaml new file mode 100644 index 00000000000..1acdad1a7ef --- /dev/null +++ b/charts/incubator/misskey/Chart.yaml @@ -0,0 +1,41 @@ +apiVersion: v2 +appVersion: "12.119.0" +home: https://misskey-hub.net +dependencies: + - name: common + repository: https://library-charts.truecharts.org + version: 10.7.13 + - condition: postgresql.enabled + name: postgresql + repository: https://charts.truecharts.org/ + version: 8.0.114 + - condition: redis.enabled + name: redis + repository: https://charts.truecharts.org + version: 3.0.111 +deprecated: false +description: "Misskey is an open source, decentralized social media platform that's free forever!" +icon: https://truecharts.org/img/hotlink-ok/chart-icons/misskey.png +keywords: + - Misskey + - Social + - Friend + - Social Media + - Fediverse + - ActivityPub +kubeVersion: ">=1.16.0-0" +maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: misskey +sources: + - https://github.com/truecharts/charts/tree/master/charts/incubator/misskey + - https://github.com/misskey-dev/misskey/ + - https://hub.docker.com/r/misskey/misskey/ +annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - Social +type: application +version: 0.0.1 diff --git a/charts/incubator/misskey/README.md b/charts/incubator/misskey/README.md new file mode 100644 index 00000000000..e69de29bb2d diff --git a/charts/incubator/misskey/icon.png b/charts/incubator/misskey/icon.png new file mode 100644 index 0000000000000000000000000000000000000000..b4eb18a5cb8de878156706c02754bcdcf2b02a72 GIT binary patch literal 9348 zcmaia1z42Z_WnmB-6g^h3Q7$n-7P60Ejfh1(A_YgASseEgwjYiBHgXDl2RgF4n4oo zbMHC#{O`U0`#kgQnf<+My?gChrJLJj|fqCLRtF%m(UOAUS6@2uP4ykQ>Y_i3bvQv$he{mRJ0TGioNmZ0F(OBFe+# z?d{F&&Cl)ZX3N7XA|k>A=Hubx<3d?*x%)yrEPS}2?kvA3{@{>@xLdi|yLi|;LqWed zEi9cqJtUZ!Q8?%yzpv=L4GxxB!`7h?bkbg6Gv2*rtcDHkO`7@}$E%7J(Z;mLr|Fesah0A|3R#*T3 zn>#uEZ5!?$3SKDT{&5I@i|L;Wxa<15KzOtv?#`ZWRuBa*lzJ?`h5Mz8sFuAC#L+NF&ndHIC@AJp)_p>ocS&TcxWG=!ksemnirPE^Io!WN=$Z|!0C7u#Qe8U$+l zZ^*Cc96f)fgC5i#wI9B}*bM%{B$$QxP>J{}Nq+Mg{zvG~vk?6qpSrU(Dm?z*UVlL< za&lU3&NlXrD9l}3NfxA{Aoq}0D34 z<>MDcy#)9;z#^jHKjQgqjjA7O3lEF`W&f)RK;qU`q8|1hj*#E8KdM5;(c_QVA5%yB zU!@@GXaTjAVD{m%hS*qmI(jfms@uD}J3xHZ?LoF~5C~M9=T`+e+W&*-_w1ic;yiy_ zMjREUy1J;cy}O6AoA1A@tOIfV`^vuy5d`|3UZNIOzfMMi*~QJ-+S3YR{aZ`a9{xbx zoozh4E!-e7wy4aKV3x75u}7VuF9=oR_O?)n8;F-%m|O7gKHhc^6yJZBl;>YJ^UvVK zdHyZ@Klc7F-2~eO@@L0{Kv8Yd4b=|~Ts!9h04>xWl@0%v1pvUF z=$Y80Dknqoyp8pd_%}2o0|U&cCyJJ^oLGf0>LLZQj#8B@5g2_uf{b+*uRbiyZdLEQ zSx%Wb7j8833%Gfi-MbZ$F-)@V;mQw7H(oZga4ZMm{Jc|9;yiv4F5wmLQ65gwT^<8F zO6P8d#~z;d1Q-em0vAguDyqethG8>;kG!zRkp z473a1G1J@QlkWH8E?Xs#rUy12@`1#jt@#HX+YUS`XRdjK7OO|bI`E0-+0&9f>)4kJ zl%v|L|EYMXyeF3PivYUt4fIuNWrUY3D^qpr-la^+rXEH z%U30D6}(q0$(tFbUQnGUJMz6h6mEgb4xxL@OHXJQ+pfE7Fo0UP%{&SHFUQ#qora`N zCT**e?7w)U9&EQeM=kE=ySy(v?@z>-4$g4B+grL{F(xTK!#dC-tZp@t`h=j3Ch zJO5+2x)V0ljP4n8n~%s|oH~`oSta?5#GJVl2T+Pd(2){BPh#D&)f&JHGfoYAhdH;B?2 zq(8+WbysU=C%=;#)oxh}PP)7WSxM6rj}#=%iBH}}?lYQ-9C(d!?_jLV}|B=T~26;J%*h z?-x618g&-5F#%9Q`*MFy>p`=xL$=qH+#03VykWH009RjY!85MsF$&v|RU#%etC@m^ zxN}5=-2Rzp?zC)z(#<;JU;u|PG`1&g)=~!Mq$wq>RBFXxeHYIt4)2oez<$wJ0Zx9DW03JnVvFh2Jv$|=Sv7Q&GfjGoCsHl zT}n~IU&7Tj!Bi>M3BIyU9k88%U1~H+v6(u-GyOJcLzKGN8BA4{iZ$BA=fAfj#C;`Y zl(cY5<6Qa_1{&MR_9J~s?~8{dZ_i*2->=3Rouf_V(v#eLbTY%?5L?JFd3FbQ9M%Wx z8j2bY-=LV*lq3xWz>(>NR~6UX&sl)WF`H-ZeI4HCD)bf8Lzd-{8JnhV{iQYWt4u<- z$~B6xtKky%4_@Q9cIcxE&;FPlj8taXgZp#ivzW=!A2=|GuYk&{Uk)_kp35eXW43Wf zKV=X)uRJc!a2rvW8HH{DXEXb0HzMVcbY(}^t=8|27z4^m1V^tf;5bs0Z#pSd*mSjV z#f`8-c#I0>2PiY2cJN)>H6CQ2r-Ho034oXC_-4`|4Q}q1l=gd~?Vn$bJvtj;BYE-o zIFnyYasZLt^SXWjXVGa&rr=cO(C!=$U$!xKmwbk238{3@99HtG&ARSFP_Uc3G;c07 zLYd`qO!I~%9uuM^==HE^pnB>HY1sS7%UVg*<{=~HfrfZF(je}(v))+?lc|ibI!X5a zqw@(ZFw_oym48=L^W1g~U#1C*sUpews?0Bgst4XvTZ=9uvCe#ROU1v;N>RyYxY-yt zfOSJTWf-^GURKoDoL=d0qrQKo$Kl%U(5{?Ws@6jTId+>d7XE$LpiZ{e=6`sAYn;Qd$EmhyRPxE?qa zp#J0jI=FHOOo$ltrHL+Xw5)#m5@R!SOmrorEoiUVg=3Hnb8lM&c!-z~7q?{yjtbeJ zJ0>n)7EqBm{Mmft6UY8We1+xn9el=5vMHLhmvxwXRL;ojLO;Mnc^hIM5z$XO46E%wQFVq_)z>8z zw=x`iXp_2_4WS)4>=OrObEKJdN<4_GAKej{#h4IS8sgus2b~R2N(zDKsaMFz5^ZnF z%xNs&NZ{TtoThf5q(Az&xe{5hN?nom(>*5emxNrJFr><-S)p45lf z%SykX|0MfDTzeryy|WtE(1KLN;$Tq+1P5nrrB40 zR3TgJbJ%^5ni7dx8nbuiKJ##kyUvlXrE=R=s6&Gjj`V!GA}%?}J(;xfElk+Z16`%< z>n)SV%zZ)62Dkg*?;;a#lb;p7Fg&u-Nq0N^HjdZpLL-^kkJq6iwHO$Y$b0jHX{lCO zKz%~#eX8}uD4W{0sFKU)f#K?Xv)V0&S+Ou(Cfpdv_0M-dK+wjJGkLeh5xk0Bu|ig_$4? zA46${lc|Ejl-IQ7KU-QbwJ6(%%DP)cC)VcgWjo0=usE7(x)mKy2D4Dky z@zn6G*qsz@>#GG}KIK>@8XReh4^WtLnPLynrR=(yPKw3Gs{F06yJNLW3!g`I0X)ZVXzW5r$%}kt7No^4 zj#pE{BiwErLI;{3cmSBseC@QULXMt`(pg+W_$VBCzBl71scf3|iN7MPz#_?Mt)B{- z+aIK{rMuz%Rj7A!vC4dC!G(1Hbr-`d8B4ixJ}D@&HEWB6nV^?exWNRChN*#Rii;xR z7AKb%A_5^U39jT?eAB{3Yx{;SgO}q=XX}7S9EWA0$CNo8EX(vh3A-3E+78vMT&aGR zu9%sL1p&q!0(-uEq$X{h2zk;)%jleumqm_u>>J%lgf3U(?$3OZj_ov<*Ui81b)uA^ zDX5`_{Og^}>KE5PKBj~%e(r~jFV!%nb+(IOtYTtskfHa@+rHUsZWb^zdqls_7-Ik3 zoU>3506&K1v~fhJ8LdqbS7J)zE>GD`4va}T5-=5}?`a&qp=bkHONpJV6&%ELv6S7O zAwYOKsfh8ckhEBDCK6K|_P(SW%qgzJIqZlt*=+9})x)HaR3VGIQ@whxsg-do3^v>D({SOP0Ck#4MR3_t+#T zd;P~oj`SV43Be+f`{=;+oJw{&sff)@?R~C0Mx2X<#4R@_`ZM@L4Q$JlupBgl!~GV) zhM&0=VgyX@aSVp*(b+AG*yG`=pCiIc2?(q1bzerxgjK^$Iha5)G&}0512{X)Oy2Z> z)S<7z(QwPeZ6i7Aq6e20tBwViHC-BxeVbH)9)*dyQ&AnmgTd)-UQW4})n-l{;@B=M zZ~}{*V7f*;mpuY#%WA0GGv6v#(OeeZ*9RV=T7gV7J1R1owA1Eu3auX)*xlRF&mTJf=flv!l|u91H;n>X`tQo!=U2z#9Pr$ zBkFz%kZmCFu8bJdka5m;i}vn-}Lx4(WMiD+KPl&jl5*Mh_0BiFPBzZp4w;jj(}Y#R0j(>7NuZ5l5+K^5vDU zUT`QFtaTvQ_&yggQ4n;# zN_~YhJP^)m=p=ebKg(_C3154xV>HU#11 zNGM0>S|RQy*1Q8kkMv6lStVP5zMw4Ig<20dXEW$&oSnQjbJNJKrXud8rikEfJ&Wvu zdMESN4+i$vWL)ydlJ zpY-&zX#t~j@xAt%qnR(c3ySjZGr#QPC2ld=H{SY*z=)wWv9NR64hQo$1#SXb2lhGS zIHVb>JWsYEThCtPRz-xX*3!2_0I${kji4C!3u}?9 zpk*KFo*w<{nNJhCF*+Q~k3qEi&+Y5O0f*%AJxtWVG!Po&<9zYGQ^(}J0;RkZA%b3Ahm*2d?W_h_1H-b^9(5-I8=ek$SP=geKqO5T#5 z<@Kxar#}n7SB(nD-%B^X%j$okXJIDgr>3Qs(*)nC3aN|PHdv5V{n$xCbEtW4qWTf& zRhAr*V$#M#s2XDExNkIwn-kbQd&weM6y^$TLdP;+`}r*Sv)88Ztfw7aZgDbLpeW>4 z%JC8!rW-fOl90Afal`wIN9;mu5n4~EmqBDqdE{N-5h`4)&~nHoJ5 zR9lQL7x>`CPQxlIhZoa`{4+4t1o${>H{PmvhPdy_xDVzirH4UD3IKL+>zqOkw9&UD zm@c+z33rHfjkd!-mmMcy*Lr?e?w0HSPG2xkgIUT%ZZr!^oKB<}?+_MuxQ1jLsmN5C z^%s*3KEzL8n$D7UZot#iDci)FPmfI2FbHZr?2!lban;L20cqSYd-Q1Lb`d#6HV-F$ zj8wlNi;H|yGbenlf%AL%A(6ep+5=BOm@dqv$2*7Zvt=RfChtkszvbL#+gvlEVe@Fy z1frJn7ptYc*h;GLi(Cw2)iEUm(fMwhs}rVw)ZOvIO8(>)yaV?V?K_7c_R#t6vjh)r zE{+)IMr9n=))^Je(zM4KJdX=B#nUYa`>Ih1kCMT=A+~fq zcKwn%g@b0-S0=x9QDkrbTYnxZKiIdmoj>K27>7Kt(zeCBmLO1DO(|Xd`J=DsrQExG z<3ocio;>n)=~T44=7Tsn57unAb*FeyU%&~0c3L^Pq&RCn0x&w819gNT15GKVOM!Pj zJ}Ifi{zL517F6<;Y$7D;uEa92&PZeN@{(v1iob+Q8+1y8-k9PNH@sIFJ#$SR$a|_JgS8oOe^=06kEPic!6>xK| z6tj9NK-fi#_4UisvpRRf3{Hb{weWnir*}jT7oE43`~%B)Yn@n(jZX8Q3Ry>IIR$&l zs+)#nbpty*oIXEn{WOOtoEB9!quPWgWI)KT{k>KfOGZmBH_j<>EmmyRp@9NGj!lr+ zXt1XcY;qFaCAq2X2O;7 zqo57oB-R??mFDHHmF+l%R!eK}j~H{)x7utg?jFnHZo-d4-keRWM00uU+czQ#j$?Fm zSgdCu)?6WP&-gTPbyHzqnt`mlON_%G+W2aJoGW!czpHeXQf2p%L@gLGwGn)_cOIos z-00Ge2(Wnj7MrI}7pFSkJnX7)`2qQ}tJCN#(kx>dHDF`#>*|LJF)q*HW;W(Nf}au7 z6z@)>633@UDum2V;O^(I{aZy_u*tr`+x5mVtFA(P?%IO3ObBq8G`vd3UJ?6AvD@lmX^3VlRto!K z1PqED&-BXgiP2<^vF;!E>`@7Pb8QbeXQSw6z|h4P45XpR@ekryM&h03;D;+l?Fo$4 z)ujN&p8}^6wq(|G$Yg8@zI-DcOr;PYGVgDgR&#?R8TJGkHpqdzNYb-X!m0ND zkbYz?wydYA^u4a1k+PN>D3|z9=#NC!%Ujm(@&?M2;hRmD>f14E^X}2*(77sKIU~ef zQg#H%dpa%kq+l%$wArcw`VbSV1@@_6>IMG~LT|9qXt80@9}5D^2fB0m$#-xD}j@m&3a7+v=>jmOdnlcADF0keIeZ`2PeESEVzC`u+xw~p)lRB{qAhOzcbH4s;(GhZR6Qm`;?C}Lt5Loi8sP68*&1`TzU9cc z^Tkr!;`&9!wf|@`F00~G<5H<1v~jD3LhMNFE~yg5RetQHSQXj$*!Zi&1>@Unt1eUZ1 zMsQ>kZc=UK3fZs+khevqsL?(?>I~{v&kpk$e>1 z;rMA`AD=e>f>N{ldEc^{x*oJIFl^HB*|98l)c5(KDR zr_{;zvpZ?fu}#AlQEGIIWgE{Tew)gD9`Mb+KYK*~cJ*Dz&o6ZEF8h56E9Bp%zcipl zsFE4D^-X`j&v7GhF3EaHhW?}X=F0yVPClxWM%HCfcn#ag!5`0c>2)=u) zs(;?e0|4z_S0lrYK4fia{8F#t6l0TU!ue8q`&Pd&-W>3+@2smH(U~b@Jd11lXh%SF z61gX4r(qX87%O7cgoDNmk6OGQFSG2}b~qJw6N6jtP@o$l(hPzpX?G~g&;P~u zz)#wIfafLaF1Eq(z{Wj}2;41ALxR3g5IWNJ(Z_EcUTd*LWX*coKi#wM9>y8QX^QQQ z5zZRKoVX7vx;Am!8QqWkV0yD_mtSvo53~BB@wjn&W!|_qRO#07Roi}njEvW=-8&NH zZ&5JI*G$T2c{(EfU(Fo9zARHp08{lm-}xqchv{33}Q#T-PyhG~lh(d-4D9LNvT8AsbYcT1)Qn3@xgReK1 zufau*_7c%e0|rMyX)45>^3Ra+C9419_epX}Br%KTgMFeW8u7pWJfxzaAzv || Proxy (443) | ---> | Misskey (3000) || + # +------+ |+-------------+ +----------------+| + # +---------------------------------------+ + # + # You need to setup reverse proxy. (eg. nginx) + # You do not define 'https' section. + + # Option 2: Standalone + # + # +- https://example.tld/ -+ + # +------+ | +---------------+ | + # | User | ---> | | Misskey (443) | | + # +------+ | +---------------+ | + # +------------------------+ + # + # You need to run Misskey as root. + # You need to set Certificate in 'https' section. + + # To use option 1, uncomment below line. + port: {{ .Values.service.main.ports.main.port }} # A port that your Misskey server should listen. + + # To use option 2, uncomment below lines. + #port: 443 + + #https: + # # path for certification + # key: /etc/letsencrypt/live/example.tld/privkey.pem + # cert: /etc/letsencrypt/live/example.tld/fullchain.pem + + # ┌──────────────────────────┐ + #───┘ PostgreSQL configuration └──────────────────────────────── + + db: + host: {{ printf "%v-%v" .Release.Name "postgresql" }} + port: 5432 + + # Database name + db: {{ .Values.postgresql.postgresqlDatabase }} + + # Auth + user: {{ .Values.postgresql.postgresqlUsername }} + pass: {{ .Values.postgresql.postgresqlPassword | trimAll "\"" }} + + # Whether disable Caching queries + #disableCache: true + + # Extra Connection options + #extra: + # ssl: true + + # ┌─────────────────────┐ + #───┘ Redis configuration └───────────────────────────────────── + + redis: + host: {{ printf "%v-%v" .Release.Name "redis" }} + port: 6379 + pass: {{ .Values.redis.redisPassword | trimAll "\"" }} + #prefix: example-prefix + #db: 1 + + # ┌─────────────────────────────┐ + #───┘ Elasticsearch configuration └───────────────────────────── + + #elasticsearch: + # host: localhost + # port: 9200 + # ssl: false + # user: + # pass: + + # ┌───────────────┐ + #───┘ ID generation └─────────────────────────────────────────── + + # You can select the ID generation method. + # You don't usually need to change this setting, but you can + # change it according to your preferences. + + # Available methods: + # aid ... Short, Millisecond accuracy + # meid ... Similar to ObjectID, Millisecond accuracy + # ulid ... Millisecond accuracy + # objectid ... This is left for backward compatibility + + # ONCE YOU HAVE STARTED THE INSTANCE, DO NOT CHANGE THE + # ID SETTINGS AFTER THAT! + + id: {{ .Values.misskey.id }} + # ┌─────────────────────┐ + #───┘ Other configuration └───────────────────────────────────── + + # Whether disable HSTS + disableHsts: {{ .Values.misskey.other.disableHSTS }} + + # Number of worker processes + clusterLimit: {{ .Values.misskey.other.clusterLimit }} + + # Job concurrency per worker + deliverJobConcurrency: {{ .Values.misskey.other.deliverJobConcurrency }} + inboxJobConcurrency: {{ .Values.misskey.other.inboxJobConcurrency }} + + # Job rate limiter + deliverJobPerSec: {{ .Values.misskey.other.deliverJobPerSec }} + inboxJobPerSec: {{ .Values.misskey.other.inboxJobPerSec }} + + # Job attempts + deliverJobMaxAttempts: {{ .Values.misskey.other.deliverJobMaxAttempts }} + inboxJobMaxAttempts: {{ .Values.misskey.other.inboxJobMaxAttempts }} + + # IP address family used for outgoing request (ipv4, ipv6 or dual) + #outgoingAddressFamily: ipv4 + + # Syslog option + #syslog: + # host: localhost + # port: 514 + + # Proxy for HTTP/HTTPS + #proxy: http://127.0.0.1:3128 + + #proxyBypassHosts: [ + # 'example.com', + # '192.0.2.8' + #] + + # Proxy for SMTP/SMTPS + #proxySmtp: http://127.0.0.1:3128 # use HTTP/1.1 CONNECT + #proxySmtp: socks4://127.0.0.1:1080 # use SOCKS4 + #proxySmtp: socks5://127.0.0.1:1080 # use SOCKS5 + + # Media Proxy + #mediaProxy: https://example.com/proxy + + # Sign to ActivityPub GET request (default: false) + signToActivityPubGet: {{ .Values.misskey.other.signToActivityPubGet }} + + allowedPrivateNetworks: [ + '127.0.0.1/32', + {{- range .Values.misskey.other.allowedPrivateNetworks }} + {{ . | squote }}, + {{- end }} + ] + + # Upload or download file size limits (bytes) + maxFileSize: {{ .Values.misskey.other.maxFileSize }} + + +{{- end -}} diff --git a/charts/incubator/misskey/templates/common.yaml b/charts/incubator/misskey/templates/common.yaml new file mode 100644 index 00000000000..ae43900cad9 --- /dev/null +++ b/charts/incubator/misskey/templates/common.yaml @@ -0,0 +1,8 @@ +{{/* Make sure all variables are set properly */}} +{{- include "tc.common.loader.init" . }} + +{{/* Render configmap for misskey */}} +{{- include "misskey.configmap" . }} + +{{/* Render the templates */}} +{{ include "tc.common.loader.apply" . }} diff --git a/charts/incubator/misskey/values.yaml b/charts/incubator/misskey/values.yaml new file mode 100644 index 00000000000..91bcc24ee5c --- /dev/null +++ b/charts/incubator/misskey/values.yaml @@ -0,0 +1,65 @@ +image: + repository: tccr.io/truecharts/misskey + pullPolicy: IfNotPresent + tag: 12.119.0@sha256:e16467a28e7cee4442e29216a292dd725f28c3789fb1da050359c7842c2c0eec + +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + fsGroup: 33 + +service: + main: + ports: + main: + port: 3003 + +misskey: + # Final accessible URL seen by a user. ONCE YOU HAVE STARTED THE INSTANCE, DO NOT CHANGE THE URL SETTINGS AFTER THAT! + url: "https://example.tld/" + # ID generation method. 'aid' recommended. + id: "aid" + other: + disableHSTS: false + signToActivityPubGet: false + maxFileSize: 262144000 + clusterLimit: 1 + deliverJobConcurrency: 128 + inboxJobConcurrency: 16 + deliverJobPerSec: 128 + inboxJobPerSec: 16 + deliverJobMaxAttempts: 12 + inboxJobMaxAttempts: 8 + allowedPrivateNetworks: + - 127.0.0.1/32 + +env: + # NODE_ENV = production | development + NODE_ENV: production + +persistence: + misskeyconfig: + enabled: true + type: configMap + objectName: misskeyconfig + mountPath: "/misskey/.config" + files: + enabled: true + mountPath: "/misskey/files" + +postgresql: + enabled: true + existingSecret: "dbcreds" + postgresqlUsername: misskey + postgresqlDatabase: misskey + +redis: + enabled: true + existingSecret: "rediscreds" + +portal: + enabled: true diff --git a/cspell.config.yaml b/cspell.config.yaml index 3873f52600d..00bdc81dbc4 100644 --- a/cspell.config.yaml +++ b/cspell.config.yaml @@ -153,6 +153,7 @@ words: - mimetypes - minecraft - minio + - Misskey - modelstore - modports - mongosh