image: repository: vabene1111/recipes tag: 1.5.6@sha256:5c9a304e42aac1f02ac1387f7183473eeeabc091635524587d158f78c8426f68 pullPolicy: IfNotPresent nginxImage: repository: nginx tag: 1.25.3@sha256:86e53c4c16a6a276b204b0fd3a8143d86547c967dc8258b3d47c3a21bb68d3c6 securityContext: readOnlyRootFilesystem: false runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 configmap: config: enabled: true data: nginx-config: |- events { worker_connections 1024; } http { include /etc/nginx/mime.types; server { listen 80; server_name _; client_max_body_size 16M; # serve media files location /media/ { alias /media/; } # serve static files location /static/ { alias /static/; } # pass requests for dynamic content to gunicorn location / { proxy_set_header Host $http_host; proxy_pass http://localhost:8080; proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto; } } } env: DEBUG: 0 ALLOWED_HOSTS: "*" CSRF_TRUSTED_ORIGINS: "" GUNICORN_MEDIA: 0 FRACTION_PREF_DEFAULT: 0 COMMENT_PREF_DEFAULT: 1 SHOPPING_MIN_AUTOSYNC_INTERVAL: 5 TIMEZONE: "{{ .Values.TZ }}" DB_ENGINE: "django.db.backends.postgresql" POSTGRES_DB: "{{ .Values.postgresql.postgresqlDatabase }}" POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}" POSTGRES_PORT: "5432" POSTGRES_PASSWORD: secretKeyRef: name: dbcreds key: postgresql-password POSTGRES_HOST: secretKeyRef: name: dbcreds key: plainhost SECRET_KEY: secretKeyRef: name: recipes-secrets key: SECRET_KEY additionalContainers: nginx: name: nginx image: "{{ .Values.nginxImage.repository }}:{{ .Values.nginxImage.tag }}" ports: - containerPort: 80 name: main volumeMounts: - name: recipes-config mountPath: "/etc/nginx/nginx.conf" subPath: nginx-config readOnly: true - name: media mountPath: "/media" - name: static mountPath: "/static" service: main: ports: main: port: 10029 targetPort: 80 persistence: media: enabled: true mountPath: "/opt/recipes/mediafiles" static: enabled: true type: emptyDir mountPath: "/opt/recipes/staticfiles" recipes-config: enabled: "true" mountPath: "/etc/nginx/nginx.conf" subPath: "nginx.conf" type: "custom" volumeSpec: configMap: name: '{{ printf "%v-config" (include "tc.common.names.fullname" .) }}' postgresql: enabled: true existingSecret: "dbcreds" postgresqlUsername: recipes postgresqlDatabase: recipes portal: enabled: true