2022-06-07 19:34:52 -04:00
|
|
|
image:
|
|
|
|
repository: tccr.io/truecharts/librephotos-backend
|
|
|
|
tag: v2022w6@sha256:4c24ce4ea5b340f83da0be0935eaea4ca525a15ed6da014f8ad8c709b377a837
|
|
|
|
pullPolicy: IfNotPresent
|
|
|
|
|
|
|
|
frontendImage:
|
|
|
|
repository: tccr.io/truecharts/librephotos-frontend
|
|
|
|
tag: v2022w6@sha256:9cb2cb4865197d460405fecd79bdd7808333443cb2089753825f7f97365a53a3
|
|
|
|
|
|
|
|
proxyImage:
|
|
|
|
repository: tccr.io/truecharts/librephotos-proxy
|
|
|
|
tag: v2022w6@sha256:c147eaa3e96348e44132958ca871114a2ce240f0fa3604f738801317af09a160
|
|
|
|
|
|
|
|
securityContext:
|
|
|
|
readOnlyRootFilesystem: false
|
|
|
|
runAsNonRoot: false
|
|
|
|
|
|
|
|
podSecurityContext:
|
|
|
|
runAsUser: 0
|
|
|
|
runAsGroup: 0
|
|
|
|
|
|
|
|
secretEnv:
|
|
|
|
ADMIN_EMAIL: "admin@mydomain.com"
|
|
|
|
ADMIN_USERNAME: "admin"
|
|
|
|
ADMIN_PASSWORD: "password"
|
|
|
|
MAPBOX_API_KEY: ""
|
|
|
|
|
|
|
|
configmap:
|
|
|
|
config:
|
|
|
|
enabled: true
|
|
|
|
data:
|
|
|
|
nginx-config: |-
|
|
|
|
user nginx;
|
|
|
|
worker_processes 1;
|
|
|
|
|
|
|
|
error_log /var/log/nginx/error.log debug;
|
|
|
|
|
|
|
|
events {
|
|
|
|
worker_connections 1024;
|
|
|
|
}
|
|
|
|
|
|
|
|
http {
|
|
|
|
server {
|
|
|
|
listen 80;
|
|
|
|
location / {
|
|
|
|
# React routes are entirely on the App side in the web broswer
|
|
|
|
# Always proxy to root with the same page request when nginx 404s
|
|
|
|
error_page 404 /;
|
|
|
|
proxy_intercept_errors on;
|
|
|
|
proxy_set_header Host $host;
|
|
|
|
proxy_pass http://localhost:3000/;
|
|
|
|
}
|
|
|
|
location ~ ^/(api|media)/ {
|
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
|
proxy_set_header Host localhost;
|
|
|
|
include uwsgi_params;
|
|
|
|
proxy_pass http://localhost:8001;
|
|
|
|
}
|
|
|
|
# Django media
|
|
|
|
location /protected_media {
|
|
|
|
internal;
|
|
|
|
alias /protected_media/;
|
|
|
|
}
|
|
|
|
|
|
|
|
location /static/drf-yasg {
|
|
|
|
proxy_pass http://localhost:8001;
|
|
|
|
}
|
|
|
|
|
|
|
|
location /data {
|
|
|
|
internal;
|
|
|
|
alias /data/;
|
|
|
|
}
|
|
|
|
|
|
|
|
# Original Photos
|
|
|
|
location /original {
|
|
|
|
internal;
|
|
|
|
alias /data/;
|
|
|
|
}
|
|
|
|
# Nextcloud Original Photos
|
|
|
|
location /nextcloud_original {
|
|
|
|
internal;
|
|
|
|
alias /data/nextcloud_media/;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
env:
|
|
|
|
BACKEND_HOST: "localhost"
|
|
|
|
DB_BACKEND: "postgresql"
|
|
|
|
DB_NAME: "{{ .Values.postgresql.postgresqlDatabase }}"
|
|
|
|
DB_USER: "{{ .Values.postgresql.postgresqlUsername }}"
|
|
|
|
DB_PORT: "5432"
|
|
|
|
REDIS_PORT: "6379"
|
|
|
|
WEB_CONCURRENCY: 2
|
|
|
|
SKIP_PATTERNS: ""
|
|
|
|
HEAVYWEIGHT_PROCESS: 1
|
2022-06-17 05:32:37 -04:00
|
|
|
DEBUG: false
|
2022-06-07 19:34:52 -04:00
|
|
|
DB_PASS:
|
|
|
|
secretKeyRef:
|
|
|
|
name: dbcreds
|
|
|
|
key: postgresql-password
|
|
|
|
DB_HOST:
|
|
|
|
secretKeyRef:
|
|
|
|
name: dbcreds
|
|
|
|
key: plainhost
|
|
|
|
REDIS_HOST:
|
|
|
|
secretKeyRef:
|
|
|
|
name: rediscreds
|
|
|
|
key: plainhost
|
|
|
|
REDIS_PASS:
|
|
|
|
secretKeyRef:
|
|
|
|
name: rediscreds
|
|
|
|
key: redis-password
|
|
|
|
SECRET_KEY:
|
|
|
|
secretKeyRef:
|
|
|
|
name: librephotos-secrets
|
|
|
|
key: SECRET_KEY
|
|
|
|
|
|
|
|
probes:
|
|
|
|
liveness:
|
|
|
|
path: "/login"
|
|
|
|
readiness:
|
|
|
|
path: "/login"
|
|
|
|
startup:
|
|
|
|
path: "/login"
|
|
|
|
|
|
|
|
redis:
|
|
|
|
enabled: true
|
|
|
|
existingSecret: "rediscreds"
|
|
|
|
redisUsername: default
|
|
|
|
|
|
|
|
postgresql:
|
|
|
|
enabled: true
|
|
|
|
existingSecret: "dbcreds"
|
|
|
|
postgresqlUsername: librephotos
|
|
|
|
postgresqlDatabase: librephotos
|
|
|
|
|
|
|
|
service:
|
|
|
|
main:
|
|
|
|
ports:
|
|
|
|
main:
|
|
|
|
port: 10161
|
|
|
|
targetPort: 80
|
|
|
|
|
|
|
|
additionalContainers:
|
|
|
|
proxy:
|
|
|
|
name: proxy
|
|
|
|
image: "{{ .Values.proxyImage.repository }}:{{ .Values.proxyImage.tag }}"
|
|
|
|
ports:
|
|
|
|
- containerPort: 80
|
|
|
|
name: main
|
|
|
|
volumeMounts:
|
2022-07-22 21:37:45 -04:00
|
|
|
- name: librephotos-config
|
|
|
|
mountPath: "/etc/nginx/nginx.conf"
|
|
|
|
subPath: nginx-config
|
|
|
|
readOnly: true
|
|
|
|
- name: media
|
|
|
|
mountPath: "/data"
|
|
|
|
- name: protected-media
|
|
|
|
mountPath: "/protected_media"
|
2022-06-07 19:34:52 -04:00
|
|
|
frontend:
|
|
|
|
name: frontend
|
|
|
|
image: "{{ .Values.frontendImage.repository }}:{{ .Values.frontendImage.tag }}"
|
|
|
|
|
|
|
|
persistence:
|
|
|
|
media:
|
|
|
|
enabled: true
|
|
|
|
mountPath: "/data"
|
|
|
|
protected-media:
|
|
|
|
enabled: true
|
|
|
|
mountPath: "/protected_media"
|
|
|
|
logs:
|
|
|
|
enabled: true
|
|
|
|
mountPath: "/logs"
|
|
|
|
cache:
|
|
|
|
enabled: true
|
|
|
|
mountPath: "/root/.cache"
|
|
|
|
librephotos-config:
|
|
|
|
enabled: "true"
|
|
|
|
mountPath: "/etc/nginx/nginx.conf"
|
|
|
|
subPath: "nginx-config"
|
|
|
|
type: "custom"
|
|
|
|
volumeSpec:
|
|
|
|
configMap:
|
|
|
|
name: '{{ printf "%v-config" (include "tc.common.names.fullname" .) }}'
|
2022-08-08 20:29:33 -04:00
|
|
|
|
|
|
|
portal:
|
|
|
|
enabled: true
|