124 lines
2.9 KiB
YAML
124 lines
2.9 KiB
YAML
|
image:
|
||
|
|
repository: tccr.io/truecharts/recipes
|
||
|
|
tag: 1.4.5@sha256:7634b442c7af2b85c00a12614bfb05ecc43e697b58dc25cc48ed077cf2e1109c
|
||
|
|
pullPolicy: IfNotPresent
|
||
|
|
|
||
|
|
nginxImage:
|
||
|
|
repository: tccr.io/truecharts/nginx
|
||
|
|
tag: 1.23.2@sha256:4fcc18dd9432aa527f5ce55cca0045a1b94d6229a56671b8b6a902f0dbaa74fd
|
||
|
|
|
||
|
|
securityContext:
|
||
|
|
readOnlyRootFilesystem: false
|
||
|
|
runAsNonRoot: false
|
||
|
|
|
||
|
|
podSecurityContext:
|
||
|
|
runAsUser: 0
|
||
|
|
runAsGroup: 0
|
||
|
|
|
||
|
|
configmap:
|
||
|
|
config:
|
||
|
|
enabled: true
|
||
|
|
data:
|
||
|
|
nginx-config: |-
|
||
|
|
events {
|
||
|
|
worker_connections 1024;
|
||
|
|
}
|
||
|
|
http {
|
||
|
|
include /etc/nginx/mime.types;
|
||
|
|
server {
|
||
|
|
listen 80;
|
||
|
|
server_name _;
|
||
|
|
client_max_body_size 16M;
|
||
|
|
# serve media files
|
||
|
|
location /media/ {
|
||
|
|
alias /media/;
|
||
|
|
}
|
||
|
|
# serve static files
|
||
|
|
location /static/ {
|
||
|
|
alias /static/;
|
||
|
|
}
|
||
|
|
# pass requests for dynamic content to gunicorn
|
||
|
|
location / {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_pass http://localhost:8080;
|
||
|
|
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
env:
|
||
|
|
DEBUG: 0
|
||
|
|
ALLOWED_HOSTS: "*"
|
||
|
|
CSRF_TRUSTED_ORIGINS: ""
|
||
|
|
GUNICORN_MEDIA: 0
|
||
|
|
FRACTION_PREF_DEFAULT: 0
|
||
|
|
COMMENT_PREF_DEFAULT: 1
|
||
|
|
SHOPPING_MIN_AUTOSYNC_INTERVAL: 5
|
||
|
|
TIMEZONE: "{{ .Values.TZ }}"
|
||
|
|
DB_ENGINE: "django.db.backends.postgresql"
|
||
|
|
POSTGRES_DB: "{{ .Values.postgresql.postgresqlDatabase }}"
|
||
|
|
POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}"
|
||
|
|
POSTGRES_PORT: "5432"
|
||
|
|
POSTGRES_PASSWORD:
|
||
|
|
secretKeyRef:
|
||
|
|
name: dbcreds
|
||
|
|
key: postgresql-password
|
||
|
|
POSTGRES_HOST:
|
||
|
|
secretKeyRef:
|
||
|
|
name: dbcreds
|
||
|
|
key: plainhost
|
||
|
|
SECRET_KEY:
|
||
|
|
secretKeyRef:
|
||
|
|
name: recipes-secrets
|
||
|
|
key: SECRET_KEY
|
||
|
|
|
||
|
|
additionalContainers:
|
||
|
|
nginx:
|
||
|
|
name: nginx
|
||
|
|
image: "{{ .Values.nginxImage.repository }}:{{ .Values.nginxImage.tag }}"
|
||
|
|
ports:
|
||
|
|
- containerPort: 80
|
||
|
|
name: main
|
||
|
|
volumeMounts:
|
||
|
|
- name: recipes-config
|
||
|
|
mountPath: "/etc/nginx/nginx.conf"
|
||
|
|
subPath: nginx-config
|
||
|
|
readOnly: true
|
||
|
|
- name: media
|
||
|
|
mountPath: "/media"
|
||
|
|
- name: static
|
||
|
|
mountPath: "/static"
|
||
|
|
|
||
|
|
service:
|
||
|
|
main:
|
||
|
|
ports:
|
||
|
|
main:
|
||
|
|
port: 10029
|
||
|
|
targetPort: 80
|
||
|
|
|
||
|
|
persistence:
|
||
|
|
media:
|
||
|
|
enabled: true
|
||
|
|
mountPath: "/opt/recipes/mediafiles"
|
||
|
|
static:
|
||
|
|
enabled: true
|
||
|
|
type: emptyDir
|
||
|
|
mountPath: "/opt/recipes/staticfiles"
|
||
|
|
recipes-config:
|
||
|
|
enabled: "true"
|
||
|
|
mountPath: "/etc/nginx/nginx.conf"
|
||
|
|
subPath: "nginx.conf"
|
||
|
|
type: "custom"
|
||
|
|
volumeSpec:
|
||
|
|
configMap:
|
||
|
|
name: '{{ printf "%v-config" (include "tc.common.names.fullname" .) }}'
|
||
|
|
|
||
|
|
postgresql:
|
||
|
|
enabled: true
|
||
|
|
existingSecret: "dbcreds"
|
||
|
|
postgresqlUsername: recipes
|
||
|
|
postgresqlDatabase: recipes
|
||
|
|
|
||
|
|
portal:
|
||
|
|
enabled: true
|