fixed geoip tag
This commit is contained in:
+138
-138
@@ -56,47 +56,47 @@ spec:
|
||||
app.kubernetes.io/name: wanderer-meilisearch
|
||||
spec:
|
||||
containers:
|
||||
- name: meilisearch
|
||||
image: getmeili/meilisearch:v1.11.3
|
||||
env:
|
||||
- name: MEILI_MASTER_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wanderer-app
|
||||
key: meili-master-key
|
||||
- name: MEILI_ENV
|
||||
value: "production"
|
||||
- name: MEILI_NO_ANALYTICS
|
||||
value: "true"
|
||||
ports:
|
||||
- containerPort: 7700
|
||||
name: http
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
volumeMounts:
|
||||
- name: meili-data
|
||||
mountPath: /meili_data
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
- name: meilisearch
|
||||
image: getmeili/meilisearch:v1.11.3
|
||||
env:
|
||||
- name: MEILI_MASTER_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wanderer-app
|
||||
key: meili-master-key
|
||||
- name: MEILI_ENV
|
||||
value: "production"
|
||||
- name: MEILI_NO_ANALYTICS
|
||||
value: "true"
|
||||
ports:
|
||||
- containerPort: 7700
|
||||
name: http
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
volumeMounts:
|
||||
- name: meili-data
|
||||
mountPath: /meili_data
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
volumes:
|
||||
- name: meili-data
|
||||
persistentVolumeClaim:
|
||||
claimName: wanderer-meilisearch
|
||||
- name: meili-data
|
||||
persistentVolumeClaim:
|
||||
claimName: wanderer-meilisearch
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
@@ -121,52 +121,52 @@ spec:
|
||||
app.kubernetes.io/name: wanderer-db
|
||||
spec:
|
||||
containers:
|
||||
- name: pocketbase
|
||||
image: flomp/wanderer-db:v0.18.3
|
||||
env:
|
||||
- name: ORIGIN
|
||||
value: "https://wanderer.dooplex.hu"
|
||||
- name: MEILI_URL
|
||||
value: "http://wanderer-meilisearch:7700"
|
||||
- name: MEILI_MASTER_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wanderer-app
|
||||
key: meili-master-key
|
||||
- name: POCKETBASE_ENCRYPTION_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wanderer-app
|
||||
key: pocketbase-encryption-key
|
||||
ports:
|
||||
- containerPort: 8090
|
||||
name: http
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 128Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
volumeMounts:
|
||||
- name: pb-data
|
||||
mountPath: /pb_data
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /api/health
|
||||
port: http
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /api/health
|
||||
port: http
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
- name: pocketbase
|
||||
image: flomp/wanderer-db:v0.18.3
|
||||
env:
|
||||
- name: ORIGIN
|
||||
value: "https://wanderer.dooplex.hu"
|
||||
- name: MEILI_URL
|
||||
value: "http://wanderer-meilisearch:7700"
|
||||
- name: MEILI_MASTER_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wanderer-app
|
||||
key: meili-master-key
|
||||
- name: POCKETBASE_ENCRYPTION_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wanderer-app
|
||||
key: pocketbase-encryption-key
|
||||
ports:
|
||||
- containerPort: 8090
|
||||
name: http
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 128Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
volumeMounts:
|
||||
- name: pb-data
|
||||
mountPath: /pb_data
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /api/health
|
||||
port: http
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /api/health
|
||||
port: http
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
volumes:
|
||||
- name: pb-data
|
||||
persistentVolumeClaim:
|
||||
claimName: wanderer-db
|
||||
- name: pb-data
|
||||
persistentVolumeClaim:
|
||||
claimName: wanderer-db
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
@@ -191,46 +191,46 @@ spec:
|
||||
app.kubernetes.io/name: wanderer-web
|
||||
spec:
|
||||
containers:
|
||||
- name: wanderer-web
|
||||
image: flomp/wanderer-web:v0.18.3
|
||||
env:
|
||||
- name: NODE_TLS_REJECT_UNAUTHORIZED
|
||||
value: "0"
|
||||
- name: NODE_OPTIONS
|
||||
value: "--max-old-space-size=7168"
|
||||
- name: ORIGIN
|
||||
value: "https://wanderer.dooplex.hu"
|
||||
- name: POCKETBASE_URL
|
||||
value: "http://wanderer-db:8090"
|
||||
- name: PUBLIC_POCKETBASE_URL
|
||||
value: "https://pb.wanderer.dooplex.hu"
|
||||
- name: MEILI_URL
|
||||
value: "http://wanderer-meilisearch:7700"
|
||||
- name: MEILI_MASTER_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wanderer-app
|
||||
key: meili-master-key
|
||||
- name: PUBLIC_DISABLE_SIGNUP
|
||||
value: "true"
|
||||
- name: BODY_SIZE_LIMIT
|
||||
value: "Infinity"
|
||||
ports:
|
||||
- containerPort: 3000
|
||||
name: http
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 64Mi
|
||||
limits:
|
||||
memory: 8Gi
|
||||
readinessProbe:
|
||||
tcpSocket:
|
||||
port: 3000
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 1
|
||||
failureThreshold: 3
|
||||
- name: wanderer-web
|
||||
image: flomp/wanderer-web:v0.18.3
|
||||
env:
|
||||
- name: NODE_TLS_REJECT_UNAUTHORIZED
|
||||
value: "0"
|
||||
- name: NODE_OPTIONS
|
||||
value: "--max-old-space-size=7168"
|
||||
- name: ORIGIN
|
||||
value: "https://wanderer.dooplex.hu"
|
||||
- name: POCKETBASE_URL
|
||||
value: "http://wanderer-db:8090"
|
||||
- name: PUBLIC_POCKETBASE_URL
|
||||
value: "https://pb.wanderer.dooplex.hu"
|
||||
- name: MEILI_URL
|
||||
value: "http://wanderer-meilisearch:7700"
|
||||
- name: MEILI_MASTER_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wanderer-app
|
||||
key: meili-master-key
|
||||
- name: PUBLIC_DISABLE_SIGNUP
|
||||
value: "true"
|
||||
- name: BODY_SIZE_LIMIT
|
||||
value: "Infinity"
|
||||
ports:
|
||||
- containerPort: 3000
|
||||
name: http
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 64Mi
|
||||
limits:
|
||||
memory: 8Gi
|
||||
readinessProbe:
|
||||
tcpSocket:
|
||||
port: 3000
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 1
|
||||
failureThreshold: 3
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
@@ -243,9 +243,9 @@ metadata:
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: http
|
||||
port: 7700
|
||||
targetPort: http
|
||||
- name: http
|
||||
port: 7700
|
||||
targetPort: http
|
||||
selector:
|
||||
app.kubernetes.io/instance: wanderer
|
||||
app.kubernetes.io/name: wanderer-meilisearch
|
||||
@@ -261,9 +261,9 @@ metadata:
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: http
|
||||
port: 8090
|
||||
targetPort: http
|
||||
- name: http
|
||||
port: 8090
|
||||
targetPort: http
|
||||
selector:
|
||||
app.kubernetes.io/instance: wanderer
|
||||
app.kubernetes.io/name: wanderer-db
|
||||
@@ -279,9 +279,9 @@ metadata:
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: http
|
||||
port: 3000
|
||||
targetPort: http
|
||||
- name: http
|
||||
port: 3000
|
||||
targetPort: http
|
||||
selector:
|
||||
app.kubernetes.io/instance: wanderer
|
||||
app.kubernetes.io/name: wanderer-web
|
||||
@@ -298,7 +298,7 @@ metadata:
|
||||
# optional, only if you actually use external-dns:
|
||||
external-dns.alpha.kubernetes.io/hostname: wanderer.dooplex.hu
|
||||
nginx.ingress.kubernetes.io/configuration-snippet: |
|
||||
if ($geoip2_city_country_code != "HU") {
|
||||
if ($geoip2_country_code != "HU") {
|
||||
return 403 "Access restricted to Hungary";
|
||||
}
|
||||
spec:
|
||||
@@ -360,7 +360,7 @@ metadata:
|
||||
recurring-job.longhorn.io/source: enabled
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
@@ -378,8 +378,8 @@ metadata:
|
||||
recurring-job.longhorn.io/source: enabled
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 5Gi
|
||||
storage: 5Gi
|
||||
|
||||
Reference in New Issue
Block a user