admin/homelab-manifests
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

added plantit

Browse Source
This commit is contained in:
authentik Default Admin
2026-01-02 14:36:07 +01:00
parent 8936039d93
commit 99e2f04906
2 changed files with 421 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
argocd-apps/homelab.yaml
+22
View File
@@ -723,4 +723,26 @@ spec:
syncOptions: syncOptions:
- CreateNamespace=true - CreateNamespace=true
- PruneLast=true - PruneLast=true
---
# Plantit
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: plantit
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: homelab
source:
repoURL: https://gitea.dooplex.hu/admin/homelab-manifests.git
targetRevision: main
path: plantit-system
destination:
server: https://kubernetes.default.svc
namespace: plantit-system
syncPolicy:
syncOptions:
- CreateNamespace=true
- PruneLast=true
--- ---
plantit-system/plantit.yaml
+399
View File
@@ -0,0 +1,399 @@
# Plant-it - Self-hosted plant care companion
# https://github.com/MDeLuise/plant-it
# Version: v1.0.0
# Domain: plantit.dooplex.hu
# Auth: Authentik Forward Auth (Proxy) - no native OIDC support
#
# Authentik Setup:
# 1. Create Proxy Provider:
# - Name: plantit
# - External Host: https://plantit.dooplex.hu
# - Mode: Forward auth (single application)
# 2. Create Application linked to this provider
# 3. Create Outpost (or add to existing) with this provider
---
apiVersion: v1
kind: Namespace
metadata:
name: plantit-system
labels:
app.kubernetes.io/name: plantit
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: plantit-db
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-db
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-db
strategy:
type: Recreate
template:
metadata:
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-db
spec:
containers:
- name: mysql
image: mysql:8.0
env:
- name: MYSQL_ROOT_PASSWORD
valueFrom:
secretKeyRef:
name: plantit-db
key: root-password
- name: MYSQL_DATABASE
valueFrom:
secretKeyRef:
name: plantit-db
key: database
- name: MYSQL_USER
valueFrom:
secretKeyRef:
name: plantit-db
key: username
- name: MYSQL_PASSWORD
valueFrom:
secretKeyRef:
name: plantit-db
key: password
ports:
- containerPort: 3306
name: mysql
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
volumeMounts:
- name: data
mountPath: /var/lib/mysql
livenessProbe:
exec:
command:
- sh
- -c
- mysqladmin ping -u root -p$MYSQL_ROOT_PASSWORD
initialDelaySeconds: 30
periodSeconds: 10
readinessProbe:
exec:
command:
- sh
- -c
- mysqladmin ping -u root -p$MYSQL_ROOT_PASSWORD
initialDelaySeconds: 10
periodSeconds: 5
volumes:
- name: data
persistentVolumeClaim:
claimName: plantit-db
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: plantit-cache
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-cache
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-cache
template:
metadata:
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-cache
spec:
containers:
- name: redis
image: redis:7.2.1
ports:
- containerPort: 6379
name: redis
resources:
requests:
cpu: 50m
memory: 64Mi
limits:
cpu: 200m
memory: 128Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: plantit
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit
app.kubernetes.io/version: "1.0.0"
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit
strategy:
type: Recreate
template:
metadata:
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit
app.kubernetes.io/version: "1.0.0"
spec:
containers:
- name: plantit
image: msdeluise/plant-it-server:1.0.0
env:
# Database
- name: MYSQL_HOST
value: "plantit-db"
- name: MYSQL_PORT
value: "3306"
- name: MYSQL_DATABASE
valueFrom:
secretKeyRef:
name: plantit-db
key: database
- name: MYSQL_USERNAME
valueFrom:
secretKeyRef:
name: plantit-db
key: username
- name: MYSQL_PSW
valueFrom:
secretKeyRef:
name: plantit-db
key: password
# JWT
- name: JWT_SECRET
valueFrom:
secretKeyRef:
name: plantit-app
key: jwt-secret
- name: JWT_EXP
value: "1"
# Server config
- name: API_PORT
value: "8080"
- name: USERS_LIMIT
value: "-1"
- name: UPLOAD_DIR
value: "/upload-dir"
- name: LOG_LEVEL
value: "INFO"
- name: ALLOWED_ORIGINS
value: "*"
# Cache
- name: CACHE_TYPE
value: "redis"
- name: CACHE_TTL
value: "86400"
- name: CACHE_HOST
value: "plantit-cache"
- name: CACHE_PORT
value: "6379"
# FloraCodex API key (optional)
- name: FLORACODEX_KEY
value: ""
ports:
- containerPort: 8080
name: api
- containerPort: 3000
name: frontend
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
volumeMounts:
- name: uploads
mountPath: /upload-dir
livenessProbe:
httpGet:
path: /api/info
port: api
initialDelaySeconds: 60
periodSeconds: 30
readinessProbe:
httpGet:
path: /api/info
port: api
initialDelaySeconds: 30
periodSeconds: 10
volumes:
- name: uploads
persistentVolumeClaim:
claimName: plantit-uploads
---
apiVersion: v1
kind: Service
metadata:
name: plantit-db
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-db
spec:
type: ClusterIP
ports:
- name: mysql
port: 3306
targetPort: mysql
selector:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-db
---
apiVersion: v1
kind: Service
metadata:
name: plantit-cache
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-cache
spec:
type: ClusterIP
ports:
- name: redis
port: 6379
targetPort: redis
selector:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-cache
---
apiVersion: v1
kind: Service
metadata:
name: plantit
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit
spec:
type: ClusterIP
ports:
- name: frontend
port: 3000
targetPort: frontend
- name: api
port: 8080
targetPort: api
selector:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit
---
# Ingress with Authentik forward auth
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: plantit
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
external-dns.alpha.kubernetes.io/hostname: plantit.dooplex.hu,plantit.home
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
# Authentik forward auth
nginx.ingress.kubernetes.io/auth-url: http://ak-outpost-plantit-outpost.auth-system.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
nginx.ingress.kubernetes.io/auth-signin: https://plantit.dooplex.hu/outpost.goauthentik.io/start?rd=$escaped_request_uri
nginx.ingress.kubernetes.io/auth-snippet: |
proxy_set_header X-Forwarded-Host $http_host;
spec:
ingressClassName: nginx-internal
rules:
- host: plantit.dooplex.hu
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: plantit
port:
number: 3000
- path: /api
pathType: Prefix
backend:
service:
name: plantit
port:
number: 8080
- host: plantit.home
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: plantit
port:
number: 3000
- path: /api
pathType: Prefix
backend:
service:
name: plantit
port:
number: 8080
tls:
- hosts:
- plantit.dooplex.hu
secretName: plantit-tls
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: plantit-db
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-db
recurring-job-group.longhorn.io/needbackup: enabled
recurring-job.longhorn.io/source: enabled
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 2Gi
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: plantit-uploads
namespace: plantit-system
labels:
app.kubernetes.io/instance: plantit
app.kubernetes.io/name: plantit-uploads
recurring-job-group.longhorn.io/needbackup: enabled
recurring-job.longhorn.io/source: enabled
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 5Gi