Merge pull request 'cleanup: drop felhom-system stale copies + fix plex datasource + drop obsolete umami config' (#85) from cleanup/felhom-stale-plex-renovate into main
This commit was merged in pull request #85.
This commit is contained in:
@@ -73,16 +73,6 @@ data:
|
||||
"datasourceTemplate": "docker",
|
||||
"packageNameTemplate": "linuxserver/{{depName}}",
|
||||
"versioningTemplate": "regex:^version-(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)\\.(?<build>\\d+)$"
|
||||
},
|
||||
{
|
||||
"description": "umami: the docker image tag is `postgresql-vX.Y.Z` (the PostgreSQL-flavored variant). Default docker versioning rejects the prefix. Same fix as termix/servarr: regex versioning parses the prefixed value; ghcr.io tag list is filtered to the postgresql-v* track only.",
|
||||
"customType": "regex",
|
||||
"managerFilePatterns": ["/felhom-system/umami\\.ya?ml$/"],
|
||||
"matchStrings": [
|
||||
"image:\\s+(?<depName>ghcr\\.io/umami-software/umami):(?<currentValue>postgresql-v\\d+\\.\\d+\\.\\d+)"
|
||||
],
|
||||
"datasourceTemplate": "docker",
|
||||
"versioningTemplate": "regex:^postgresql-v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$"
|
||||
}
|
||||
],
|
||||
"packageRules": [
|
||||
@@ -160,11 +150,6 @@ data:
|
||||
],
|
||||
"enabled": false
|
||||
},
|
||||
{
|
||||
"description": "umami: same disable pattern. customManager handles extraction; kubernetes-manager would silently skip `postgresql-vX.Y.Z`.",
|
||||
"matchManagers": ["kubernetes"],
|
||||
"matchPackageNames": ["ghcr.io/umami-software/umami"],
|
||||
"enabled": false
|
||||
}
|
||||
],
|
||||
"labels": ["renovate"]
|
||||
|
||||
@@ -1,142 +0,0 @@
|
||||
# Contact Mailer - Lightweight email sender for felhom.eu contact form
|
||||
# Uses Resend.com API for transactional email delivery.
|
||||
#
|
||||
# PREREQUISITES:
|
||||
# 1. Build and push the container image:
|
||||
# docker build -t contact-mailer:latest .
|
||||
# # Option A: Push to Gitea registry (if configured):
|
||||
# # docker tag contact-mailer:latest gitea.felhom.eu/felhom/contact-mailer:latest
|
||||
# # docker push gitea.felhom.eu/felhom/contact-mailer:latest
|
||||
# # Option B: Import directly into k3s (single node):
|
||||
# # docker save contact-mailer:latest | sudo k3s ctr images import -
|
||||
#
|
||||
# 2. Create the Secret with your Resend API key:
|
||||
# kubectl create secret generic contact-mailer-config \
|
||||
# --namespace=felhom-system \
|
||||
# --from-literal=RESEND_API_KEY='re_xxxxxxxxxxxx'
|
||||
#
|
||||
# 3. Apply this manifest:
|
||||
# kubectl apply -f contact-mailer.yaml
|
||||
#
|
||||
# 4. Test:
|
||||
# # Health check:
|
||||
# curl https://felhom.eu/api/healthz
|
||||
# # Send test email (only works if DEBUG=true):
|
||||
# curl -X POST https://felhom.eu/api/debug/test
|
||||
#
|
||||
# 5. Update contact form endpoint in kapcsolat.html:
|
||||
# CONFIG.formEndpoint = '/api/contact';
|
||||
#
|
||||
# DEBUGGING:
|
||||
# kubectl logs -n felhom-system deploy/contact-mailer -f
|
||||
# kubectl exec -it -n felhom-system deploy/contact-mailer -- wget -qO- http://localhost:8080/healthz
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: contact-mailer
|
||||
namespace: felhom-system
|
||||
labels:
|
||||
app: contact-mailer
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: contact-mailer
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: contact-mailer
|
||||
spec:
|
||||
containers:
|
||||
- name: contact-mailer
|
||||
image: contact-mailer:latest
|
||||
# Use 'Never' for locally imported images, 'Always' for registry
|
||||
imagePullPolicy: Never
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
env:
|
||||
- name: RESEND_API_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: contact-mailer-config
|
||||
key: RESEND_API_KEY
|
||||
- name: FROM_EMAIL
|
||||
value: "Felhom.eu <noreply@felhom.eu>"
|
||||
- name: TO_EMAIL
|
||||
value: "info@felhom.eu"
|
||||
- name: ALLOWED_ORIGIN
|
||||
value: "https://felhom.eu"
|
||||
- name: TZ
|
||||
value: "Europe/Budapest"
|
||||
# Set to "true" to enable /debug/test endpoint
|
||||
- name: DEBUG
|
||||
value: "false"
|
||||
resources:
|
||||
requests:
|
||||
memory: "16Mi"
|
||||
cpu: "5m"
|
||||
limits:
|
||||
memory: "64Mi"
|
||||
cpu: "100m"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 8080
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 8080
|
||||
initialDelaySeconds: 3
|
||||
periodSeconds: 10
|
||||
securityContext:
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
readOnlyRootFilesystem: true
|
||||
allowPrivilegeEscalation: false
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: contact-mailer
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
selector:
|
||||
app: contact-mailer
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 8080
|
||||
---
|
||||
# Ingress: routes felhom.eu/api/* to the contact mailer
|
||||
# This is a SEPARATE ingress from the website - nginx-ingress merges them
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: contact-mailer
|
||||
namespace: felhom-system
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
# Allow larger uploads for attachments
|
||||
nginx.ingress.kubernetes.io/proxy-body-size: "25m"
|
||||
# Timeout for large file uploads
|
||||
nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
|
||||
nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
|
||||
spec:
|
||||
ingressClassName: nginx-internal
|
||||
tls:
|
||||
- hosts:
|
||||
- felhom.eu
|
||||
secretName: felhom-webpage-tls
|
||||
rules:
|
||||
- host: felhom.eu
|
||||
http:
|
||||
paths:
|
||||
- path: /api
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: contact-mailer
|
||||
port:
|
||||
number: 80
|
||||
@@ -1,194 +0,0 @@
|
||||
# Healthchecks - Self-hosted cron/backup monitoring with dead man's switch
|
||||
# Dashboard: https://status.felhom.eu
|
||||
# Ping endpoint: https://status.felhom.eu/ping/<uuid>
|
||||
#
|
||||
# Customer servers ping this after successful backup.
|
||||
# If a ping is missed, Healthchecks sends email alerts.
|
||||
#
|
||||
# After deploying, create superuser:
|
||||
# kubectl exec -it -n felhom-system deploy/healthchecks -- python manage.py createsuperuser
|
||||
#
|
||||
# SMTP: Configure the Secret below with your email provider credentials.
|
||||
# Recommended free options:
|
||||
# - Resend.com (3000 emails/month free, easy setup)
|
||||
# - Brevo/Sendinblue (300 emails/day free)
|
||||
# - SMTP2GO (1000 emails/month free)
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: healthchecks-data
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: healthchecks
|
||||
namespace: felhom-system
|
||||
labels:
|
||||
app: healthchecks
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: healthchecks
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: healthchecks
|
||||
spec:
|
||||
securityContext:
|
||||
fsGroup: 999
|
||||
containers:
|
||||
- name: healthchecks
|
||||
image: healthchecks/healthchecks:v4.2
|
||||
ports:
|
||||
- containerPort: 8000
|
||||
env:
|
||||
# --- Site settings ---
|
||||
- name: SITE_ROOT
|
||||
value: "https://status.felhom.eu"
|
||||
- name: SITE_NAME
|
||||
value: "Felhom Monitoring"
|
||||
- name: ALLOWED_HOSTS
|
||||
value: "status.felhom.eu"
|
||||
- name: PING_ENDPOINT
|
||||
value: "https://status.felhom.eu/ping/"
|
||||
- name: DEBUG
|
||||
value: "False"
|
||||
- name: REGISTRATION_OPEN
|
||||
value: "False"
|
||||
- name: DB
|
||||
value: "sqlite"
|
||||
- name: DB_NAME
|
||||
value: "/data/hc.sqlite"
|
||||
- name: TZ
|
||||
value: "Europe/Budapest"
|
||||
|
||||
# --- Secrets (from Secret) ---
|
||||
- name: SECRET_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: SECRET_KEY
|
||||
- name: SUPERUSER_EMAIL
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: SUPERUSER_EMAIL
|
||||
- name: SUPERUSER_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: SUPERUSER_PASSWORD
|
||||
- name: EMAIL_HOST
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: EMAIL_HOST
|
||||
- name: EMAIL_PORT
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: EMAIL_PORT
|
||||
- name: EMAIL_HOST_USER
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: EMAIL_HOST_USER
|
||||
- name: EMAIL_HOST_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: EMAIL_HOST_PASSWORD
|
||||
- name: EMAIL_USE_TLS
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: EMAIL_USE_TLS
|
||||
- name: EMAIL_USE_VERIFICATION
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: EMAIL_USE_VERIFICATION
|
||||
- name: DEFAULT_FROM_EMAIL
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: healthchecks-config
|
||||
key: DEFAULT_FROM_EMAIL
|
||||
volumeMounts:
|
||||
- name: data
|
||||
mountPath: /data
|
||||
resources:
|
||||
requests:
|
||||
memory: "128Mi"
|
||||
cpu: "50m"
|
||||
limits:
|
||||
memory: "512Mi"
|
||||
cpu: "500m"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /api/v3/status/
|
||||
port: 8000
|
||||
httpHeaders:
|
||||
- name: Host
|
||||
value: status.felhom.eu
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 60
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /api/v3/status/
|
||||
port: 8000
|
||||
httpHeaders:
|
||||
- name: Host
|
||||
value: status.felhom.eu
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
volumes:
|
||||
- name: data
|
||||
persistentVolumeClaim:
|
||||
claimName: healthchecks-data
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: healthchecks
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
selector:
|
||||
app: healthchecks
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 8000
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: healthchecks
|
||||
namespace: felhom-system
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
spec:
|
||||
ingressClassName: nginx-internal
|
||||
tls:
|
||||
- hosts:
|
||||
- status.felhom.eu
|
||||
secretName: healthchecks-tls
|
||||
rules:
|
||||
- host: status.felhom.eu
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: healthchecks
|
||||
port:
|
||||
number: 80
|
||||
@@ -1,288 +0,0 @@
|
||||
# Umami v3 - Privacy-focused web analytics for felhom.eu
|
||||
# Dashboard: https://stats.felhom.eu
|
||||
# Tracking: Add <script> tag to website HTML pages (see bottom of file)
|
||||
#
|
||||
# Umami v3 requires PostgreSQL (no SQLite/MySQL support).
|
||||
# This manifest deploys a dedicated small PostgreSQL instance alongside Umami
|
||||
# to keep it self-contained within the felhom-system namespace.
|
||||
#
|
||||
# PREREQUISITES:
|
||||
# 1. Create the Secret with credentials:
|
||||
# APP_SECRET: Random string for session encryption (generate with: openssl rand -hex 32)
|
||||
# POSTGRES_PASSWORD: Database password (generate with: openssl rand -hex 16)
|
||||
#
|
||||
# kubectl create secret generic umami-config \
|
||||
# --namespace=felhom-system \
|
||||
# --from-literal=APP_SECRET="$(openssl rand -hex 32)" \
|
||||
# --from-literal=POSTGRES_PASSWORD="$(openssl rand -hex 16)"
|
||||
#
|
||||
# 2. Apply this manifest:
|
||||
# kubectl apply -f umami.yaml
|
||||
#
|
||||
# 3. Wait for pods to be ready (~30-60 seconds for first start, DB init):
|
||||
# kubectl get pods -n felhom-system -l app=umami -w
|
||||
# kubectl get pods -n felhom-system -l app=umami-db -w
|
||||
#
|
||||
# 4. Login at https://stats.felhom.eu
|
||||
# Default credentials: admin / umami
|
||||
# ⚠️ CHANGE THE PASSWORD IMMEDIATELY after first login!
|
||||
#
|
||||
# 5. Add your website in Umami:
|
||||
# Settings → Websites → Add website → Name: "felhom.eu", Domain: "felhom.eu"
|
||||
# Copy the tracking code and add it to your HTML pages (see bottom of file).
|
||||
#
|
||||
# DEBUGGING:
|
||||
# kubectl logs -n felhom-system deploy/umami -f
|
||||
# kubectl logs -n felhom-system deploy/umami-db -f
|
||||
# kubectl exec -it -n felhom-system deploy/umami -- wget -qO- http://localhost:3000/api/heartbeat
|
||||
# kubectl exec -it -n felhom-system deploy/umami-db -- pg_isready -U umami
|
||||
#
|
||||
# BACKUP:
|
||||
# # Dump the database:
|
||||
# kubectl exec -n felhom-system deploy/umami-db -- pg_dump -U umami umami > umami-backup-$(date +%Y%m%d).sql
|
||||
# # Restore:
|
||||
# cat umami-backup-YYYYMMDD.sql | kubectl exec -i -n felhom-system deploy/umami-db -- psql -U umami umami
|
||||
|
||||
# =============================================================================
|
||||
# PERSISTENT STORAGE
|
||||
# =============================================================================
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: umami-db-data
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 2Gi
|
||||
|
||||
# =============================================================================
|
||||
# POSTGRESQL - Dedicated database for Umami
|
||||
# =============================================================================
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: umami-db
|
||||
namespace: felhom-system
|
||||
labels:
|
||||
app: umami-db
|
||||
spec:
|
||||
replicas: 1
|
||||
strategy:
|
||||
type: Recreate
|
||||
selector:
|
||||
matchLabels:
|
||||
app: umami-db
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: umami-db
|
||||
spec:
|
||||
containers:
|
||||
- name: postgres
|
||||
image: postgres:16-alpine
|
||||
ports:
|
||||
- containerPort: 5432
|
||||
env:
|
||||
- name: POSTGRES_DB
|
||||
value: "umami"
|
||||
- name: POSTGRES_USER
|
||||
value: "umami"
|
||||
- name: POSTGRES_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: umami-config
|
||||
key: POSTGRES_PASSWORD
|
||||
- name: PGDATA
|
||||
value: "/var/lib/postgresql/data/pgdata"
|
||||
volumeMounts:
|
||||
- name: data
|
||||
mountPath: /var/lib/postgresql/data
|
||||
resources:
|
||||
requests:
|
||||
memory: "64Mi"
|
||||
cpu: "25m"
|
||||
limits:
|
||||
memory: "256Mi"
|
||||
cpu: "500m"
|
||||
livenessProbe:
|
||||
exec:
|
||||
command:
|
||||
- pg_isready
|
||||
- -U
|
||||
- umami
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
exec:
|
||||
command:
|
||||
- pg_isready
|
||||
- -U
|
||||
- umami
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
volumes:
|
||||
- name: data
|
||||
persistentVolumeClaim:
|
||||
claimName: umami-db-data
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: umami-db
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
selector:
|
||||
app: umami-db
|
||||
ports:
|
||||
- port: 5432
|
||||
targetPort: 5432
|
||||
|
||||
# =============================================================================
|
||||
# UMAMI - Web Analytics Application
|
||||
# =============================================================================
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: umami
|
||||
namespace: felhom-system
|
||||
labels:
|
||||
app: umami
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: umami
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: umami
|
||||
spec:
|
||||
# Wait for DB to be available before starting Umami
|
||||
initContainers:
|
||||
- name: wait-for-db
|
||||
image: postgres:16-alpine
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
echo "Waiting for PostgreSQL to be ready..."
|
||||
until pg_isready -h umami-db -p 5432 -U umami; do
|
||||
echo " ...still waiting"
|
||||
sleep 2
|
||||
done
|
||||
echo "PostgreSQL is ready!"
|
||||
resources:
|
||||
requests:
|
||||
memory: "16Mi"
|
||||
cpu: "5m"
|
||||
limits:
|
||||
memory: "32Mi"
|
||||
cpu: "50m"
|
||||
containers:
|
||||
- name: umami
|
||||
image: ghcr.io/umami-software/umami:postgresql-v1.38.0
|
||||
ports:
|
||||
- containerPort: 3000
|
||||
env:
|
||||
- name: POSTGRES_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: umami-config
|
||||
key: POSTGRES_PASSWORD
|
||||
- name: DATABASE_URL
|
||||
value: "postgresql://umami:$(POSTGRES_PASSWORD)@umami-db:5432/umami"
|
||||
- name: APP_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: umami-config
|
||||
key: APP_SECRET
|
||||
# Disable Umami's own telemetry
|
||||
- name: DISABLE_TELEMETRY
|
||||
value: "1"
|
||||
- name: TZ
|
||||
value: "Europe/Budapest"
|
||||
resources:
|
||||
requests:
|
||||
memory: "128Mi"
|
||||
cpu: "50m"
|
||||
limits:
|
||||
memory: "512Mi"
|
||||
cpu: "500m"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /api/heartbeat
|
||||
port: 3000
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /api/heartbeat
|
||||
port: 3000
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 10
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: umami
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
selector:
|
||||
app: umami
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 3000
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: umami
|
||||
namespace: felhom-system
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
spec:
|
||||
ingressClassName: nginx-internal
|
||||
tls:
|
||||
- hosts:
|
||||
- stats.felhom.eu
|
||||
secretName: umami-tls
|
||||
rules:
|
||||
- host: stats.felhom.eu
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: umami
|
||||
port:
|
||||
number: 80
|
||||
|
||||
# =============================================================================
|
||||
# TRACKING SCRIPT - Add to your HTML pages
|
||||
# =============================================================================
|
||||
#
|
||||
# After deploying and creating your website in Umami, add this to every page's
|
||||
# <head> section (replace WEBSITE_ID with the ID from Umami dashboard):
|
||||
#
|
||||
# <script defer src="https://stats.felhom.eu/script.js" data-website-id="YOUR-WEBSITE-ID"></script>
|
||||
#
|
||||
# The script is <2KB, async/deferred, cookie-free, and GDPR compliant.
|
||||
# No cookie consent banner needed!
|
||||
#
|
||||
# TIP: Since your HTML files are managed via FileBrowser, you can add the
|
||||
# script tag to all pages at once. Add it right before </head> in:
|
||||
# - index.html
|
||||
# - alkalmazasok.html
|
||||
# - technologiak.html
|
||||
# - gyik.html
|
||||
# - kapcsolat.html
|
||||
# - biztonsagimentes.html (if exists)
|
||||
# - Any other pages
|
||||
@@ -1,286 +0,0 @@
|
||||
# FileBrowser + Webpage deployment for felhom.eu
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: felhom-website-content
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: filebrowser-db
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 100Mi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: filebrowser-config
|
||||
namespace: felhom-system
|
||||
data:
|
||||
.filebrowser.json: |
|
||||
{
|
||||
"port": 8080,
|
||||
"baseURL": "",
|
||||
"address": "0.0.0.0",
|
||||
"log": "stdout",
|
||||
"database": "/database/filebrowser.db",
|
||||
"root": "/srv"
|
||||
}
|
||||
---
|
||||
# ===================
|
||||
# NGINX CONFIG FOR CLEAN URLs
|
||||
# ===================
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: nginx-config
|
||||
namespace: felhom-system
|
||||
data:
|
||||
default.conf: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
# Enable clean URLs - serve .html files without extension
|
||||
location / {
|
||||
try_files $uri $uri.html $uri/ =404;
|
||||
}
|
||||
|
||||
# Cache static assets
|
||||
location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2)$ {
|
||||
expires 7d;
|
||||
add_header Cache-Control "public, immutable";
|
||||
}
|
||||
|
||||
# Security headers
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
|
||||
# Error pages
|
||||
error_page 404 /404.html;
|
||||
error_page 500 502 503 504 /50x.html;
|
||||
}
|
||||
---
|
||||
# ===================
|
||||
# FILEBROWSER
|
||||
# ===================
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: filebrowser
|
||||
namespace: felhom-system
|
||||
labels:
|
||||
app: filebrowser
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: filebrowser
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: filebrowser
|
||||
spec:
|
||||
containers:
|
||||
- name: filebrowser
|
||||
image: filebrowser/filebrowser:v2.63.13
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
volumeMounts:
|
||||
- name: website-content
|
||||
mountPath: /srv
|
||||
- name: database
|
||||
mountPath: /database
|
||||
- name: config
|
||||
mountPath: /.filebrowser.json
|
||||
subPath: .filebrowser.json
|
||||
resources:
|
||||
requests:
|
||||
memory: "64Mi"
|
||||
cpu: "50m"
|
||||
limits:
|
||||
memory: "256Mi"
|
||||
cpu: "500m"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 8080
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 8080
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
volumes:
|
||||
- name: website-content
|
||||
persistentVolumeClaim:
|
||||
claimName: felhom-website-content
|
||||
- name: database
|
||||
persistentVolumeClaim:
|
||||
claimName: filebrowser-db
|
||||
- name: config
|
||||
configMap:
|
||||
name: filebrowser-config
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: filebrowser
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
selector:
|
||||
app: filebrowser
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 8080
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: filebrowser
|
||||
namespace: felhom-system
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
nginx.ingress.kubernetes.io/proxy-body-size: "100m"
|
||||
spec:
|
||||
ingressClassName: nginx-internal
|
||||
tls:
|
||||
- hosts:
|
||||
- files.felhom.eu
|
||||
secretName: filebrowser-tls
|
||||
rules:
|
||||
- host: files.felhom.eu
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: filebrowser
|
||||
port:
|
||||
number: 80
|
||||
---
|
||||
# ===================
|
||||
# WEBPAGE (nginx)
|
||||
# ===================
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: felhom-webpage
|
||||
namespace: felhom-system
|
||||
labels:
|
||||
app: felhom-webpage
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: felhom-webpage
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: felhom-webpage
|
||||
spec:
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:alpine
|
||||
ports:
|
||||
- containerPort: 80
|
||||
volumeMounts:
|
||||
- name: website-content
|
||||
mountPath: /usr/share/nginx/html
|
||||
- name: nginx-config
|
||||
mountPath: /etc/nginx/conf.d/default.conf
|
||||
subPath: default.conf
|
||||
resources:
|
||||
requests:
|
||||
memory: "32Mi"
|
||||
cpu: "10m"
|
||||
limits:
|
||||
memory: "128Mi"
|
||||
cpu: "200m"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 80
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 80
|
||||
initialDelaySeconds: 3
|
||||
periodSeconds: 10
|
||||
volumes:
|
||||
- name: website-content
|
||||
persistentVolumeClaim:
|
||||
claimName: felhom-website-content
|
||||
- name: nginx-config
|
||||
configMap:
|
||||
name: nginx-config
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: felhom-webpage
|
||||
namespace: felhom-system
|
||||
spec:
|
||||
selector:
|
||||
app: felhom-webpage
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: felhom-webpage
|
||||
namespace: felhom-system
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
spec:
|
||||
ingressClassName: nginx-internal
|
||||
tls:
|
||||
- hosts:
|
||||
- felhom.eu
|
||||
- www.felhom.eu
|
||||
secretName: felhom-webpage-tls
|
||||
rules:
|
||||
- host: felhom.eu
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: felhom-webpage
|
||||
port:
|
||||
number: 80
|
||||
- host: www.felhom.eu
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: felhom-webpage
|
||||
port:
|
||||
number: 80
|
||||
@@ -3,7 +3,7 @@ image:
|
||||
# -- The public dockerhub registry
|
||||
registry: index.docker.io
|
||||
repository: plexinc/pms-docker
|
||||
# renovate: datasource=custom.plex depName=plex versioning=loose
|
||||
# renovate: datasource=docker depName=plexinc/pms-docker versioning=regex:^(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)\.(?<build>\d+)-[a-f0-9]+$
|
||||
tag: "1.43.2.10687-563d026ea"
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
Reference in New Issue
Block a user