811 lines
26 KiB
YAML
811 lines
26 KiB
YAML
# Glance Dashboard for Orsi
|
||
# Namespace: glance-system
|
||
# Domain: home.dooplex.hu
|
||
# Version: v0.8.4
|
||
#
|
||
# Features:
|
||
# - Custom background image (purple theme matching Homepage)
|
||
# - Custom logo
|
||
# - Weather widget (Budapest)
|
||
# - YouTube subscriptions
|
||
# - RSS feeds
|
||
# - To-do list
|
||
# - iFrames for Cal.com, Google Calendar, Outline
|
||
# - Bookmarks/Links to all apps
|
||
# - Calendar widget
|
||
#
|
||
# Authentik Integration:
|
||
# 1. Create Application: "Glance Home"
|
||
# 2. Create Provider: Proxy Provider with external host https://home.dooplex.hu
|
||
# 3. Create Outpost: glance-home-outpost
|
||
# 4. Update auth-url annotation with actual outpost service name
|
||
---
|
||
apiVersion: v1
|
||
kind: Namespace
|
||
metadata:
|
||
name: glance-system
|
||
labels:
|
||
app.kubernetes.io/name: glance
|
||
app.kubernetes.io/instance: glance-orsi
|
||
---
|
||
apiVersion: v1
|
||
kind: ConfigMap
|
||
metadata:
|
||
name: glance-config
|
||
namespace: glance-system
|
||
labels:
|
||
app.kubernetes.io/name: glance
|
||
app.kubernetes.io/instance: glance-orsi
|
||
data:
|
||
glance.yml: |
|
||
# Glance Configuration
|
||
# Documentation: https://github.com/glanceapp/glance/blob/main/docs/configuration.md
|
||
|
||
server:
|
||
host: 0.0.0.0
|
||
port: 8080
|
||
assets-path: /app/config/assets
|
||
|
||
branding:
|
||
logo-url: https://web.dooplex.hu/static/dooplex_logo_orsi_3.png
|
||
favicon-url: https://web.dooplex.hu/static/dooplex_favicon_orsi.png
|
||
app-name: "Orsi's Home"
|
||
app-icon-url: https://web.dooplex.hu/static/dooplex_favicon_orsi.png
|
||
app-background-color: "#2d1f3d"
|
||
hide-footer: true
|
||
|
||
theme:
|
||
disable-picker: true
|
||
background-color: 280 30 15
|
||
primary-color: 280 60 70
|
||
positive-color: 120 50 50
|
||
negative-color: 0 70 60
|
||
contrast-multiplier: 1.2
|
||
text-saturation-multiplier: 0.8
|
||
custom-css-file: /assets/custom.css
|
||
|
||
pages:
|
||
# ==================== HOME PAGE ====================
|
||
- name: Home
|
||
slug: home
|
||
width: wide
|
||
columns:
|
||
# ---------- LEFT COLUMN ----------
|
||
- size: small
|
||
widgets:
|
||
# Weather Widget
|
||
- type: weather
|
||
location: Budapest, Hungary
|
||
units: metric
|
||
hour-format: 24h
|
||
|
||
# Calendar Widget
|
||
- type: calendar
|
||
first-day-of-week: monday
|
||
|
||
# Quick Links - Productivity
|
||
- type: bookmarks
|
||
title: Productivity
|
||
groups:
|
||
- title: ""
|
||
links:
|
||
- title: Nextcloud
|
||
url: https://nextcloud.dooplex.hu
|
||
icon: si:nextcloud
|
||
- title: Outline
|
||
url: https://outline.dooplex.hu
|
||
icon: si:outline
|
||
- title: Paperless
|
||
url: https://paperless.dooplex.hu
|
||
icon: si:paperlessngx
|
||
- title: Vaultwarden
|
||
url: https://vaultwarden.dooplex.hu
|
||
icon: si:bitwarden
|
||
- title: Actual Budget
|
||
url: https://actualbudget.dooplex.hu
|
||
icon: si:actualbudget
|
||
- title: Tandoor
|
||
url: https://tandoor.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/tandoor.png
|
||
- title: Bookstack
|
||
url: https://bookstack.dooplex.hu
|
||
icon: si:bookstack
|
||
|
||
# Quick Links - File Sharing
|
||
- type: bookmarks
|
||
title: File Sharing
|
||
groups:
|
||
- title: ""
|
||
links:
|
||
- title: Fileshare
|
||
url: https://fileshare.dooplex.hu
|
||
icon: si:files
|
||
- title: Privatebin
|
||
url: https://privatebin.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/privatebin.png
|
||
- title: Pastes (OpenGist)
|
||
url: https://paste.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/opengist.png
|
||
- title: Zipline
|
||
url: https://zipline.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/zipline.png
|
||
|
||
# ---------- CENTER COLUMN ----------
|
||
- size: full
|
||
widgets:
|
||
# Cal.com Booking iframe
|
||
- type: iframe
|
||
source: https://booking.dooplex.hu/bookings/upcoming
|
||
height: 350
|
||
title: Upcoming Bookings
|
||
|
||
# Google Calendar iframe
|
||
- type: iframe
|
||
source: https://calendar.google.com/calendar/embed?src=b2884faf3db792ac082a6206057552c79080716efd5f966e169a41fc500e1c1c%40group.calendar.google.com&ctz=Europe%2FBudapest
|
||
height: 400
|
||
title: Calendar
|
||
|
||
# Outline Notes iframe
|
||
- type: iframe
|
||
source: https://outline.dooplex.hu/collection/notes-VVby8kTDMn/recent
|
||
height: 500
|
||
title: Recent Notes
|
||
|
||
# ---------- RIGHT COLUMN ----------
|
||
- size: small
|
||
widgets:
|
||
- type: to-do
|
||
title: Tasks
|
||
# RSS Feeds - Add your favorite feeds here
|
||
- type: rss
|
||
title: News & Feeds
|
||
limit: 15
|
||
collapse-after: 8
|
||
feeds:
|
||
- url: https://telex.hu/rss
|
||
title: telex.hu
|
||
limit: 3
|
||
- url: https://444.hu/feed
|
||
title: 444.hu
|
||
limit: 3
|
||
- url: https://444.hu/feed
|
||
title: 444.hu
|
||
limit: 3
|
||
- url: https://hvg.hu/rss
|
||
title: hvg.hu
|
||
limit: 3
|
||
- url: http://www.socialpsychology.org/headlines.rss
|
||
title: socialpsychology.org
|
||
limit: 3
|
||
- url: https://youarenotsosmart.com/feed/
|
||
title: youarenotsosmart.com
|
||
limit: 3
|
||
|
||
# ==================== MEDIA PAGE ====================
|
||
- name: Media
|
||
slug: media
|
||
width: wide
|
||
columns:
|
||
- size: small
|
||
widgets:
|
||
- type: bookmarks
|
||
title: Entertainment
|
||
groups:
|
||
- links:
|
||
- title: Plex
|
||
url: https://plex.dooplex.hu
|
||
icon: si:plex
|
||
- title: Immich (Photos)
|
||
url: https://photos.dooplex.hu
|
||
icon: si:immich
|
||
- title: AudioBookshelf
|
||
url: https://audiobookshelf.dooplex.hu
|
||
icon: si:audiobookshelf
|
||
- title: Calibre-Web (eBooks)
|
||
url: https://books.dooplex.hu
|
||
icon: si:calibreweb
|
||
- title: Arcade (Retro Games)
|
||
url: https://arcade.dooplex.hu
|
||
icon: si:retroarch
|
||
|
||
- type: bookmarks
|
||
title: Media Management
|
||
groups:
|
||
- links:
|
||
- title: Sonarr (TV Shows)
|
||
url: https://sonarr.dooplex.hu
|
||
icon: si:sonarr
|
||
- title: Radarr (Movies)
|
||
url: https://radarr.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/radarr.png
|
||
- title: RadarrKids
|
||
url: https://radarrkids.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/radarrkids.png
|
||
- title: Prowlarr (Indexers)
|
||
url: https://prowlarr.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/prowlarr.png
|
||
- title: Seerr (Requests)
|
||
url: https://seerr.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/seerr.png
|
||
|
||
- size: full
|
||
widgets:
|
||
# YouTube Videos
|
||
- type: videos
|
||
title: YouTube
|
||
channels:
|
||
- UCir93b_ftqInEaDpsWYbo_g #Practical Psychology - @practicalpsychologytips
|
||
- UCEwsbtepqts935wXykReKxg #CounsellingTutor - @Counsellingtutor1
|
||
- UCUdettijNYvLAm4AixZv4RA #SciShow Psych - @SciShowPsych
|
||
- UClHVl2N3jPEbkNJVx-ItQIQ #HealthyGamerGG - @HealthyGamerGG
|
||
- UCAvfZQ3r24F-V1JYqn2pfXg #The Psychology Podcast - @ThePsychologyPodcast
|
||
- UC6Unpcb3T4QijIBs8hPfeyA #Psych Explained - @PsychExplained
|
||
- UCl8TEoIOnMq_5ntJOYMq-Zg #DrJulie - @DrJulie
|
||
limit: 12
|
||
collapse-after: 6
|
||
|
||
# Reddit
|
||
- type: group
|
||
title: Reddit
|
||
widgets:
|
||
- type: reddit
|
||
subreddit: psychology
|
||
show-thumbnails: true
|
||
- type: reddit
|
||
subreddit: psychologystudents
|
||
show-thumbnails: true
|
||
- type: reddit
|
||
subreddit: psychologytalk
|
||
show-thumbnails: true
|
||
- type: reddit
|
||
subreddit: psychologists
|
||
show-thumbnails: true
|
||
- type: reddit
|
||
subreddit: psychologyresearch
|
||
show-thumbnails: true
|
||
- type: reddit
|
||
subreddit: academicpsychology
|
||
show-thumbnails: true
|
||
- type: reddit
|
||
subreddit: social_psychology
|
||
show-thumbnails: true
|
||
|
||
- size: small
|
||
widgets:
|
||
- type: bookmarks
|
||
title: Other Apps
|
||
groups:
|
||
- links:
|
||
- title: AdventureLog
|
||
url: https://adventures.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/adventurelog.png
|
||
- title: Wanderer
|
||
url: https://wanderer.dooplex.hu
|
||
icon: sh:wanderer
|
||
- title: Plant-it
|
||
url: https://plantit.dooplex.hu
|
||
icon: si:leaflet
|
||
- title: Workout (wger)
|
||
url: https://workout.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/wger.png
|
||
- title: Fileshare
|
||
url: https://fileshare.dooplex.hu
|
||
icon: si:files
|
||
- title: Privatebin
|
||
url: https://privatebin.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/privatebin.png
|
||
- title: Pastes (OpenGist)
|
||
url: https://paste.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/opengist.png
|
||
- title: Zipline
|
||
url: https://zipline.dooplex.hu
|
||
icon: https://web.dooplex.hu/static/white-icons/zipline.png
|
||
|
||
# ==================== NECTCLOUD PAGE ====================
|
||
- name: NextCloud
|
||
slug: nextcloud
|
||
width: wide
|
||
columns:
|
||
- size: full
|
||
widgets:
|
||
# Nextcloud iframe
|
||
- type: iframe
|
||
css-class: iframe-no-tint
|
||
source: https://nextcloud.dooplex.hu/apps/files/files
|
||
height: 1200
|
||
title: NextCloud
|
||
|
||
custom.css: |
|
||
/* Custom CSS for Orsi's Glance Dashboard */
|
||
/* Purple theme with background image matching Homepage */
|
||
|
||
/* ===== Wallpaper visible ===== */
|
||
html, body { height: 100%; }
|
||
|
||
html {
|
||
background: url("https://web.dooplex.hu/static/wallpaper-orsi.jpg") center / cover no-repeat fixed !important;
|
||
}
|
||
|
||
/* Glance containers that tend to paint over the wallpaper */
|
||
body,
|
||
.page,
|
||
#page-content,
|
||
.page-content,
|
||
.content-bounds,
|
||
.page-columns,
|
||
.page-column {
|
||
background: transparent !important;
|
||
}
|
||
|
||
/* Optional readability veil (Homepage-like) */
|
||
body::before {
|
||
content: "";
|
||
position: fixed;
|
||
inset: 0;
|
||
background: rgba(20, 10, 30, 0.25);
|
||
pointer-events: none;
|
||
z-index: 0;
|
||
}
|
||
body > * { position: relative; z-index: 1; }
|
||
|
||
/* ===== Glassy widgets like Homepage ===== */
|
||
.widget {
|
||
background: rgba(45, 31, 61, 0.55) !important;
|
||
border: 1px solid rgba(255,255,255,0.08) !important;
|
||
border-radius: 10px !important;
|
||
backdrop-filter: blur(6px) !important;
|
||
-webkit-backdrop-filter: blur(6px) !important;
|
||
}
|
||
|
||
/* ===== Header + bigger logo ===== */
|
||
.header-container {
|
||
background: rgba(45, 31, 61, 0.55) !important;
|
||
backdrop-filter: blur(10px) !important;
|
||
-webkit-backdrop-filter: blur(10px) !important;
|
||
border-bottom: 1px solid rgba(255,255,255,0.08) !important;
|
||
}
|
||
|
||
.header {
|
||
min-height: 150px !important;
|
||
align-items: flex-end !important;
|
||
padding: 16px 18px !important;
|
||
}
|
||
|
||
/* This matches your DOM: <div class="logo"> <img ...> */
|
||
.logo img {
|
||
max-height: 170px !important;
|
||
height: auto !important;
|
||
width: auto !important;
|
||
object-fit: contain !important;
|
||
}
|
||
|
||
/* ===== iFrame purple tint + visible overlay ===== */
|
||
.widget.widget-type-iframe {
|
||
position: relative !important;
|
||
overflow: hidden !important;
|
||
border-radius: 12px !important;
|
||
}
|
||
|
||
.widget.widget-type-iframe iframe {
|
||
border-radius: 12px !important;
|
||
width: 100% !important;
|
||
border: 0 !important;
|
||
filter: sepia(0.25) saturate(3) hue-rotate(250deg) brightness(1.02) !important;
|
||
position: relative !important;
|
||
z-index: 1 !important;
|
||
}
|
||
|
||
/* Overlay ON TOP of iframe (you can’t style inside cross-origin iframes) */
|
||
.widget.widget-type-iframe::after {
|
||
content: "";
|
||
position: absolute;
|
||
inset: 0;
|
||
z-index: 2;
|
||
pointer-events: none;
|
||
border-radius: 12px;
|
||
background: rgba(226, 146, 255, 0.16);
|
||
}
|
||
|
||
/* Widget content area */
|
||
.widget-content {
|
||
background-color: transparent !important;
|
||
}
|
||
|
||
/* Header fully transparent */
|
||
.header-container,
|
||
.header,
|
||
.page-header,
|
||
.nav,
|
||
.navigation {
|
||
background-color: transparent !important;
|
||
background: transparent !important;
|
||
backdrop-filter: none !important;
|
||
-webkit-backdrop-filter: none !important;
|
||
box-shadow: none !important;
|
||
border: 0 !important;
|
||
}
|
||
|
||
/* --- Header: align tabs to bottom + larger font --- */
|
||
.header {
|
||
display: flex !important;
|
||
align-items: flex-end !important; /* bottom-align children */
|
||
gap: 18px !important;
|
||
}
|
||
|
||
/* Push the nav to the bottom edge */
|
||
.header .nav {
|
||
align-self: flex-end !important;
|
||
padding-bottom: 10px !important; /* tweak this value if you want it lower/higher */
|
||
}
|
||
|
||
/* Bigger, cleaner tab text */
|
||
.header .nav .nav-item {
|
||
font-size: 18px !important; /* increase */
|
||
line-height: 1.1 !important;
|
||
padding: 10px 14px !important; /* makes it feel less “floaty” */
|
||
letter-spacing: 0.2px !important;
|
||
}
|
||
|
||
/* Optional: make current tab underline sit nicely at the bottom */
|
||
.header .nav .nav-item-current::after,
|
||
.header .nav .nav-item[aria-current="page"]::after {
|
||
bottom: -6px !important;
|
||
}
|
||
|
||
.content-bounds,
|
||
.body-content,
|
||
.page,
|
||
#page-content {
|
||
background: transparent !important;
|
||
}
|
||
|
||
/* Column containers */
|
||
.page-column, .page-columns {
|
||
background-color: transparent !important;
|
||
}
|
||
|
||
/* Links styling - purple accent */
|
||
a {
|
||
color: #e292ff !important;
|
||
}
|
||
|
||
a:hover {
|
||
color: #f0b8ff !important;
|
||
}
|
||
|
||
/* Bookmark items */
|
||
.bookmark-link {
|
||
background-color: rgba(60, 40, 80, 0.6) !important;
|
||
border-radius: 8px !important;
|
||
transition: background-color 0.2s ease !important;
|
||
}
|
||
|
||
.bookmark-link:hover {
|
||
background-color: rgba(80, 50, 110, 0.8) !important;
|
||
}
|
||
|
||
.widget-type-calendar,
|
||
.widget-type-weather,
|
||
.widget-type-to-do {
|
||
background-color: rgba(45, 31, 61, 0.55) !important;
|
||
}
|
||
|
||
/* RSS feed items */
|
||
.rss-item, .feed-item {
|
||
background-color: rgba(60, 40, 80, 0.5) !important;
|
||
border-radius: 6px !important;
|
||
margin-bottom: 4px !important;
|
||
}
|
||
|
||
/* Video thumbnails */
|
||
.video-item, .videos-item {
|
||
background-color: rgba(60, 40, 80, 0.5) !important;
|
||
border-radius: 8px !important;
|
||
}
|
||
|
||
/* Widget titles */
|
||
.widget-header, .widget-title {
|
||
color: #e292ff !important;
|
||
font-weight: 600 !important;
|
||
}
|
||
|
||
/* Scrollbar styling */
|
||
::-webkit-scrollbar {
|
||
width: 8px;
|
||
}
|
||
|
||
::-webkit-scrollbar-track {
|
||
background: rgba(45, 31, 61, 0.5);
|
||
}
|
||
|
||
::-webkit-scrollbar-thumb {
|
||
background: rgba(226, 146, 255, 0.5);
|
||
border-radius: 4px;
|
||
}
|
||
|
||
::-webkit-scrollbar-thumb:hover {
|
||
background: rgba(226, 146, 255, 0.7);
|
||
}
|
||
|
||
/* Fix "Show more" bar background in RSS widget */
|
||
.widget-type-rss .expand-toggle-button {
|
||
background: transparent !important;
|
||
box-shadow: none !important;
|
||
border: 0 !important;
|
||
}
|
||
|
||
/* Glance often draws that ugly bar via a pseudo-element */
|
||
.widget-type-rss .expand-toggle-button::before,
|
||
.widget-type-rss .expand-toggle-button::after,
|
||
.widget-type-rss .expand-toggle-button-icon::before,
|
||
.widget-type-rss .expand-toggle-button-icon::after {
|
||
background: transparent !important;
|
||
box-shadow: none !important;
|
||
border: 0 !important;
|
||
}
|
||
|
||
/* Optional: make it feel "intentional" instead of floating */
|
||
.widget-type-rss .expand-toggle-button {
|
||
margin-top: 8px !important;
|
||
padding: 10px 12px !important;
|
||
border-top: 1px solid rgba(255,255,255,0.08) !important;
|
||
color: rgba(255,255,255,0.75) !important;
|
||
}
|
||
.widget-type-rss .expand-toggle-button:hover {
|
||
color: rgba(255,255,255,0.95) !important;
|
||
}
|
||
|
||
/* --- Force header nav to sit at the bottom (override utility classes) --- */
|
||
.header.flex {
|
||
align-items: flex-end !important;
|
||
}
|
||
|
||
/* Make the nav fill the header height and align its items to the bottom */
|
||
.header.flex > .nav.flex {
|
||
height: 100% !important;
|
||
align-items: flex-end !important;
|
||
padding-bottom: 14px !important; /* increase/decrease to taste */
|
||
}
|
||
|
||
/* Bigger tab text */
|
||
.header.flex > .nav.flex > .nav-item {
|
||
font-size: 20px !important;
|
||
line-height: 1.1 !important;
|
||
padding: 10px 14px !important;
|
||
}
|
||
|
||
/* Tabs: bottom-align text inside full-height .nav-item */
|
||
.header.flex > .nav.flex > .nav-item {
|
||
display: flex !important;
|
||
align-items: flex-end !important;
|
||
|
||
/* keep them full-height, but move the text down */
|
||
height: 100% !important;
|
||
padding: 0 14px 18px 14px !important; /* bottom padding controls “how low” */
|
||
|
||
/* kill Glance's vertical centering */
|
||
line-height: 1 !important;
|
||
|
||
font-size: 20px !important;
|
||
}
|
||
|
||
/* Expand buttons: force transparent everywhere (RSS, Reddit, etc) */
|
||
.expand-toggle-button,
|
||
.expand-toggle-button.container-expanded {
|
||
background: transparent !important;
|
||
background-color: transparent !important;
|
||
box-shadow: none !important;
|
||
border: 0 !important;
|
||
}
|
||
|
||
/* Some themes draw the bar via pseudo elements */
|
||
.expand-toggle-button::before,
|
||
.expand-toggle-button::after,
|
||
.expand-toggle-button-icon::before,
|
||
.expand-toggle-button-icon::after {
|
||
background: transparent !important;
|
||
background-color: transparent !important;
|
||
box-shadow: none !important;
|
||
}
|
||
|
||
/* If the purple comes from a wrapper around the button, kill that too */
|
||
.widget-content > button.expand-toggle-button,
|
||
.widget-content > .expand-toggle-button,
|
||
.widget-content .expand-toggle-button {
|
||
background: transparent !important;
|
||
background-color: transparent !important;
|
||
}
|
||
|
||
/* If it’s "sticking" to bottom and picking up background from parent */
|
||
.expand-toggle-button.container-expanded {
|
||
backdrop-filter: none !important;
|
||
-webkit-backdrop-filter: none !important;
|
||
}
|
||
|
||
.widget.iframe-no-tint iframe {
|
||
filter: none !important;
|
||
}
|
||
|
||
.widget.iframe-no-tint::after {
|
||
content: none !important;
|
||
display: none !important;
|
||
}
|
||
|
||
---
|
||
apiVersion: apps/v1
|
||
kind: Deployment
|
||
metadata:
|
||
name: glance
|
||
namespace: glance-system
|
||
labels:
|
||
app.kubernetes.io/name: glance
|
||
app.kubernetes.io/instance: glance-orsi
|
||
app.kubernetes.io/version: "v0.8.4"
|
||
annotations:
|
||
reloader.stakater.com/auto: "true"
|
||
spec:
|
||
replicas: 1
|
||
strategy:
|
||
type: Recreate
|
||
selector:
|
||
matchLabels:
|
||
app.kubernetes.io/name: glance
|
||
app.kubernetes.io/instance: glance-orsi
|
||
template:
|
||
metadata:
|
||
labels:
|
||
app.kubernetes.io/name: glance
|
||
app.kubernetes.io/instance: glance-orsi
|
||
app.kubernetes.io/version: "v0.8.4"
|
||
spec:
|
||
securityContext:
|
||
runAsUser: 1000
|
||
runAsGroup: 1000
|
||
fsGroup: 1000
|
||
containers:
|
||
- name: glance
|
||
image: glanceapp/glance:v0.8.4
|
||
imagePullPolicy: IfNotPresent
|
||
env:
|
||
- name: TZ
|
||
value: "Europe/Budapest"
|
||
ports:
|
||
- name: http
|
||
containerPort: 8080
|
||
protocol: TCP
|
||
livenessProbe:
|
||
httpGet:
|
||
path: /
|
||
port: http
|
||
initialDelaySeconds: 10
|
||
periodSeconds: 30
|
||
timeoutSeconds: 5
|
||
failureThreshold: 3
|
||
readinessProbe:
|
||
httpGet:
|
||
path: /
|
||
port: http
|
||
initialDelaySeconds: 5
|
||
periodSeconds: 10
|
||
timeoutSeconds: 5
|
||
failureThreshold: 3
|
||
resources:
|
||
requests:
|
||
cpu: 10m
|
||
memory: 32Mi
|
||
limits:
|
||
cpu: 200m
|
||
memory: 128Mi
|
||
volumeMounts:
|
||
- name: config
|
||
mountPath: /app/config/glance.yml
|
||
subPath: glance.yml
|
||
- name: config
|
||
mountPath: /app/config/assets/custom.css
|
||
subPath: custom.css
|
||
volumes:
|
||
- name: config
|
||
configMap:
|
||
name: glance-config
|
||
---
|
||
apiVersion: v1
|
||
kind: Service
|
||
metadata:
|
||
name: glance
|
||
namespace: glance-system
|
||
labels:
|
||
app.kubernetes.io/name: glance
|
||
app.kubernetes.io/instance: glance-orsi
|
||
spec:
|
||
type: ClusterIP
|
||
ports:
|
||
- name: http
|
||
port: 8080
|
||
targetPort: http
|
||
protocol: TCP
|
||
selector:
|
||
app.kubernetes.io/name: glance
|
||
app.kubernetes.io/instance: glance-orsi
|
||
---
|
||
# Ingress WITH Authentik proxy authentication
|
||
# Update the auth-url annotation with your actual outpost service name after creating in Authentik
|
||
apiVersion: networking.k8s.io/v1
|
||
kind: Ingress
|
||
metadata:
|
||
name: glance
|
||
namespace: glance-system
|
||
labels:
|
||
app.kubernetes.io/name: glance
|
||
app.kubernetes.io/instance: glance-orsi
|
||
annotations:
|
||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||
external-dns.alpha.kubernetes.io/hostname: home.dooplex.hu
|
||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||
nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
|
||
nginx.ingress.kubernetes.io/proxy-buffers-number: "4"
|
||
nginx.ingress.kubernetes.io/proxy-busy-buffers-size: "32k"
|
||
# Authentik Forward Auth annotations
|
||
# TODO: Update 'glance-home-outpost' with your actual outpost name after creating in Authentik
|
||
nginx.ingress.kubernetes.io/auth-url: http://ak-outpost-glance-outpost.auth-system.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
|
||
nginx.ingress.kubernetes.io/auth-signin: https://home.dooplex.hu/outpost.goauthentik.io/start?rd=$escaped_request_uri
|
||
nginx.ingress.kubernetes.io/auth-response-headers: Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email
|
||
nginx.ingress.kubernetes.io/auth-snippet: |
|
||
proxy_set_header X-Forwarded-Host $http_host;
|
||
nginx.ingress.kubernetes.io/configuration-snippet: |
|
||
set $geo_allowed 0;
|
||
if ($remote_addr ~ "^192\.168\.") { set $geo_allowed 1; }
|
||
if ($remote_addr ~ "^10\.") { set $geo_allowed 1; }
|
||
if ($geoip2_country_code = "HU") { set $geo_allowed 1; }
|
||
if ($geo_allowed = 0) {
|
||
return 403 "Access restricted to Hungary";
|
||
}
|
||
spec:
|
||
ingressClassName: nginx-internal
|
||
rules:
|
||
- host: home.dooplex.hu
|
||
http:
|
||
paths:
|
||
- path: /
|
||
pathType: Prefix
|
||
backend:
|
||
service:
|
||
name: glance
|
||
port:
|
||
number: 8080
|
||
tls:
|
||
- hosts:
|
||
- home.dooplex.hu
|
||
secretName: glance-tls
|
||
---
|
||
# Alternative Ingress WITHOUT Authentik (for testing)
|
||
# Uncomment this and comment out the above ingress if you want to test without auth first
|
||
# apiVersion: networking.k8s.io/v1
|
||
# kind: Ingress
|
||
# metadata:
|
||
# name: glance-noauth
|
||
# namespace: glance-system
|
||
# labels:
|
||
# app.kubernetes.io/name: glance
|
||
# app.kubernetes.io/instance: glance-orsi
|
||
# annotations:
|
||
# cert-manager.io/cluster-issuer: letsencrypt-prod
|
||
# external-dns.alpha.kubernetes.io/hostname: home.dooplex.hu
|
||
# nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||
# spec:
|
||
# ingressClassName: nginx-internal
|
||
# rules:
|
||
# - host: home.dooplex.hu
|
||
# http:
|
||
# paths:
|
||
# - path: /
|
||
# pathType: Prefix
|
||
# backend:
|
||
# service:
|
||
# name: glance
|
||
# port:
|
||
# number: 8080
|
||
# tls:
|
||
# - hosts:
|
||
# - home.dooplex.hu
|
||
# secretName: glance-tls
|