nixos-servers/kubenix-modules/freshrss.nix

87 lines
1.9 KiB
Nix
Raw Normal View History

2024-03-26 19:26:02 +00:00
{
kubernetes.resources = {
configMaps.freshrss.data = {
TZ = "Europe/Amsterdam";
CRON_MIN = "2,32";
ADMIN_EMAIL = "pim@kunis.nl";
PUBLISHED_PORT = "443";
};
2024-04-14 12:48:27 +00:00
secrets.freshrss.stringData.adminPassword = "ref+sops://secrets/sops.yaml#/freshrss/password";
2024-03-26 19:26:02 +00:00
deployments.freshrss = {
metadata.labels.app = "freshrss";
spec = {
selector.matchLabels.app = "freshrss";
strategy = {
type = "RollingUpdate";
rollingUpdate = {
maxSurge = 0;
maxUnavailable = 1;
};
};
2024-03-26 19:26:02 +00:00
template = {
metadata.labels.app = "freshrss";
spec = {
containers.freshrss = {
image = "freshrss/freshrss:1.24.1";
imagePullPolicy = "Always";
2024-03-27 20:20:22 +00:00
envFrom = [{ configMapRef.name = "freshrss"; }];
2024-04-14 19:43:31 +00:00
ports.web.containerPort = 80;
2024-03-26 19:26:02 +00:00
2024-04-14 19:00:15 +00:00
env = {
ADMIN_PASSWORD.valueFrom.secretKeyRef = {
name = "freshrss";
key = "adminPassword";
};
2024-03-27 20:20:22 +00:00
2024-04-14 19:00:15 +00:00
ADMIN_API_PASSWORD.valueFrom.secretKeyRef = {
name = "freshrss";
key = "adminPassword";
};
};
2024-03-26 19:26:02 +00:00
volumeMounts = [{
name = "data";
mountPath = "/var/www/FreshRSS/data";
}];
};
2024-05-20 17:33:50 +00:00
volumes.data.persistentVolumeClaim.claimName = "freshrss";
securityContext = {
fsGroup = 33;
fsGroupChangePolicy = "OnRootMismatch";
};
2024-03-26 19:26:02 +00:00
};
};
};
};
services.freshrss.spec = {
selector.app = "freshrss";
2024-04-14 19:43:31 +00:00
ports.web = {
2024-03-26 19:26:02 +00:00
port = 80;
2024-04-14 19:43:31 +00:00
targetPort = "web";
};
2024-03-26 19:26:02 +00:00
};
};
2024-03-26 19:26:02 +00:00
lab = {
ingresses.freshrss = {
host = "rss.kun.is";
service = {
name = "freshrss";
portName = "web";
};
2024-03-26 19:26:02 +00:00
};
};
}