Pim Kunis
afa0bd023e
Make nextcloud always go to nodes with fast storage Don't mount nextcloud on syncthing pod
85 lines
2 KiB
Nix
85 lines
2 KiB
Nix
{
|
|
kubernetes.resources = {
|
|
configMaps.nextcloud.data = {
|
|
POSTGRES_USER = "nextcloud";
|
|
POSTGRES_DB = "nextcloud";
|
|
POSTGRES_HOST = "lewis.dmz";
|
|
};
|
|
|
|
secrets.nextcloud.stringData.databasePassword = "ref+sops://secrets/sops.yaml#/nextcloud/databasePassword";
|
|
|
|
deployments.nextcloud = {
|
|
metadata.labels.app = "nextcloud";
|
|
|
|
spec = {
|
|
selector.matchLabels.app = "nextcloud";
|
|
strategy = {
|
|
type = "RollingUpdate";
|
|
|
|
rollingUpdate = {
|
|
maxSurge = 0;
|
|
maxUnavailable = 1;
|
|
};
|
|
};
|
|
|
|
template = {
|
|
metadata.labels.app = "nextcloud";
|
|
|
|
spec = {
|
|
volumes.data.persistentVolumeClaim.claimName = "nextcloud";
|
|
|
|
containers.nextcloud = {
|
|
image = "nextcloud:28";
|
|
envFrom = [{ configMapRef.name = "nextcloud"; }];
|
|
ports.web.containerPort = 80;
|
|
|
|
env.POSTGRES_PASSWORD.valueFrom.secretKeyRef = {
|
|
name = "nextcloud";
|
|
key = "databasePassword";
|
|
};
|
|
|
|
volumeMounts = [{
|
|
name = "data";
|
|
mountPath = "/var/www/html";
|
|
}];
|
|
};
|
|
|
|
securityContext = {
|
|
fsGroup = 33;
|
|
fsGroupChangePolicy = "OnRootMismatch";
|
|
};
|
|
|
|
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution = [{
|
|
weight = 1;
|
|
preference.matchExpressions = [{
|
|
key = "storageType";
|
|
operator = "In";
|
|
values = [ "fast" ];
|
|
}];
|
|
}];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
services.nextcloud.spec = {
|
|
selector.app = "nextcloud";
|
|
|
|
ports.web = {
|
|
port = 80;
|
|
targetPort = "web";
|
|
};
|
|
};
|
|
};
|
|
|
|
lab = {
|
|
ingresses.nextcloud = {
|
|
host = "cloud.kun.is";
|
|
|
|
service = {
|
|
name = "nextcloud";
|
|
portName = "web";
|
|
};
|
|
};
|
|
};
|
|
}
|