diff --git a/hedgedoc/env.template b/hedgedoc/env.template deleted file mode 100644 index 4bf97a70354fe266ddf6d07697aa5ecd9133bf8e..0000000000000000000000000000000000000000 --- a/hedgedoc/env.template +++ /dev/null @@ -1,2 +0,0 @@ -CMD_DB_URL=postgres://hedgedoc:${POSTGRES_PASSWORD}@pg-${NS}:5432/hedgedoc -CMD_SESSION_SECRET=${CMD_SESSION_SECRET} diff --git a/hedgedoc/kustomization.yaml.template b/hedgedoc/kustomization.yaml.template deleted file mode 100644 index a7cbb42fc04d1605f4340eb64eab42ec80ea3192..0000000000000000000000000000000000000000 --- a/hedgedoc/kustomization.yaml.template +++ /dev/null @@ -1,10 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -generatorOptions: - disableNameSuffixHash: true -secretGenerator: -- name: ${FQDN}-app - envs: - - env - type: Opaque - diff --git a/hedgedoc/manifests/app.yml b/hedgedoc/manifests/app.yml deleted file mode 100644 index baff0a9dca9ee95554cb861502c32a15e1fb8ed9..0000000000000000000000000000000000000000 --- a/hedgedoc/manifests/app.yml +++ /dev/null @@ -1,147 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - app.kubernetes.io/component: app - app.kubernetes.io/instance: ${FQDN} - app.kubernetes.io/name: hedgedoc - app.kubernetes.io/part-of: hedgedoc - name: ${FQDN}-app -spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/component: app - app.kubernetes.io/instance: ${FQDN} - app.kubernetes.io/name: hedgedoc - app.kubernetes.io/part-of: hedgedoc - template: - metadata: - labels: - app.kubernetes.io/component: app - app.kubernetes.io/instance: ${FQDN} - app.kubernetes.io/name: hedgedoc - app.kubernetes.io/part-of: hedgedoc - spec: - volumes: - containers: - - env: - - name: CMD_DB_URL - valueFrom: - secretKeyRef: - key: postgresql-url - name: ${FQDN} - - name: CMD_SESSION_SECRET - valueFrom: - secretKeyRef: - key: session - name: ${FQDN} - - name: CMD_MINIO_ACCESS_KEY - valueFrom: - secretKeyRef: - key: AWS_ACCESS_KEY_ID - name: ${FQDN}-s3 - - name: CMD_MINIO_SECRET_KEY - valueFrom: - secretKeyRef: - key: AWS_SECRET_ACCESS_KEY - name: ${FQDN}-s3 -{{if .ConfigureOAuth}} - - name: CMD_OAUTH2_CLIENT_ID - valueFrom: - secretKeyRef: - key: client-id - name: ${FQDN}-oidc - - name: CMD_OAUTH2_CLIENT_SECRET - valueFrom: - secretKeyRef: - key: client-secret - name: ${FQDN}-oidc -{{end}} - envFrom: - - configMapRef: - name: ${FQDN}-config - image: indiehosters/codimd:1.6.0 - imagePullPolicy: IfNotPresent - name: hedgedoc - ports: - - containerPort: 3000 - name: http - protocol: TCP ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: app - app.kubernetes.io/instance: ${FQDN} - app.kubernetes.io/name: hedgedoc - app.kubernetes.io/part-of: hedgedoc - name: ${FQDN}-app - namespace: ${DOMAIN} -spec: - ports: - - name: http - port: 3000 - protocol: TCP - targetPort: http - selector: - app.kubernetes.io/component: app - app.kubernetes.io/instance: ${FQDN} - app.kubernetes.io/name: hedgedoc - app.kubernetes.io/part-of: hedgedoc - type: ClusterIP ---- -apiVersion: extensions/v1beta1 -kind: Ingress -metadata: - annotations: - kubernetes.io/tls-acme: "true" - labels: - app.kubernetes.io/component: app - app.kubernetes.io/instance: ${FQDN} - app.kubernetes.io/name: hedgedoc - app.kubernetes.io/part-of: hedgedoc - name: ${FQDN}-app - namespace: ${DOMAIN} -spec: - rules: - - host: ${FQDN_DOTS} - http: - paths: - - backend: - serviceName: ${FQDN}-app - servicePort: http - path: / - tls: - - hosts: - - ${FQDN_DOTS} - secretName: ${FQDN}-tls ---- -kind: ConfigMap -metadata: - name: ${FQDN}-config -apiVersion: v1 -data: -{{ if .ConfigureOAuth }} - CMD_OAUTH2_USER_PROFILE_URL: https://id.indie.host/auth/realms/${DOMAIN}/protocol/openid-connect/userinfo - CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR: preferred_username - CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR: name - CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR: email - CMD_OAUTH2_TOKEN_URL: https://id.indie.host/auth/realms/${DOMAIN}/protocol/openid-connect/token - CMD_OAUTH2_AUTHORIZATION_URL: https://id.indie.host/auth/realms/${DOMAIN}/protocol/openid-connect/auth - CMD_OAUTH2_PROVIDERNAME: Liiibre - CMD_EMAIL: "false" -{{ end }} - CMD_IMAGE_UPLOAD_TYPE: minio - CMD_S3_REGION: default - CMD_S3_BUCKET: ${FQDN} - CMD_MINIO_ENDPOINT: "s3.standard.indie.host" - CMD_PROTOCOL_USESSL: "true" - CMD_URL_ADDPORT: "false" - CMD_ALLOW_FREEURL: "true" - CMD_MINIO_PORT: "443" - CMD_MINIO_SECURE: "true" - CMD_USECDN: "false" - CMD_DOMAIN: ${FQDN_DOTS} - DB_TYPE: postgres \ No newline at end of file diff --git a/hedgedoc/other-manifests/dump-standard.yml b/hedgedoc/other-manifests/dump-standard.yml deleted file mode 100644 index 7487eaa01cc896d8c4a313dafca84d1f8aadd3b2..0000000000000000000000000000000000000000 --- a/hedgedoc/other-manifests/dump-standard.yml +++ /dev/null @@ -1,43 +0,0 @@ -apiVersion: batch/v1 -kind: Job -metadata: - labels: - application: spilo-logical-backup - job-name: dump - name: dump -spec: - backoffLimit: 6 - completions: 1 - parallelism: 1 - selector: - matchLabels: - job-name: dump - template: - metadata: - creationTimestamp: null - labels: - application: spilo-logical-backup - job-name: dump - spec: - containers: - - command: - - /bin/sh - - -c - args: - - psql -h ${FQDN}-postgresql -p 5432 -U codimd -c "\l"; - pg_dump -h ${FQDN}-postgresql -p 5432 -U codimd -Fc codimd | pigz | aws s3 cp - s3://${NS}-dumps/migrations/$(date +%m-%d-%Y).sql.gz --endpoint-url=https://minio.k7.indie.host --region=default - env: - - name: PGPASSWORD - valueFrom: - secretKeyRef: - key: postgresql-password - name: ${FQDN} - - name: AWS_S3_FORCE_PATH_STYLE - value: "true" - envFrom: - - secretRef: - name: ${NS}-dumps - image: registry.opensource.zalan.do/acid/logical-backup:v1.6.2 - imagePullPolicy: IfNotPresent - name: logical-backup - restartPolicy: Never \ No newline at end of file diff --git a/hedgedoc/other-manifests/restore.yml b/hedgedoc/other-manifests/restore.yml deleted file mode 100644 index aa09551579d914ceb2bcdfd79123c1f94fa3c965..0000000000000000000000000000000000000000 --- a/hedgedoc/other-manifests/restore.yml +++ /dev/null @@ -1,42 +0,0 @@ -apiVersion: batch/v1 -kind: Job -metadata: - labels: - application: spilo-logical-backup - job-name: restore - name: restore -spec: - backoffLimit: 6 - completions: 1 - parallelism: 1 - selector: - matchLabels: - job-name: restore - template: - metadata: - creationTimestamp: null - labels: - application: spilo-logical-backup - job-name: restore - spec: - containers: - - command: - - /bin/sh - - -c - args: - - aws s3 cp s3://${NS}-dumps/migrations/$(date +%m-%d-%Y).sql.gz - --endpoint-url=https://minio.k7.indie.host --region=default | unpigz | pg_restore -d hedgedoc -h pg-${PG_DOMAIN} -p 5432 -U hedgedoc --clean --no-owner --role=hedgedoc -n public - env: - - name: PGPASSWORD - valueFrom: - secretKeyRef: - key: password - name: hedgedoc.pg-${NS}.credentials - - name: AWS_S3_FORCE_PATH_STYLE - value: "true" - envFrom: - - secretRef: - name: ${NS}-dumps - image: registry.opensource.zalan.do/acid/logical-backup:v1.6.2 - imagePullPolicy: IfNotPresent - name: logical-backup - restartPolicy: Never \ No newline at end of file diff --git a/hedgedoc/source b/hedgedoc/source deleted file mode 100644 index 895d828ada8a0f93fdff40d906b46e97d6b4734d..0000000000000000000000000000000000000000 --- a/hedgedoc/source +++ /dev/null @@ -1,7 +0,0 @@ -export FQDN=${SUBDOMAIN}-${NS} -export FQDN_DOTS=${SUBDOMAIN}.${DOMAIN} - -export CMD_SESSION_SECRET=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 18 | head -n 1) - -export POSTGRES_USERNAME=$(kubectl get secrets -n liiib-re -o json hedgedoc.pg-${FQDN}.credentials | jq -r '.data.username' | base64 -d) -export POSTGRES_PASSWORD=$(kubectl get secrets -n liiib-re -o json hedgedoc.pg-${FQDN}.credentials | jq -r '.data.password' | base64 -d)