about summary refs log tree commit diff
path: root/bundles/paperless/files/kube.yaml
diff options
context:
space:
mode:
authorRobert Günzler <r@gnzler.io>2025-09-07 17:32:13 +0200
committerRobert Günzler <r@gnzler.io>2025-09-07 17:42:42 +0200
commit38be6c13f76e893cf47636257071b440dec0c5b2 (patch)
treef7ded3235a7e3362cbd1ed3d91523968fe0faf90 /bundles/paperless/files/kube.yaml
initial commit
Signed-off-by: Robert Günzler <r@gnzler.io>
Diffstat (limited to 'bundles/paperless/files/kube.yaml')
-rw-r--r--bundles/paperless/files/kube.yaml95
1 files changed, 95 insertions, 0 deletions
diff --git a/bundles/paperless/files/kube.yaml b/bundles/paperless/files/kube.yaml
new file mode 100644
index 0000000..63f618f
--- /dev/null
+++ b/bundles/paperless/files/kube.yaml
@@ -0,0 +1,95 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: paperless
+data:
+  PAPERLESS_PORT: 8000
+  PAPERLESS_URL: https://paper.gzr.im
+  PAPERLESS_REDIS: redis://localhost:6379
+  PAPERLESS_DATA_DIR: /paperless/data
+  PAPERLESS_MEDIA_ROOT: /paperless/media
+  PAPERLESS_CONSUMPTION_DIR: /paperless/inbox
+  # use authelia
+  PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect
+  PAPERLESS_LOGOUT_REDIRECT_URL: https://login.gzr.im/logout
+  PAPERLESS_DISABLE_REGULAR_LOGIN: false
+  PAPERLESS_REDIRECT_LOGIN_TO_SSO: false
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: paperless
+  labels:
+    traefik.enable: true
+    traefik.http.routers.paperless.tls: true
+    traefik.http.routers.paperless.tls.certresolver: le
+    traefik.http.routers.paperless.entrypoints: http,https
+    traefik.http.routers.paperless.rule: Host(`paper.gzr.im`)
+    traefik.http.routers.paperless.service: paperless
+    traefik.http.services.paperless.loadbalancer.server.port: 8000
+    # prometheus.scrape.enable: false
+    # prometheus.scrape.port: 8000
+    # prometheus.label.job: paperless
+spec:
+  restartPolicy: Always
+  dnsPolicy: Default
+  containers:
+    - name: broker
+      image: docker.io/library/redis:7
+      ports:
+        - containerPort: 6379
+          protocol: TCP
+      volumeMounts:
+        - name: broker-data
+          mountPath: /data
+      resources:
+        limits:
+          cpu: 100m
+          memory: 128Mi
+      # TODO: healthchecks
+
+    - name: paperless
+      image: ghcr.io/paperless-ngx/paperless-ngx:2.13
+      ports:
+        - containerPort: 8000
+          protocol: TCP
+      envFrom:
+        - configMapRef:
+            name: paperless
+        - secretRef:
+            name: paperless
+      volumeMounts:
+        - name: paperless-media
+          mountPath: /paperless/media
+        - name: paperless-inbox
+          mountPath: /paperless/inbox
+        - name: paperless-data
+          mountPath: /paperless/data
+      resources:
+        limits:
+          cpu: 100m
+          memory: 128Mi
+      livenessProbe:
+        httpGet:
+          path: /
+          port: 8000
+        initialDelaySeconds: 30
+        timeoutSeconds: 30
+
+  volumes:
+    - name: broker-data
+      hostPath:
+        path: /var/lib/paperless/broker
+        type: DirectoryOrCreate
+    - name: paperless-data
+      hostPath:
+        path: /var/lib/paperless/data
+        type: DirectoryOrCreate
+    - name: paperless-inbox
+      hostPath:
+        path: /media/hayasui/documents/paperless-inbox
+        type: Directory
+    - name: paperless-media
+      hostPath:
+        path: /media/hayasui/documents/paperless
+        type: Directory