apiVersion: v1
kind: ConfigMap
metadata:
  name: miniflux
data:
  BASE_URL: https://rss.gzr.im
  CREATE_ADMIN: on
  RUN_MIGRATIONS: on
  METRICS_COLLECTOR: 1
  METRICS_REFRESH_INTERVAL: 600
  METRICS_ALLOWED_NETWORKS: 127.0.0.1/8,10.89.0.0/24
  # use authelia
  AUTH_PROXY_HEADER: 'Remote-User'
  AUTH_PROXY_USER_CREATION: 0
---
apiVersion: v1
kind: Pod
metadata:
  name: miniflux
  labels:
    traefik.enable: true
    traefik.http.routers.miniflux.tls: true
    traefik.http.routers.miniflux.tls.certresolver: le
    traefik.http.routers.miniflux.entrypoints: http,https
    traefik.http.routers.miniflux.rule: Host(`rss.gzr.im`)
    traefik.http.routers.miniflux.service: miniflux
    traefik.http.routers.miniflux.middlewares: authelia@file
    traefik.http.services.miniflux.loadbalancer.server.port: 8080
    # metrics
    traefik.http.routers.miniflux-metrics.entrypoints: metrics
    traefik.http.routers.miniflux-metrics.rule: Path(`/metrics/miniflux`)
    traefik.http.routers.miniflux-metrics.middlewares: replacepath-metrics@file
spec:
  # NOTE: we need to compensate for the lack of healthcheck-based retries
  restartPolicy: Always
  dnsPolicy: Default
  containers:
    - name: miniflux
      image: docker.io/miniflux/miniflux:${version}
      ports:
        - containerPort: 8080
          protocol: TCP
      envFrom:
      - configMapRef:
          name: miniflux
      - secretRef:
          name: miniflux
      livenessProbe:
        exec:
          command: ["/usr/bin/miniflux", "-healthcheck", "auto"]
      resources:
        limits:
          cpu: 100m
          memory: 128Mi
    - name: postgres
      image: docker.io/library/postgres:15-alpine
      volumeMounts:
      - name: pg-data
        mountPath: /var/lib/postgresql/data
      envFrom:
      - secretRef:
          name: miniflux
      livenessProbe:
        exec:
          command: ["pg_isready", "-U", "miniflux"]
        initialDelaySeconds: 5
      resources:
        limits:
          cpu: 100m
          memory: 128Mi
  volumes:
  - name: pg-data
    hostPath:
      path: /var/lib/miniflux
      type: DirectoryOrCreate