about summary refs log tree commit diff
path: root/bundles/miniflux/files/kube.yaml
blob: 97035f414d45f0ae70bfc0215eceb89f40298294 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
apiVersion: v1
kind: ConfigMap
metadata:
  name: miniflux
data:
  BASE_URL: https://rss.gzr.im
  CREATE_ADMIN: on
  RUN_MIGRATIONS: on
  METRICS_COLLECTOR: 1
  METRICS_REFRESH_INTERVAL: 600
  METRICS_ALLOWED_NETWORKS: 127.0.0.1/8,10.89.0.0/24
  # use authelia
  AUTH_PROXY_HEADER: 'Remote-User'
  AUTH_PROXY_USER_CREATION: 0
---
apiVersion: v1
kind: Pod
metadata:
  name: miniflux
  labels:
    traefik.enable: true
    traefik.http.routers.miniflux.tls: true
    traefik.http.routers.miniflux.tls.certresolver: le
    traefik.http.routers.miniflux.entrypoints: http,https
    traefik.http.routers.miniflux.rule: Host(`rss.gzr.im`)
    traefik.http.routers.miniflux.service: miniflux
    traefik.http.routers.miniflux.middlewares: authelia@file
    traefik.http.services.miniflux.loadbalancer.server.port: 8080
    # metrics
    traefik.http.routers.miniflux-metrics.entrypoints: metrics
    traefik.http.routers.miniflux-metrics.rule: Path(`/metrics/miniflux`)
    traefik.http.routers.miniflux-metrics.middlewares: replacepath-metrics@file
spec:
  # NOTE: we need to compensate for the lack of healthcheck-based retries
  restartPolicy: Always
  dnsPolicy: Default
  containers:
    - name: miniflux
      image: docker.io/miniflux/miniflux:${version}
      ports:
        - containerPort: 8080
          protocol: TCP
      envFrom:
      - configMapRef:
          name: miniflux
      - secretRef:
          name: miniflux
      livenessProbe:
        exec:
          command: ["/usr/bin/miniflux", "-healthcheck", "auto"]
      resources:
        requests:
          cpu: 10m
          memory: 60Mi
        limits:
          cpu: 100m
          memory: 128Mi
    - name: postgres
      image: docker.io/library/postgres:15-alpine
      volumeMounts:
      - name: pg-data
        mountPath: /var/lib/postgresql/data
      envFrom:
      - secretRef:
          name: miniflux
      livenessProbe:
        exec:
          command: ["pg_isready", "-U", "miniflux"]
        initialDelaySeconds: 5
      resources:
        requests:
          cpu: 10m
          memory: 6Mi
        limits:
          cpu: 100m
          memory: 128Mi
  volumes:
  - name: pg-data
    hostPath:
      path: /var/lib/miniflux
      type: DirectoryOrCreate