diff --git a/helm-values/postgres.yaml b/helm-values/postgres.yaml index 40e4268..633d24c 100644 --- a/helm-values/postgres.yaml +++ b/helm-values/postgres.yaml @@ -1,6 +1,6 @@ global: postgresql: - postgresqlPassword: "@wahyd4" + postgresqlPassword: "wGWHn9bhjJbM27V" persistence: mountPath: /bitnami/postgresql enabled: true @@ -9,4 +9,6 @@ service: type: NodePort nodePort: 32222 securityContext: - enabled: false + enabled: true + fsGroup: 1000 + runAsUser: 1000 diff --git a/home-k8s/apply.sh b/home-k8s/apply.sh index 318fa8a..65f5049 100755 --- a/home-k8s/apply.sh +++ b/home-k8s/apply.sh @@ -22,3 +22,15 @@ helm upgrade --install postgres -n db -f postgres-values.yaml bitnami/postgresql # media applications k apply -f media.yaml + + +# influxdb + + +helm upgrade --install influxdb bitnami/influxdb --namespace db \ +--set adminUser.name=junv \ +--set adminUser.pwd=Lovewifi2020! \ +--set persistence.storageClass=manual \ +--set persistence.existingClaim=influxdb \ +--set influxdb.securityContext.fsGroup=1000 \ +--set influxdb.securityContext.runAsUser=1000 diff --git a/home-k8s/media.yaml b/home-k8s/media.yaml index 52834b2..7fe8163 100644 --- a/home-k8s/media.yaml +++ b/home-k8s/media.yaml @@ -54,7 +54,7 @@ spec: cpu: 150m memory: 256Mi limits: - cpu: 500m + cpu: 300m memory: 512Mi --- apiVersion: v1 @@ -237,10 +237,10 @@ metadata: spec: tls: - hosts: - - play.home.toozhao.com - secretName: play-tls + - plex.home.toozhao.com + secretName: plex-tls rules: - - host: play.home.toozhao.com + - host: plex.home.toozhao.com http: paths: - backend: diff --git a/home-k8s/plex-proxy.yaml b/home-k8s/plex-proxy.yaml index e08d3cc..01fd144 100644 --- a/home-k8s/plex-proxy.yaml +++ b/home-k8s/plex-proxy.yaml @@ -42,8 +42,8 @@ metadata: kubernetes.io/ingress.class: "nginx" kubernetes.io/tls-acme: "true" cert-manager.io/cluster-issuer: "letsencrypt-prod" - nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth" - nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri" + # nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth" + # nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri" spec: tls: - hosts: diff --git a/home-k8s/statping.yaml b/home-k8s/statping.yaml new file mode 100644 index 0000000..dfe8530 --- /dev/null +++ b/home-k8s/statping.yaml @@ -0,0 +1,81 @@ +apiVersion: v1 +kind: Service +metadata: + name: statping +spec: + ports: + - port: 80 + targetPort: web + selector: + app: statping +--- + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: statping +spec: + selector: + matchLabels: + app: statping + replicas: 1 + template: + metadata: + labels: + app: statping + spec: + volumes: + - name: app-folder + hostPath: + path: /mnt/statping + type: Directory + containers: + - name: statping + image: hunterlong/statping + securityContext: + runAsUser: 1000 + imagePullPolicy: IfNotPresent + env: + - name: DB_CONN + value: postgres + - name: DB_HOST + value: home.toozhao.com + - name: DB_PORT + value: "32222" + - name: DB_USER + value: postgres + - name: DB_PASS + value: wGWHn9bhjJbM27V + - name: DB_DATABASE + value: statping + - name: NAME + value: "JUNV Apps Status" + ports: + - containerPort: 8080 + name: web + volumeMounts: + - name: app-folder + mountPath: /app +--- + +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: statping-ingress + annotations: + kubernetes.io/ingress.class: "nginx" + kubernetes.io/tls-acme: "true" + cert-manager.io/cluster-issuer: "letsencrypt-prod" +spec: + tls: + - hosts: + - status.home.toozhao.com + secretName: statping-tls + rules: + - host: status.home.toozhao.com + http: + paths: + - backend: + serviceName: statping + servicePort: 80 + path: /