mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-09-21 16:36:05 +00:00
91 lines
4.0 KiB
YAML
91 lines
4.0 KiB
YAML
# Number of replicas
|
|
replicaCount: 1
|
|
# Container image configuration
|
|
image:
|
|
repository: git.vhaudiquet.fr/vhaudiquet/vhaudiquet.fr
|
|
pullPolicy: IfNotPresent
|
|
# The image tag defaults to the chart appVersion (which is set to git SHA by CI).
|
|
# Override this only if you need a specific version.
|
|
tag: ""
|
|
# Image pull secrets for private registries
|
|
imagePullSecrets: []
|
|
# Ingress configuration
|
|
ingress:
|
|
enabled: true
|
|
className: ""
|
|
annotations: {}
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
hosts:
|
|
- host: vhaudiquet.fr
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls: []
|
|
# Environment variables
|
|
env:
|
|
NGINX_HOST: vhaudiquet.fr
|
|
NGINX_PORT: "80"
|
|
# NFS Storage configuration for public files
|
|
nfs:
|
|
enabled: true
|
|
# NFS server IP address
|
|
server: truenas.lan
|
|
# NFS export path
|
|
path: /mnt/main_storage/public
|
|
# Mount path inside the container
|
|
mountPath: /usr/share/nginx/html/public
|
|
# Storage size for PVC
|
|
storageSize: 10Gi
|
|
# Storage class name (leave empty for default)
|
|
storageClassName: ""
|
|
# Allow the pod to start even when NFS is unreachable (uses emptyDir + initContainer)
|
|
softFail: true
|
|
# Tolerate failover nodes
|
|
tolerations:
|
|
- key: ENC[AES256_GCM,data:ja29UypZ8PY4,iv:OclYLpgX/HfvEBeAXsBvaAA4hB0l2Cg0JR7grR1lTTg=,tag:NdWJQdG7glFCOyDHzvXibQ==,type:str]
|
|
operator: Equal
|
|
value: ENC[AES256_GCM,data:kbW9J1Gq96Y=,iv:TbCK7mPcikPYnDIxMVXqCCdhoVFKdinB7D1OczpAsxU=,tag:MHHTSu4zr+BE3iY2q+l06w==,type:str]
|
|
effect: NoSchedule
|
|
- key: ENC[AES256_GCM,data:EmD2g2fExXx1efzKZEBR+gDI0FurCGY7drZeJQ4UWWqWD0WK9w==,iv:g4NEJKZ4VMs4CWjWhV6M3IR1f3iC+1FuoCLnrmWTneA=,tag:0G9psRenOhpP1jF4O/gB2w==,type:str]
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
# Prefer (non-failover nodes) in normal operation
|
|
affinity:
|
|
nodeAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
preference:
|
|
matchExpressions:
|
|
- key: ENC[AES256_GCM,data:Awenw5YOeHT4Ox4zmVS1bwOUqEI=,iv:H4Wh8ym80hb7Q+5ZUwFsZi7eJ4PHSLrwV6ug5o6BIzA=,tag:eEXV1rSrhj+h3uLoAPgGxw==,type:str]
|
|
operator: NotIn
|
|
values:
|
|
- "true"
|
|
sops:
|
|
lastmodified: "2026-08-26T19:28:04Z"
|
|
mac: ENC[AES256_GCM,data:SykWsjz27MliQeGiof0rYYzo3/qexc+HkYrDW6qTte82+WB4EJN32VeHjU77pPcFHntr6vOJWJuIH+7oP9y6IUp8v2W9L3RF+2s497OLp6s2+rkec7cBNczW7rulTI1ByimcleYuDIDq7X38En1Cy0DLqJfQsgmGZNH4SW0EMQw=,iv:/bQGm0olX0CSlIml6gVFHwXExOhh7IhmGwxkCKesIV8=,tag:RM1BEKHJAxNO+xJSMW6BAA==,type:str]
|
|
pgp:
|
|
- created_at: "2026-08-26T19:28:04Z"
|
|
enc: |-
|
|
-----BEGIN PGP MESSAGE-----
|
|
|
|
hQIMA7uy4qQr71wiAQ//Te5mPuzpn3t/Tjl48GhLVXX85mm+FmcXLFHD9onv2SS4
|
|
ojlbXYQcaQyvChWNCHyQ1COubkTWa0JOk43lNDmyrJoTq0fh0avX4oqtJn0eUg7a
|
|
Ss0xwrUjJ9wQDScyZaqNHH6H3Km2JDll+6ObLkX7qvTvQoi6x8RMxqTpeJ8G8bmS
|
|
/2sOK5oj9xZlGrA+Bz8u+JE4MguhHwf1WvcJ5dBwaDYgEISUpaTalAKjrLRHFqRL
|
|
8lyaFqMNBy8VB/zhgJDxy7WhZKv3wGtU4cNmYatJUPWHcjoTSiaNGiu1+7XnjBxY
|
|
muso76okHjAvf0qiEE1wfDvxuB2VpZyj4QiAgVctcq+hq3yW08FftdMq7xtIiYgw
|
|
Xsoryrc0reXys4j7V7/GT+g2lIbjOR0EbnY69cLOkidijEIxuqW5F2dSYXv6E1Sn
|
|
AowT5SH95RyfNV2TghUL7Z9z5a/xzhBz0gQBVvlxcJntpMqkaah+ffwYHHY9nPPm
|
|
KynAk3zHkRd3MKHHZDrcYwnvhdDAQf/OVrHq34CB0uMIqDY/91EoOE3MiasvzREH
|
|
8P53YoktNdw/TV7RIhYaHfn6/0J1qw475TiDHEaY/Zy3cXBI1v/BD5Q0qp0ECKr0
|
|
iYuRtMm7GZNFp6Xj26XbxChPH9MEPvrAkM5iTZ3kXlajjKzNHbMV2ANMI0wxBl3S
|
|
XgF7I4/pzOC+RzJd5hQFFWOF9aWYFeIxd+IQQWwTDDJ/k+8+Ttd/I6Bq5hdSTJgS
|
|
OUSnJ4SmnZOK5iIZWVsRvCBCA3ukKUiIsUhFf9UlYxFjkKArOXnReYeaOwzyicQ=
|
|
=6UoF
|
|
-----END PGP MESSAGE-----
|
|
fp: DC6910268E657FF70BA7EC289974494E76938DDC
|
|
encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
|
|
mac_only_encrypted: true
|
|
version: 3.10.2
|