86 lines
2.4 KiB
YAML
86 lines
2.4 KiB
YAML
---
|
|
# tasks file for mastodon
|
|
- name: Deploy Mastodon
|
|
kubernetes.core.helm:
|
|
name: mastodon
|
|
chart_ref: bitnami/mastodon
|
|
release_namespace: mastodon
|
|
create_namespace: true
|
|
timeout: 600s
|
|
values:
|
|
metrics:
|
|
enabled: true
|
|
initJob:
|
|
precompileAssets:
|
|
resources:
|
|
requests:
|
|
cpu: 0m
|
|
memory: 0Mi
|
|
limits:
|
|
cpu: 1.5
|
|
memory: 3072Mi
|
|
adminUser: mastodon
|
|
adminEmail: mastodon@postfix.eom.dev
|
|
adminPassword: "{{ mastodon_admin_password }}"
|
|
extraConfig:
|
|
LDAP_ENABLED: "true"
|
|
LDAP_HOST: openldap.openldap.svc.cluster.local
|
|
LDAP_PORT: "389"
|
|
LDAP_METHOD: plain
|
|
LDAP_BASE: dc=eom,dc=dev
|
|
LDAP_BIND_DN: cn=readonly,dc=eom,dc=dev
|
|
LDAP_PASSWORD: "{{ openldap_readonly_password }}"
|
|
LDAP_UID: uid
|
|
LDAP_SEARCH_FILTER: (&(objectClass=posixAccount)(|(%{uid}=%{username})(%{mail}=%{email}))(memberOf=cn=Mastodon Users,ou=Mastodon,ou=Services,dc=eom,dc=dev))
|
|
LDAP_MAIL: mail
|
|
enableS3: false
|
|
localDomain: mastodon.eom.dev
|
|
smtp:
|
|
server: postfix.eom.dev
|
|
port: 587
|
|
from_address: mastodon@postfix.eom.dev
|
|
domain: postfix.eom.dev
|
|
reply_to: mastodon@postfix.eom.dev
|
|
delivery_method: smtp
|
|
tls: true
|
|
auth_method: starttls
|
|
login: mastodon
|
|
password: "{{ mastodon_admin_password }}"
|
|
persistence:
|
|
enabled: true
|
|
size: 8Ti
|
|
redis:
|
|
enabled: true
|
|
auth:
|
|
password: "{{ redis_auth_password }}"
|
|
postgresql:
|
|
enabled: false
|
|
externalDatabase:
|
|
host: postgresql-postgresql-ha-pgpool.postgresql.svc.cluster.local
|
|
user: mastodon
|
|
password: "{{ mastodon_admin_password }}"
|
|
database: mastodon
|
|
port: 5432
|
|
elasticsearch:
|
|
enabled: false
|
|
externalElasticsearch:
|
|
host: elasticsearch.elasticsearch.svc.cluster.local
|
|
port: 9200
|
|
minio:
|
|
enabled: false
|
|
apache:
|
|
service:
|
|
type: ClusterIP
|
|
ports:
|
|
http: 80
|
|
ingress:
|
|
enabled: true
|
|
hostname: mastodon.eom.dev
|
|
annotations:
|
|
kubernetes.io/ingress.class: nginx
|
|
cert-manager.io/cluster-issuer: ca-issuer
|
|
tls:
|
|
- hosts:
|
|
- mastodon.eom.dev
|
|
secretName: mastodon-tls
|