Merge pull request #1 from small-hack/add-env-vars
add all initial env vars for configuring pixelfed
This commit is contained in:
Jesse Hitch
@@ -21,6 +21,10 @@ jobs:
|
|||||||
- name: Install Helm
|
- name: Install Helm
|
||||||
uses: azure/setup-helm@v4
|
uses: azure/setup-helm@v4
|
||||||
|
|
||||||
|
- name: Add dependency chart repos
|
||||||
|
run: |
|
||||||
|
helm repo add bitnami https://charts.bitnami.com/bitnami
|
||||||
|
|
||||||
- name: Set up chart-testing
|
- name: Set up chart-testing
|
||||||
uses: helm/chart-testing-action@v2.6.1
|
uses: helm/chart-testing-action@v2.6.1
|
||||||
|
|
||||||
@@ -50,6 +54,10 @@ jobs:
|
|||||||
- name: Install Helm
|
- name: Install Helm
|
||||||
uses: azure/setup-helm@v4
|
uses: azure/setup-helm@v4
|
||||||
|
|
||||||
|
- name: Add dependency chart repos
|
||||||
|
run: |
|
||||||
|
helm repo add bitnami https://charts.bitnami.com/bitnami
|
||||||
|
|
||||||
- name: Set up chart-testing
|
- name: Set up chart-testing
|
||||||
uses: helm/chart-testing-action@v2.6.1
|
uses: helm/chart-testing-action@v2.6.1
|
||||||
|
|
||||||
@@ -70,37 +78,3 @@ jobs:
|
|||||||
if: steps.list-changed.outputs.changed == 'true'
|
if: steps.list-changed.outputs.changed == 'true'
|
||||||
run: |
|
run: |
|
||||||
ct install --target-branch ${{ github.event.repository.default_branch }}
|
ct install --target-branch ${{ github.event.repository.default_branch }}
|
||||||
|
|
||||||
test_user_creation:
|
|
||||||
name: Test chart with user creation
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
needs: lint
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
with:
|
|
||||||
fetch-depth: "0"
|
|
||||||
|
|
||||||
- name: Install Helm
|
|
||||||
uses: azure/setup-helm@v4
|
|
||||||
|
|
||||||
- name: Set up chart-testing
|
|
||||||
uses: helm/chart-testing-action@v2.6.1
|
|
||||||
|
|
||||||
- name: Run chart-testing (list-changed)
|
|
||||||
id: list-changed
|
|
||||||
run: |
|
|
||||||
changed=$(ct list-changed --target-branch ${{ github.event.repository.default_branch }})
|
|
||||||
if [[ -n "$changed" ]]; then
|
|
||||||
echo "changed=true" >> "$GITHUB_OUTPUT"
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Create kind cluster
|
|
||||||
uses: helm/kind-action@v1.10.0
|
|
||||||
if: steps.list-changed.outputs.changed == 'true'
|
|
||||||
|
|
||||||
- name: Run chart-testing (install with user creation)
|
|
||||||
id: install
|
|
||||||
if: steps.list-changed.outputs.changed == 'true'
|
|
||||||
run: |
|
|
||||||
ct install --target-branch ${{ github.event.repository.default_branch }}
|
|
||||||
|
|||||||
@@ -0,0 +1,9 @@
|
|||||||
|
dependencies:
|
||||||
|
- name: postgresql
|
||||||
|
repository: oci://registry-1.docker.io/bitnamicharts
|
||||||
|
version: 16.3.4
|
||||||
|
- name: valkey
|
||||||
|
repository: oci://registry-1.docker.io/bitnamicharts
|
||||||
|
version: 2.2.1
|
||||||
|
digest: sha256:6ddd2457b1d98b322978cb171e46195627cd3c46fb141e9f0a21b97ad54c4148
|
||||||
|
generated: "2024-12-29T22:53:47.065327+01:00"
|
||||||
@@ -15,8 +15,24 @@ type: application
|
|||||||
# This is the chart version. This version number should be incremented each time you make changes
|
# This is the chart version. This version number should be incremented each time you make changes
|
||||||
# to the chart and its templates, including the app version.
|
# to the chart and its templates, including the app version.
|
||||||
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||||
version: 0.1.0
|
version: 0.2.0
|
||||||
|
|
||||||
# This is the version number of the application being deployed.
|
# This is the version number of the application being deployed.
|
||||||
# image=ghcr.io/mattlqx/docker-pixelfed
|
# renovate:image=ghcr.io/mattlqx/docker-pixelfed
|
||||||
appVersion: "v0.12.3-nginx"
|
appVersion: "v0.12.3-nginx"
|
||||||
|
|
||||||
|
maintainers:
|
||||||
|
- name: "jessebot"
|
||||||
|
email: "jessebot@linux.com"
|
||||||
|
url: "https://github.com/jessebot"
|
||||||
|
|
||||||
|
dependencies:
|
||||||
|
- name: postgresql
|
||||||
|
version: 16.3.4
|
||||||
|
repository: oci://registry-1.docker.io/bitnamicharts
|
||||||
|
condition: postgresql.enabled
|
||||||
|
|
||||||
|
- name: valkey
|
||||||
|
version: 2.2.1
|
||||||
|
repository: oci://registry-1.docker.io/bitnamicharts
|
||||||
|
condition: valkey.enabled
|
||||||
|
|||||||
+143
-2
@@ -1,9 +1,22 @@
|
|||||||
# pixelfed
|
# pixelfed
|
||||||
|
|
||||||
  
|
  
|
||||||
|
|
||||||
A Helm chart for deploying Pixelfed on Kubernetes
|
A Helm chart for deploying Pixelfed on Kubernetes
|
||||||
|
|
||||||
|
## Maintainers
|
||||||
|
|
||||||
|
| Name | Email | Url |
|
||||||
|
| ---- | ------ | --- |
|
||||||
|
| jessebot | <jessebot@linux.com> | <https://github.com/jessebot> |
|
||||||
|
|
||||||
|
## Requirements
|
||||||
|
|
||||||
|
| Repository | Name | Version |
|
||||||
|
|------------|------|---------|
|
||||||
|
| oci://registry-1.docker.io/bitnamicharts | postgresql | 16.3.4 |
|
||||||
|
| oci://registry-1.docker.io/bitnamicharts | valkey | 2.2.1 |
|
||||||
|
|
||||||
## Values
|
## Values
|
||||||
|
|
||||||
| Key | Type | Default | Description |
|
| Key | Type | Default | Description |
|
||||||
@@ -13,6 +26,28 @@ A Helm chart for deploying Pixelfed on Kubernetes
|
|||||||
| autoscaling.maxReplicas | int | `100` | |
|
| autoscaling.maxReplicas | int | `100` | |
|
||||||
| autoscaling.minReplicas | int | `1` | |
|
| autoscaling.minReplicas | int | `1` | |
|
||||||
| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
|
| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
|
||||||
|
| externalDatabase.connection | string | `"psql"` | options: sqlite mysql pgsql sqlsrv |
|
||||||
|
| externalDatabase.database | string | `"pixelfed"` | |
|
||||||
|
| externalDatabase.enabled | bool | `false` | enable using an external mysql or postgresql cluster |
|
||||||
|
| externalDatabase.existingSecret | string | `""` | get database credentials from an existing Kubernetes Secret |
|
||||||
|
| externalDatabase.existingSecretKeys.database | string | `"pixelfed"` | key in existing Kubernetes Secret for database. If set, ignores externalDatabase.database |
|
||||||
|
| externalDatabase.existingSecretKeys.host | string | `""` | key in existing Kubernetes Secret for host. If set, ignores externalDatabase.host |
|
||||||
|
| externalDatabase.existingSecretKeys.password | string | `""` | key in existing Kubernetes Secret for password. If set, ignores externalDatabase.password |
|
||||||
|
| externalDatabase.existingSecretKeys.port | string | `""` | key in existing Kubernetes Secret for port. If set, ignores externalDatabase.port |
|
||||||
|
| externalDatabase.existingSecretKeys.username | string | `""` | key in existing Kubernetes Secret for username. If set, ignores externalDatabase.username |
|
||||||
|
| externalDatabase.host | string | `""` | |
|
||||||
|
| externalDatabase.password | string | `""` | |
|
||||||
|
| externalDatabase.port | int | `3306` | |
|
||||||
|
| externalDatabase.username | string | `""` | |
|
||||||
|
| externalValkey.client | string | `"phpredis"` | |
|
||||||
|
| externalValkey.enabled | bool | `false` | enable using an external valkey or redis cluster |
|
||||||
|
| externalValkey.existingSecret | string | `""` | get valkey credentials from an existing Kubernetes Secret |
|
||||||
|
| externalValkey.existingSecretKeys.host | string | `""` | key in existing Kubernetes Secret for host. If set, ignores externalValkey.host |
|
||||||
|
| externalValkey.existingSecretKeys.password | string | `""` | key in existing Kubernetes Secret for password. If set, ignores externalValkey.password |
|
||||||
|
| externalValkey.host | string | `"valkey"` | |
|
||||||
|
| externalValkey.password | string | `"null"` | |
|
||||||
|
| externalValkey.port | string | `"6379"` | |
|
||||||
|
| externalValkey.scheme | string | `"tcp"` | |
|
||||||
| fullnameOverride | string | `""` | |
|
| fullnameOverride | string | `""` | |
|
||||||
| image.pullPolicy | string | `"IfNotPresent"` | This sets the pull policy for images. |
|
| image.pullPolicy | string | `"IfNotPresent"` | This sets the pull policy for images. |
|
||||||
| image.registry | string | `"ghcr.io"` | |
|
| image.registry | string | `"ghcr.io"` | |
|
||||||
@@ -30,9 +65,97 @@ A Helm chart for deploying Pixelfed on Kubernetes
|
|||||||
| livenessProbe.httpGet.port | string | `"http"` | |
|
| livenessProbe.httpGet.port | string | `"http"` | |
|
||||||
| nameOverride | string | `""` | This is to override the chart name. |
|
| nameOverride | string | `""` | This is to override the chart name. |
|
||||||
| nodeSelector | object | `{}` | |
|
| nodeSelector | object | `{}` | |
|
||||||
|
| pixelfed.account_deletion | bool | `true` | Enable account deletion (may be a requirement in some jurisdictions) |
|
||||||
|
| pixelfed.activity_pub.enabled | bool | `false` | |
|
||||||
|
| pixelfed.activity_pub.inbox | bool | `false` | |
|
||||||
|
| pixelfed.activity_pub.outbox | bool | `false` | |
|
||||||
|
| pixelfed.activity_pub.remote_follow | bool | `false` | |
|
||||||
|
| pixelfed.activity_pub.sharedinbox | bool | `false` | |
|
||||||
|
| pixelfed.admin_domain | string | `""` | domain of admin interface |
|
||||||
|
| pixelfed.app.domain | string | `""` | The domain of your server, without https:// |
|
||||||
|
| pixelfed.app.env | string | `"production"` | The app environment, keep it set to "production" |
|
||||||
|
| pixelfed.app.locale | string | `"en"` | change this to the language code of your pixelfed instance |
|
||||||
|
| pixelfed.app.name | string | `"Pixelfed"` | The name of your server/instance |
|
||||||
|
| pixelfed.app.url | string | `"https://localhost"` | change this to the domain of your pixelfed instance |
|
||||||
|
| pixelfed.atom_feeds | string | `"true"` | https://docs.pixelfed.org/technical-documentation/config/#atom_feeds |
|
||||||
|
| pixelfed.db_apply_new_migrations_automatically | bool | `false` | |
|
||||||
|
| pixelfed.enable_config_cache | bool | `true` | Enable the config cache to allow you to manage settings via the admin dashboard |
|
||||||
|
| pixelfed.enforce_email_verification | bool | `true` | Enforce email verification |
|
||||||
|
| pixelfed.exp_emc | bool | `true` | Experimental Configuration |
|
||||||
|
| pixelfed.force_https_urls | bool | `true` | Force https url generation |
|
||||||
|
| pixelfed.image_quality | int | `80` | Set the image optimization quality, between 1-100. Lower uses less space, higher more quality |
|
||||||
|
| pixelfed.instance.contact_email | string | `""` | The public contact email for your server |
|
||||||
|
| pixelfed.instance.contact_form | bool | `false` | enable the instance contact form |
|
||||||
|
| pixelfed.instance.cur_reg | bool | `false` | Enable Curated Registration |
|
||||||
|
| pixelfed.instance.description | string | `"Pixelfed - Photo sharing for everyone"` | your server description |
|
||||||
|
| pixelfed.instance.discover_public | bool | `false` | Enable public access to the Discover feature |
|
||||||
|
| pixelfed.instance.landing.show_directory | bool | `true` | Enable the profile directory on the landing page |
|
||||||
|
| pixelfed.instance.landing.show_explore | bool | `true` | Enable the popular post explore on the landing page |
|
||||||
|
| pixelfed.instance.post_embeds | bool | `true` | Enable the post embed feature |
|
||||||
|
| pixelfed.instance.profile_embeds | bool | `true` | Enable the profile embed feature |
|
||||||
|
| pixelfed.instance.public_hashtags | bool | `false` | Allow anonymous access to hashtag feeds |
|
||||||
|
| pixelfed.instance.reports.email_addresses | list | `[]` | A list of email addresses to deliver admin reports to |
|
||||||
|
| pixelfed.instance.reports.email_autospam | bool | `false` | Enable autospam reports (require INSTANCE_REPORTS_EMAIL_ENABLED) |
|
||||||
|
| pixelfed.instance.reports.email_enabled | bool | `false` | Send a report email to the admin account for new autospam/reports |
|
||||||
|
| pixelfed.instance.show_peers | bool | `false` | Enable the api/v1/peers API endpoint |
|
||||||
|
| pixelfed.mail.driver | string | `"smtp"` | options: "smtp" (default), "sendmail", "mailgun", "mandrill", "ses" "sparkpost", "log", "array" |
|
||||||
|
| pixelfed.mail.encryption | string | `"tls"` | |
|
||||||
|
| pixelfed.mail.existingSecret | string | `""` | name of an existing Kubernetes Secret for mail credentials |
|
||||||
|
| pixelfed.mail.existingSecretKeys.host | string | `""` | key in existing Kubernetes Secret for host. If set, ignores mail.host |
|
||||||
|
| pixelfed.mail.existingSecretKeys.password | string | `""` | key in existing Kubernetes Secret for password. If set, ignores mail.password |
|
||||||
|
| pixelfed.mail.existingSecretKeys.port | string | `""` | key in existing Kubernetes Secret for port. If set, ignores mail.port |
|
||||||
|
| pixelfed.mail.existingSecretKeys.username | string | `""` | key in existing Kubernetes Secret for username. If set, ignores mail.username |
|
||||||
|
| pixelfed.mail.from_address | string | `"pixelfed@example.com"` | |
|
||||||
|
| pixelfed.mail.from_name | string | `"Pixelfed"` | |
|
||||||
|
| pixelfed.mail.host | string | `"smtp.mailtrap.io"` | |
|
||||||
|
| pixelfed.mail.password | string | `""` | |
|
||||||
|
| pixelfed.mail.port | int | `2525` | |
|
||||||
|
| pixelfed.mail.username | string | `""` | |
|
||||||
|
| pixelfed.max_account_size | int | `1000000` | The max allowed account size in KB |
|
||||||
|
| pixelfed.max_album_length | int | `6` | The max number of media per post album |
|
||||||
|
| pixelfed.max_avatar_size | int | `2000` | The max user avatar size in KB |
|
||||||
|
| pixelfed.max_bio_length | int | `256` | The max user bio length |
|
||||||
|
| pixelfed.max_caption_length | int | `1000` | The max post caption length |
|
||||||
|
| pixelfed.max_name_length | int | `32` | The max user display name length |
|
||||||
|
| pixelfed.max_photo_size | int | `15000` | The max photo/video size in KB |
|
||||||
|
| pixelfed.min_password_length | int | `16` | The min password length |
|
||||||
|
| pixelfed.nodeinfo | string | `"true"` | https://docs.pixelfed.org/technical-documentation/config/#nodeinfo |
|
||||||
|
| pixelfed.oauth_enabled | bool | `true` | Enable oAuth support, required for mobile/3rd party apps |
|
||||||
|
| pixelfed.open_registration | bool | `true` | Enable open registration for new accounts |
|
||||||
|
| pixelfed.pf.admin_invites_enabled | bool | `true` | Enable the Admin Invites feature |
|
||||||
|
| pixelfed.pf.enable_cloud | bool | `false` | Enable S3/Object Storage |
|
||||||
|
| pixelfed.pf.enforce_max_users | int | `2000` | in KB |
|
||||||
|
| pixelfed.pf.hide_nsfw_on_public_feeds | bool | `false` | Hide sensitive posts from public/network feeds |
|
||||||
|
| pixelfed.pf.local_avatar_to_cloud | bool | `false` | Store local avatars on S3 (Requires S3) |
|
||||||
|
| pixelfed.pf.max_collection_length | int | `100` | Max collection post limit |
|
||||||
|
| pixelfed.pf.max_domain_blocks | int | `50` | The max number of domain blocks per account |
|
||||||
|
| pixelfed.pf.max_user_blocks | int | `50` | The max number of user blocks per account |
|
||||||
|
| pixelfed.pf.max_user_mutes | int | `50` | The max number of user mutes per account |
|
||||||
|
| pixelfed.pf.max_users | int | `1000` | Limit max user registrations |
|
||||||
|
| pixelfed.pf.optimize_images | bool | `true` | Enable image optimization |
|
||||||
|
| pixelfed.pf.optimize_videos | bool | `true` | Enable video optimization |
|
||||||
|
| pixelfed.s3.access_key_id | string | `""` | s3 access_key_id. ignored if s3.existingSecretKeys.access_key_id is set |
|
||||||
|
| pixelfed.s3.bucket | string | `""` | s3 bucket |
|
||||||
|
| pixelfed.s3.endpoint | string | `""` | s3 endpoint excluding protocol such as s3.domain.com |
|
||||||
|
| pixelfed.s3.existingSecret | string | `""` | name of an existing Kubernetes Secret for s3 credentials |
|
||||||
|
| pixelfed.s3.existingSecretKeys.access_key_id | string | `""` | key in existing Kubernetes Secret for access_key_id. If set, ignores s3.access_key_id |
|
||||||
|
| pixelfed.s3.existingSecretKeys.endpoint | string | `""` | key in existing Kubernetes Secret for endpoint. If set, ignores s3.endpoint |
|
||||||
|
| pixelfed.s3.existingSecretKeys.secret_access_key | string | `""` | key in existing Kubernetes Secret for secret_access_key. If set, ignores s3.secret_access_key |
|
||||||
|
| pixelfed.s3.existingSecretKeys.url | string | `""` | key in existing Kubernetes Secret for url. If set, ignores s3.url |
|
||||||
|
| pixelfed.s3.region | string | `""` | s3 region |
|
||||||
|
| pixelfed.s3.secret_access_key | string | `""` | s3 secret_access_key. ignored if s3.existingSecretKeys.secret_access_key is set |
|
||||||
|
| pixelfed.s3.url | string | `""` | s3 url including protocol such as https://s3.domain.com |
|
||||||
|
| pixelfed.s3.use_path_style_endpoint | bool | `false` | use S3 path type instead of using a DNS subdomain |
|
||||||
|
| pixelfed.session_domain | string | `""` | domain of session? |
|
||||||
|
| pixelfed.stories_enabled | bool | `false` | Enable the Stories feature |
|
||||||
|
| pixelfed.timezone | string | `"europe/amsterdam"` | timezone for docker container |
|
||||||
|
| pixelfed.trusted_proxies | string | `"*"` | trusted proxies |
|
||||||
|
| pixelfed.webfinger | string | `"true"` | https://docs.pixelfed.org/technical-documentation/config/#webfinger |
|
||||||
| podAnnotations | object | `{}` | This is for setting Kubernetes Annotations to a Pod. For more information checkout: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ |
|
| podAnnotations | object | `{}` | This is for setting Kubernetes Annotations to a Pod. For more information checkout: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ |
|
||||||
| podLabels | object | `{}` | This is for setting Kubernetes Labels to a Pod. For more information checkout: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ |
|
| podLabels | object | `{}` | This is for setting Kubernetes Labels to a Pod. For more information checkout: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ |
|
||||||
| podSecurityContext | object | `{}` | |
|
| podSecurityContext | object | `{}` | |
|
||||||
|
| postgresql.enabled | bool | `true` | enable the bundled postgresql sub chart from Bitnami. Must set to true if externalDatabase.enabled=false |
|
||||||
|
| postgresql.fullnameOverride | string | `"postgresql"` | |
|
||||||
| readinessProbe.httpGet.path | string | `"/"` | |
|
| readinessProbe.httpGet.path | string | `"/"` | |
|
||||||
| readinessProbe.httpGet.port | string | `"http"` | |
|
| readinessProbe.httpGet.port | string | `"http"` | |
|
||||||
| replicaCount | int | `1` | This will set the replicaset count more information can be found here: https://kubernetes.io/docs/concepts/workloads/controllers/replicaset/ |
|
| replicaCount | int | `1` | This will set the replicaset count more information can be found here: https://kubernetes.io/docs/concepts/workloads/controllers/replicaset/ |
|
||||||
@@ -45,8 +168,26 @@ A Helm chart for deploying Pixelfed on Kubernetes
|
|||||||
| serviceAccount.create | bool | `true` | Specifies whether a service account should be created |
|
| serviceAccount.create | bool | `true` | Specifies whether a service account should be created |
|
||||||
| serviceAccount.name | string | `""` | The name of the service account to use. If not set and create is true, a name is generated using the fullname template |
|
| serviceAccount.name | string | `""` | The name of the service account to use. If not set and create is true, a name is generated using the fullname template |
|
||||||
| tolerations | list | `[]` | |
|
| tolerations | list | `[]` | |
|
||||||
|
| valkey.auth.enabled | bool | `true` | |
|
||||||
|
| valkey.auth.existingSecret | string | `""` | |
|
||||||
|
| valkey.auth.existingSecretPasswordKey | string | `"password"` | |
|
||||||
|
| valkey.auth.metrics.enabled | bool | `false` | |
|
||||||
|
| valkey.auth.persistentVolumeClaimRetentionPolicy.enabled | bool | `true` | |
|
||||||
|
| valkey.auth.persistentVolumeClaimRetentionPolicy.whenDeleted | string | `"Retain"` | |
|
||||||
|
| valkey.auth.persistentVolumeClaimRetentionPolicy.whenScaled | string | `"Retain"` | |
|
||||||
|
| valkey.auth.primary.persistence.enabled | bool | `true` | |
|
||||||
|
| valkey.auth.primary.persistence.existingClaim | string | `""` | |
|
||||||
|
| valkey.auth.replica.persistence.enabled | bool | `true` | |
|
||||||
|
| valkey.auth.replica.persistence.existingClaim | string | `""` | |
|
||||||
|
| valkey.auth.resourcesPreset | string | `"small"` | |
|
||||||
|
| valkey.auth.tls.authClients | bool | `true` | |
|
||||||
|
| valkey.auth.tls.autoGenerated | bool | `false` | |
|
||||||
|
| valkey.auth.tls.enabled | bool | `false` | |
|
||||||
|
| valkey.enabled | bool | `true` | enable the bundled valkey sub chart from Bitnami. Must set to true if externalValkey.enabled=false |
|
||||||
|
| valkey.fullnameOverride | string | `"valkey"` | |
|
||||||
|
| valkey.global.storageClass | string | `""` | |
|
||||||
| volumeMounts | list | `[]` | Additional volumeMounts on the output Deployment definition. |
|
| volumeMounts | list | `[]` | Additional volumeMounts on the output Deployment definition. |
|
||||||
| volumes | list | `[]` | Additional volumes on the output Deployment definition. |
|
| volumes | list | `[]` | Additional volumes on the output Deployment definition. |
|
||||||
|
|
||||||
----------------------------------------------
|
----------------------------------------------
|
||||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
|
||||||
|
|||||||
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,115 @@
|
|||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: pixelfed-env
|
||||||
|
data:
|
||||||
|
env: |-
|
||||||
|
# app config vars
|
||||||
|
APP_NAME={{ .Values.pixelfed.app.name }}
|
||||||
|
APP_ENV={{ .Values.pixelfed.app.env }}
|
||||||
|
APP_URL={{ .Values.pixelfed.app.url }}
|
||||||
|
APP_LOCALE={{ .Values.pixelfed.app.locale }}
|
||||||
|
{{- with .Values.pixelfed.app.domain }}
|
||||||
|
APP_DOMAIN={{ . }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
# registration related env vars
|
||||||
|
OPEN_REGISTRATION={{ .Values.pixelfed.open_registration | quote }}
|
||||||
|
ENFORCE_EMAIL_VERIFICATION={{ .Values.pixelfed.enforce_email_verification | quote }}
|
||||||
|
ACCOUNT_DELETION={{ .Values.pixelfed.account_deletion | quote }}
|
||||||
|
OAUTH_ENABLED={{ .Values.pixelfed.oauth_enabled | quote }}
|
||||||
|
|
||||||
|
MIN_PASSWORD_LENGTH={{ .Values.pixelfed.min_password_length | quote }}
|
||||||
|
MAX_ACCOUNT_SIZE={{ .Values.pixelfed.max_account_size | quote }}
|
||||||
|
MAX_PHOTO_SIZE={{ .Values.pixelfed.max_photo_size | quote }}
|
||||||
|
MAX_AVATAR_SIZE={{ .Values.pixelfed.max_avatar_size | quote }}
|
||||||
|
MAX_CAPTION_LENGTH={{ .Values.pixelfed.max_caption_length | quote }}
|
||||||
|
MAX_BIO_LENGTH={{ .Values.pixelfed.max_bio_length | quote }}
|
||||||
|
MAX_NAME_LENGTH={{ .Values.pixelfed.max_name_length | quote }}
|
||||||
|
MAX_ALBUM_LENGTH={{ .Values.pixelfed.max_album_length | quote }}
|
||||||
|
FORCE_HTTPS_URLS={{ .Values.pixelfed.force_https_urls | quote }}
|
||||||
|
|
||||||
|
# misc
|
||||||
|
STORIES_ENABLED={{ .Values.pixelfed.stories_enabled | quote }}
|
||||||
|
ENABLE_CONFIG_CACHE={{ .Values.pixelfed.enable_config_cache | quote }}
|
||||||
|
IMAGE_QUALITY={{ .Values.pixelfed.image_quality | quote }}
|
||||||
|
|
||||||
|
# instance wide configuration
|
||||||
|
INSTANCE_DESCRIPTION={{ .Values.pixelfed.instance.description }}
|
||||||
|
INSTANCE_CONTACT_FORM={{ .Values.pixelfed.instance.contact_form | quote }}
|
||||||
|
INSTANCE_DISCOVER_PUBLIC={{ .Values.pixelfed.instance.discover_public | quote }}
|
||||||
|
INSTANCE_PUBLIC_HASHTAGS={{ .Values.pixelfed.instance.public_hashtags | quote }}
|
||||||
|
{{- with .Values.pixelfed.instance.contact_email }}
|
||||||
|
INSTANCE_CONTACT_EMAIL={{ .Values.pixelfed.instance.contact_email }}
|
||||||
|
{{- end }}
|
||||||
|
INSTANCE_PROFILE_EMBEDS={{ .Values.pixelfed.instance.profile_embeds | quote }}
|
||||||
|
INSTANCE_POST_EMBEDS={{ .Values.pixelfed.instance.post_embeds | quote }}
|
||||||
|
INSTANCE_REPORTS_EMAIL_ENABLED={{ .Values.pixelfed.instance.reports.email_enabled | quote }}
|
||||||
|
{{- with .Values.pixelfed.instance.reports.email_addresses }}
|
||||||
|
INSTANCE_REPORTS_EMAIL_ADDRESSES={{ join "," . }}
|
||||||
|
{{- end }}
|
||||||
|
INSTANCE_REPORTS_EMAIL_AUTOSPAM={{ .Values.pixelfed.instance.reports.email_autospam | quote }}
|
||||||
|
INSTANCE_LANDING_SHOW_DIRECTORY={{ .Values.pixelfed.instance.landing.show_directory | quote }}
|
||||||
|
INSTANCE_LANDING_SHOW_EXPLORE={{ .Values.pixelfed.instance.landing.show_explore | quote }}
|
||||||
|
INSTANCE_CUR_REG={{ .Values.pixelfed.instance.cur_reg | quote }}
|
||||||
|
INSTANCE_SHOW_PEERS={{ .Values.pixelfed.instance.show_peers | quote }}
|
||||||
|
|
||||||
|
# pixelfed config
|
||||||
|
PF_HIDE_NSFW_ON_PUBLIC_FEEDS={{ .Values.pixelfed.pf.hide_nsfw_on_public_feeds | quote }}
|
||||||
|
PF_LOCAL_AVATAR_TO_CLOUD={{ .Values.pixelfed.pf.local_avatar_to_cloud | quote }}
|
||||||
|
PF_ADMIN_INVITES_ENABLED={{ .Values.pixelfed.pf.admin_invites_enabled | quote }}
|
||||||
|
PF_MAX_USER_BLOCKS={{ .Values.pixelfed.pf.max_user_blocks | quote }}
|
||||||
|
PF_MAX_USER_MUTES={{ .Values.pixelfed.pf.max_user_mutes | quote }}
|
||||||
|
PF_MAX_DOMAIN_BLOCKS={{ .Values.pixelfed.pf.max_domain_blocks | quote }}
|
||||||
|
PF_ENABLE_CLOUD={{ .Values.pixelfed.pf.enable_cloud | quote }}
|
||||||
|
PF_MAX_USERS={{ .Values.pixelfed.pf.max_users | quote }}
|
||||||
|
PF_ENFORCE_MAX_USERS={{ .Values.pixelfed.pf.enforce_max_users | quote }}
|
||||||
|
PF_OPTIMIZE_IMAGES={{ .Values.pixelfed.pf.optimize_images | quote }}
|
||||||
|
PF_OPTIMIZE_VIDEOS={{ .Values.pixelfed.pf.optimize_videos | quote }}
|
||||||
|
PF_MAX_COLLECTION_LENGTH={{ .Values.pixelfed.pf.max_collection_length | quote }}
|
||||||
|
|
||||||
|
# Laravel Configuration
|
||||||
|
SESSION_DRIVER="redis"
|
||||||
|
CACHE_DRIVER="redis"
|
||||||
|
QUEUE_DRIVER="redis"
|
||||||
|
BROADCAST_DRIVER="log"
|
||||||
|
LOG_CHANNEL="stack"
|
||||||
|
HORIZON_PREFIX="horizon-"
|
||||||
|
|
||||||
|
# activity pub
|
||||||
|
ACTIVITY_PUB={{ .Values.pixelfed.activity_pub.enabled | quote }}
|
||||||
|
AP_REMOTE_FOLLOW={{ .Values.pixelfed.activity_pub.remote_follow | quote }}
|
||||||
|
AP_SHAREDINBOX={{ .Values.pixelfed.activity_pub.sharedinbox | quote }}
|
||||||
|
AP_INBOX={{ .Values.pixelfed.activity_pub.inbox | quote }}
|
||||||
|
AP_OUTBOX={{ .Values.pixelfed.activity_pub.outbox | quote }}
|
||||||
|
|
||||||
|
# redis
|
||||||
|
{{- with .Values.externalValkey.host }}
|
||||||
|
REDIS_HOST={{ . }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.externalValkey.port }}
|
||||||
|
REDIS_PORT={{ . }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.externalValkey.password }}
|
||||||
|
REDIS_PASSWORD={{ . }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
# mail
|
||||||
|
MAIL_DRIVER="smtp"
|
||||||
|
MAIL_HOST="smtp.mailgun.org"
|
||||||
|
MAIL_PORT="587"
|
||||||
|
MAIL_FROM_ADDRESS="__CHANGE_ME__"
|
||||||
|
MAIL_FROM_NAME="${APP_NAME}"
|
||||||
|
MAIL_USERNAME=""
|
||||||
|
MAIL_PASSWORD=""
|
||||||
|
MAIL_ENCRYPTION="tls"
|
||||||
|
|
||||||
|
# db
|
||||||
|
DB_CONNECTION="pgsql"
|
||||||
|
DB_HOST="db"
|
||||||
|
DB_USERNAME="pixelfed"
|
||||||
|
DB_PASSWORD=
|
||||||
|
DB_DATABASE="pixelfed_prod"
|
||||||
|
DB_PORT="3306"
|
||||||
|
DB_APPLY_NEW_MIGRATIONS_AUTOMATICALLY="false"
|
||||||
@@ -34,12 +34,287 @@ spec:
|
|||||||
- name: {{ .Chart.Name }}
|
- name: {{ .Chart.Name }}
|
||||||
securityContext:
|
securityContext:
|
||||||
{{- toYaml .Values.securityContext | nindent 12 }}
|
{{- toYaml .Values.securityContext | nindent 12 }}
|
||||||
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
|
image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
|
||||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||||
ports:
|
ports:
|
||||||
- name: http
|
- name: http
|
||||||
containerPort: {{ .Values.service.port }}
|
containerPort: {{ .Values.service.port }}
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
|
env:
|
||||||
|
# app data
|
||||||
|
- name: APP_NAME
|
||||||
|
value: {{ .Values.pixelfed.app.name }}
|
||||||
|
- name: APP_ENV
|
||||||
|
value: {{ .Values.pixelfed.app.env }}
|
||||||
|
- name: APP_URL
|
||||||
|
value: {{ .Values.pixelfed.app.url }}
|
||||||
|
- name: APP_LOCALE
|
||||||
|
value: {{ .Values.pixelfed.app.locale }}
|
||||||
|
{{- with .Values.pixelfed.app.domain }}
|
||||||
|
- name: APP_DOMAIN
|
||||||
|
value: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
# registration related
|
||||||
|
- name: OPEN_REGISTRATION
|
||||||
|
value: {{ .Values.pixelfed.open_registration | quote }}
|
||||||
|
- name: ENFORCE_EMAIL_VERIFICATION
|
||||||
|
value: {{ .Values.pixelfed.enforce_email_verification | quote }}
|
||||||
|
- name: IMAGE_QUALITY
|
||||||
|
value: {{ .Values.pixelfed.image_quality | quote }}
|
||||||
|
- name: ACCOUNT_DELETION
|
||||||
|
value: {{ .Values.pixelfed.account_deletion | quote }}
|
||||||
|
- name: OAUTH_ENABLED
|
||||||
|
value: {{ .Values.pixelfed.oauth_enabled | quote }}
|
||||||
|
|
||||||
|
# limits
|
||||||
|
- name: MIN_PASSWORD_LENGTH
|
||||||
|
value: {{ .Values.pixelfed.min_password_length | quote }}
|
||||||
|
- name: MAX_ACCOUNT_SIZE
|
||||||
|
value: {{ .Values.pixelfed.max_account_size | quote }}
|
||||||
|
- name: MAX_PHOTO_SIZE
|
||||||
|
value: {{ .Values.pixelfed.max_photo_size | quote }}
|
||||||
|
- name: MAX_AVATAR_SIZE
|
||||||
|
value: {{ .Values.pixelfed.max_avatar_size | quote }}
|
||||||
|
- name: MAX_CAPTION_LENGTH
|
||||||
|
value: {{ .Values.pixelfed.max_caption_length | quote }}
|
||||||
|
- name: MAX_BIO_LENGTH
|
||||||
|
value: {{ .Values.pixelfed.max_bio_length | quote }}
|
||||||
|
- name: MAX_NAME_LENGTH
|
||||||
|
value: {{ .Values.pixelfed.max_name_length | quote }}
|
||||||
|
- name: MAX_ALBUM_LENGTH
|
||||||
|
value: {{ .Values.pixelfed.max_album_length | quote }}
|
||||||
|
- name: FORCE_HTTPS_URLS
|
||||||
|
value: {{ .Values.pixelfed.force_https_urls | quote }}
|
||||||
|
- name: STORIES_ENABLED
|
||||||
|
value: {{ .Values.pixelfed.stories_enabled | quote }}
|
||||||
|
- name: ENABLE_CONFIG_CACHE
|
||||||
|
value: {{ .Values.pixelfed.enable_config_cache | quote }}
|
||||||
|
|
||||||
|
# instance config
|
||||||
|
- name: INSTANCE_DESCRIPTION
|
||||||
|
value: {{ .Values.pixelfed.instance.description }}
|
||||||
|
- name: INSTANCE_CONTACT_FORM
|
||||||
|
value: {{ .Values.pixelfed.instance.contact_form | quote }}
|
||||||
|
- name: INSTANCE_DISCOVER_PUBLIC
|
||||||
|
value: {{ .Values.pixelfed.instance.discover_public | quote }}
|
||||||
|
- name: INSTANCE_PUBLIC_HASHTAGS
|
||||||
|
value: {{ .Values.pixelfed.instance.public_hashtags | quote }}
|
||||||
|
{{- with .Values.pixelfed.instance.contact_email }}
|
||||||
|
- name: INSTANCE_CONTACT_EMAIL
|
||||||
|
value: {{ .Values.pixelfed.instance.contact_email }}
|
||||||
|
{{- end }}
|
||||||
|
- name: INSTANCE_PROFILE_EMBEDS
|
||||||
|
value: {{ .Values.pixelfed.instance.profile_embeds | quote }}
|
||||||
|
- name: INSTANCE_POST_EMBEDS
|
||||||
|
value: {{ .Values.pixelfed.instance.post_embeds | quote }}
|
||||||
|
- name: INSTANCE_REPORTS_EMAIL_ENABLED
|
||||||
|
value: {{ .Values.pixelfed.instance.reports.email_enabled | quote }}
|
||||||
|
{{- with .Values.pixelfed.instance.reports.email_addresses }}
|
||||||
|
- name: INSTANCE_REPORTS_EMAIL_ADDRESSES
|
||||||
|
value: {{ join "," . }}
|
||||||
|
{{- end }}
|
||||||
|
- name: INSTANCE_REPORTS_EMAIL_AUTOSPAM
|
||||||
|
value: {{ .Values.pixelfed.instance.reports.email_autospam | quote }}
|
||||||
|
- name: INSTANCE_LANDING_SHOW_DIRECTORY
|
||||||
|
value: {{ .Values.pixelfed.instance.landing.show_directory | quote }}
|
||||||
|
- name: INSTANCE_LANDING_SHOW_EXPLORE
|
||||||
|
value: {{ .Values.pixelfed.instance.landing.show_explore | quote }}
|
||||||
|
- name: INSTANCE_CUR_REG
|
||||||
|
value: {{ .Values.pixelfed.instance.cur_reg | quote }}
|
||||||
|
- name: INSTANCE_SHOW_PEERS
|
||||||
|
value: {{ .Values.pixelfed.instance.show_peers | quote }}
|
||||||
|
|
||||||
|
# public feed
|
||||||
|
- name: PF_HIDE_NSFW_ON_PUBLIC_FEEDS
|
||||||
|
value: {{ .Values.pixelfed.pf.hide_nsfw_on_public_feeds | quote }}
|
||||||
|
- name: PF_LOCAL_AVATAR_TO_CLOUD
|
||||||
|
value: {{ .Values.pixelfed.pf.local_avatar_to_cloud | quote }}
|
||||||
|
- name: PF_ADMIN_INVITES_ENABLED
|
||||||
|
value: {{ .Values.pixelfed.pf.admin_invites_enabled | quote }}
|
||||||
|
- name: PF_MAX_USER_BLOCKS
|
||||||
|
value: {{ .Values.pixelfed.pf.max_user_blocks | quote }}
|
||||||
|
- name: PF_MAX_USER_MUTES
|
||||||
|
value: {{ .Values.pixelfed.pf.max_user_mutes | quote }}
|
||||||
|
- name: PF_MAX_DOMAIN_BLOCKS
|
||||||
|
value: {{ .Values.pixelfed.pf.max_domain_blocks | quote }}
|
||||||
|
- name: PF_ENABLE_CLOUD
|
||||||
|
value: {{ .Values.pixelfed.pf.enable_cloud | quote }}
|
||||||
|
- name: PF_MAX_USERS
|
||||||
|
value: {{ .Values.pixelfed.pf.max_users | quote }}
|
||||||
|
- name: PF_ENFORCE_MAX_USERS
|
||||||
|
value: {{ .Values.pixelfed.pf.enforce_max_users | quote }}
|
||||||
|
- name: PF_OPTIMIZE_IMAGES
|
||||||
|
value: {{ .Values.pixelfed.pf.optimize_images | quote }}
|
||||||
|
- name: PF_OPTIMIZE_VIDEOS
|
||||||
|
value: {{ .Values.pixelfed.pf.optimize_videos | quote }}
|
||||||
|
- name: PF_MAX_COLLECTION_LENGTH
|
||||||
|
value: {{ .Values.pixelfed.pf.max_collection_length | quote }}
|
||||||
|
|
||||||
|
# Laravel Configuration
|
||||||
|
- name: SESSION_DRIVER
|
||||||
|
value: "database"
|
||||||
|
- name: CACHE_DRIVER
|
||||||
|
value: "redis"
|
||||||
|
- name: QUEUE_DRIVER
|
||||||
|
value: "redis"
|
||||||
|
- name: BROADCAST_DRIVER
|
||||||
|
value: "log"
|
||||||
|
- name: LOG_CHANNEL
|
||||||
|
value: "stack"
|
||||||
|
- name: HORIZON_PREFIX
|
||||||
|
value: "horizon-"
|
||||||
|
|
||||||
|
# activity pub
|
||||||
|
- name: ACTIVITY_PUB
|
||||||
|
value: {{ .Values.pixelfed.activity_pub.enabled | quote }}
|
||||||
|
- name: AP_REMOTE_FOLLOW
|
||||||
|
value: {{ .Values.pixelfed.activity_pub.remote_follow | quote }}
|
||||||
|
- name: AP_SHAREDINBOX
|
||||||
|
value: {{ .Values.pixelfed.activity_pub.sharedinbox | quote }}
|
||||||
|
- name: AP_INBOX
|
||||||
|
value: {{ .Values.pixelfed.activity_pub.inbox | quote }}
|
||||||
|
- name: AP_OUTBOX
|
||||||
|
value: {{ .Values.pixelfed.activity_pub.outbox | quote }}
|
||||||
|
|
||||||
|
# redis
|
||||||
|
- name: REDIS_HOST
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.externalValkey.existingSecret }}
|
||||||
|
name: {{ .Values.externalValkey.existingSecret }}
|
||||||
|
key: {{ .Values.externalValkey.existingSecretKeys.host }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-valkey
|
||||||
|
key: host
|
||||||
|
{{- end }}
|
||||||
|
- name: REDIS_PORT
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.externalValkey.existingSecret }}
|
||||||
|
name: {{ .Values.externalValkey.existingSecret }}
|
||||||
|
key: {{ .Values.externalValkey.existingSecretKeys.port }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-valkey
|
||||||
|
key: port
|
||||||
|
{{- end }}
|
||||||
|
- name: REDIS_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.externalValkey.existingSecret }}
|
||||||
|
name: {{ .Values.externalValkey.existingSecret }}
|
||||||
|
key: {{ .Values.externalValkey.existingSecretKeys.password }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-valkey
|
||||||
|
key: password
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
# mail
|
||||||
|
- name: MAIL_DRIVER
|
||||||
|
value: "{{ .Values.pixelfed.mail.driver }}"
|
||||||
|
- name: MAIL_HOST
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.pixelfed.mail.existingSecret }}
|
||||||
|
name: {{ .Values.pixelfed.mail.existingSecret }}
|
||||||
|
key: {{ .Values.pixelfed.mail.existingSecretKeys.host }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-mail
|
||||||
|
key: host
|
||||||
|
{{- end }}
|
||||||
|
- name: MAIL_PORT
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.pixelfed.mail.existingSecret }}
|
||||||
|
name: {{ .Values.pixelfed.mail.existingSecret }}
|
||||||
|
key: {{ .Values.pixelfed.mail.existingSecretKeys.port }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-mail
|
||||||
|
key: port
|
||||||
|
{{- end }}
|
||||||
|
- name: MAIL_FROM_ADDRESS
|
||||||
|
value: "{{ .Values.pixelfed.mail.from_address }}"
|
||||||
|
- name: MAIL_FROM_NAME
|
||||||
|
value: "{{ .Values.pixelfed.mail.from_name }}"
|
||||||
|
- name: MAIL_USERNAME
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.pixelfed.mail.existingSecret }}
|
||||||
|
name: {{ .Values.pixelfed.mail.existingSecret }}
|
||||||
|
key: {{ .Values.pixelfed.mail.existingSecretKeys.username }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-mail
|
||||||
|
key: username
|
||||||
|
{{- end }}
|
||||||
|
- name: MAIL_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.pixelfed.mail.existingSecret }}
|
||||||
|
name: {{ .Values.pixelfed.mail.existingSecret }}
|
||||||
|
key: {{ .Values.pixelfed.mail.existingSecretKeys.password }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-mail
|
||||||
|
key: password
|
||||||
|
{{- end }}
|
||||||
|
- name: MAIL_ENCRYPTION
|
||||||
|
value: "{{ .Values.pixelfed.mail.encryption }}"
|
||||||
|
|
||||||
|
# database configuration
|
||||||
|
- name: DB_CONNECTION
|
||||||
|
value: {{ .Values.externalDatabase.connection }}
|
||||||
|
- name: DB_HOST
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.externalDatabase.existingSecret }}
|
||||||
|
name: {{ .Values.externalDatabase.existingSecret }}
|
||||||
|
key: {{ .Values.externalDatabase.existingSecretKeys.username }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-database
|
||||||
|
key: host
|
||||||
|
{{- end }}
|
||||||
|
- name: DB_USERNAME
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.externalDatabase.existingSecret }}
|
||||||
|
name: {{ .Values.externalDatabase.existingSecret }}
|
||||||
|
key: {{ .Values.externalDatabase.existingSecretKeys.username }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-database
|
||||||
|
key: username
|
||||||
|
{{- end }}
|
||||||
|
- name: DB_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.externalDatabase.existingSecret }}
|
||||||
|
name: {{ .Values.externalDatabase.existingSecret }}
|
||||||
|
key: {{ .Values.externalDatabase.existingSecretKeys.username }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-database
|
||||||
|
key: password
|
||||||
|
{{- end }}
|
||||||
|
- name: DB_DATABASE
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.externalDatabase.existingSecret }}
|
||||||
|
name: {{ .Values.externalDatabase.existingSecret }}
|
||||||
|
key: {{ .Values.externalDatabase.existingSecretKeys.username }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-database
|
||||||
|
key: database
|
||||||
|
{{- end }}
|
||||||
|
- name: DB_PORT
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
{{- if .Values.externalDatabase.existingSecret }}
|
||||||
|
name: {{ .Values.externalDatabase.existingSecret }}
|
||||||
|
key: {{ .Values.externalDatabase.existingSecretKeys.username }}
|
||||||
|
{{- else }}
|
||||||
|
name: pixelfed-database
|
||||||
|
key: port
|
||||||
|
{{- end }}
|
||||||
|
- name: DB_APPLY_NEW_MIGRATIONS_AUTOMATICALLY
|
||||||
|
value: "{{ .Values.pixelfed.db_apply_new_migrations_automatically }}"
|
||||||
|
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
{{- toYaml .Values.livenessProbe | nindent 12 }}
|
{{- toYaml .Values.livenessProbe | nindent 12 }}
|
||||||
readinessProbe:
|
readinessProbe:
|
||||||
|
|||||||
@@ -0,0 +1,13 @@
|
|||||||
|
{{- if and .Values.externalDatabase.enabled ( not .Values.externalDatabase.existingSecret ) }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: pixelfed-database
|
||||||
|
data:
|
||||||
|
host: {{ .Values.externalDatabase.host }}
|
||||||
|
port: {{ .Values.externalDatabase.port }}
|
||||||
|
database: {{ .Values.externalDatabase.database }}
|
||||||
|
username: {{ .Values.externalDatabase.username }}
|
||||||
|
password: {{ .Values.externalDatabase.password }}
|
||||||
|
{{- end }}
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
{{- if not .Values.externalDatabase.existingSecret }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: pixelfed-mail
|
||||||
|
data:
|
||||||
|
host: {{ .Values.pixelfed.mail.host }}
|
||||||
|
port: {{ .Values.pixelfed.mail.port }}
|
||||||
|
username: {{ .Values.pixelfed.mail.username }}
|
||||||
|
password: {{ .Values.pixelfed.mail.password }}
|
||||||
|
{{- end }}
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
{{- if and .Values.externalValkey.enabled ( not .Values.externalValkey.existingSecret ) }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: pixelfed-valkey
|
||||||
|
data:
|
||||||
|
host: {{ .Values.externalValkey.host }}
|
||||||
|
port: {{ .Values.externalValkey.port }}
|
||||||
|
password: {{ .Values.externalValkey.password }}
|
||||||
|
{{- end }}
|
||||||
+317
-2
@@ -62,8 +62,6 @@ ingress:
|
|||||||
enabled: false
|
enabled: false
|
||||||
className: ""
|
className: ""
|
||||||
annotations: {}
|
annotations: {}
|
||||||
# kubernetes.io/ingress.class: nginx
|
|
||||||
# kubernetes.io/tls-acme: "true"
|
|
||||||
hosts:
|
hosts:
|
||||||
- host: chart-example.local
|
- host: chart-example.local
|
||||||
paths:
|
paths:
|
||||||
@@ -123,3 +121,320 @@ nodeSelector: {}
|
|||||||
tolerations: []
|
tolerations: []
|
||||||
|
|
||||||
affinity: {}
|
affinity: {}
|
||||||
|
|
||||||
|
externalDatabase:
|
||||||
|
# -- enable using an external mysql or postgresql cluster
|
||||||
|
enabled: false
|
||||||
|
# -- options: sqlite mysql pgsql sqlsrv
|
||||||
|
connection: psql
|
||||||
|
host: ""
|
||||||
|
port: 3306
|
||||||
|
database: pixelfed
|
||||||
|
username: ""
|
||||||
|
password: ""
|
||||||
|
# options: disable, require, allow, prefer, verify-full
|
||||||
|
# ssl_mode: ""
|
||||||
|
# path to ssl root cert
|
||||||
|
# ssl_root_cert:
|
||||||
|
# path to ssl cert
|
||||||
|
# ssl_cert: ""
|
||||||
|
# path to ssl key
|
||||||
|
# ssl_key: ""
|
||||||
|
# -- get database credentials from an existing Kubernetes Secret
|
||||||
|
existingSecret: ""
|
||||||
|
existingSecretKeys:
|
||||||
|
# -- key in existing Kubernetes Secret for host. If set, ignores externalDatabase.host
|
||||||
|
host: ""
|
||||||
|
# -- key in existing Kubernetes Secret for port. If set, ignores externalDatabase.port
|
||||||
|
port: ""
|
||||||
|
# -- key in existing Kubernetes Secret for database. If set, ignores externalDatabase.database
|
||||||
|
database: pixelfed
|
||||||
|
# -- key in existing Kubernetes Secret for username. If set, ignores externalDatabase.username
|
||||||
|
username: ""
|
||||||
|
# -- key in existing Kubernetes Secret for password. If set, ignores externalDatabase.password
|
||||||
|
password: ""
|
||||||
|
|
||||||
|
# External Redis Configuration. Use this if you set valkey.enabled: false
|
||||||
|
externalValkey:
|
||||||
|
# -- enable using an external valkey or redis cluster
|
||||||
|
enabled: false
|
||||||
|
client: "phpredis"
|
||||||
|
scheme: "tcp"
|
||||||
|
host: "valkey"
|
||||||
|
password: "null"
|
||||||
|
port: "6379"
|
||||||
|
# -- get valkey credentials from an existing Kubernetes Secret
|
||||||
|
existingSecret: ""
|
||||||
|
existingSecretKeys:
|
||||||
|
# -- key in existing Kubernetes Secret for host. If set, ignores externalValkey.host
|
||||||
|
host: ""
|
||||||
|
# -- key in existing Kubernetes Secret for password. If set, ignores externalValkey.password
|
||||||
|
password: ""
|
||||||
|
|
||||||
|
# valkey is a fork of redis with a better license
|
||||||
|
valkey:
|
||||||
|
# -- enable the bundled valkey sub chart from Bitnami.
|
||||||
|
# Must set to true if externalValkey.enabled=false
|
||||||
|
enabled: true
|
||||||
|
fullnameOverride: "valkey"
|
||||||
|
global:
|
||||||
|
storageClass: ""
|
||||||
|
|
||||||
|
# for auth, we get the valkey credentials from an ExternalSecret
|
||||||
|
auth:
|
||||||
|
enabled: true
|
||||||
|
existingSecret: ""
|
||||||
|
existingSecretPasswordKey: "password"
|
||||||
|
# TLS settings
|
||||||
|
tls:
|
||||||
|
enabled: false
|
||||||
|
authClients: true
|
||||||
|
autoGenerated: false
|
||||||
|
|
||||||
|
# primary (control plane) configuration
|
||||||
|
primary:
|
||||||
|
persistence:
|
||||||
|
enabled: true
|
||||||
|
existingClaim: ""
|
||||||
|
|
||||||
|
# valkey replica configuration
|
||||||
|
replica:
|
||||||
|
persistence:
|
||||||
|
enabled: true
|
||||||
|
existingClaim: ""
|
||||||
|
|
||||||
|
# persistnent volume retention policy for the StatefulSet
|
||||||
|
persistentVolumeClaimRetentionPolicy:
|
||||||
|
enabled: true
|
||||||
|
whenScaled: Retain
|
||||||
|
whenDeleted: Retain
|
||||||
|
|
||||||
|
metrics:
|
||||||
|
# we use a grafana exporter that logs into valkey directly
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
# definitions: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15
|
||||||
|
# Options: nano, micro, small, medium, large, xlarge, 2xlarge
|
||||||
|
# default: nano
|
||||||
|
resourcesPreset: "small"
|
||||||
|
|
||||||
|
|
||||||
|
postgresql:
|
||||||
|
# -- enable the bundled postgresql sub chart from Bitnami.
|
||||||
|
# Must set to true if externalDatabase.enabled=false
|
||||||
|
enabled: true
|
||||||
|
fullnameOverride: "postgresql"
|
||||||
|
|
||||||
|
pixelfed:
|
||||||
|
# -- Automatically run [artisan migrate --force] if new migrations are detected.
|
||||||
|
db_apply_new_migrations_automatically: false
|
||||||
|
|
||||||
|
# -- timezone for docker container
|
||||||
|
timezone: "europe/amsterdam"
|
||||||
|
|
||||||
|
# -- Experimental Configuration
|
||||||
|
exp_emc: true
|
||||||
|
|
||||||
|
# -- domain of admin interface
|
||||||
|
admin_domain: ""
|
||||||
|
|
||||||
|
# -- domain of session?
|
||||||
|
session_domain: ""
|
||||||
|
|
||||||
|
# -- trusted proxies
|
||||||
|
trusted_proxies: "*"
|
||||||
|
|
||||||
|
# app specific settings
|
||||||
|
app:
|
||||||
|
# -- The name of your server/instance
|
||||||
|
name: "Pixelfed"
|
||||||
|
# -- The app environment, keep it set to "production"
|
||||||
|
env: "production"
|
||||||
|
# -- change this to the domain of your pixelfed instance
|
||||||
|
url: "https://localhost"
|
||||||
|
# -- change this to the language code of your pixelfed instance
|
||||||
|
locale: "en"
|
||||||
|
# -- The domain of your server, without https://
|
||||||
|
domain: ""
|
||||||
|
|
||||||
|
# -- Enable open registration for new accounts
|
||||||
|
open_registration: true
|
||||||
|
|
||||||
|
# -- Enforce email verification
|
||||||
|
enforce_email_verification: true
|
||||||
|
|
||||||
|
# -- The min password length
|
||||||
|
min_password_length: 16
|
||||||
|
|
||||||
|
# -- Enable account deletion (may be a requirement in some jurisdictions)
|
||||||
|
account_deletion: true
|
||||||
|
|
||||||
|
# -- Enable oAuth support, required for mobile/3rd party apps
|
||||||
|
oauth_enabled: true
|
||||||
|
|
||||||
|
# -- Enable the Stories feature
|
||||||
|
stories_enabled: false
|
||||||
|
|
||||||
|
# -- Enable the config cache to allow you to manage settings via the admin dashboard
|
||||||
|
enable_config_cache: true
|
||||||
|
|
||||||
|
# -- Set the image optimization quality, between 1-100. Lower uses less space, higher more quality
|
||||||
|
image_quality: 80
|
||||||
|
|
||||||
|
# -- The max allowed account size in KB
|
||||||
|
max_account_size: 1000000
|
||||||
|
|
||||||
|
# -- The max photo/video size in KB
|
||||||
|
max_photo_size: 15000
|
||||||
|
|
||||||
|
# -- The max user avatar size in KB
|
||||||
|
max_avatar_size: 2000
|
||||||
|
|
||||||
|
# -- The max post caption length
|
||||||
|
max_caption_length: 1000
|
||||||
|
|
||||||
|
# -- The max user bio length
|
||||||
|
max_bio_length: 256
|
||||||
|
|
||||||
|
# -- The max user display name length
|
||||||
|
max_name_length: 32
|
||||||
|
|
||||||
|
# -- The max number of media per post album
|
||||||
|
max_album_length: 6
|
||||||
|
|
||||||
|
# -- Force https url generation
|
||||||
|
force_https_urls: true
|
||||||
|
|
||||||
|
# your whole instance, or server, settings
|
||||||
|
instance:
|
||||||
|
# -- your server description
|
||||||
|
description: "Pixelfed - Photo sharing for everyone"
|
||||||
|
# -- enable the instance contact form
|
||||||
|
contact_form: false
|
||||||
|
# -- Enable public access to the Discover feature
|
||||||
|
discover_public: false
|
||||||
|
# -- Allow anonymous access to hashtag feeds
|
||||||
|
public_hashtags: false
|
||||||
|
# -- The public contact email for your server
|
||||||
|
contact_email: ""
|
||||||
|
# -- Enable the profile embed feature
|
||||||
|
profile_embeds: true
|
||||||
|
# -- Enable the post embed feature
|
||||||
|
post_embeds: true
|
||||||
|
# -- Enable Curated Registration
|
||||||
|
cur_reg: false
|
||||||
|
# -- Enable the api/v1/peers API endpoint
|
||||||
|
show_peers: false
|
||||||
|
|
||||||
|
reports:
|
||||||
|
# -- Send a report email to the admin account for new autospam/reports
|
||||||
|
email_enabled: false
|
||||||
|
# -- A list of email addresses to deliver admin reports to
|
||||||
|
email_addresses: []
|
||||||
|
# -- Enable autospam reports (require INSTANCE_REPORTS_EMAIL_ENABLED)
|
||||||
|
email_autospam: false
|
||||||
|
|
||||||
|
landing:
|
||||||
|
# -- Enable the profile directory on the landing page
|
||||||
|
show_directory: true
|
||||||
|
# -- Enable the popular post explore on the landing page
|
||||||
|
show_explore: true
|
||||||
|
|
||||||
|
# public feed settings
|
||||||
|
pf:
|
||||||
|
# -- Hide sensitive posts from public/network feeds
|
||||||
|
hide_nsfw_on_public_feeds: false
|
||||||
|
# -- Store local avatars on S3 (Requires S3)
|
||||||
|
local_avatar_to_cloud: false
|
||||||
|
# -- Enable the Admin Invites feature
|
||||||
|
admin_invites_enabled: true
|
||||||
|
# -- The max number of user blocks per account
|
||||||
|
max_user_blocks: 50
|
||||||
|
# -- The max number of user mutes per account
|
||||||
|
max_user_mutes: 50
|
||||||
|
# -- The max number of domain blocks per account
|
||||||
|
max_domain_blocks: 50
|
||||||
|
# -- Enable S3/Object Storage
|
||||||
|
enable_cloud: false
|
||||||
|
# -- Limit max user registrations
|
||||||
|
max_users: 1000
|
||||||
|
# -- in KB
|
||||||
|
enforce_max_users: 2000
|
||||||
|
# -- Enable image optimization
|
||||||
|
optimize_images: true
|
||||||
|
# -- Enable video optimization
|
||||||
|
optimize_videos: true
|
||||||
|
# -- Max collection post limit
|
||||||
|
max_collection_length: 100
|
||||||
|
|
||||||
|
# ActivityPub Configuration
|
||||||
|
activity_pub:
|
||||||
|
enabled: false
|
||||||
|
remote_follow: false
|
||||||
|
inbox: false
|
||||||
|
outbox: false
|
||||||
|
sharedinbox: false
|
||||||
|
|
||||||
|
###########################################################
|
||||||
|
# Federation
|
||||||
|
###########################################################
|
||||||
|
# -- https://docs.pixelfed.org/technical-documentation/config/#atom_feeds
|
||||||
|
atom_feeds: "true"
|
||||||
|
|
||||||
|
# -- https://docs.pixelfed.org/technical-documentation/config/#nodeinfo
|
||||||
|
nodeinfo: "true"
|
||||||
|
|
||||||
|
# -- https://docs.pixelfed.org/technical-documentation/config/#webfinger
|
||||||
|
webfinger: "true"
|
||||||
|
|
||||||
|
# Mail Configuration (Post-Installer)
|
||||||
|
mail:
|
||||||
|
# -- options: "smtp" (default), "sendmail", "mailgun", "mandrill", "ses"
|
||||||
|
# "sparkpost", "log", "array"
|
||||||
|
driver: smtp
|
||||||
|
host: smtp.mailtrap.io
|
||||||
|
port: 2525
|
||||||
|
username: ""
|
||||||
|
password: ""
|
||||||
|
encryption: "tls"
|
||||||
|
from_address: "pixelfed@example.com"
|
||||||
|
from_name: "Pixelfed"
|
||||||
|
# -- name of an existing Kubernetes Secret for mail credentials
|
||||||
|
existingSecret: ""
|
||||||
|
existingSecretKeys:
|
||||||
|
# -- key in existing Kubernetes Secret for host. If set, ignores mail.host
|
||||||
|
host: ""
|
||||||
|
# -- key in existing Kubernetes Secret for port. If set, ignores mail.port
|
||||||
|
port: ""
|
||||||
|
# -- key in existing Kubernetes Secret for username. If set, ignores mail.username
|
||||||
|
username: ""
|
||||||
|
# -- key in existing Kubernetes Secret for password. If set, ignores mail.password
|
||||||
|
password: ""
|
||||||
|
|
||||||
|
# Mail Configuration (Post-Installer)
|
||||||
|
s3:
|
||||||
|
# -- s3 url including protocol such as https://s3.domain.com
|
||||||
|
url: ""
|
||||||
|
# -- s3 endpoint excluding protocol such as s3.domain.com
|
||||||
|
endpoint: ""
|
||||||
|
# -- s3 bucket
|
||||||
|
bucket: ""
|
||||||
|
# -- s3 region
|
||||||
|
region: ""
|
||||||
|
# -- s3 access_key_id. ignored if s3.existingSecretKeys.access_key_id is set
|
||||||
|
access_key_id: ""
|
||||||
|
# -- s3 secret_access_key. ignored if s3.existingSecretKeys.secret_access_key is set
|
||||||
|
secret_access_key: ""
|
||||||
|
# -- use S3 path type instead of using a DNS subdomain
|
||||||
|
use_path_style_endpoint: false
|
||||||
|
# -- name of an existing Kubernetes Secret for s3 credentials
|
||||||
|
existingSecret: ""
|
||||||
|
existingSecretKeys:
|
||||||
|
# -- key in existing Kubernetes Secret for url. If set, ignores s3.url
|
||||||
|
url: ""
|
||||||
|
# -- key in existing Kubernetes Secret for endpoint. If set, ignores s3.endpoint
|
||||||
|
endpoint: ""
|
||||||
|
# -- key in existing Kubernetes Secret for access_key_id. If set, ignores s3.access_key_id
|
||||||
|
access_key_id: ""
|
||||||
|
# -- key in existing Kubernetes Secret for secret_access_key. If set, ignores s3.secret_access_key
|
||||||
|
secret_access_key: ""
|
||||||
|
|||||||
Reference in New Issue
Block a user