diff --git a/charts/incubator/matomo/Chart.yaml b/charts/incubator/matomo/Chart.yaml new file mode 100644 index 00000000000..3a783eafe65 --- /dev/null +++ b/charts/incubator/matomo/Chart.yaml @@ -0,0 +1,31 @@ +apiVersion: v2 +appVersion: "4.7.1" +dependencies: +- name: common + repository: https://truecharts.org + version: 9.1.2 +- condition: mariadb.enabled + name: mariadb + repository: https://truecharts.org/ + version: 2.0.1 +description: Matomo is the leading Free/Libre open analytics platform +home: https://github.com/truecharts/apps/tree/master/charts/stable/matomo +icon: https://truecharts.org/_static/img/appicons/matomo.png +keywords: +- analytics +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: matomo +sources: +- https://hub.docker.com/_/matomo +- https://github.com/matomo-org/docker +- https://github.com/matomo-org/matomo +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - productivity + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/incubator/matomo/questions.yaml b/charts/incubator/matomo/questions.yaml new file mode 100644 index 00000000000..cbb6be94fa6 --- /dev/null +++ b/charts/incubator/matomo/questions.yaml @@ -0,0 +1,477 @@ +# Include{groups} +portals: + open: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true +# Include{global} + + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "Recreate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" +# Include{controllerExpert} + + - variable: env + group: "Container Configuration" + label: "Image Environment" + schema: + additional_attrs: true + type: dict + attrs: + - variable: BITNAMI_DEBUG + label: "BITNAMI_DEBUG" + description: "Increase verbosity on initialization logs." + schema: + type: boolean + default: false + - variable: MATOMO_USERNAME + label: "MATOMO_USERNAME (First Install Only)" + description: "Matomo application username" + schema: + type: string + required: true + default: "admin" + - variable: MATOMO_PASSWORD + label: "MATOMO_PASSWORD (First Install Only)" + description: "Matomo application password" + schema: + type: string + required: true + private: true + default: "" + - variable: MATOMO_HOST + label: "MATOMO_HOST (First Install Only)" + description: "Matomo application host" + schema: + type: string + required: true + default: "127.0.0.1" + - variable: MATOMO_EMAIL + label: "MATOMO_EMAIL (First Install Only)" + description: "Matomo application email" + schema: + type: string + required: true + default: "email@example.com" + - variable: MATOMO_WEBSITE_NAME + label: "MATOMO_WEBSITE_NAME (First Install Only)" + description: "Name of a website to track in Matomo" + schema: + type: string + required: true + default: "My Website" + - variable: MATOMO_WEBSITE_HOST + label: "MATOMO_WEBSITE_HOST (First Install Only)" + description: "Website's host or domain to track in Matomo" + schema: + type: string + required: true + default: "https://web.example.com" + - variable: MATOMO_SMTP_HOST + label: "MATOMO_SMTP_HOST (First Install Only)" + description: "Matomo SMTP host" + schema: + type: string + default: "" + - variable: MATOMO_SMTP_PORT + label: "MATOMO_SMTP_PORT (First Install Only)" + description: "Matomo SMTP port" + schema: + type: string + default: "" + - variable: MATOMO_SMTP_USER + label: "MATOMO_SMTP_USER (First Install Only)" + description: "Matomo SMTP user" + schema: + type: string + default: "" + - variable: MATOMO_SMTP_PASSWORD + label: "MATOMO_SMTP_PASSWORD (First Install Only)" + description: "Matomo SMTP password" + schema: + type: string + private: true + default: "" + - variable: MATOMO_SMTP_PROTOCOL + label: "MATOMO_SMTP_PROTOCOL (First Install Only)" + description: "Matomo SMTP protocol" + schema: + type: string + private: true + default: "none" + enum: + - value: ssl + description: "ssl" + - value: "tls" + description: "tls" + - value: none + description: "none" + - variable: MATOMO_SMTP_AUTH + label: "MATOMO_SMTP_AUTH (First Install Only)" + description: "Matomo SMTP authentication mechanism to use" + schema: + type: string + private: true + default: "Plain" + enum: + - value: Crammd5 + description: "Crammd5" + - value: "Login" + description: "Login" + - value: Plain + description: "Plain" + - variable: phpconfig + label: "PHP Config (Advanced)" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: PHP_MEMORY_LIMIT + label: "PHP_MEMORY_LIMIT" + description: "Memory limit for PHP scripts" + schema: + type: string + default: "2048M" + - variable: PHP_ENABLE_OPCACHE + label: "PHP_ENABLE_OPCACHE" + description: "Enable OPcache for PHP scripts" + schema: + type: boolean + default: true + - variable: PHP_EXPOSE_PHP + label: "PHP_EXPOSE_PHP" + description: "Enables HTTP header with PHP version" + schema: + type: boolean + default: true + - variable: PHP_MAX_EXECUTION_TIME + label: "PHP_MAX_EXECUTION_TIME" + description: "Maximum execution time for PHP scripts" + schema: + type: string + default: "" + - variable: PHP_MAX_INPUT_TIME + label: "PHP_MAX_INPUT_TIME" + description: "Maximum input time for PHP scripts" + schema: + type: string + default: "" + - variable: PHP_MAX_INPUT_VARS + label: "PHP_MAX_INPUT_VARS" + description: "Maximum amount of input variables for PHP scripts" + schema: + type: string + default: "" + - variable: PHP_POST_MAX_SIZE + label: "PHP_POST_MAX_SIZE" + description: "Maximum size for PHP POST requests" + schema: + type: string + default: "" + - variable: PHP_UPLOAD_MAX_FILESIZE + label: "PHP_UPLOAD_MAX_FILESIZE" + description: "Maximum file size for PHP uploads" + schema: + type: string + default: "" +# Include{containerConfig} + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10172 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: enabled + label: "Enable the port" + schema: + type: boolean + default: true + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 80 + + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + +# Include{serviceExpert} + +# Include{serviceList} + + - variable: persistence + label: "Integrated Persistent Storage" + description: "Integrated Persistent Storage" + group: "Storage and Persistence" + schema: + additional_attrs: true + type: dict + attrs: + - variable: data + label: "App Config Storage" + description: "Stores the Application Configuration." + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simplePVC" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" +# Include{persistenceBasic} + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" +# Include{persistenceAdvanced} +# Include{persistenceList} + + - variable: ingress + label: "" + group: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} + +# Include{ingressTLS} + +# Include{ingressTraefik} + +# Include{ingressExpert} + +# Include{ingressList} + +# Include{security} + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false +# Include{securityContextAdvanced} + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 +# Include{podSecurityContextAdvanced} + +# Include{resources} + +# Include{advanced} + +# Include{addons} diff --git a/charts/incubator/matomo/templates/common.yaml b/charts/incubator/matomo/templates/common.yaml new file mode 100644 index 00000000000..a6613c2ce21 --- /dev/null +++ b/charts/incubator/matomo/templates/common.yaml @@ -0,0 +1 @@ +{{ include "common.all" . }} diff --git a/charts/incubator/matomo/values.yaml b/charts/incubator/matomo/values.yaml new file mode 100644 index 00000000000..5730496eaa0 --- /dev/null +++ b/charts/incubator/matomo/values.yaml @@ -0,0 +1,96 @@ +image: + repository: tccr.io/truecharts/matomo + tag: v4.7.1@sha256:dbfe95441f661fa5093c43b4cfca8a357a0e963dd79917e0f09cc4b2e4379013 + pullPolicy: IfNotPresent + +securityContext: + runAsNonRoot: false + readOnlyRootFilesystem: false + +# Run as root for the cron to work +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +env: + BITNAMI_DEBUG: true + APACHE_HTTP_PORT_NUMBER: "{{ .Values.service.main.ports.main.port }}" + APACHE_HTTPS_PORT_NUMBER: "{{ .Values.service.https.ports.https.port }}" + MATOMO_DATABASE_PORT_NUMBER: 3306 + MATOMO_DATABASE_NAME: "{{ .Values.mariadb.mariadbDatabase }}" + MATOMO_DATABASE_USER: "{{ .Values.mariadb.mariadbUsername }}" + PHP_DATE_TIMEZONE: "{{ .Values.TZ }}" + # User / Site Config + MATOMO_USERNAME: "admin" + MATOMO_PASSWORD: "password" + MATOMO_EMAIL: "myemail@example.com" + MATOMO_WEBSITE_NAME: "My Website" + MATOMO_WEBSITE_HOST: "https://web.example.com" + MATOMO_HOST: "127.0.0.1" + # Reverse Proxy Config + MATOMO_ENABLE_PROXY_URI_HEADER: false + MATOMO_ENABLE_ASSUME_SECURE_PROTOCOL: false + MATOMO_ENABLE_FORCE_SSL: false + # No defaults, but usually this header is used + # MATOMO_PROXY_CLIENT_HEADER: "HTTP_X_FORWARDED_FOR" + # SMTP Config + MATOMO_SMTP_HOST: "" + MATOMO_SMTP_PORT: "" + MATOMO_SMTP_USER: "" + MATOMO_SMTP_PASSWORD: "" + # Available protocols are: "ssl", "tls", "none" + MATOMO_SMTP_PROTOCOL: "" + # Available mechanisms are: "Plain", "Login", "Crammd5" + MATOMO_SMTP_AUTH: "Plain" + # PHP Config + PHP_MEMORY_LIMIT: "2048M" + PHP_ENABLE_OPCACHE: true + # PHP_EXPOSE_PHP: + # PHP_MAX_EXECUTION_TIME: + # PHP_MAX_INPUT_TIME: + # PHP_MAX_INPUT_VARS: + # PHP_POST_MAX_SIZE: + # PHP_UPLOAD_MAX_FILESIZE: + +probes: + liveness: + path: "/index.php" + readiness: + path: "/index.php" + startup: + path: "/index.php" + +service: + main: + ports: + main: + protocol: HTTP + port: 10172 + targetPort: 10172 + https: + ports: + https: + protocol: HTTPS + port: 10173 + targetPort: 10173 + +persistence: + data: + enabled: true + mountPath: "/bitnami/matomo" + +envValueFrom: + MATOMO_DATABASE_HOST: + secretKeyRef: + name: mariadbcreds + key: plainhost + MATOMO_DATABASE_PASSWORD: + secretKeyRef: + name: mariadbcreds + key: mariadb-password + +mariadb: + enabled: true + mariadbUsername: matomo + mariadbDatabase: matomo + existingSecret: "mariadbcreds" diff --git a/docs/_static/img/appicons/matomo.png b/docs/_static/img/appicons/matomo.png new file mode 100644 index 00000000000..e3e2bdbc569 Binary files /dev/null and b/docs/_static/img/appicons/matomo.png differ diff --git a/docs/manual/default-ports.md b/docs/manual/default-ports.md index 17e657a9fcc..85f3cc35c67 100644 --- a/docs/manual/default-ports.md +++ b/docs/manual/default-ports.md @@ -329,6 +329,8 @@ These defaults can of course be changed, but as we guarantee "sane, working defa | openhab | main | main | 10169 | HTTP | | | openhab | https | https | 10170 | HTTPS | | | redmine | main | main | 10171 | HTTP | | +| matomo | main | main | 10172 | HTTP | | +| matomo | https | https | 10173 | HTTPS | | | satisfactory | beacon | beacon | 15000 | UDP | | | satisfactory | query | query | 15777 | UDP | | | minecraft-bedrock | main | main | 19132 | UDP | |