feat(briefkasten): add briefkasten (#4907)

* feat(briefkasten): add briefkasten

* update icon

* whoops

* whoops

* hmm

* try also this

* image

* update questions

* add image

* update source

* category

* commnd

* versions

* hmm

* poststart exec

* hmm

* again

* whoops

* hmm

* hmmtypo

* get

* hmm

* hmm

* Update charts/incubator/briefkasten/values.yaml

Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>

* fix it

* hmm

* dis probes

* bump

Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
This commit is contained in:
Stavros Kois
2022-12-17 16:44:14 +02:00
committed by GitHub
parent 5ee33bd361
commit 5679cce2dc
11 changed files with 427 additions and 0 deletions
+30
View File
@@ -0,0 +1,30 @@
# Patterns to ignore when building packages.
# This supports shell glob matching, relative path matching, and
# negation (prefixed with !). Only one pattern per line.
.DS_Store
# Common VCS dirs
.git/
.gitignore
.bzr/
.bzrignore
.hg/
.hgignore
.svn/
# Common backup files
*.swp
*.bak
*.tmp
*~
# Various IDEs
.project
.idea/
*.tmproj
.vscode/
# OWNERS file for Kubernetes
OWNERS
# helm-docs templates
*.gotmpl
# docs folder
/docs
# icon
icon.png
+31
View File
@@ -0,0 +1,31 @@
apiVersion: v2
appVersion: "0.20.2026"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 11.0.9
- condition: postgresql.enabled
name: postgresql
repository: https://charts.truecharts.org/
version: 11.0.7
deprecated: false
description: Self-hosted bookmarking application.
home: https://truecharts.org/docs/charts/stable/jackett
icon: https://truecharts.org/img/hotlink-ok/chart-icons/jackett.png
keywords:
- bookmark
kubeVersion: ">=1.16.0-0"
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: https://truecharts.org
name: briefkasten
sources:
- https://github.com/ndom91/briefkasten
type: application
version: 0.0.1
annotations:
truecharts.org/catagories: |
- bookmark
truecharts.org/SCALE-support: "true"
truecharts.org/grade: U
Binary file not shown.

After

Width:  |  Height:  |  Size: 4.9 KiB

+193
View File
@@ -0,0 +1,193 @@
# Include{groups}
portals:
open:
# Include{portalLink}
questions:
# Include{global}
# Include{controller}
# Include{replicas}
# Include{replica1}
# Include{controllerExpertExtraArgs}
- variable: briefkasten
group: App Configuration
label: Briefkasten Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: general
label: General Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: nextauth_url
label: NextAuth URL
description: URL in format http(s)://IPorFQDN:(port)
schema:
type: string
required: true
default: ""
- variable: github
label: Github Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: id
label: Github ID
schema:
type: string
private: true
default: ""
- variable: secret
label: Github Secret
schema:
type: string
private: true
default: ""
- variable: google
label: Google Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: id
label: Google ID
schema:
type: string
private: true
default: ""
- variable: secret
label: Google Secret
schema:
type: string
private: true
default: ""
- variable: mail
label: Mail Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: from
label: From
schema:
type: string
default: ""
- variable: server
label: Mail Server
schema:
type: string
default: ""
- variable: supabase
label: Supabase Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: key
label: Supabase Key
schema:
type: string
private: true
default: ""
- variable: bucket_id
label: Supabase Bucket ID
schema:
type: string
private: true
default: ""
- variable: url
label: Supabase URL
schema:
type: string
default: ""
# Include{containerConfig}
# Include{serviceRoot}
- variable: main
label: Main Service
description: The Primary service on which the healthcheck runs, often the webUI
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: main
label: Main Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema:
type: int
default: 10349
required: true
# Include{serviceExpertRoot}
default: false
# Include{serviceExpert}
# Include{serviceList}
# Include{persistenceList}
# Include{ingressRoot}
- variable: main
label: Main Ingress
schema:
additional_attrs: true
type: dict
attrs:
# Include{ingressDefault}
# Include{ingressTLS}
# Include{ingressTraefik}
# Include{ingressList}
# Include{security}
# Include{securityContextAdvancedRoot}
- variable: privileged
label: Privileged mode
schema:
type: boolean
default: false
- variable: readOnlyRootFilesystem
label: ReadOnly Root Filesystem
schema:
type: boolean
default: false
- variable: allowPrivilegeEscalation
label: Allow Privilege Escalation
schema:
type: boolean
default: false
- variable: runAsNonRoot
label: runAsNonRoot
schema:
type: boolean
default: false
# Include{podSecurityContextRoot}
- variable: runAsUser
label: runAsUser
description: The UserID of the user running the application
schema:
type: int
default: 0
- variable: runAsGroup
label: runAsGroup
description: The groupID this App of the user running the application
schema:
type: int
default: 0
- variable: fsGroup
label: fsGroup
description: The group that should own ALL storage.
schema:
type: int
default: 568
# Include{podSecurityContextAdvanced}
# Include{resources}
# Include{advanced}
# Include{addons}
# Include{codeserver}
# Include{vpn}
# Include{documentation}
@@ -0,0 +1,27 @@
{{/* Define the configmap */}}
{{- define "briefkasten.config" -}}
{{- $configName := printf "%s-config" (include "tc.common.names.fullname" .) }}
---
apiVersion: v1
kind: ConfigMap
metadata:
name: {{ $configName }}
labels:
{{- include "tc.common.labels" . | nindent 4 }}
data:
{{- with .Values.briefkasten.general.nextauth_url }}
NEXTAUTH_URL: {{ . }}
{{- end }}
{{- with .Values.briefkasten.supabase.url }}
SUPABASE_URL: {{ . }}
{{- end }}
{{- with .Values.briefkasten.mail.server }}
SMTP_SERVER: {{ . }}
{{- end }}
{{- with .Values.briefkasten.mail.from }}
SMTP_FROM: {{ . }}
{{- end }}
{{- end -}}
@@ -0,0 +1,25 @@
{{- define "briefkasten.createdb" -}}
image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
imagePullPolicy: {{ .Values.image.pullPolicy }}
securityContext:
runAsUser: {{ .Values.podSecurityContext.runAsUser }}
runAsGroup: {{ .Values.podSecurityContext.runAsGroup }}
readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
envFrom:
- secretRef:
name: '{{ include "tc.common.names.fullname" . }}-secret'
- configMapRef:
name: '{{ include "tc.common.names.fullname" . }}-config'
command: ["/bin/sh", "-c"]
args:
- |-
pnpm start &
echo "Waiting 5s for app to start..."
sleep 5
echo "Executing DB Seed..."
until pnpm db:push; do echo "DB Seed failed... Retrying in 5s..." sleep 5; done;
echo "...Done"
echo "Exiting... App will start now..."
exit 0
{{- end -}}
@@ -0,0 +1,40 @@
{{/* Define the secret */}}
{{- define "briefkasten.secret" -}}
{{- $secretName := printf "%s-secret" (include "tc.common.names.fullname" .) }}
---
apiVersion: v1
kind: Secret
type: Opaque
metadata:
name: {{ $secretName }}
labels:
{{- include "tc.common.labels" . | nindent 4 }}
data:
{{- with (lookup "v1" "Secret" .Release.Namespace $secretName) }}
NEXTAUTH_SECRET: {{ index .data "NEXTAUTH_SECRET" }}
{{- else }}
NEXTAUTH_SECRET: {{ randAlphaNum 32 | b64enc }}
{{- end }}
DATABASE_URL: {{ get .Values.postgresql.url "complete" | trimAll "\"" | b64enc }}
{{- with .Values.briefkasten.github.id }}
GITHUB_ID: {{ . | b64enc }}
{{- end }}
{{- with .Values.briefkasten.github.secret }}
GITHUB_SECRET: {{ . | b64enc }}
{{- end }}
{{- with .Values.briefkasten.google.id }}
GOOGLE_ID: {{ . | b64enc }}
{{- end }}
{{- with .Values.briefkasten.google.secret }}
GOOGLE_SECRET: {{ . | b64enc }}
{{- end }}
{{- with .Values.briefkasten.supabase.key }}
SUPABASE_KEY: {{ . | b64enc }}
{{- end }}
{{- with .Values.briefkasten.supabase.bucket_id }}
SUPABASE_BUCKET_ID: {{ . | b64enc }}
{{- end }}
{{- end }}
@@ -0,0 +1,13 @@
{{/* Make sure all variables are set properly */}}
{{- include "tc.common.loader.init" . }}
{{/* Render config */}}
{{- include "briefkasten.config" . }}
{{/* Render secret */}}
{{- include "briefkasten.secret" . }}
{{- $_ := set .Values.installContainers "createdb" (include "briefkasten.createdb" . | fromYaml) -}}
{{/* Render the templates */}}
{{ include "tc.common.loader.apply" . }}
+66
View File
@@ -0,0 +1,66 @@
image:
repository: tccr.io/truecharts/briefkasten
pullPolicy: IfNotPresent
tag: latest@sha256:4bf3e15f5219605c7801ec5d69e64d0d3d80fef41a6a1dcfb36f3ded1f22ae13
securityContext:
runAsNonRoot: false
readOnlyRootFilesystem: false
podSecurityContext:
runAsUser: 0
runAsGroup: 0
briefkasten:
general:
nextauth_url: http://localhost:3000
github:
id: ""
secret: ""
google:
id: ""
secret: ""
supabase:
key:
url:
bucket_id:
mail:
from:
server:
envFrom:
- secretRef:
name: '{{ include "tc.common.names.fullname" . }}-secret'
- configMapRef:
name: '{{ include "tc.common.names.fullname" . }}-config'
service:
main:
ports:
main:
port: 10349
protocol: HTTP
targetPort: 3000
probes:
liveness:
enabled: false
type: HTTP
path: /
readiness:
enabled: false
type: HTTP
path: /
startup:
enabled: false
type: HTTP
path: /
postgresql:
enabled: true
existingSecret: dbcreds
postgresqlUsername: briefkasten
postgresqlDatabase: briefkasten
portal:
enabled: true
+2
View File
@@ -24,6 +24,7 @@ words:
- bazarr
- Blocklists
- blocktype
- briefkasten
- bugfixer's
- bungeecord
- cacher
@@ -252,6 +253,7 @@ words:
- sublist
- subquestion
- subquestions
- supabase
- svcname
- syncthing
- tailscale