diff --git a/kube/deploy/apps/tetragon/app/hr.yaml b/.archive/kube/deploy/apps/tetragon/app/hr.yaml similarity index 100% rename from kube/deploy/apps/tetragon/app/hr.yaml rename to .archive/kube/deploy/apps/tetragon/app/hr.yaml diff --git a/kube/deploy/apps/tetragon/ks.yaml b/.archive/kube/deploy/apps/tetragon/ks.yaml similarity index 100% rename from kube/deploy/apps/tetragon/ks.yaml rename to .archive/kube/deploy/apps/tetragon/ks.yaml diff --git a/kube/deploy/apps/tetragon/kustomization.yaml b/.archive/kube/deploy/apps/tetragon/kustomization.yaml similarity index 100% rename from kube/deploy/apps/tetragon/kustomization.yaml rename to .archive/kube/deploy/apps/tetragon/kustomization.yaml diff --git a/kube/deploy/apps/linkding/app/hr.yaml b/kube/deploy/apps/linkding/app/hr.yaml index 69f8cf0fe5..3fc247f426 100644 --- a/kube/deploy/apps/linkding/app/hr.yaml +++ b/kube/deploy/apps/linkding/app/hr.yaml @@ -19,6 +19,7 @@ spec: main: type: deployment replicas: 1 + strategy: RollingUpdate # only snapshots data might be written to disk directly, external Postgres used pod: labels: ingress.home.arpa/nginx-internal: "allow" @@ -32,11 +33,15 @@ spec: tag: "1.30.0-plus-alpine@sha256:83a77a850a1b61b97b8f1f75b0bf12b0fd0fd7abd232a4a91faf5efdc9168387" env: TZ: "${CONFIG_TZ}" + # Security LD_ENABLE_OIDC: "True" LD_CSRF_TRUSTED_ORIGINS: "https://${APP_DNS_LINKDING}" + # Options LD_SERVER_PORT: &http "8080" LD_LOG_X_FORWARDED_FOR: "true" LD_FAVICON_PROVIDER: "https://icons.duckduckgo.com/ip3/{domain}.ico" + LD_SINGLEFILE_PATH: &snap "/snapshots" # archive whole page locally + # Database LD_DB_ENGINE: "postgres" LD_DB_OPTIONS: |- {"sslmode": "require"} @@ -114,6 +119,11 @@ spec: - subPath: "tmp" path: "/tmp" readOnly: false + snapshots: + existingClaim: linkding-snapshots + globalMounts: + - subPath: "data" + path: *snap defaultPodOptions: automountServiceAccountToken: false enableServiceLinks: false diff --git a/kube/deploy/apps/linkding/app/pvc.yaml b/kube/deploy/apps/linkding/app/pvc.yaml new file mode 100644 index 0000000000..5f0068a90b --- /dev/null +++ b/kube/deploy/apps/linkding/app/pvc.yaml @@ -0,0 +1,18 @@ +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: "linkding-snapshots" + namespace: &app "linkding" + annotations: + description: "PVC for saving Linkding page snapshots (similar to Wayback)" + labels: + app.kubernetes.io/name: *app + snapshot.home.arpa/enabled: "true" + kustomize.toolkit.fluxcd.io/prune: "Disabled" +spec: + storageClassName: "file" + accessModes: ["ReadWriteMany"] + resources: + requests: + storage: "100Gi"