yamtrack: controllers: main: type: deployment replicas: 1 strategy: Recreate revisionHistoryLimit: 3 containers: main: image: repository: ghcr.io/fuzzygrim/yamtrack tag: 0.24.9 pullPolicy: IfNotPresent env: - name: TZ value: US/Central - name: URLS value: https://yamtrack.alexlebens.net - name: REGISTRATION value: false - name: SOCIAL_PROVIDERS value: allauth.socialaccount.providers.openid_connect - name: SOCIALACCOUNT_PROVIDERS valueFrom: secretKeyRef: name: yamtrack-oidc-secret key: SOCIALACCOUNT_PROVIDERS - name: SECRET valueFrom: secretKeyRef: name: yamtrack-config-secret key: SECRET - name: REDIS_URL value: redis://redis-replication-yamtrack-master.yamtrack:6379 - name: DB_USER valueFrom: secretKeyRef: name: yamtrack-postgresql-18-cluster-app key: username - name: DB_PASSWORD valueFrom: secretKeyRef: name: yamtrack-postgresql-18-cluster-app key: password - name: DB_NAME valueFrom: secretKeyRef: name: yamtrack-postgresql-18-cluster-app key: dbname - name: DB_HOST valueFrom: secretKeyRef: name: yamtrack-postgresql-18-cluster-app key: host - name: DB_PORT valueFrom: secretKeyRef: name: yamtrack-postgresql-18-cluster-app key: port resources: requests: cpu: 10m memory: 256Mi service: main: controller: main ports: http: port: 80 targetPort: 8000 protocol: HTTP route: main: kind: HTTPRoute parentRefs: - group: gateway.networking.k8s.io kind: Gateway name: traefik-gateway namespace: traefik hostnames: - yamtrack.alexlebens.net rules: - backendRefs: - group: '' kind: Service name: yamtrack port: 80 weight: 100 matches: - path: type: PathPrefix value: / postgres-18-cluster: mode: recovery recovery: method: objectStore objectStore: index: 1 backup: objectStore: - name: garage-local index: 1 destinationBucket: postgres-backups externalSecretCredentialPath: /garage/home-infra/postgres-backups isWALArchiver: true # - name: garage-remote # index: 1 # destinationBucket: postgres-backups # externalSecretCredentialPath: /garage/home-infra/postgres-backups # retentionPolicy: "90d" # data: # compression: bzip2 # - name: external # index: 1 # endpointURL: https://nyc3.digitaloceanspaces.com # destinationBucket: postgres-backups-ce540ddf106d186bbddca68a # externalSecretCredentialPath: /garage/home-infra/postgres-backups # isWALArchiver: false scheduledBackups: - name: live-backup suspend: false immediate: true schedule: "0 0 0 * * *" backupName: garage-local # - name: weekly-backup # suspend: true # immediate: true # schedule: "0 0 4 * * SAT" # backupName: garage-remote # - name: daily-backup # suspend: true # immediate: true # schedule: "0 0 0 * * *" # backupName: external redis-replication: existingSecret: enabled: false redisReplication: clusterSize: 3 redisSentinel: enabled: true clusterSize: 3