156 lines
4.7 KiB
YAML
156 lines
4.7 KiB
YAML
karakeep:
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: ghcr.io/karakeep-app/karakeep
|
|
tag: 0.27.1
|
|
pullPolicy: IfNotPresent
|
|
env:
|
|
- name: DATA_DIR
|
|
value: /data
|
|
- name: DB_WAL_MODE
|
|
value: true
|
|
- name: NEXTAUTH_URL
|
|
value: https://karakeep.alexlebens.dev/
|
|
- name: NEXTAUTH_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-key-secret
|
|
key: key
|
|
- name: PROMETHEUS_AUTH_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-key-secret
|
|
key: prometheus-token
|
|
- name: ASSET_STORE_S3_ENDPOINT
|
|
value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
|
|
- name: ASSET_STORE_S3_REGION
|
|
value: us-east-1
|
|
- name: ASSET_STORE_S3_BUCKET
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: ceph-bucket-karakeep
|
|
key: BUCKET_NAME
|
|
- name: ASSET_STORE_S3_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ceph-bucket-karakeep
|
|
key: AWS_ACCESS_KEY_ID
|
|
- name: ASSET_STORE_S3_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ceph-bucket-karakeep
|
|
key: AWS_SECRET_ACCESS_KEY
|
|
- name: ASSET_STORE_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
- name: MEILI_ADDR
|
|
value: http://karakeep-meilisearch.karakeep:7700
|
|
- name: MEILI_MASTER_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-meilisearch-master-key-secret
|
|
key: MEILI_MASTER_KEY
|
|
- name: BROWSER_WEB_URL
|
|
value: http://karakeep.karakeep:9222
|
|
- name: DISABLE_SIGNUPS
|
|
value: false
|
|
- name: OAUTH_PROVIDER_NAME
|
|
value: "Authentik"
|
|
- name: OAUTH_WELLKNOWN_URL
|
|
value: https://auth.alexlebens.dev/application/o/karakeep/.well-known/openid-configuration
|
|
- name: OAUTH_SCOPE
|
|
value: "openid email profile"
|
|
- name: OAUTH_CLIENT_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-oidc-secret
|
|
key: AUTHENTIK_CLIENT_ID
|
|
- name: OAUTH_CLIENT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-oidc-secret
|
|
key: AUTHENTIK_CLIENT_SECRET
|
|
- name: OLLAMA_BASE_URL
|
|
value: http://ollama-server-3.ollama:11434
|
|
- name: OLLAMA_KEEP_ALIVE
|
|
value: 5m
|
|
- name: INFERENCE_TEXT_MODEL
|
|
value: gemma3:4b
|
|
- name: INFERENCE_IMAGE_MODEL
|
|
value: granite3.2-vision:2b
|
|
- name: EMBEDDING_TEXT_MODEL
|
|
value: mxbai-embed-large
|
|
- name: INFERENCE_JOB_TIMEOUT_SEC
|
|
value: 720
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 256Mi
|
|
chrome:
|
|
image:
|
|
repository: gcr.io/zenika-hub/alpine-chrome
|
|
tag: 124
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- --no-sandbox
|
|
- --disable-gpu
|
|
- --disable-dev-shm-usage
|
|
- --remote-debugging-address=0.0.0.0
|
|
- --remote-debugging-port=9222
|
|
- --hide-scrollbars
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
http:
|
|
port: 3000
|
|
targetPort: 3000
|
|
protocol: HTTP
|
|
chrome:
|
|
port: 9222
|
|
targetPort: 9222
|
|
protocol: HTTP
|
|
persistence:
|
|
data:
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
retain: true
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data
|
|
readOnly: false
|
|
meilisearch:
|
|
environment:
|
|
MEILI_NO_ANALYTICS: true
|
|
MEILI_ENV: production
|
|
MEILI_EXPERIMENTAL_DUMPLESS_UPGRADE: true
|
|
auth:
|
|
existingMasterKeySecret: karakeep-meilisearch-master-key-secret
|
|
service:
|
|
type: ClusterIP
|
|
port: 7700
|
|
persistence:
|
|
enabled: true
|
|
storageClass: ceph-block
|
|
size: 10Gi
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
serviceMonitor:
|
|
enabled: true
|
|
cloudflared:
|
|
existingSecretName: karakeep-cloudflared-secret
|