129 lines
3.6 KiB
YAML
129 lines
3.6 KiB
YAML
hoarder:
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: ghcr.io/karakeep-app/karakeep
|
|
tag: 0.24.1
|
|
pullPolicy: IfNotPresent
|
|
env:
|
|
- name: DATA_DIR
|
|
value: /data
|
|
- name: NEXTAUTH_URL
|
|
value: https://karakeep.alexlebens.dev/
|
|
- name: NEXTAUTH_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-key-secret
|
|
key: key
|
|
- name: MEILI_ADDR
|
|
value: http://hoarder-meilisearch.hoarder:7700
|
|
- name: MEILI_MASTER_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-meilisearch-master-key-secret
|
|
key: MEILI_MASTER_KEY
|
|
- name: BROWSER_WEB_URL
|
|
value: http://hoarder.hoarder:9222
|
|
- name: DISABLE_SIGNUPS
|
|
value: false
|
|
- name: OAUTH_PROVIDER_NAME
|
|
value: "Authentik"
|
|
- name: OAUTH_WELLKNOWN_URL
|
|
value: https://auth.alexlebens.dev/application/o/karakeep/.well-known/openid-configuration
|
|
- name: OAUTH_SCOPE
|
|
value: "openid email profile"
|
|
- name: OAUTH_CLIENT_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-oidc-secret
|
|
key: AUTHENTIK_CLIENT_ID
|
|
- name: OAUTH_CLIENT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: karakeep-oidc-secret
|
|
key: AUTHENTIK_CLIENT_SECRET
|
|
- name: OLLAMA_BASE_URL
|
|
value: http://ollama-server-1.ollama:11434
|
|
- name: OLLAMA_KEEP_ALIVE
|
|
value: 5m
|
|
- name: INFERENCE_TEXT_MODEL
|
|
value: llama3.1:8b
|
|
- name: INFERENCE_IMAGE_MODEL
|
|
value: llama3.2-vision:11b
|
|
- name: EMBEDDING_TEXT_MODEL
|
|
value: mxbai-embed-large
|
|
- name: INFERENCE_JOB_TIMEOUT_SEC
|
|
value: 720
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 256Mi
|
|
chrome:
|
|
image:
|
|
repository: gcr.io/zenika-hub/alpine-chrome
|
|
tag: 124
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- --no-sandbox
|
|
- --disable-gpu
|
|
- --disable-dev-shm-usage
|
|
- --remote-debugging-address=0.0.0.0
|
|
- --remote-debugging-port=9222
|
|
- --hide-scrollbars
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
http:
|
|
port: 3000
|
|
targetPort: 3000
|
|
protocol: HTTP
|
|
chrome:
|
|
port: 9222
|
|
targetPort: 9222
|
|
protocol: HTTP
|
|
persistence:
|
|
data:
|
|
forceRename: hoarder-data
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
retain: true
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data
|
|
readOnly: false
|
|
meilisearch:
|
|
environment:
|
|
MEILI_NO_ANALYTICS: true
|
|
MEILI_ENV: production
|
|
MEILI_EXPERIMENTAL_DUMPLESS_UPGRADE: true
|
|
auth:
|
|
existingMasterKeySecret: karakeep-meilisearch-master-key-secret
|
|
service:
|
|
type: ClusterIP
|
|
port: 7700
|
|
persistence:
|
|
enabled: true
|
|
storageClass: ceph-block
|
|
size: 10Gi
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
serviceMonitor:
|
|
enabled: true
|
|
cloudflared:
|
|
existingSecretName: karakeep-cloudflared-secret
|