124 lines
		
	
	
		
			3.7 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			124 lines
		
	
	
		
			3.7 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
outline:
 | 
						|
  ingress:
 | 
						|
    enabled: true
 | 
						|
    className: traefik
 | 
						|
    annotations:
 | 
						|
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
 | 
						|
      traefik.ingress.kubernetes.io/router.tls: "true"
 | 
						|
      cert-manager.io/cluster-issuer: letsencrypt-issuer
 | 
						|
    host: outline.alexlebens.net
 | 
						|
  persistence:
 | 
						|
    type: s3
 | 
						|
    s3:
 | 
						|
      credentialsSecret: outline-bucket-user-secret
 | 
						|
      region: us-east-1
 | 
						|
      bucketName: outline
 | 
						|
      bucketUrl: https://minio-outline-api.alexlebens.net/outline
 | 
						|
      forcePathStyle: false
 | 
						|
  outline:
 | 
						|
    url: https://outline.alexlebens.net
 | 
						|
    secretKey:
 | 
						|
      existingSecretName: outline-key-secret
 | 
						|
      existingSecretKey: secret-key
 | 
						|
    utilsSecret:
 | 
						|
      existingSecretName: outline-key-secret
 | 
						|
      existingSecretKey: utils-key
 | 
						|
    database:
 | 
						|
      usernameSecret:
 | 
						|
        existingSecretName: outline-postgresql-16-cluster-app
 | 
						|
        existingSecretKey: username
 | 
						|
      passwordSecret:
 | 
						|
        existingSecretName: outline-postgresql-16-cluster-app
 | 
						|
        existingSecretKey: password
 | 
						|
      databaseName:
 | 
						|
        existingSecretName: outline-postgresql-16-cluster-app
 | 
						|
        existingSecretKey: dbname
 | 
						|
      databaseHost:
 | 
						|
        existingSecretName: outline-postgresql-16-cluster-app
 | 
						|
        existingSecretKey: host
 | 
						|
      databasePort:
 | 
						|
        existingSecretName: outline-postgresql-16-cluster-app
 | 
						|
        existingSecretKey: port
 | 
						|
    auth:
 | 
						|
      oidc:
 | 
						|
        enabled: true
 | 
						|
        clientId:
 | 
						|
          existingSecretName: outline-oidc-secret
 | 
						|
          existingSecretKey: client
 | 
						|
        clientSecret:
 | 
						|
          existingSecretName: outline-oidc-secret
 | 
						|
          existingSecretKey: secret
 | 
						|
        authUri: https://authentik.alexlebens.net/application/o/authorize/
 | 
						|
        tokenUri: https://authentik.alexlebens.net/application/o/token/
 | 
						|
        userinfoUri: https://authentik.alexlebens.net/application/o/userinfo/
 | 
						|
        usernameClaim: email
 | 
						|
        displayName: Authentik
 | 
						|
        scopes: openid profile email
 | 
						|
minio:
 | 
						|
  existingSecret:
 | 
						|
    name: outline-minio-root-secret
 | 
						|
  tenant:
 | 
						|
    name: minio-outline
 | 
						|
    configuration:
 | 
						|
      name: outline-minio-config-secret
 | 
						|
    pools:
 | 
						|
      - servers: 3
 | 
						|
        name: pool
 | 
						|
        volumesPerServer: 2
 | 
						|
        size: 10Gi
 | 
						|
        storageClassName: ceph-block
 | 
						|
    mountPath: /export
 | 
						|
    subPath: /data
 | 
						|
    metrics:
 | 
						|
      enabled: true
 | 
						|
      port: 9000
 | 
						|
      protocol: http
 | 
						|
    certificate:
 | 
						|
      requestAutoCert: false
 | 
						|
  ingress:
 | 
						|
    api:
 | 
						|
      enabled: true
 | 
						|
      ingressClassName: traefik
 | 
						|
      annotations:
 | 
						|
        traefik.ingress.kubernetes.io/router.entrypoints: websecure
 | 
						|
        traefik.ingress.kubernetes.io/router.tls: "true"
 | 
						|
        cert-manager.io/cluster-issuer: letsencrypt-issuer
 | 
						|
      tls:
 | 
						|
        - secretName: minio-outline-api-secret-tls
 | 
						|
          hosts:
 | 
						|
            - minio-outline-api.alexlebens.net
 | 
						|
      host: minio-outline-api.alexlebens.net
 | 
						|
      path: /
 | 
						|
      pathType: Prefix
 | 
						|
    console:
 | 
						|
      enabled: true
 | 
						|
      ingressClassName: traefik
 | 
						|
      annotations:
 | 
						|
        traefik.ingress.kubernetes.io/router.entrypoints: websecure
 | 
						|
        traefik.ingress.kubernetes.io/router.tls: "true"
 | 
						|
        cert-manager.io/cluster-issuer: letsencrypt-issuer
 | 
						|
      tls:
 | 
						|
        - secretName: minio-outline-console-secret-tls
 | 
						|
          hosts:
 | 
						|
            - minio-outline.alexlebens.net
 | 
						|
      host: minio-outline.alexlebens.net
 | 
						|
      path: /
 | 
						|
      pathType: Prefix
 | 
						|
postgres-16-cluster:
 | 
						|
  mode: standalone
 | 
						|
  kubernetesClusterName: cl01tl
 | 
						|
  cluster:
 | 
						|
    walStorage:
 | 
						|
      storageClass: local-path
 | 
						|
    storage:
 | 
						|
      storageClass: local-path
 | 
						|
    monitoring:
 | 
						|
      enabled: true
 | 
						|
  backup:
 | 
						|
    enabled: true
 | 
						|
    endpointURL: https://s3.us-east-2.amazonaws.com
 | 
						|
    destinationPath: s3://cl01tl-postgresql-backups/outline
 | 
						|
    endpointCredentials: outline-postgresql-16-cluster-backup-secret
 | 
						|
    backupIndex: 1
 | 
						|
    retentionPolicy: 14d
 |