1
import (
2
corev1 "k8s.io/api/core/v1"
3
)
4
5
bundle: {
6
apiVersion: "v1alpha1"
7
name: "kv"
8
}
9
10
bundle: instances: kv: {
11
module: url: "file://."
12
module: version: "0.1.0"
13
namespace: "kv"
14
15
values: kv: {
16
image: {
17
repository: "nossa.ee/talya/kv"
18
tag: "eef586e4be7c83ce15869336ed60e16b02d13063"
19
digest: ""
20
}
21
enbi: flakeUrl: "git+https://nossa.ee/~talya/kv?rev=\(image.tag)"
22
enbi: packageName: "kv-docker.stream-layered"
23
24
replicas: 1
25
26
pod: affinity: nodeAffinity: {
27
requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: [{
28
matchExpressions: [{
29
key: corev1.#LabelOSStable
30
operator: "In"
31
values: ["linux"]
32
},
33
]}]
34
preferredDuringSchedulingIgnoredDuringExecution: [{
35
weight: 1
36
preference: matchExpressions: [{
37
key: "cassax.hrzn.ee/public"
38
operator: "In"
39
values: ["woof"]
40
}]
41
}]
42
}
43
44
host: "kivikakk.ee"
45
secretName: "env-secret-20250721-110618"
46
47
database: primary: {
48
hostname: "postgres.postgres-cassax.svc.cassax.hrzn.ee"
49
database: "kv"
50
secretName: "kv.kv.postgres.credentials.postgresql.acid.zalan.do"
51
ssl: true
52
}
53
database: replica: {
54
hostname: "postgres-samenode.postgres-cassax.svc.cassax.hrzn.ee"
55
database: "kv"
56
secretName: "kv.kv.postgres.credentials.postgresql.acid.zalan.do"
57
ssl: true
58
}
59
60
app: {
61
postsPerPage: 5
62
63
storageBucket: "kvp"
64
storageUrlBase: "https://s3.hrzn.ee/kvp/"
65
}
66
67
anubis: {
68
secretName: "anubis-20250816-071240"
69
policy: permitPaths: [{
70
name: "permit-atom-xml"
71
path_regex: "^/atom\\.xml$"
72
}, {
73
name: "permit-feed-xml"
74
path_regex: "^/feed\\.xml$"
75
}]
76
}
77
78
ingress: className: "nginx"
79
ingress: annotations: {
80
"cert-manager.io/cluster-issuer": "letsencrypt"
81
"nginx.ingress.kubernetes.io/from-to-www-redirect": "true"
82
"external-dns.alpha.kubernetes.io/hostname": "\(host)."
83
"external-dns.alpha.kubernetes.io/ttl": "24h"
84
"nginx.ingress.kubernetes.io/proxy-body-size": "100m"
85
"nginx.ingress.kubernetes.io/server-snippet": """
86
location /notes {
87
return 301 https://lottia.net$request_uri;
88
}
89
90
location /assets/post-img/ {
91
rewrite ^/assets/post-img/(.*)$ https://s3.hrzn.ee/kvp/$1 permanent;
92
}
93
94
location /feed.xml {
95
return 301 https://kivikakk.ee/atom.xml;
96
}
97
98
# Not running Mastodon/Akkoma anymore.
99
location /notice/ {
100
return 410;
101
}
102
location /main/ostatus {
103
return 410;
104
}
105
location /api/ {
106
return 410;
107
}
108
location /media/ {
109
return 410;
110
}
111
location /users/ {
112
return 410;
113
}
114
"""
115
}
116
}
117
}
118
