Compare commits
2 Commits
9d0da584af
...
f8eb946704
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
f8eb946704 | ||
|
|
929449c55c |
@@ -1,73 +1,5 @@
|
|||||||
# FlowerCore Chat — AI chat service
|
# FlowerCore Chat — TLS + Ingress
|
||||||
---
|
# Deployment and Service managed by deploy script (not ArgoCD)
|
||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: fc-chat
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/part-of: bluejay-infra
|
|
||||||
---
|
|
||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: chat-web
|
|
||||||
namespace: fc-chat
|
|
||||||
labels:
|
|
||||||
app: chat-web
|
|
||||||
spec:
|
|
||||||
replicas: 1
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: chat-web
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: chat-web
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: chat-web
|
|
||||||
image: localhost/fc-chat-web:v202604132015
|
|
||||||
imagePullPolicy: Never
|
|
||||||
ports:
|
|
||||||
- containerPort: 8080
|
|
||||||
name: http
|
|
||||||
env:
|
|
||||||
- name: ASPNETCORE_ENVIRONMENT
|
|
||||||
value: Production
|
|
||||||
- name: ASPNETCORE_URLS
|
|
||||||
value: "http://+:8080"
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
memory: "128Mi"
|
|
||||||
cpu: "100m"
|
|
||||||
limits:
|
|
||||||
memory: "512Mi"
|
|
||||||
cpu: "500m"
|
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /metrics/prometheus
|
|
||||||
port: 8080
|
|
||||||
initialDelaySeconds: 10
|
|
||||||
periodSeconds: 30
|
|
||||||
readinessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /metrics/prometheus
|
|
||||||
port: 8080
|
|
||||||
initialDelaySeconds: 5
|
|
||||||
periodSeconds: 10
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: chat-web
|
|
||||||
namespace: fc-chat
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: chat-web
|
|
||||||
ports:
|
|
||||||
- port: 80
|
|
||||||
targetPort: 8080
|
|
||||||
name: http
|
|
||||||
---
|
---
|
||||||
apiVersion: cert-manager.io/v1
|
apiVersion: cert-manager.io/v1
|
||||||
kind: Certificate
|
kind: Certificate
|
||||||
|
|||||||
32
apps/fc-menuboard/fc-menuboard.yaml
Normal file
32
apps/fc-menuboard/fc-menuboard.yaml
Normal file
@@ -0,0 +1,32 @@
|
|||||||
|
# FlowerCore MenuBoard — TLS + Ingress
|
||||||
|
# Deployment and Service managed by deploy script (not ArgoCD)
|
||||||
|
---
|
||||||
|
apiVersion: cert-manager.io/v1
|
||||||
|
kind: Certificate
|
||||||
|
metadata:
|
||||||
|
name: menuboard-web-tls
|
||||||
|
namespace: fc-menuboard
|
||||||
|
spec:
|
||||||
|
secretName: menuboard-web-tls
|
||||||
|
issuerRef:
|
||||||
|
name: step-ca-acme
|
||||||
|
kind: ClusterIssuer
|
||||||
|
dnsNames:
|
||||||
|
- menuboard.iamworkin.lan
|
||||||
|
---
|
||||||
|
apiVersion: traefik.io/v1alpha1
|
||||||
|
kind: IngressRoute
|
||||||
|
metadata:
|
||||||
|
name: menuboard-web
|
||||||
|
namespace: fc-menuboard
|
||||||
|
spec:
|
||||||
|
entryPoints:
|
||||||
|
- websecure
|
||||||
|
routes:
|
||||||
|
- match: Host(`menuboard.iamworkin.lan`)
|
||||||
|
kind: Rule
|
||||||
|
services:
|
||||||
|
- name: menuboard-web
|
||||||
|
port: 80
|
||||||
|
tls:
|
||||||
|
secretName: menuboard-web-tls
|
||||||
@@ -225,15 +225,24 @@ data:
|
|||||||
trusted-ca-file "/etc/ssl/certs/ca-certificates.crt";
|
trusted-ca-file "/etc/ssl/certs/ca-certificates.crt";
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Allow plaintext for server-to-server links (Anope is internal) */
|
/* Allow plaintext for server-to-server links (Anope is internal) */
|
||||||
plaintext-policy {
|
plaintext-policy {
|
||||||
server allow;
|
server allow;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
---
|
ircd.motd: |
|
||||||
# Anope configuration template (passwords replaced by placeholders)
|
- BlueJay IRC -
|
||||||
apiVersion: v1
|
Welcome to BlueJayIRC on iamworkin.lan.
|
||||||
kind: ConfigMap
|
|
||||||
|
Web IRC: https://webirc.iamworkin.lan
|
||||||
|
Channels: #general, #ops, #alerts
|
||||||
|
|
||||||
|
Keep it keyboard-first, practical, and kind.
|
||||||
|
Managed from bluejay-infra via ArgoCD.
|
||||||
|
---
|
||||||
|
# Anope configuration template (passwords replaced by placeholders)
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
name: anope-config-template
|
name: anope-config-template
|
||||||
namespace: irc
|
namespace: irc
|
||||||
@@ -554,14 +563,18 @@ spec:
|
|||||||
name: irc-tls
|
name: irc-tls
|
||||||
- containerPort: 8067
|
- containerPort: 8067
|
||||||
name: services-link
|
name: services-link
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: injected-config
|
- name: injected-config
|
||||||
mountPath: /app/conf/unrealircd.conf
|
mountPath: /app/conf/unrealircd.conf
|
||||||
subPath: unrealircd.conf
|
subPath: unrealircd.conf
|
||||||
- name: unrealircd-data
|
- name: unrealircd-config-template
|
||||||
mountPath: /app/data
|
mountPath: /app/conf/ircd.motd
|
||||||
- name: irc-tls
|
subPath: ircd.motd
|
||||||
mountPath: /app/conf/tls
|
readOnly: true
|
||||||
|
- name: unrealircd-data
|
||||||
|
mountPath: /app/data
|
||||||
|
- name: irc-tls
|
||||||
|
mountPath: /app/conf/tls
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
memory: 64Mi
|
memory: 64Mi
|
||||||
|
|||||||
Reference in New Issue
Block a user