Skip to content

Commit a4fba37

Browse files
soerenschneidersoerenschneider
committed
install miniflux
1 parent ec527cc commit a4fba37

File tree

6 files changed

+162
-0
lines changed

6 files changed

+162
-0
lines changed

‎clusters/svc.ez.soeren.cloud/miniflux/external-secret-miniflux-postgres-restic.yaml‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
---
2+
apiVersion: "external-secrets.io/v1beta1"
3+
kind: "ExternalSecret"
4+
metadata:
5+
name: "miniflux-restic-postgres"
6+
spec:
7+
refreshInterval: "1h"
8+
secretStoreRef:
9+
name: "vault"
10+
kind: "ClusterSecretStore"
11+
target:
12+
name: "miniflux-restic-postgres"
13+
creationPolicy: "Owner"
14+
data:
15+
- secretKey: "AWS_ACCESS_KEY_ID"
16+
remoteRef:
17+
key: "secret/soeren.cloud/env/prod/restic/miniflux/aws-credentials"
18+
property: "AWS_ACCESS_KEY_ID"
19+
- secretKey: "AWS_SECRET_ACCESS_KEY"
20+
remoteRef:
21+
key: "secret/soeren.cloud/env/prod/restic/miniflux/aws-credentials"
22+
property: "AWS_SECRET_ACCESS_KEY"
23+
- secretKey: "RESTIC_PASSWORD"
24+
remoteRef:
25+
key: "secret/soeren.cloud/env/prod/restic/miniflux/restic"
26+
property: "pass"
27+
- secretKey: "POSTGRES_USER"
28+
remoteRef:
29+
key: "secret/soeren.cloud/env/prod/miniflux-postgres"
30+
property: "POSTGRES_USER"
31+
- secretKey: "POSTGRES_PASSWORD"
32+
remoteRef:
33+
key: "secret/soeren.cloud/env/prod/miniflux-postgres"
34+
property: "POSTGRES_PASSWORD"

‎clusters/svc.ez.soeren.cloud/miniflux/external-secret-miniflux-postgres.yaml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
apiVersion: "external-secrets.io/v1beta1"
3+
kind: "ExternalSecret"
4+
metadata:
5+
name: "miniflux-postgres"
6+
spec:
7+
refreshInterval: "12h"
8+
secretStoreRef:
9+
name: "vault"
10+
kind: "ClusterSecretStore"
11+
target:
12+
name: "miniflux-postgres"
13+
creationPolicy: "Owner"
14+
data:
15+
- secretKey: "POSTGRES_USER"
16+
remoteRef:
17+
key: "secret/soeren.cloud/env/prod/miniflux-postgres"
18+
property: "POSTGRES_USER"
19+
- secretKey: "POSTGRES_PASSWORD"
20+
remoteRef:
21+
key: "secret/soeren.cloud/env/prod/miniflux-postgres"
22+
property: "POSTGRES_PASSWORD"

‎clusters/svc.ez.soeren.cloud/miniflux/external-secret-miniflux.yaml‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
---
2+
apiVersion: "external-secrets.io/v1beta1"
3+
kind: "ExternalSecret"
4+
metadata:
5+
name: "miniflux"
6+
spec:
7+
refreshInterval: 12h
8+
secretStoreRef:
9+
name: "vault"
10+
kind: "ClusterSecretStore"
11+
target:
12+
name: "miniflux"
13+
template:
14+
engineVersion: v2
15+
data:
16+
DATABASE_URL: "postgres://{{ .POSTGRES_USER }}:{{ .POSTGRES_PASSWORD }}@postgres/miniflux?sslmode=disable"
17+
ADMIN_USERNAME: "{{ .ADMIN_USERNAME }}"
18+
ADMIN_PASSWORD: "{{ .ADMIN_PASSWORD }}"
19+
data:
20+
- secretKey: "POSTGRES_USER"
21+
remoteRef:
22+
key: "secret/soeren.cloud/env/prod/miniflux-postgres"
23+
property: "POSTGRES_USER"
24+
- secretKey: "POSTGRES_PASSWORD"
25+
remoteRef:
26+
key: "secret/soeren.cloud/env/prod/miniflux-postgres"
27+
property: "POSTGRES_PASSWORD"
28+
- secretKey: "ADMIN_USERNAME"
29+
remoteRef:
30+
key: "secret/soeren.cloud/env/prod/miniflux"
31+
property: "ADMIN_USERNAME"
32+
- secretKey: "ADMIN_PASSWORD"
33+
remoteRef:
34+
key: "secret/soeren.cloud/env/prod/miniflux"
35+
property: "ADMIN_PASSWORD"

‎clusters/svc.ez.soeren.cloud/miniflux/kustomization.yaml‎

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
namespace: miniflux
5+
resources:
6+
- namespace.yaml
7+
- pv.yaml
8+
- external-secret-miniflux.yaml
9+
- external-secret-miniflux-postgres.yaml
10+
- external-secret-miniflux-postgres-restic.yaml
11+
- ../../../apps/miniflux
12+
components:
13+
- ../../../apps/miniflux/components/istio
14+
- ../../../apps/miniflux/components/postgres
15+
- ../../../apps/miniflux/components/postgres-pvc
16+
- ../../../apps/miniflux/components/restic-postgres
17+
patches:
18+
- target:
19+
kind: "VirtualService"
20+
name: "miniflux"
21+
patch: |-
22+
- op: replace
23+
path: /spec/hosts
24+
value:
25+
- miniflux.svc.ez.soeren.cloud
26+
configMapGenerator:
27+
- name: miniflux
28+
behavior: merge
29+
literals:
30+
- CREATE_ADMIN=1
31+
- name: miniflux-restic-postgres
32+
literals:
33+
- "RETENTION_DAYS=7"
34+
- "RETENTION_WEEKS=4"
35+
- "RETENTION_MONTHS=6"
36+
- RESTIC_REPOSITORY=s3:https://s3.amazonaws.com/soerenschneider-restic-prod/miniflux
37+
- RESTIC_BACKUP_ID=miniflux
38+
- POSTGRES_HOST=postgres

‎clusters/svc.ez.soeren.cloud/miniflux/namespace.yaml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
kind: Namespace
3+
apiVersion: v1
4+
metadata:
5+
name: miniflux
6+
labels:
7+
name: miniflux

‎clusters/svc.ez.soeren.cloud/miniflux/pv.yaml‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
---
2+
apiVersion: "v1"
3+
kind: "PersistentVolume"
4+
metadata:
5+
name: "miniflux-postgres"
6+
spec:
7+
accessModes:
8+
- "ReadWriteOnce"
9+
capacity:
10+
storage: "5Gi"
11+
volumeMode: "Filesystem"
12+
storageClassName: "local-storage"
13+
persistentVolumeReclaimPolicy: "Retain"
14+
claimRef:
15+
namespace: "miniflux"
16+
name: "miniflux-postgres"
17+
local:
18+
path: "/mnt/k8s/miniflux-postgres"
19+
nodeAffinity:
20+
required:
21+
nodeSelectorTerms:
22+
- matchExpressions:
23+
- key: "kubernetes.io/hostname"
24+
operator: "In"
25+
values:
26+
- "k8s.ez.soeren.cloud"

0 commit comments

Comments
 (0)