Externalize networking (welcome Wild Central!)

This commit is contained in:
2026-07-10 03:49:38 +00:00
parent bb5a76b864
commit dc5518b57f
143 changed files with 691 additions and 1379 deletions

View File

@@ -3,16 +3,8 @@ kind: Ingress
metadata:
name: mastodon
namespace: {{ .namespace }}
annotations:
external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
traefik.ingress.kubernetes.io/router.entrypoints: websecure
spec:
ingressClassName: traefik
tls:
- hosts:
- {{ .domain }}
secretName: {{ .tlsSecretName }}
rules:
- host: {{ .domain }}
http:

View File

@@ -1,17 +1,15 @@
version: 4.5.3-3
version: 4.5.3-4
requires:
- name: postgres
- name: redis
- name: smtp
- name: postgres
- name: redis
- name: smtp
defaultConfig:
namespace: mastodon
externalDnsDomain: '{{ .cloud.domain }}'
domain: mastodon.{{ .cloud.domain }}
locale: en
singleUserMode: false
assetsStorage: 5Gi
systemStorage: 5Gi
tlsSecretName: wildcard-wild-cloud-tls
sidekiq:
replicas: 1
db:
@@ -30,22 +28,20 @@ defaultConfig:
user: '{{ .apps.smtp.user }}'
tls: '{{ .apps.smtp.tls }}'
defaultSecrets:
- key: secretKeyBase
default: "{{ random.AlphaNum 128 }}"
- key: otpSecret
default: "{{ random.AlphaNum 128 }}"
- key: vapidPrivateKey
# Generated by vapid-init-job.yaml on first deploy
- key: vapidPublicKey
# Generated by vapid-init-job.yaml on first deploy
- key: activeRecordPrimaryKey
default: "{{ random.AlphaNum 32 }}"
- key: activeRecordDeterministicKey
default: "{{ random.AlphaNum 32 }}"
- key: activeRecordKeyDerivationSalt
default: "{{ random.AlphaNum 32 }}"
- key: dbPassword
- key: smtpPassword
- key: secretKeyBase
default: '{{ random.AlphaNum 128 }}'
- key: otpSecret
default: '{{ random.AlphaNum 128 }}'
- key: vapidPrivateKey
- key: vapidPublicKey
- key: activeRecordPrimaryKey
default: '{{ random.AlphaNum 32 }}'
- key: activeRecordDeterministicKey
default: '{{ random.AlphaNum 32 }}'
- key: activeRecordKeyDerivationSalt
default: '{{ random.AlphaNum 32 }}'
- key: dbPassword
- key: smtpPassword
requiredSecrets:
- postgres.password
- redis.password
- postgres.password
- redis.password