pretix/standalone runs gunicorn + celery + celery-beat in one container
and OOMKilled at 4Gi. Increased limit to 6Gi, request to 512Mi.
eventyay: add nginx sidecar to serve static files, update health probes
to check a static asset at port 8080, add create-superuser script,
register script in manifest.
crowdsec: middleware fix (previously uncommitted).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The karrot-frontend nginx template hardcodes Docker's DNS resolver
(127.0.0.11) which doesn't exist in Kubernetes. Added a ConfigMap to
override the template, removing the Docker DNS resolver by using a
direct proxy_pass with no nginx variable (which would force runtime
resolution). Also adds a README with usage instructions.
Documents lessons learned in ADDING-APPS-NOTES.md:
- Note 24: nginx Docker DNS resolver doesn't work in Kubernetes; any
nginx variable in proxy_pass (including $request_uri) forces runtime
DNS resolution requiring a resolver directive
- Note 25: ConfigMap changes don't restart pods; subPath mounts never
auto-update; always follow with kubectl rollout restart
- Note 26: includeSelectors mismatch affects every deployment in an
app — check all endpoints, not just the web-facing one
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
