Files
wild-directory/bookstack/versions/26/deployment.yaml
Paul Payne ef2c7ea8b3 Bump 5 PHP apps to upstream images patched for PHP2Shell (CVE-2026-109618, CVE-2026-109619)
- nextcloud: 34.0.0 -> 34.0.5 (PHP 8.5.12)
- mediawiki: 1.43.1 -> 1.43.11 (PHP 8.3.36)
- firefly-iii: 6.6.3 -> 6.7.7 (PHP 8.5.12)
- bookstack: 26.05.1 -> 26.09.2 (PHP patched)
- limesurvey: 6.17.5 -> 6.17.18 (PHP 8.4.27)
2026-10-23 13:47:15 +00:00

107 lines
2.9 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: bookstack
namespace: {{ .namespace }}
spec:
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
component: web
template:
metadata:
labels:
component: web
spec:
securityContext:
runAsUser: 0
runAsNonRoot: false
seccompProfile:
type: RuntimeDefault
containers:
- name: bookstack
image: lscr.io/linuxserver/bookstack:26.09.2
ports:
- name: http
containerPort: 80
protocol: TCP
env:
- name: PUID
value: "1000"
- name: PGID
value: "1000"
- name: APP_URL
value: https://{{ .domain }}
- name: DB_HOST
value: {{ .db.host }}
- name: DB_PORT
value: "{{ .db.port }}"
- name: DB_DATABASE
value: {{ .db.name }}
- name: DB_USERNAME
value: {{ .db.user }}
- name: DB_PASSWORD
valueFrom:
secretKeyRef:
name: bookstack-secrets
key: dbPassword
- name: APP_KEY
valueFrom:
secretKeyRef:
name: bookstack-secrets
key: appKey
- name: MAIL_DRIVER
value: smtp
- name: MAIL_HOST
value: {{ .smtp.host }}
- name: MAIL_PORT
value: "{{ .smtp.port }}"
- name: MAIL_FROM
value: {{ .smtp.from }}
- name: MAIL_USERNAME
value: {{ .smtp.user }}
- name: MAIL_PASSWORD
valueFrom:
secretKeyRef:
name: bookstack-secrets
key: smtpPassword
- name: MAIL_ENCRYPTION
value: tls
resources:
limits:
cpu: "1"
ephemeral-storage: 1Gi
memory: 512Mi
requests:
cpu: 50m
ephemeral-storage: 50Mi
memory: 128Mi
volumeMounts:
- name: bookstack-data
mountPath: /config
livenessProbe:
httpGet:
path: /
port: 80
initialDelaySeconds: 90
timeoutSeconds: 5
periodSeconds: 15
failureThreshold: 6
readinessProbe:
httpGet:
path: /
port: 80
initialDelaySeconds: 60
timeoutSeconds: 3
periodSeconds: 10
failureThreshold: 3
securityContext:
readOnlyRootFilesystem: false
volumes:
- name: bookstack-data
persistentVolumeClaim:
claimName: bookstack-data
restartPolicy: Always