- gitea: use rootless image tag (28.2.0-rootless) since deployment runs as non-root UID 1000; standard tag uses s6-overlay requiring root - openproject: add secretKeyBase secret and SECRET_KEY_BASE env var to web, worker, and seeder; v17 enforces non-default SECRET_KEY_BASE
25 lines
565 B
YAML
25 lines
565 B
YAML
version: 17.9.3
|
|
requires:
|
|
- name: postgres
|
|
- name: memcached
|
|
defaultConfig:
|
|
namespace: openproject
|
|
storage: 2Gi
|
|
adminUserName: OpenProject Admin
|
|
adminUserEmail: '{{ .operator.email }}'
|
|
domain: openproject.{{ .cloud.domain }}
|
|
db:
|
|
host: '{{ .apps.postgres.host }}'
|
|
port: '{{ .apps.postgres.port }}'
|
|
name: openproject
|
|
user: openproject
|
|
memcached:
|
|
host: '{{ .apps.memcached.host }}'
|
|
port: '{{ .apps.memcached.port }}'
|
|
defaultSecrets:
|
|
- key: secretKeyBase
|
|
- key: dbPassword
|
|
- key: adminPassword
|
|
requiredSecrets:
|
|
- postgres.password
|