Add complete Directus configuration and update to v12.1.1
Moved Directus deployment configuration from k8s cluster to Git repository: - Main Directus deployment updated to v12.1.1 - PostgreSQL deployment (postgres:16-alpine) - Services for both Directus and PostgreSQL - Ingress with TLS/cert-manager - Backup CronJob (daily at 2 AM) - PVCs for database and uploads This enables GitOps management via Argo CD. Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent
parent
8c66f6c955
commit
a309c6873c
8 changed files with 397 additions and 0 deletions
87
apps/directus/directus-backup-cronjob.yaml
Normal file
87
apps/directus/directus-backup-cronjob.yaml
Normal file
|
|
@ -0,0 +1,87 @@
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: CronJob
|
||||||
|
metadata:
|
||||||
|
name: directus-backup
|
||||||
|
namespace: directus
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: backup
|
||||||
|
spec:
|
||||||
|
schedule: "0 2 * * *"
|
||||||
|
successfulJobsHistoryLimit: 3
|
||||||
|
failedJobsHistoryLimit: 3
|
||||||
|
jobTemplate:
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: backup
|
||||||
|
spec:
|
||||||
|
restartPolicy: OnFailure
|
||||||
|
containers:
|
||||||
|
- name: backup
|
||||||
|
image: postgres:16-alpine
|
||||||
|
command:
|
||||||
|
- /bin/sh
|
||||||
|
- -c
|
||||||
|
- |
|
||||||
|
set -e
|
||||||
|
BACKUP_DIR="/backups/directus"
|
||||||
|
BACKUP_FILE="${BACKUP_DIR}/directus-backup-$(date +%Y%m%d-%H%M%S).sql.gz"
|
||||||
|
echo "Starting Directus database backup to $BACKUP_FILE"
|
||||||
|
|
||||||
|
# Create backup directory if it doesn't exist
|
||||||
|
mkdir -p "$BACKUP_DIR"
|
||||||
|
|
||||||
|
# Perform PostgreSQL dump and compress
|
||||||
|
PGPASSWORD="$POSTGRES_PASSWORD" pg_dump \
|
||||||
|
-h directus-postgres \
|
||||||
|
-U directus \
|
||||||
|
-d directus \
|
||||||
|
--clean \
|
||||||
|
--if-exists \
|
||||||
|
--no-owner \
|
||||||
|
--no-privileges \
|
||||||
|
| gzip > "$BACKUP_FILE"
|
||||||
|
|
||||||
|
# Verify backup was created
|
||||||
|
if [ -f "$BACKUP_FILE" ]; then
|
||||||
|
SIZE=$(du -h "$BACKUP_FILE" | cut -f1)
|
||||||
|
echo "Backup completed successfully: $BACKUP_FILE ($SIZE)"
|
||||||
|
ls -lh "$BACKUP_FILE"
|
||||||
|
else
|
||||||
|
echo "ERROR: Backup file was not created"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Clean up backups older than 30 days
|
||||||
|
echo "Cleaning up backups older than 30 days..."
|
||||||
|
find "$BACKUP_DIR" -name "directus-backup-*.sql.gz" -type f -mtime +30 -delete
|
||||||
|
|
||||||
|
# Show remaining backups
|
||||||
|
echo "Current backups:"
|
||||||
|
ls -lh "$BACKUP_DIR" | grep "directus-backup-" || echo "No backups found"
|
||||||
|
|
||||||
|
echo "Backup job completed"
|
||||||
|
env:
|
||||||
|
- name: POSTGRES_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-db-credentials
|
||||||
|
key: postgres-password
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
|
limits:
|
||||||
|
cpu: 500m
|
||||||
|
memory: 512Mi
|
||||||
|
volumeMounts:
|
||||||
|
- name: backup-storage
|
||||||
|
mountPath: /backups
|
||||||
|
volumes:
|
||||||
|
- name: backup-storage
|
||||||
|
hostPath:
|
||||||
|
path: /var/backups
|
||||||
|
type: DirectoryOrCreate
|
||||||
15
apps/directus/directus-db-pvc.yaml
Normal file
15
apps/directus/directus-db-pvc.yaml
Normal file
|
|
@ -0,0 +1,15 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: directus-db
|
||||||
|
namespace: directus
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: database
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
||||||
|
storageClassName: hcloud-volumes-encrypted
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 20Gi
|
||||||
150
apps/directus/directus-deployment.yaml
Normal file
150
apps/directus/directus-deployment.yaml
Normal file
|
|
@ -0,0 +1,150 @@
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: directus
|
||||||
|
namespace: directus
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: app
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: directus
|
||||||
|
component: app
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: app
|
||||||
|
spec:
|
||||||
|
initContainers:
|
||||||
|
- name: wait-for-postgres
|
||||||
|
image: postgres:16-alpine
|
||||||
|
command:
|
||||||
|
- sh
|
||||||
|
- -c
|
||||||
|
- |
|
||||||
|
until pg_isready -h directus-postgres -U directus; do
|
||||||
|
echo "Waiting for PostgreSQL..."
|
||||||
|
sleep 2
|
||||||
|
done
|
||||||
|
securityContext:
|
||||||
|
fsGroup: 1000
|
||||||
|
containers:
|
||||||
|
- name: directus
|
||||||
|
image: directus/directus:12.1.1
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
containerPort: 8055
|
||||||
|
env:
|
||||||
|
- name: DB_CLIENT
|
||||||
|
value: pg
|
||||||
|
- name: DB_HOST
|
||||||
|
value: directus-postgres
|
||||||
|
- name: DB_PORT
|
||||||
|
value: "5432"
|
||||||
|
- name: DB_DATABASE
|
||||||
|
value: directus
|
||||||
|
- name: DB_USER
|
||||||
|
value: directus
|
||||||
|
- name: DB_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-db-credentials
|
||||||
|
key: postgres-password
|
||||||
|
- name: KEY
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-app-secrets
|
||||||
|
key: key
|
||||||
|
- name: SECRET
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-app-secrets
|
||||||
|
key: secret
|
||||||
|
- name: ADMIN_EMAIL
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-admin-credentials
|
||||||
|
key: admin-email
|
||||||
|
- name: ADMIN_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-admin-credentials
|
||||||
|
key: admin-password
|
||||||
|
- name: PUBLIC_URL
|
||||||
|
value: https://directus.basicstack.de
|
||||||
|
- name: AUTH_PROVIDERS
|
||||||
|
value: openid
|
||||||
|
- name: AUTH_OPENID_DRIVER
|
||||||
|
value: openid
|
||||||
|
- name: AUTH_OPENID_CLIENT_ID
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-oidc-secret
|
||||||
|
key: client-id
|
||||||
|
- name: AUTH_OPENID_CLIENT_SECRET
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-oidc-secret
|
||||||
|
key: client-secret
|
||||||
|
- name: AUTH_OPENID_ISSUER_URL
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-oidc-secret
|
||||||
|
key: issuer-url
|
||||||
|
- name: AUTH_OPENID_IDENTIFIER_KEY
|
||||||
|
value: email
|
||||||
|
- name: AUTH_OPENID_ALLOW_PUBLIC_REGISTRATION
|
||||||
|
value: "true"
|
||||||
|
- name: AUTH_OPENID_DEFAULT_ROLE_ID
|
||||||
|
value: ""
|
||||||
|
- name: AUTH_OPENID_ICON
|
||||||
|
value: account_circle
|
||||||
|
- name: AUTH_OPENID_LABEL
|
||||||
|
value: SSO Login
|
||||||
|
- name: AUTH_OPENID_SCOPE
|
||||||
|
value: openid email profile
|
||||||
|
- name: CORS_ENABLED
|
||||||
|
value: "true"
|
||||||
|
- name: CORS_ORIGIN
|
||||||
|
value: "true"
|
||||||
|
- name: CACHE_ENABLED
|
||||||
|
value: "false"
|
||||||
|
- name: RATE_LIMITER_ENABLED
|
||||||
|
value: "true"
|
||||||
|
- name: RATE_LIMITER_POINTS
|
||||||
|
value: "50"
|
||||||
|
- name: RATE_LIMITER_DURATION
|
||||||
|
value: "1"
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 250m
|
||||||
|
memory: 512Mi
|
||||||
|
limits:
|
||||||
|
cpu: "1"
|
||||||
|
memory: 2Gi
|
||||||
|
livenessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /server/health
|
||||||
|
port: 8055
|
||||||
|
initialDelaySeconds: 60
|
||||||
|
periodSeconds: 10
|
||||||
|
timeoutSeconds: 5
|
||||||
|
readinessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /server/health
|
||||||
|
port: 8055
|
||||||
|
initialDelaySeconds: 30
|
||||||
|
periodSeconds: 5
|
||||||
|
timeoutSeconds: 3
|
||||||
|
volumeMounts:
|
||||||
|
- name: uploads
|
||||||
|
mountPath: /directus/uploads
|
||||||
|
volumes:
|
||||||
|
- name: uploads
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: directus-uploads
|
||||||
26
apps/directus/directus-ingress.yaml
Normal file
26
apps/directus/directus-ingress.yaml
Normal file
|
|
@ -0,0 +1,26 @@
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: directus
|
||||||
|
namespace: directus
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
annotations:
|
||||||
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||||
|
spec:
|
||||||
|
ingressClassName: traefik
|
||||||
|
tls:
|
||||||
|
- hosts:
|
||||||
|
- directus.basicstack.de
|
||||||
|
secretName: directus-tls
|
||||||
|
rules:
|
||||||
|
- host: directus.basicstack.de
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: directus
|
||||||
|
port:
|
||||||
|
number: 80
|
||||||
70
apps/directus/directus-postgres-deployment.yaml
Normal file
70
apps/directus/directus-postgres-deployment.yaml
Normal file
|
|
@ -0,0 +1,70 @@
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: directus-postgres
|
||||||
|
namespace: directus
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: database
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: directus
|
||||||
|
component: database
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: database
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: postgres
|
||||||
|
image: postgres:16-alpine
|
||||||
|
ports:
|
||||||
|
- name: postgres
|
||||||
|
containerPort: 5432
|
||||||
|
env:
|
||||||
|
- name: POSTGRES_DB
|
||||||
|
value: directus
|
||||||
|
- name: POSTGRES_USER
|
||||||
|
value: directus
|
||||||
|
- name: POSTGRES_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: directus-db-credentials
|
||||||
|
key: postgres-password
|
||||||
|
- name: PGDATA
|
||||||
|
value: /var/lib/postgresql/data/pgdata
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 250m
|
||||||
|
memory: 512Mi
|
||||||
|
limits:
|
||||||
|
cpu: "1"
|
||||||
|
memory: 1Gi
|
||||||
|
livenessProbe:
|
||||||
|
exec:
|
||||||
|
command:
|
||||||
|
- pg_isready
|
||||||
|
- -U
|
||||||
|
- directus
|
||||||
|
initialDelaySeconds: 30
|
||||||
|
periodSeconds: 10
|
||||||
|
readinessProbe:
|
||||||
|
exec:
|
||||||
|
command:
|
||||||
|
- pg_isready
|
||||||
|
- -U
|
||||||
|
- directus
|
||||||
|
initialDelaySeconds: 5
|
||||||
|
periodSeconds: 5
|
||||||
|
volumeMounts:
|
||||||
|
- name: data
|
||||||
|
mountPath: /var/lib/postgresql/data
|
||||||
|
volumes:
|
||||||
|
- name: data
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: directus-db
|
||||||
17
apps/directus/directus-postgres-service.yaml
Normal file
17
apps/directus/directus-postgres-service.yaml
Normal file
|
|
@ -0,0 +1,17 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: directus-postgres
|
||||||
|
namespace: directus
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: database
|
||||||
|
spec:
|
||||||
|
type: ClusterIP
|
||||||
|
selector:
|
||||||
|
app: directus
|
||||||
|
component: database
|
||||||
|
ports:
|
||||||
|
- name: postgres
|
||||||
|
port: 5432
|
||||||
|
targetPort: 5432
|
||||||
17
apps/directus/directus-service.yaml
Normal file
17
apps/directus/directus-service.yaml
Normal file
|
|
@ -0,0 +1,17 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: directus
|
||||||
|
namespace: directus
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: app
|
||||||
|
spec:
|
||||||
|
type: ClusterIP
|
||||||
|
selector:
|
||||||
|
app: directus
|
||||||
|
component: app
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
port: 80
|
||||||
|
targetPort: 8055
|
||||||
15
apps/directus/directus-uploads-pvc.yaml
Normal file
15
apps/directus/directus-uploads-pvc.yaml
Normal file
|
|
@ -0,0 +1,15 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: directus-uploads
|
||||||
|
namespace: directus
|
||||||
|
labels:
|
||||||
|
app: directus
|
||||||
|
component: data
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
||||||
|
storageClassName: hcloud-volumes-encrypted
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 10Gi
|
||||||
Loading…
Add table
Reference in a new issue