3fff00cfd0
Deploy a dedicated PostgreSQL 17 instance in the pangolin namespace and switch Pangolin (fosrl/pangolin) to the postgresql-1.21.1 image variant. The database URL is provided via a sealed secret and pulled into the Pangolin container as DATABASE_URL, which the PostgreSQL Pangolin build reads at startup. - New: postgres.yaml (Deployment + PVC on hcloud-volumes-encrypted + Service) - New: pangolin-postgres-secrets-sealed.yaml (postgres creds + connection string) - pangolin-deployment.yaml: image -> fosrl/pangolin:postgresql-1.21.1, DATABASE_URL from secret, /app/config PVC mount, init container waits for postgres, removed obsolete DATABASE_PATH env - pangolin-config.yaml: dropped SQLite database.path stanza Fixes DEV-451. Co-Authored-By: Paperclip <noreply@paperclip.ing>
36 lines
754 B
YAML
36 lines
754 B
YAML
---
|
|
# Pangolin ConfigMap
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: pangolin-config
|
|
namespace: pangolin
|
|
data:
|
|
config.yml: |
|
|
gerbil:
|
|
start_port: 10000
|
|
base_endpoint: "pangolin.basicstack.de"
|
|
|
|
app:
|
|
dashboard_url: "https://pangolin.basicstack.de"
|
|
log_level: "info"
|
|
|
|
domains:
|
|
domain1:
|
|
base_domain: "basicstack.de"
|
|
|
|
server:
|
|
secret: "REPLACE_WITH_SECRET_FROM_SEALED_SECRET"
|
|
cors:
|
|
origins:
|
|
- "https://pangolin.basicstack.de"
|
|
|
|
flags:
|
|
signup: true
|
|
verification: false
|
|
|
|
oidc:
|
|
enabled: true
|
|
issuer: "https://auth.basicstack.de"
|
|
callback_url: "https://pangolin.basicstack.de/auth/callback"
|
|
scopes: "openid profile email groups"
|