From b0093921834ecdb4d9e6300db40c35d34219d234 Mon Sep 17 00:00:00 2001
From: Peter Kurfer <peter@icb4dc0.de>
Date: Tue, 26 Nov 2024 20:56:57 +0100
Subject: [PATCH] feat(plausible): basic setup

---
 plausible/.gitattributes               |   1 +
 plausible/config/plausible.env         | Bin 0 -> 624 bytes
 plausible/kustomization.yaml           |  19 ++++++++
 plausible/pw                           |   1 -
 plausible/resources/deployment.yaml    |  59 +++++++++++++++++++++++++
 plausible/resources/namespace.yaml     |   7 +++
 plausible/resources/postgres/db.yaml   |   8 ++++
 plausible/resources/postgres/user.yaml |  10 +++++
 8 files changed, 104 insertions(+), 1 deletion(-)
 create mode 100644 plausible/.gitattributes
 create mode 100644 plausible/config/plausible.env
 create mode 100644 plausible/kustomization.yaml
 delete mode 100644 plausible/pw
 create mode 100644 plausible/resources/deployment.yaml
 create mode 100644 plausible/resources/namespace.yaml
 create mode 100644 plausible/resources/postgres/db.yaml
 create mode 100644 plausible/resources/postgres/user.yaml

diff --git a/plausible/.gitattributes b/plausible/.gitattributes
new file mode 100644
index 0000000..4a7f4ca
--- /dev/null
+++ b/plausible/.gitattributes
@@ -0,0 +1 @@
+config/*.env filter=age diff=age merge=age -text
diff --git a/plausible/config/plausible.env b/plausible/config/plausible.env
new file mode 100644
index 0000000000000000000000000000000000000000..118ec75d6fb80aa5af254d12ba880891166e3a1d
GIT binary patch
literal 624
zcmV-$0+0P+XJsvAZewzJaCB*JZZ2<fXD@a!3N1b$STZ#=F*zVLZc%YpRccsOHd<P2
zNO4F(Gi^mOGB<NlGBI;>a&uW^W^Xc1IayIedTR=1QE*Fhd3rB;RyTH0W>YU~P-tZ|
zZdp?~PGd(%Sy5C=Pi{F=L{2hKV?hcnJ|I{!H8n9gAVo`RX+cbLPIqWpQ!__HLTEED
zVR2zJOJzATW_N8gYer*HF<EMDI8%643P?FZWHW1QQb|-rRW&PUdNVdQXh%VLPF8tu
zFK>8rR5L_+Fh^rYRCaVx3N0-yAZ1rJMQ&C$cVkdmad&l6R8>nka7k`>NMSidP&jdN
zL|0;THBVZ4NH=O(3U91qlQT)XSQ}#^C6*em%dWI<`aN|Q#;Khd+Un`c_5$|``#G=y
zO+N_?`LKB&?>2$qNX2ax;rnEkQfoU%<<0u5{EE|-e0Kx{H?2DeDrMe<m99bOS5dR<
z&pwO}gH~AOhy00AA3`Ib`(^^Xlj@FomA9n*t^d%(@a&LcF(J}YK$O2I5+){IYo{aO
z1AxE%)t>_|UTK6rRZ=EcYuYs?SfGsJ)Rktxk{kf$iqZYg4`q?Gc5AJEFMzWZuBZj2
zuF|43I}_3$p4A$n4i@d>65Vi@^@Y-&(yVPiL%q9gY@9zL(D$p-tL?WXE(;jt(HrR`
zdpX|L_cwHzW3DKIs#_uPg>RX@ue>8?vTNUDHdLr<Zrc?FE%qhJCafe}SF)HT=3^$~
zJm^QNp07FHHtLSySMU)pb?p|6Ez>gz_x<G;H1F~2faf{Qq?t|{8l{qDv3N&{g%?hq
K$bH?P=frg&dkX{r

literal 0
HcmV?d00001

diff --git a/plausible/kustomization.yaml b/plausible/kustomization.yaml
new file mode 100644
index 0000000..d35997c
--- /dev/null
+++ b/plausible/kustomization.yaml
@@ -0,0 +1,19 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: plausible
+
+images:
+  - name: plausible
+    newName: ghcr.io/plausible/community-edition
+    newTag: "v2.1.4"
+
+resources:
+  - resources/namespace.yaml
+  - resources/postgres/db.yaml
+  - resources/postgres/user.yaml
+
+secretGenerator:
+  - name: plausible-config
+    envs:
+      - "config/plausible.env"
diff --git a/plausible/pw b/plausible/pw
deleted file mode 100644
index bbfa239..0000000
--- a/plausible/pw
+++ /dev/null
@@ -1 +0,0 @@
-ToLqfKE7y4wFvVbz
diff --git a/plausible/resources/deployment.yaml b/plausible/resources/deployment.yaml
new file mode 100644
index 0000000..10176c9
--- /dev/null
+++ b/plausible/resources/deployment.yaml
@@ -0,0 +1,59 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: plausible
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: plausible
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: plausible
+    spec:
+      containers:
+        - name: plausible
+          image: plausible
+          envFrom:
+            - secretRef:
+                name: plausible-config
+          ports:
+            - containerPort: 3000
+              protocol: TCP
+              name: web
+          volumeMounts:
+            - mountPath: /var/lib/plausible/tmp
+              name: temp
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "250m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 100
+              preference:
+                matchExpressions:
+                  - key: kubernetes.io/arch
+                    operator: In
+                    values:
+                      - arm64
+      volumes:
+        - name: temp
+          emptyDir:
+            sizeLimit: 1500Mi
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        runAsNonRoot: true
diff --git a/plausible/resources/namespace.yaml b/plausible/resources/namespace.yaml
new file mode 100644
index 0000000..af4bc3a
--- /dev/null
+++ b/plausible/resources/namespace.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: plausible
+  labels:
+    prometheus: default
diff --git a/plausible/resources/postgres/db.yaml b/plausible/resources/postgres/db.yaml
new file mode 100644
index 0000000..2436d76
--- /dev/null
+++ b/plausible/resources/postgres/db.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: db.movetokube.com/v1alpha1
+kind: Postgres
+metadata:
+  name: plausible
+spec:
+  database: plausible
+  dropOnDelete: false
diff --git a/plausible/resources/postgres/user.yaml b/plausible/resources/postgres/user.yaml
new file mode 100644
index 0000000..4f29762
--- /dev/null
+++ b/plausible/resources/postgres/user.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: db.movetokube.com/v1alpha1
+kind: PostgresUser
+metadata:
+  name: plausible
+spec:
+  role: plausible
+  database: plausible
+  secretName: db-credentials
+  privileges: OWNER