apps/plausible/resources/deployment.yaml
Peter Kurfer 18092824cf
All checks were successful
Renovate / renovate (push) Successful in 54s
feat(plausible): basic setup
2024-11-26 21:01:10 +01:00

65 lines
1.6 KiB
YAML

---
apiVersion: apps/v1
kind: Deployment
metadata:
name: plausible
spec:
selector:
matchLabels:
app.kubernetes.io/name: plausible
replicas: 2
template:
metadata:
labels:
app.kubernetes.io/name: plausible
spec:
containers:
- name: plausible
image: plausible
env:
- name: DATABASE_URL
valueFrom:
secretKeyRef:
name: db-credentials-plausible
key: POSTGRES_URL
envFrom:
- secretRef:
name: plausible-config
ports:
- containerPort: 3000
protocol: TCP
name: web
volumeMounts:
- mountPath: /var/lib/plausible/tmp
name: temp
resources:
requests:
memory: "256Mi"
cpu: "250m"
limits:
memory: "512Mi"
cpu: "500m"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
affinity:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 100
preference:
matchExpressions:
- key: kubernetes.io/arch
operator: In
values:
- arm64
volumes:
- name: temp
emptyDir:
sizeLimit: 1500Mi
securityContext:
runAsUser: 1000
runAsGroup: 1000
runAsNonRoot: true