add recipes

cluster/data/_volumes.yaml

@@ -63,3 +63,29 @@ spec:
   resources:
     requests:
       storage: 10Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: recipes-media
+  namespace: data
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 5Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: recipes-static
+  namespace: data
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 1Gi

cluster/data/recipes.yaml

@@ -0,0 +1,75 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: recipes
+  namespace: data
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://k8s-at-home.com/charts/
+      chart: recipes
+      version: 2.2.2
+      sourceRef:
+        kind: HelmRepository
+        name: k8s-at-home-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    controllerType: deployment
+    strategy:
+      type: Recreate
+    image:
+      repository: vabene1111/recipes
+      tag: 0.13.0
+      pullPolicy: IfNotPresent
+    env:
+      DEBUG: "0"
+      ALLOWED_HOSTS: "*"
+      DB_ENGINE: django.db.backends.postgresql
+      GUNICORN_MEDIA: "0"
+      TIMEZONE: Europe/Paris
+      FRACTION_PREF_DEFAULT: "0"
+      COMMENT_PREF_DEFAULT: "1"
+      SHOPPING_MIN_AUTOSYNC_INTERVAL: "5"
+    service:
+      port:
+        port: 80
+        annotations:
+          prometheus.io/probe: "true"
+          prometheus.io/protocol: http
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/client-body-buffer-size: "10m"
+    persistence:
+      config:
+        enabled: false
+      media:
+        enabled: true
+        mountPath: /opt/recipes/mediafiles
+        existingClaim: recipes-media
+      static:
+        enabled: true
+        mountPath: /opt/recipes/staticfiles
+        existingClaim: recipes-static
+    additionalContainers:
+      - name: nginx
+        image: nginx:1.19.6
+        ports:
+          - containerPort: 80
+            name: http
+        volumeMounts:
+          - name: media
+            mountPath: "/media"
+          - name: static
+            mountPath: "/static"
+          - name: recipes-config
+            mountPath: /etc/nginx/nginx.conf
+            subPath: nginx-config
+            readOnly: true
+  valuesFrom:
+    - kind: ConfigMap
+      name: helmrelease-data-recipes

secrets/helmrelease-data-recipes.yaml

@@ -0,0 +1,36 @@
+apiVersion: v1
+data:
+    values.yaml: ENC[AES256_GCM,data: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,iv:hewduQppA9ymviERamYwglGjR1tuMy55e7Zp4CiwZ7Y=,tag:DYIvhsMQWpyKqqyRq9WK/A==,type:str]
+kind: ConfigMap
+metadata:
+    creationTimestamp: null
+    name: helmrelease-data-recipes
+    namespace: data
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    lastmodified: '2021-01-10T18:16:01Z'
+    mac: ENC[AES256_GCM,data:bgGPbjAbChtTlrfIIv80ksTo46PN1cCcLS06AKCllCyGIsnsqHoz/ajKIemFnELj4cUjIOFRr7BwqlrwXgNFRTvOLyJttkKwDOnWj4KwsltUoz14btHKrrcPx2kG77+M5H6+6n0eiq1VxLDGU99R2sDWyrCV4XkPM3Rrkooplx8=,iv:t+FZlGmIccSXo24ohgGIPliiyAY6GTrqBU0y197KNP4=,tag:wSUEDi9tGtiAZVDJ5VEFWQ==,type:str]
+    pgp:
+    -   created_at: '2021-01-10T18:16:00Z'
+        enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQGMA/JorPHm1g9XAQv/ZqP1+MAD1aGRWb06WucKJerakMQo6kAGbiVm8Eta4nfw
+            C+7H6abrmEAOFZY3jzfywyMqUA8keRO8sVNg4bvDg79WsQnzfM4cAdqehQSuvxLA
+            WqrTCWZhL1XtWRc2cylrmOf9dQttP/0fm/wnVG6IXqL/nJb+YHmSWOlszp2V9cOd
+            OypJvub5I+RVN42RuCBngoAelHwOMuPbo3gJBazGgy8KGtjqFHCL+saOZY8n1Yhh
+            AiyAu1IBxLGLOa7EaQB9gUlCv5RXs/Iu+DnjAuf0w+T2jC9eXMMGmYz8Cw5cUoqy
+            Lyy57LNmpkr3/XM6+t+nnUgXJ73yDezujwdZgokJFkCBpSPAq9iI7nuPsVaY63Oj
+            X5mcnia4owzR1hzo2VwjMDDx/74q6rJN7ziVAL/ADNjQOKzw5lY5It7hY69fVvUH
+            Zp0UsmdA4ZYsTg/aUcJuOGwdv8m7PE2ghHyxVIdQCaYMcJv3Kc8HcGAc8gxR8ljZ
+            0z9Dlm7M2KonesVd1XBB0lwB5yaWrf28wbXc9T8Vf2KmlNpiPZFJxufmNua212Q/
+            m4qnKWZobz3zY9HPF0e9CilRTNJFLFN89YwskeK3gIcNp3JGGUBWq+RvrLDf/k8y
+            zqosh5sXkq4AeRMREw==
+            =G1S2
+            -----END PGP MESSAGE-----
+        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+    encrypted_regex: ^(data|stringData)$
+    version: 3.6.1