Compare commits
1 Commits
main
...
auto-updat
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
84c4715e75 |
@@ -44,6 +44,7 @@ ArgoCD homelab project
|
|||||||
| **jellyfin** | [](https://ag.hexor.cy/applications/argocd/jellyfin) |
|
| **jellyfin** | [](https://ag.hexor.cy/applications/argocd/jellyfin) |
|
||||||
| **k8s-secrets** | [](https://ag.hexor.cy/applications/argocd/k8s-secrets) |
|
| **k8s-secrets** | [](https://ag.hexor.cy/applications/argocd/k8s-secrets) |
|
||||||
| **khm** | [](https://ag.hexor.cy/applications/argocd/khm) |
|
| **khm** | [](https://ag.hexor.cy/applications/argocd/khm) |
|
||||||
|
| **n8n** | [](https://ag.hexor.cy/applications/argocd/n8n) |
|
||||||
| **ollama** | [](https://ag.hexor.cy/applications/argocd/ollama) |
|
| **ollama** | [](https://ag.hexor.cy/applications/argocd/ollama) |
|
||||||
| **paperless** | [](https://ag.hexor.cy/applications/argocd/paperless) |
|
| **paperless** | [](https://ag.hexor.cy/applications/argocd/paperless) |
|
||||||
| **pasarguard** | [](https://ag.hexor.cy/applications/argocd/pasarguard) |
|
| **pasarguard** | [](https://ag.hexor.cy/applications/argocd/pasarguard) |
|
||||||
|
|||||||
@@ -2,18 +2,18 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
apiVersion: external-secrets.io/v1
|
||||||
kind: ExternalSecret
|
kind: ExternalSecret
|
||||||
metadata:
|
metadata:
|
||||||
name: credentials
|
name: postgres-password
|
||||||
spec:
|
spec:
|
||||||
target:
|
target:
|
||||||
name: credentials
|
name: postgres-password
|
||||||
deletionPolicy: Delete
|
deletionPolicy: Delete
|
||||||
template:
|
template:
|
||||||
type: Opaque
|
type: Opaque
|
||||||
data:
|
data:
|
||||||
postgres-password: "{{ .psql | trim }}"
|
postgres-password: |-
|
||||||
N8N_ENCRYPTION_KEY: "{{ .enc_pass | trim }}"
|
{{ .n8n }}
|
||||||
data:
|
data:
|
||||||
- secretKey: psql
|
- secretKey: n8n
|
||||||
sourceRef:
|
sourceRef:
|
||||||
storeRef:
|
storeRef:
|
||||||
name: vaultwarden-login
|
name: vaultwarden-login
|
||||||
@@ -24,14 +24,5 @@ spec:
|
|||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
||||||
property: fields[13].value
|
property: fields[13].value
|
||||||
- secretKey: enc_pass
|
|
||||||
sourceRef:
|
|
||||||
storeRef:
|
|
||||||
name: vaultwarden-login
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
metadataPolicy: None
|
|
||||||
key: 18c92d73-9637-4419-8642-7f7b308460cb
|
|
||||||
property: fields[0].value
|
|
||||||
|
|||||||
@@ -1,10 +1,8 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
# Updated: Fixed n8n volume permissions issue
|
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
- external-secrets.yaml
|
- external-secrets.yaml
|
||||||
- storage.yaml
|
|
||||||
|
|
||||||
helmCharts:
|
helmCharts:
|
||||||
- name: n8n
|
- name: n8n
|
||||||
@@ -14,10 +12,10 @@ helmCharts:
|
|||||||
namespace: n8n
|
namespace: n8n
|
||||||
valuesFile: values-n8n.yaml
|
valuesFile: values-n8n.yaml
|
||||||
includeCRDs: true
|
includeCRDs: true
|
||||||
- name: yacy
|
- name: searxng
|
||||||
repo: https://gt.hexor.cy/api/packages/ab/helm
|
repo: https://unknowniq.github.io/helm-charts/
|
||||||
version: 0.1.2
|
version: 0.1.3
|
||||||
releaseName: yacy
|
releaseName: searxng
|
||||||
namespace: n8n
|
namespace: n8n
|
||||||
valuesFile: values-yacy.yaml
|
valuesFile: values-searxng.yaml
|
||||||
includeCRDs: true
|
includeCRDs: true
|
||||||
|
|||||||
@@ -1,12 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: n8n-home
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: nfs-csi
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 10Gi
|
|
||||||
@@ -1,9 +1,21 @@
|
|||||||
nodeSelector:
|
webhook:
|
||||||
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
url: https://n8n.hexor.cy
|
||||||
|
|
||||||
db:
|
db:
|
||||||
type: postgresdb
|
type: postgresdb
|
||||||
|
|
||||||
|
worker:
|
||||||
|
mode: queue
|
||||||
|
|
||||||
|
redis:
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
externalPostgresql:
|
||||||
|
existingSecret: postgres-password
|
||||||
|
host: "psql.psql.svc"
|
||||||
|
username: "n8n"
|
||||||
|
database: "n8n"
|
||||||
|
|
||||||
main:
|
main:
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
@@ -12,53 +24,6 @@ main:
|
|||||||
limits:
|
limits:
|
||||||
cpu: 512m
|
cpu: 512m
|
||||||
memory: 512Mi
|
memory: 512Mi
|
||||||
persistence:
|
|
||||||
enabled: true
|
|
||||||
existingClaim: n8n-home
|
|
||||||
mountPath: /home/node/.n8n
|
|
||||||
|
|
||||||
podSecurityContext:
|
|
||||||
runAsUser: 1000
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsNonRoot: true
|
|
||||||
|
|
||||||
# Configure health probes for slow startup
|
|
||||||
main:
|
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /healthz
|
|
||||||
port: http
|
|
||||||
initialDelaySeconds: 120 # Дать время на запуск
|
|
||||||
periodSeconds: 30
|
|
||||||
timeoutSeconds: 10
|
|
||||||
failureThreshold: 6
|
|
||||||
|
|
||||||
readinessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /healthz/readiness
|
|
||||||
port: http
|
|
||||||
initialDelaySeconds: 60
|
|
||||||
periodSeconds: 10
|
|
||||||
timeoutSeconds: 5
|
|
||||||
failureThreshold: 10
|
|
||||||
|
|
||||||
|
|
||||||
worker:
|
|
||||||
mode: regular
|
|
||||||
|
|
||||||
webhook:
|
|
||||||
url: https://n8n.hexor.cy
|
|
||||||
|
|
||||||
redis:
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
existingEncryptionKeySecret: credentials
|
|
||||||
|
|
||||||
externalPostgresql:
|
|
||||||
existingSecret: credentials
|
|
||||||
host: "psql.psql.svc"
|
|
||||||
username: "n8n"
|
|
||||||
database: "n8n"
|
|
||||||
|
|
||||||
ingress:
|
ingress:
|
||||||
enabled: true
|
enabled: true
|
||||||
@@ -77,3 +42,6 @@ ingress:
|
|||||||
hosts:
|
hosts:
|
||||||
- '*.hexor.cy'
|
- '*.hexor.cy'
|
||||||
|
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
||||||
|
|
||||||
|
|||||||
8
k8s/apps/n8n/values-searxng.yaml
Normal file
8
k8s/apps/n8n/values-searxng.yaml
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
config:
|
||||||
|
general:
|
||||||
|
instance_name: "HexorSearXNG"
|
||||||
|
|
||||||
|
valkey:
|
||||||
|
enabled: true
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
||||||
@@ -1,24 +0,0 @@
|
|||||||
nodeSelector:
|
|
||||||
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
||||||
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
memory: 2Gi
|
|
||||||
requests:
|
|
||||||
memory: 1Gi
|
|
||||||
|
|
||||||
persistence:
|
|
||||||
enabled: true
|
|
||||||
size: 10Gi
|
|
||||||
|
|
||||||
yacy:
|
|
||||||
network:
|
|
||||||
mode: "intranet"
|
|
||||||
config:
|
|
||||||
network.unit.bootstrap.seedlist: ""
|
|
||||||
network.unit.remotecrawl: "false"
|
|
||||||
network.unit.dhtredundancy.junior: "1"
|
|
||||||
network.unit.dhtredundancy.senior: "1"
|
|
||||||
index.receive.allow: "false"
|
|
||||||
index.distribute.allow: "false"
|
|
||||||
crawl.response.timeout: "10000"
|
|
||||||
@@ -10,11 +10,5 @@ parameters:
|
|||||||
reclaimPolicy: Retain
|
reclaimPolicy: Retain
|
||||||
volumeBindingMode: Immediate
|
volumeBindingMode: Immediate
|
||||||
mountOptions:
|
mountOptions:
|
||||||
- nfsvers=4.1
|
- vers=4
|
||||||
- rsize=1048576
|
- hard
|
||||||
- wsize=1048576
|
|
||||||
- timeo=14
|
|
||||||
- intr
|
|
||||||
- bg
|
|
||||||
- soft
|
|
||||||
- noatime
|
|
||||||
|
|||||||
Reference in New Issue
Block a user