joplin

2026-08-27 19:37:51 +03:00
parent 5cabacee84
commit 489439d330
8 changed files with 201 additions and 1 deletions
@@ -0,0 +1,83 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: joplin
+  namespace: pim
+spec:
+  interval: 10m
+  dependsOn:
+    - name: joplin-postgres
+  chartRef:
+    kind: OCIRepository
+    name: joplin
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      app:
+        # temporarily disabled - see joplin-postgres HelmRelease; the app
+        # must not connect until the migrated database data is in place.
+        replicas: 0
+        containers:
+          app:
+            image:
+              repository: joplin/server
+              # verified via Docker Hub API (hub.docker.com/v2/repositories/
+              # joplin/server/tags): "3.7.1" and "latest" were pushed at the
+              # same timestamp, i.e. this is what "latest" (the original
+              # compose.yaml's tag) currently resolves to.
+              tag: "3.7.1"
+            env:
+              APP_PORT: "22300"
+              APP_BASE_URL: https://notes.aggtaa.com
+              DB_CLIENT: pg
+              POSTGRES_DATABASE: joplin
+              POSTGRES_USER: joplin
+              POSTGRES_HOST: joplin-postgres
+              POSTGRES_PORT: "5432"
+              POSTGRES_PASSWORD:
+                valueFrom:
+                  secretKeyRef:
+                    name: joplin-secrets
+                    key: POSTGRES_PASSWORD
+            probes:
+              startup:
+                enabled: true
+                spec:
+                  periodSeconds: 5
+                  failureThreshold: 60
+              liveness:
+                enabled: true
+              readiness:
+                enabled: true
+            resources:
+              requests:
+                cpu: 50m
+                memory: 128Mi
+              limits:
+                memory: 1Gi
+
+    service:
+      app:
+        controller: app
+        ports:
+          http:
+            port: 22300
+
+    ingress:
+      app:
+        className: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-prod
+        hosts:
+          - host: notes.aggtaa.com
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
+        tls:
+          - secretName: joplin-tls
+            hosts:
+              - notes.aggtaa.com