davical

2026-08-08 19:39:02 +03:00
parent 625d43b033
commit 7e19f3cef7
13 changed files with 243 additions and 53 deletions
@@ -0,0 +1,82 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: davical
+  namespace: pim
+spec:
+  interval: 10m
+  dependsOn:
+    - name: davical-postgres
+  chartRef:
+    kind: OCIRepository
+    name: davical
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      app:
+        containers:
+          app:
+            image:
+              repository: tuxnvape/davical-standalone
+              tag: "82-1.1.12"
+            env:
+              TZ: Europe/Moscow
+              HOST_NAME: c2.aggtaa.com
+              DBHOST: davical-postgres
+              UPDATE_FROM_OLD: "false"
+              PGSQL_ROOT_PASS:
+                valueFrom:
+                  secretKeyRef:
+                    name: davical-secrets
+                    key: PGSQL_ROOT_PASS
+              PASSDAVDB:
+                valueFrom:
+                  secretKeyRef:
+                    name: davical-secrets
+                    key: PASSDAVDB
+              ADMINDAVICALPASS:
+                valueFrom:
+                  secretKeyRef:
+                    name: davical-secrets
+                    key: ADMINDAVICALPASS
+            probes:
+              liveness:
+                enabled: true
+              readiness:
+                enabled: true
+
+    service:
+      app:
+        controller: app
+        ports:
+          http:
+            port: 80
+
+    ingress:
+      app:
+        className: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-prod
+        hosts:
+          - host: c2.aggtaa.com
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
+        tls:
+          - secretName: davical-tls
+            hosts:
+              - c2.aggtaa.com
+
+    persistence:
+      config:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 256Mi
+        storageClass: longhorn
+        retain: true
+        globalMounts:
+          - path: /config
@@ -0,0 +1,45 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: davical-postgres
+  namespace: pim
+spec:
+  interval: 10m
+  chartRef:
+    kind: OCIRepository
+    name: davical
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      postgres:
+        containers:
+          app:
+            image:
+              repository: postgres
+              tag: "16-alpine"
+            env:
+              TZ: Europe/Moscow
+              POSTGRES_PASSWORD:
+                valueFrom:
+                  secretKeyRef:
+                    name: davical-secrets
+                    key: PGSQL_ROOT_PASS
+
+    service:
+      app:
+        controller: postgres
+        ports:
+          postgres:
+            port: 5432
+
+    persistence:
+      data:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 2Gi
+        storageClass: longhorn
+        retain: true
+        globalMounts:
+          - path: /var/lib/postgresql/data
+            subPath: data
@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: davical
+  namespace: pim
+spec:
+  interval: 10m
+  url: oci://ghcr.io/bjw-s-labs/helm/app-template
+  ref:
+    tag: "5.0.1"
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrepository.yaml
+  - secret.enc.yaml
+  - helmrelease-postgres.yaml
+  - helmrelease-davical.yaml
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: davical-secrets
+    namespace: pim
+stringData:
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:rz09JogFSKE0WZ7pFnmB4zQRlRh4q/FJRGQ1fqdziBHr3XXBN1VL9jH+rNskeC87,iv:i7Qurv0oxo1/694SnXMYdAVm6k3z3qABKFYB9BCF7+E=,tag:AEZ91YNXIhLVBvkepTW1Pg==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:ikj0ff/H96xleM0PhLKwLmtV/L5GgK4IQAsXU769qQUpieZdQEfcTAmo4Zm6IVND,iv:PitHCE6IVXHy0JHp1xkkZDvI9QsglK+i9eQ716mo5F0=,tag:L0P73rJJ6C9DvG74tuyORw==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:HowIpooTOWtMOR/uUixES9tHgnqKmvl9LeUwX4pqlYY=,iv:BPL/zF8ac9aWtadSzMM1xGI/t18r/SzTFPWda5nQj4o=,tag:MpULHsvnU5FdtwLbsaqysQ==,type:str]
+sops:
+    age:
+        - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoN2JWU0JwblJFcllaL1hO
+            UGFlanZxRTdtNGVmektpWFFtaUMvc3dUVWlZCkhMTnlxblh1U2VQRlR1Y0Fnb2tF
+            cGRUMDByYzVrclFnVk1VaTRicTltZEkKLS0tIE1oM1ljeU8vVkhMUU9pazBYYUlr
+            ZmxMaGZXTDl3cDB4elc5OHA4ZU9OaGcKBq1Ikzju51qznsSE6iuiNqHHkQv0/KRL
+            AkhFuWMoQZIrBDsUeJcweNM18GWe8hqF+NTWpeWPWAXQ203lg3MV7Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-08-26T10:23:33Z"
+    mac: ENC[AES256_GCM,data:J6f3fwP6HkScwRJJwnaCVPKBoEG69BUrhU00R8oXQQTqPbi3K9BrBtXMc/+R78ENCS28nv3/sLHRfFt1NBjGw0ftD+MF05tDVCEX8Ju3TIdO6e64NaJngS8sRJWI+s7i4A7IHtrbqCL4k02KLGMmj/cP/K9M30uhfDQeF6oplDo=,iv:Lvp9o6Nyu5h/y9gUweoiR/m6+G3/GXwXy07i5jhecYc=,tag:t+evYHXT92APbc89nPyQtg==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0