mirror of
https://github.com/Alkatrazz24/Funk-lab.git
synced 2026-07-08 23:24:43 +02:00
ALI YESILKAYA
224c06041e
- k8s/apps/forgejo : deployment (image forgejo:11, config par env), service, PVC nfs, IngressRoute interne (git.lab.local) + publique (git.funklab.online + middlewares security-headers/ratelimit), Application ArgoCD (ns ai, recurse) - base PostgreSQL `forgejo` sur storage-01 (rôle postgresql) - vault : vault_pg_forgejo_password + vault_forgejo_oauth_client_secret - doc admin/k8s/forgejo.md (archi, OIDC, création du miroir, pièges) + index + CLAUDE.md GitHub reste la source de vérité (pull-mirror lecture seule) — ArgoCD inchangé. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
51 lines
1.5 KiB
YAML
51 lines
1.5 KiB
YAML
---
|
|
postgresql_version: 16
|
|
postgresql_port: 5432
|
|
postgresql_data_dir: /srv/data/postgres
|
|
|
|
# Écoute sur localhost + LAN cluster (pour les services k8s futurs)
|
|
postgresql_listen_addresses: "localhost, 192.168.10.1"
|
|
|
|
postgresql_max_connections: 100
|
|
postgresql_shared_buffers: "256MB"
|
|
|
|
# Bases et utilisateurs à créer
|
|
# Mots de passe dans le vault : vault_pg_hermes_password, vault_pg_litellm_password,
|
|
# vault_pg_openwebui_password, vault_pg_n8n_password,
|
|
# vault_pg_ghostfolio_password, vault_pg_authentik_password,
|
|
# vault_pg_guacamole_password, vault_pg_forgejo_password
|
|
postgresql_databases:
|
|
- name: hermes
|
|
- name: litellm
|
|
- name: openwebui
|
|
- name: n8n
|
|
- name: ghostfolio
|
|
- name: authentik
|
|
- name: guacamole
|
|
- name: forgejo
|
|
|
|
postgresql_users:
|
|
- name: hermes
|
|
password: "{{ vault_pg_hermes_password }}"
|
|
db: hermes
|
|
- name: litellm
|
|
password: "{{ vault_pg_litellm_password }}"
|
|
db: litellm
|
|
- name: openwebui
|
|
password: "{{ vault_pg_openwebui_password }}"
|
|
db: openwebui
|
|
- name: n8n
|
|
password: "{{ vault_pg_n8n_password }}"
|
|
db: n8n
|
|
- name: ghostfolio
|
|
password: "{{ vault_pg_ghostfolio_password }}"
|
|
db: ghostfolio
|
|
- name: authentik
|
|
password: "{{ vault_pg_authentik_password }}"
|
|
db: authentik
|
|
- name: guacamole
|
|
password: "{{ vault_pg_guacamole_password }}"
|
|
db: guacamole
|
|
- name: forgejo
|
|
password: "{{ vault_pg_forgejo_password }}"
|
|
db: forgejo
|