From 6a485dcc7065f048172e89e405068e6a5c1479b7 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Wed, 13 Jul 2022 22:07:12 +0200
Subject: add apps/pigallery2

---
 roles/apps/pigallery2/templates/pod-spec.yml.j2 | 47 +++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 roles/apps/pigallery2/templates/pod-spec.yml.j2

(limited to 'roles/apps/pigallery2/templates/pod-spec.yml.j2')

diff --git a/roles/apps/pigallery2/templates/pod-spec.yml.j2 b/roles/apps/pigallery2/templates/pod-spec.yml.j2
new file mode 100644
index 00000000..e0921b3b
--- /dev/null
+++ b/roles/apps/pigallery2/templates/pod-spec.yml.j2
@@ -0,0 +1,47 @@
+securityContext:
+  allowPrivilegeEscalation: false
+containers:
+- name: pigallery2
+  image: "bpatrik/pigallery2:{{ item.value.version }}"
+  securityContext:
+    runAsUser: {{ pigallery2_app_uid }}
+    runAsGroup: {{ pigallery2_app_gid }}
+  resources:
+    limits:
+      memory: "1Gi"
+  volumeMounts:
+  - name: config
+    mountPath: /app/data/config
+  - name: db
+    mountPath: /app/data/db
+  - name: tmp
+    mountPath: /app/data/tmp
+  - name: images
+    mountPath: /app/data/images
+    readOnly: true
+  env:
+  - name: PORT
+    value: "{{ item.value.port }}"
+  - name: NODE_ENV
+    value: production
+  ports:
+  - containerPort: {{ item.value.port }}
+    hostPort: {{ item.value.port }}
+    hostIP: 127.0.0.1
+volumes:
+- name: config
+  hostPath:
+    path: "{{ pigallery2_base_path }}/{{ item.key }}/config/"
+    type: Directory
+- name: db
+  hostPath:
+    path: "{{ pigallery2_base_path }}/{{ item.key }}/db/"
+    type: Directory
+- name: tmp
+  hostPath:
+    path: "{{ pigallery2_base_path }}/{{ item.key }}/tmp/"
+    type: Directory
+- name: images
+  hostPath:
+    path: "{{ item.value.images_path }}"
+    type: Directory
-- 
cgit v1.2.3