commit 9e4081778ec0ba1ed621e9af5279663445937fb7
parent a42e9688291aebd9e5f5717c4baf3d255e62f06d
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Wed, 5 Nov 2025 22:40:50 +0100
meow
Diffstat:
4 files changed, 148 insertions(+), 131 deletions(-)
diff --git a/apps/talos_cluster/blog/docker/Dockerfile b/apps/talos_cluster/blog/docker/Dockerfile
@@ -56,6 +56,12 @@ COPY php.ini /etc/php/8.4/fpm/php.ini
RUN wget -q https://wordpress.org/latest.zip \
&& unzip -q latest.zip -d /var/www/html/ \
&& rm latest.zip
+
+# Install twenty-twenty-five theme
+RUN wget -q https://downloads.wordpress.org/theme/twentytwentyfive.1.3.zip \
+ && unzip -q -o twentytwentyfive.1.3.zip -d /var/www/html/wordpress/wp-content/themes/ \
+ && rm twentytwentyfive.1.3.zip
+
# Install WP Super Cache plugin
RUN wget -q https://downloads.wordpress.org/plugin/wp-super-cache.3.0.2.zip \
&& unzip -q wp-super-cache.3.0.2.zip -d /var/www/html/wordpress/wp-content/plugins/ \
@@ -118,11 +124,6 @@ RUN wget -q https://downloads.wordpress.org/plugin/simply-gallery-block.3.2.8.zi
&& unzip -q simply-gallery-block.3.2.8.zip -d /var/www/html/wordpress/wp-content/plugins/ \
&& rm simply-gallery-block.3.2.8.zip
-# Install Table of Contents Block
-RUN wget -q https://downloads.wordpress.org/plugin/table-of-content-block.1.0.6.zip \
- && unzip -q table-of-content-block.1.0.6.zip -d /var/www/html/wordpress/wp-content/plugins/ \
- && rm table-of-content-block.1.0.6.zip
-
# Install Plausible Analytics
RUN wget -q https://downloads.wordpress.org/plugin/plausible-analytics.latest-stable.zip \
&& unzip -q plausible-analytics.latest-stable.zip -d /var/www/html/wordpress/wp-content/plugins/ \
@@ -143,15 +144,15 @@ RUN wget -q https://downloads.wordpress.org/plugin/surveyjs.zip \
&& unzip -q surveyjs.zip -d /var/www/html/wordpress/wp-content/plugins/ \
&& rm surveyjs.zip
-# Install twenty-twenty-five theme
-RUN wget -q https://downloads.wordpress.org/theme/twentytwentyfive.1.3.zip \
- && unzip -q -o twentytwentyfive.1.3.zip -d /var/www/html/wordpress/wp-content/themes/ \
- && rm twentytwentyfive.1.3.zip
-
# Install Stop User Enumeration plugin
-RUN wget -q https://downloads.wordpress.org/plugin/stop-user-enumeration.1.7.5.zip \
- && unzip -q stop-user-enumeration.1.7.5.zip -d /var/www/html/wordpress/wp-content/plugins/ \
- && rm stop-user-enumeration.1.7.5.zip
+#RUN wget -q https://downloads.wordpress.org/plugin/stop-user-enumeration.1.7.5.zip \
+# && unzip -q stop-user-enumeration.1.7.5.zip -d /var/www/html/wordpress/wp-content/plugins/ \
+# && rm stop-user-enumeration.1.7.5.zip
+
+# Install Antispam Bee plugin
+RUN wget -q https://downloads.wordpress.org/plugin/antispam-bee.2.11.8.zip \
+ && unzip -q antispam-bee.2.11.8.zip -d /var/www/html/wordpress/wp-content/plugins/ \
+ && rm antispam-bee.2.11.8.zip
# Configure nginx: replace default site and enable wordpress config
RUN rm -f /etc/nginx/sites-enabled/default
diff --git a/apps/talos_cluster/blog/docker/wp-config.php b/apps/talos_cluster/blog/docker/wp-config.php
@@ -69,7 +69,17 @@ if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROT
}
define('WP_HOME', 'https://mtrnord.blog');
define('WP_SITEURL', 'https://mtrnord.blog');
-define( 'DISABLE_WP_CRON', true );
+// define( 'DISABLE_WP_CRON', true );
+define( 'SMTP_USER', 'support@midnightthoughts.space' ); // Benutzername für die SMTP-Authentifizierung
+// Get password from environment variable
+define( 'SMTP_PASS', getenv('SMTP_PASS') ); // Passwort für die SMTP-Authentifizierung
+define( 'SMTP_HOST', 'mail.midnightthoughts.space' ); // Der Hostname des Mailservers
+define( 'SMTP_FROM', 'support@midnightthoughts.space' ); // SMTP Von E-Mail-Adresse
+define( 'SMTP_NAME', 'MTRNords Blog' ); // SMTP Von Name
+define( 'SMTP_PORT', '465' ); // SMTP-Portnummer - wahrscheinlich 25, 465 oder 587
+define( 'SMTP_SECURE', 'ssl' ); // Zu verwendendes Verschlüsselungssystem - ssl oder tls
+define( 'SMTP_AUTH', true ); // SMTP-Authentifizierung verwenden (true|false)
+define( 'SMTP_DEBUG', 0 ); // nur für Debugging-Zwecke auf 1 oder 2 setzen
/* That's all, stop editing! Happy publishing. */
diff --git a/apps/talos_cluster/blog/secret.yaml b/apps/talos_cluster/blog/secret.yaml
@@ -5,18 +5,19 @@ metadata:
namespace: blog
type: Opaque
stringData:
- admin-password: ENC[AES256_GCM,data:OFBtu598Zr4YxVzCwrtwfgC8af1PQdY4MYHuUApPKasT6PyDrNtXSGR/YthIxEkztEEP1l8rMu3YlKWvkUpsfQ==,iv:Ix8MFjlMJag+pydiZdn/+t0eRElKB0/8UarapvimASU=,tag:z6SJrrJewYg/k5mX3QbE1w==,type:str]
- username: ENC[AES256_GCM,data:osSXFIR2Z9/u,iv:98S5QRKFmaidTuMaQv57MvaV5M45dFH8WRsp8YnvTko=,tag:mQWP/10J+wJHczHwwJhm0w==,type:str]
- password: ENC[AES256_GCM,data:nDkfO3bN+7danxzapvBWnW6oHqf22aeuw5eCT6U4dKESBXGCUTgmMu2owKBFyikxQ5EpL+2JTP4mzxNDF+wgoQ==,iv:u8UBCW9wdxuIFMyLj0xIwvsy8JT4ke/QfAxtBQdykZU=,tag:88Obx3EhhHM8fjvuUyZepA==,type:str]
- db-name: ENC[AES256_GCM,data:C+yeYodzZ6es,iv:HCn6EHrFTX7XtrBGvgE1VIbJEBwtaBvdwEU0a6gOI/8=,tag:E8Ihk5c7dhG2QhJqZqyQYg==,type:str]
- auth-key: ENC[AES256_GCM,data:tvkNBJhoR7bWZwz+QDFqE5neSTcf9a5h3CaOVMLUaLCFe01JEQGyVORmGklTS2gIoHP6IUixIZosvs0TSdqdpA==,iv:w/ThI+4qZ4zp7/H50dYwxCenGeqfXWahNGZemh6y/Ps=,tag:oSgbC6Gm68WUs7OHsM7lOw==,type:str]
- secure-auth-key: ENC[AES256_GCM,data:Lm89P7q2G5RiTRpndTing9MkgtRB97lEcxu18FLVNU/JYLgbcjKxC8MaxsIaOuKk6Me6WQ7+e8+YIsyQypEM2Q==,iv:wOpwJzGWRUyNqHUhmejjG45EvPY6thNyMdIOZ1f2qt4=,tag:rAqdDGwBJ3dwOrfF3htzNg==,type:str]
- logged-in-key: ENC[AES256_GCM,data:kNfe0nzm9HYMzOQe+3tO86VMvUkJL9YTNPFGCF6mwDVETvhpBt0pTNKxeNh0EZRoJ5aJs2jjtDnB7lX/k79f+Q==,iv:/IIwJZTv87xPTronxncejb5JkWix2KrdyXQ0dRxppuY=,tag:kykNkFC5kqu70JsWdjwJKw==,type:str]
- nonce-key: ENC[AES256_GCM,data:io3hOPnHdezQ8wU8zj9bxN8CH/YW7TsUzc1yP3eKzXMRDF6AbuUPYXcfMiVSZllnn2Va9+E4SFnYNpeD2fk/QQ==,iv:mLdmm3IuuczvTW1u2NW702cKSDJRJhn8I9mooXE28Ic=,tag:sytIMf9nJah++HJPL1P5hQ==,type:str]
- auth-salt: ENC[AES256_GCM,data:0c/ojtleliT1f8xdyc7ZeKxiAnCMJ2YPYyV8j/LG3OqXxIJn9HIDbHNIpWaanH01DazpoRY3D/IRIrr6JbVz8w==,iv:swni5ViZfLxESGcZFlxxsScswzulEJI0qgGabNLizXs=,tag:FKH3LU26AyZzDI/2q9O9UQ==,type:str]
- secure-auth-salt: ENC[AES256_GCM,data:htOSIGpq1DewBbhkRZ+3BaL4EOlgP5Ugr3fhwLQ0FEsR7xpMyJyrg06xItjcYBr5R7jRIvtoVG0aBxjwe4e3pg==,iv:uPGfw8KxHB9mI+GQBd3iHMT4oDBSiPO8EEaKfXCJqow=,tag:x1+RW/jYzwHCps4SUUFibA==,type:str]
- logged-in-salt: ENC[AES256_GCM,data:wvkB1qHGfp+z/p3D/ACojhPomVGfX/1P8tMv29NQ37spgQucyKFGf5672TjZk7k4uDYWHX2pk1MOPNsJZDCgpw==,iv:1McAWKdBpjO7oynL64I/k9jTtFBfqgIqDJV25Nf1uAk=,tag:9hLvNckxo6KL1wa23YTvQQ==,type:str]
- nonce-salt: ENC[AES256_GCM,data:TkQTqLNoGVWp8RY4l1pG2bTV9nw5CaZ6I1vlisx8m0NbZ1wfNON6356PTYSpHNtUfHOnFrW5dAFup6Xnx2nD/w==,iv:tvrbHZOlxq5ZB7/AjVUsRuAWmHYki+eF7KxFXNOX1Ks=,tag:U5aLdTkBjQMK85MochETjg==,type:str]
+ admin-password: ENC[AES256_GCM,data:+7gDhoQ8omW3uYyHtQ7OzolUd3OuKAMKP8KT2vgOfiqQBHFl6TlWy8TlIXSW6UrAeFXSnK7EHtzbpQ7cAzJbNw==,iv:74JkoMYa4gjRdWMXhuhOcAICdlh0NaT1PaSLcbMJsdk=,tag:dzjtK9EotTx3cLdM7t3m7A==,type:str]
+ username: ENC[AES256_GCM,data:a7Gu2SbhyvCQ,iv:/F0J26ixh46bAOnzOvZAKbGWdDnZ6dHv5k8efyAWKOg=,tag:hBxkMoD1MEf3HqO8UbUfyg==,type:str]
+ password: ENC[AES256_GCM,data:STcNnNigeCIOxSfy0Wh7ce6k/5IzJDPtTmhzWj5IPB453afQsycTdSOuxa5D0fDVXfEcpDKLfxeJ/SMsivXx1A==,iv:OZlwkVWJl0E2JNn/ESFsmvaALTEd4R6ANkLybjqppiA=,tag:hEQANhkNbYLfSt/du5Eyrg==,type:str]
+ db-name: ENC[AES256_GCM,data:U7RHP7bJP0Aq,iv:lTNWm2jetHMfHKXsxdH67IdTG4YoqvvPoys4i0cNZdc=,tag:Tw7fsMSWkXpPDlP6aoM0wA==,type:str]
+ auth-key: ENC[AES256_GCM,data:d7oyUUSgS5FlOJr7JXoOfUTFt8kiTjFNShnhqi7CK/Ey4DI67f1nzWTJPGXoBlfAaiflrlhIzAhEVrflsxd6uA==,iv:UTKzK+zcOrlQHG8Gon8O9OcIMQZMUO7WNVh+fOS1so0=,tag:FDqPExcjyXb6GVqOzGTtvg==,type:str]
+ secure-auth-key: ENC[AES256_GCM,data:YZSIF4/52nAzfhmVEYjs9cmD3DrggP8CciyjJ8KgO0Y/hMkulTXQjo4VK99kAK83U0zBdUm5tmFT9crQxjNOvg==,iv:seAKKjU1FwfxBtJCeCCLLZMMTCsjIftghiWD8jC/o1A=,tag:Hk1sHz4BQ3KjtAB50zTb1Q==,type:str]
+ logged-in-key: ENC[AES256_GCM,data:Es12e73vpkMOPl/lPIeCsRWxAWjY6d8Nea49gJn7LUizO/wxS9ucGiPydvMpfN4WRzvOiJqB9/bZua/W8fk2mg==,iv:pBw2KpW0MA9AW9myXCvJTRC7imFHO/5oQ+RDUgEt8G8=,tag:GRxdOnZKZjE7zyu65T5DRw==,type:str]
+ nonce-key: ENC[AES256_GCM,data:9CcYJ3B1MvIKtI9kOeBRvejm8EU2OB7mWL8DPZSh0T9wkwd0QdBpOFT44DoJIs3U8Hy//04x/OGH6X+J16Pb9w==,iv:USPMst9Oq5Dx5ZC7hfpc99W9VwtbVKRbyAMXJpJu/zw=,tag:dod6/91bvGnShbcFPGqW1w==,type:str]
+ auth-salt: ENC[AES256_GCM,data:lLB9oSiIBPuw4AsLygTn19U8mzRa7emSTSWwRmGx1Eayq7g/gItoibrzEaqnXpxXAmUSzHWIc5DzHQo54yA19w==,iv:a5LprTctcwEtGGmSlZ2Fa1MGYac6csEEZza/hOW+mk8=,tag:DHdZVIASOnck7u7TQ4mgGg==,type:str]
+ secure-auth-salt: ENC[AES256_GCM,data:9JLzUnxzGEw0HX7VmN+XVhDRyUZ9YtenbSulhZ7uLTolL34OkuaCigU1MF62vuSzuJfErFBk+AjQWCg3Nr7I6A==,iv:8vvNCCTxHVq+mZLNK7Y+K6HzULiTZArSVp5tDuawmLQ=,tag:0Zz3spBU/t0s0IrvLzh+Ow==,type:str]
+ logged-in-salt: ENC[AES256_GCM,data:5eFND0DOPGmi4VCC+aTmaGPZ3etYePZqp24NnnG8RxRFq9UkyBSlcsethj54CTDcRHKvlw4Laxuz9qaK5vfLgQ==,iv:k/OC1vbL4DFRgzk6YzH3/78D92PTvx3qMyNeaUJKke8=,tag:8XPp3cxqPbYlYV5BS+FhQw==,type:str]
+ nonce-salt: ENC[AES256_GCM,data:yw31KdZLxswii6zWzJfZtwcbO6hvRol9LpEzzM9qT/HKLsfliy5ppoz4f+AEv5bNapR1Vn9eP5OW5OpvB/UTgA==,iv:p6QJLTUyAot0K2GF+OruAWPrTn78opWcCsV9Jmpb4ls=,tag:GYQxd90EGfTvKB9qwt9xZQ==,type:str]
+ smtp-pass: ENC[AES256_GCM,data:RZg+f9xvGvbg9YiQ/35vHubqmvgnDoHP216enupjR29Lv8XDKtDb/pAG/IFEsk1AN4GJCUAUPNVABMOkyOfhLg==,iv:eGBHa7hCZ5yzE3S/CUR24ZFtyABDiHRdpxrDm5xgt9A=,tag:Ahf9Lec8RoUU+QH7A9eylQ==,type:str]
sops:
kms: []
gcp_kms: []
@@ -26,14 +27,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3b1llNW1YWHhITDdpU2pu
- UkFDREVqa3JNcm1SdDRqbUoxSDhZVEFCakZJCm85T2pVcHBUWHR1NlVGR2t6Wk5F
- aE1rSCtZSWJUdXNyelRvSXpsRmJ5ZWMKLS0tIDNHZkVTem51eXBnTFR6bmg3UkRa
- cGJSTnk1VGhPc251N1htejNJRW5JTzQKZIzM/fCybg0ce4Uq+hYc2aVkR5ph5R5d
- QXxnje8jOAXEBuRjfkcLmZidT79SbAQ95jOCtIhyuOtuuTatnVL67Q==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDSm9aYUxSSi9Ra1pZSGln
+ S1A4Z2QzczR0ZTF4bVdUbUN3cHZ0M1BjSm40CndJK3JIUG5HZThoUGJWRnp3akNh
+ ZDJuK2hqSjBZOUJxU0lpUXk5QXkrZVUKLS0tIFBNM3FBNThidGJtOGhDS3ZheGdr
+ UW1ERisxRTd0MWtHbjR2eFZJMUprVHMKFWfNIpocTO9c4fQ/KrLSEQMZrK0aVR71
+ Zv1abIEQOyxiRyczlUHB/sHj9ALOc+nKrllxOs94fEg94jiiOmfAJg==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-10-14T19:03:16Z"
- mac: ENC[AES256_GCM,data:8towatoEjsveUKmdRzRtpE5yFAiEsmo7zCkJKHHqGJOQhnC3Mjcd9vGUxarT3uJGNSO4v/Meqp/yweg/YLjYz08XCg6AiLpSI/SAUnrt8rOmVRLSyzTMls28VXmvSskeNz9IZV79UI3vMxl9Y5fLTDiNn0viTltUjdSOasGqDS8=,iv:bUJoWzbVxutu6sx592/+WqXcbcO4M6ViLk8bENjlxWI=,tag:0wvpbWCJMmq+RI47woHefQ==,type:str]
+ lastmodified: "2025-11-05T21:35:14Z"
+ mac: ENC[AES256_GCM,data:4e+HkiR8BAeEgtJz2rSgGDdvtw9DfdHkIvybybhtZgGAa7bMWA0mwQzzlecU/s84g2X7ZwXh+kTARkP5N368/X4IkNh6k6h3ntv2ZsFqGFMNbnvpyMX3jvZL6cc/Xc8PvBGYgh92S8IhoSxWjpcbqKdasVngDQIpZ2KXEcx92Fk=,iv:CdRRGsSST3+C1Ckkz/U13BQFpBoOatzAXfuhUMwtf9Y=,tag:8Awdygw+65lSqu1K+Tqwfg==,type:str]
pgp: []
- encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/apps/talos_cluster/blog/wordpress.yaml b/apps/talos_cluster/blog/wordpress.yaml
@@ -32,107 +32,112 @@ spec:
- name: wordpress
image: ghcr.io/mtrnord/blog:latest
env:
- - name: DB_HOST
- value: mysql-service.blog.svc.cluster.local
- - name: DB_USER
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: username
- - name: DB_PASSWORD
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: password
- - name: DB_NAME
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: db-name
- - name: AUTH_KEY
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: auth-key
- - name: SECURE_AUTH_KEY
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: secure-auth-key
- - name: LOGGED_IN_KEY
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: logged-in-key
- - name: NONCE_KEY
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: nonce-key
- - name: AUTH_SALT
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: auth-salt
- - name: SECURE_AUTH_SALT
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: secure-auth-salt
- - name: LOGGED_IN_SALT
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: logged-in-salt
- - name: NONCE_SALT
- valueFrom:
- secretKeyRef:
- name: mysql-cred
- key: nonce-salt
+ - name: DB_HOST
+ value: mysql-service.blog.svc.cluster.local
+ - name: DB_USER
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: username
+ - name: DB_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: password
+ - name: DB_NAME
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: db-name
+ - name: AUTH_KEY
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: auth-key
+ - name: SECURE_AUTH_KEY
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: secure-auth-key
+ - name: LOGGED_IN_KEY
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: logged-in-key
+ - name: NONCE_KEY
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: nonce-key
+ - name: AUTH_SALT
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: auth-salt
+ - name: SECURE_AUTH_SALT
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: secure-auth-salt
+ - name: LOGGED_IN_SALT
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: logged-in-salt
+ - name: NONCE_SALT
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: nonce-salt
+ - name: SMTP_PASS
+ valueFrom:
+ secretKeyRef:
+ name: mysql-cred
+ key: smtp-pass
ports:
- - containerPort: 8080
- name: wordpress
+ - containerPort: 8080
+ name: wordpress
resources:
- requests:
- memory: "256Mi"
- cpu: "100m"
- limits:
- memory: "2048Mi"
- cpu: "2000m"
+ requests:
+ memory: "256Mi"
+ cpu: "100m"
+ limits:
+ memory: "2048Mi"
+ cpu: "2000m"
volumeMounts:
- - name: wordpress-persistent-storage
- mountPath: /var/www/html/wordpress/wp-content/uploads
- subPath: uploads
- #- name: wordpress-persistent-storage
- # mountPath: /var/www/html/wordpress/wp-content/plugins
- # subPath: plugins
- #- name: wordpress-persistent-storage
- # mountPath: /var/www/html/wordpress/wp-content/themes
- # subPath: themes
+ - name: wordpress-persistent-storage
+ mountPath: /var/www/html/wordpress/wp-content/uploads
+ subPath: uploads
+ #- name: wordpress-persistent-storage
+ # mountPath: /var/www/html/wordpress/wp-content/plugins
+ # subPath: plugins
+ #- name: wordpress-persistent-storage
+ # mountPath: /var/www/html/wordpress/wp-content/themes
+ # subPath: themes
readinessProbe:
- httpGet:
- path: /wp-login.php
- port: 8080
- scheme: "HTTP"
- initialDelaySeconds: 30
- periodSeconds: 10
- timeoutSeconds: 15
- successThreshold: 1
- failureThreshold: 3
+ httpGet:
+ path: /wp-login.php
+ port: 8080
+ scheme: "HTTP"
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ timeoutSeconds: 15
+ successThreshold: 1
+ failureThreshold: 3
livenessProbe:
- httpGet:
- path: /wp-login.php
- port: 8080
- scheme: "HTTP"
- initialDelaySeconds: 60
- periodSeconds: 10
- timeoutSeconds: 15
- successThreshold: 1
- failureThreshold: 3
+ httpGet:
+ path: /wp-login.php
+ port: 8080
+ scheme: "HTTP"
+ initialDelaySeconds: 60
+ periodSeconds: 10
+ timeoutSeconds: 15
+ successThreshold: 1
+ failureThreshold: 3
volumes:
- name: wordpress-persistent-storage
persistentVolumeClaim:
- claimName: wordpress-pvc
+ claimName: wordpress-pvc
---
kind: Service
apiVersion: v1
@@ -162,8 +167,8 @@ spec:
- mtrnord.blog
rules:
- backendRefs:
- - name: wordpress-service
- port: 8080
+ - name: wordpress-service
+ port: 8080
timeouts:
- request: 240s
- backendRequest: 0s
+ request: 240s
+ backendRequest: 0s
