cluster

commit ba2384943e4d88ea4c76b9d2f2cae6dc05687685
parent 54e75fd5c31afb46c1cd1dcabda17d3e6b6da2bd
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Thu, 10 Jul 2025 16:56:16 +0200

Meow

Diffstat:
M
apps/2024_cluster/kustomization.yaml
 | 
9
+++++----
M
apps/2024_cluster/namespaces/kustomization.yaml
 | 
1
+
A
apps/2024_cluster/namespaces/ntfy.yaml
 | 
4
++++
M
apps/base/envoy-gateway/release.yaml
 | 
12
++++++++++++
A
apps/base/ntfy/kustomization.yaml
 | 
9
+++++++++
A
apps/base/ntfy/ntfy.yml
 | 
9
+++++++++
A
apps/base/ntfy/release.yaml
 | 
76
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

7 files changed, 116 insertions(+), 4 deletions(-)
diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml
@@ -30,8 +30,8 @@ resources:
     - ../base/loki-stack
     - ../base/kubernetes-event-exporter
     - ../base/cachet
-    - ../base/docuseal
-    - ../base/k8up
+    #- ../base/docuseal
+    #- ../base/k8up
     - ../base/bugzilla
     - ../base/gerrit
     - ../base/jenkins
@@ -44,9 +44,9 @@ resources:
     # No arm images for rundeck :|
     #- ../base/rundeck
     - ../base/matrix/networkpolicies
-    - ../base/hubzilla
+    #- ../base/hubzilla
     - ../base/actualbudget-server
-    - ../base/uptime-kuma
+    #- ../base/uptime-kuma
     #- ../base/element_changedetection
     - ../base/xandikos
     - ../base/plane
@@ -57,3 +57,4 @@ resources:
     - ../base/matrix/continuwuity
     - ../base/matrix/connectivity-tester
     - ../base/flagger
+    - ../base/ntfy
diff --git a/apps/2024_cluster/namespaces/kustomization.yaml b/apps/2024_cluster/namespaces/kustomization.yaml
@@ -39,3 +39,4 @@ resources:
     - collabora.yaml
     - continuwuity.yaml
     - flagger.yaml
+    - ntfy.yaml
diff --git a/apps/2024_cluster/namespaces/ntfy.yaml b/apps/2024_cluster/namespaces/ntfy.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+    name: ntfy
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -610,6 +610,18 @@ spec:
             certificateRefs:
                 - kind: Secret
                   name: federationtester.mtrnord.blog-tls
+        - name: https-notify-mtrnord-blog
+          protocol: HTTPS
+          hostname: "notify.mtrnord.blog"
+          port: 443
+          allowedRoutes:
+            namespaces:
+                from: "All"
+          tls:
+            mode: Terminate
+            certificateRefs:
+                - kind: Secret
+                  name: notify.mtrnord.blog-tls
         - name: http
           protocol: HTTP
           port: 80
diff --git a/apps/base/ntfy/kustomization.yaml b/apps/base/ntfy/kustomization.yaml
@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: ntfy
+resources:
+    - release.yaml
+configMapGenerator:
+    - name: ntfy-config
+      files:
+        - ntfy.yml
diff --git a/apps/base/ntfy/ntfy.yml b/apps/base/ntfy/ntfy.yml
@@ -0,0 +1,9 @@
+default-host: "https://notify.mtrnord.blog"
+base-url: "https://notify.mtrnord.blog"
+listen-http: ":8080"
+cache-file: "/var/cache/ntfy/cache.db"
+behind-proxy: true
+attachment-cache-dir: "/var/cache/ntfy/attachments"
+keepalive-interval: "45s"
+auth-file: "/etc/ntfy/user.db"
+auth-default-access: "deny-all"
diff --git a/apps/base/ntfy/release.yaml b/apps/base/ntfy/release.yaml
@@ -0,0 +1,76 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+    name: ntfy
+spec:
+    selector:
+        matchLabels:
+            app: ntfy
+    template:
+        metadata:
+            labels:
+                app: ntfy
+        spec:
+            containers:
+                - name: ntfy
+                  image: binwiederhier/ntfy
+                  args: ["serve"]
+                  env:
+                    - name: TZ
+                      value: "Europe/Berlin"
+                  resources:
+                    limits:
+                        memory: "256Mi"
+                        cpu: "700m"
+                    requests:
+                        memory: "128Mi"
+                        cpu: "500m"
+                  ports:
+                    - containerPort: 8080
+                      name: http
+                  volumeMounts:
+                    - name: ntfy-config
+                      mountPath: /opt/docker/ntfy/config
+                    - name: ntfy-cache
+                      mountPath: /opt/docker/ntfy/cache
+                    - name: ntfy-data
+                      mountPath: /etc/ntfy/
+            volumes:
+                - name: ntfy-config
+                  configMap:
+                    name: ntfy-config
+                - name: ntfy-cache
+                  emptyDir: {}
+                - name: ntfy-data
+                  persistentVolumeClaim:
+                    claimName: ntfy-data
+                    requests:
+                        storage: 200Mi
+---
+apiVersion: v1
+kind: Service
+metadata:
+    name: ntfy-service
+    namespace: ntfy
+spec:
+    selector:
+        app: ntfy
+    ports:
+        - port: 8080
+          targetPort: 8080
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+    name: ntfy
+    namespace: ntfy
+spec:
+    parentRefs:
+        - name: envoy-gateway
+          namespace: envoy-gateway
+    hostnames:
+        - notify.mtrnord.blog
+    rules:
+        - backendRefs:
+            - name: ntfy-service
+              port: 8080