cluster

commit cff190d1f23888428ca3618f970fd945f9811443
parent 73e4b83a07b83f5e299df36f04b674452ba50f85
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Thu, 19 Feb 2026 11:10:55 +0100

try to make peertube and bookwyrm work

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/bookwyrm/deployment.yaml
 | 
2
+-
M
apps/talos_cluster/peertube/deployment.yaml
 | 
9
+++++++++

2 files changed, 10 insertions(+), 1 deletion(-)
diff --git a/apps/talos_cluster/bookwyrm/deployment.yaml b/apps/talos_cluster/bookwyrm/deployment.yaml
@@ -191,7 +191,7 @@ spec:
           image: nginxinc/nginx-unprivileged:1.27-alpine
           securityContext:
             allowPrivilegeEscalation: false
-            readOnlyRootFilesystem: true
+            readOnlyRootFilesystem: false  # envsubst template processing writes to /etc/nginx/conf.d/
             runAsNonRoot: true
             runAsUser: 101
             runAsGroup: 101
diff --git a/apps/talos_cluster/peertube/deployment.yaml b/apps/talos_cluster/peertube/deployment.yaml
@@ -122,6 +122,10 @@ spec:
               readOnly: true
             - name: nginx-tmp
               mountPath: /tmp
+            - name: nginx-log
+              mountPath: /var/log/nginx
+            - name: nginx-cache
+              mountPath: /var/cache/nginx
           resources:
             requests:
               memory: "128Mi"
@@ -334,6 +338,11 @@ spec:
             name: peertube-nginx
         - name: nginx-tmp
           emptyDir: {}
+        - name: nginx-log
+          emptyDir: {}
+        - name: nginx-cache
+          emptyDir:
+            sizeLimit: 11Gi
 ---
 apiVersion: v1
 kind: Service