dotconfig/pods: add

dotconfig/pods/luc/luc-pod.yml

@@ -0,0 +1,134 @@
+apiversion: v1
+kind: Pod
+metadata:
+  name: luc-pod
+  annotations:
+    io.podman.annotations.infra.name: luc-pod-infra
+spec:
+  containers:
+#  - name: root
+#   image: 
+#   env:
+#   - name: PORT
+#     value: 3000
+#    ports:
+#    - containerport: 3000
+#      hostport: 
+#      protocol: TCP
+#   volumemounts:
+#   - name: localtime
+#     mountpath: /etc/localtime
+#     readonly: true
+
+  - name: git
+    image: codeberg.org/forgejo/forgejo:9
+    env:
+    - name: USER_UID
+      value: "1000"
+    - name: USER_GID
+      value: "1000"
+    - name: FORGEJO__database__DB_TYPE
+      value: "postgres"
+    - name: FORGEJO__database__HOST
+      value: "luc-pod-postgres"
+    - name: FORGEJO__database__USER
+      value: "postgres"
+    - name: FORGEJO__database__PASSWD
+      valuefrom:
+        secretkeyref:
+          name: luc-secrets
+          key: postgres-password
+    - name: FORGEJO__database__NAME
+      value: "forgejo"
+    ports: 
+    - containerport: 3100
+      hostport: 
+      protocol: TCP
+    volumemounts:
+    - name: git-data
+      mountpath: /data
+    - name: localtime
+      mountpath: /etc/localtime
+      readonly: true
+
+  - name: tailscale
+    image: ghcr.io/tailscale/tailscale:latest
+    env:
+    - name: TS_HOSTNAME
+      value: "luc-pod"
+    - name: TS_AUTHKEY
+      value: ""
+    - name: TS_STATE_DIR
+      value: "/var/lib/tailscale"
+    - name: TS_EXTRA_ARGS
+      value: "--login-server="
+    volumemounts:
+    - name: tailscale-lib
+      mountpath: /var/lib/tailscale
+    - name: localtime
+      mountpath: /etc/localtime
+      readonly: true
+
+#  - name: wiki
+#    image: git.ampel.dev/git-mkdocs:latest
+#    env: 
+#    - name: GIT_REPO_URL
+#      value: ""
+#    - name: PORT
+#      value: 3200
+#    ports:
+#    - containerport: 3200
+#      hostport: 
+#      protocol: TCP
+#    volumemounts:
+#    - name: localtime
+#      mountpath: /etc/localtime
+#      readonly: true
+
+#  - name: blog
+#    ports:
+#    - containerport: 3300
+#      hostport: 
+#      protocol: TCP
+
+#  - name: notes
+#    ports:
+#    - containerport: 3400
+#      hostport: 
+#      protocol: TCP
+
+  - name: postgres
+    image: docker.io/library/postgres:16-alpine
+    env:
+    - name: POSTGRES_PASSWORD
+      valuefrom:
+        secretkeyref:
+          name: luc-secrets
+          key: postgres-password
+    volumemounts:
+    - name: postgres-dump
+      mountpath: /dump
+    - name: postgres-data
+      mountpath: /var/lib/postgresql/data
+    - name: localtime
+      mountpath: /etc/localtime
+      readonly: true
+
+  volumes:
+  - name: git-data
+    persistentvolumeclaim: 
+      claimname: luc-pod-git-data
+  - name: tailscale-lib
+    persistentvolumeclaim:
+      claimname: luc-pod-tailscale-lib
+  - name: postgres-dump
+    hostpath:
+      path: $HOME/.dump/luc
+      type: Directory
+  - name: postgres-data
+    persistentvolumeclaim:
+      claimname: luc-pod-postgres-data
+  - name: localtime
+    hostpath:
+      path: /etc/localtime
+      type: File

dotconfig/pods/luc/luc-secrets.yml

@@ -0,0 +1,7 @@
+apiversion: v1
+data:
+  postgres-password:
+kind: Secret
+metadata:
+  creationtimestamp: null
+  name: luc-secrets