Updated repository to the new configuration.
This commit is contained in:
parent
25dde6a119
commit
1945f193ea
31 changed files with 766 additions and 866 deletions
60
pods/bitwarden/bitwarden-pod.yml
Normal file
60
pods/bitwarden/bitwarden-pod.yml
Normal file
|
@ -0,0 +1,60 @@
|
|||
apiversion: v1
|
||||
kind: Pod
|
||||
metadata:
|
||||
name: bitwarden-pod
|
||||
annotations:
|
||||
io.podman.annotations.infra.name: bitwarden-pod-infra
|
||||
spec:
|
||||
containers:
|
||||
- name: vaultwarden
|
||||
image: docker.io/vaultwarden/server:alpine
|
||||
env:
|
||||
- name: SIGNUPS_ALLOWED
|
||||
value: false
|
||||
- name: DATABASE_URL
|
||||
value: "postgresql://postgres:<secret>@bitwarden-pod-postgres/vaultwarden"
|
||||
- name: ROCKET_PORT
|
||||
value: 3000
|
||||
ports:
|
||||
- containerport: 3000
|
||||
hostport: 1080
|
||||
protocol: TCP
|
||||
volumemounts:
|
||||
- mountpath: /data
|
||||
name: vaultwarden-data
|
||||
- mountpath: /etc/localtime
|
||||
name: localtime
|
||||
readonly: true
|
||||
|
||||
- name: postgres
|
||||
image: docker.io/library/postgres:16-alpine
|
||||
env:
|
||||
- name: POSTGRES_PASSWORD
|
||||
valuefrom:
|
||||
secretkeyref:
|
||||
name: bitwarden-secrets
|
||||
key: postgres-password
|
||||
volumemounts:
|
||||
- mountpath: /dump
|
||||
name: postgres-dump
|
||||
- mountpath: /var/lib/postgresql/data
|
||||
name: postgres-data
|
||||
- mountpath: /etc/localtime
|
||||
name: localtime
|
||||
readonly: true
|
||||
|
||||
volumes:
|
||||
- persistentvolumeclaim:
|
||||
claimname: bitwarden-pod-vaultwarden-data
|
||||
name: vaultwarden-data
|
||||
- hostpath:
|
||||
path: <home>/.dump/bitwarden
|
||||
type: Directory
|
||||
name: postgres-dump
|
||||
- persistentvolumeclaim:
|
||||
claimname: bitwarden-pod-postgres-data
|
||||
name: postgres-data
|
||||
- hostPath:
|
||||
path: /etc/localtime
|
||||
type: File
|
||||
name: localtime
|
8
pods/bitwarden/bitwarden-secrets.yml
Normal file
8
pods/bitwarden/bitwarden-secrets.yml
Normal file
|
@ -0,0 +1,8 @@
|
|||
apiversion: v1
|
||||
data:
|
||||
postgres-password: <base64-secret>
|
||||
postgres-url: <base64-secret>
|
||||
kind: Secret
|
||||
metadata:
|
||||
creationtimestamp: null
|
||||
name: bitwarden-secrets
|
Loading…
Add table
Add a link
Reference in a new issue