The code and data behind xeiaso.net
fix(k8s/xesite): disable Anubis for now
Signed-off-by: Xe Iaso <me@xeiaso.net>
+120
-118
+1
-1
manifest/xesite/1password.yaml
+1
-1
manifest/xesite/1password.yaml
+96
-94
manifest/xesite/deployment.yaml
+96
-94
manifest/xesite/deployment.yaml
···
12
12
app.kubernetes.io/name: xesite
13
13
spec:
14
14
volumes:
15
-
- name: cache
16
-
persistentVolumeClaim:
17
-
claimName: xesite-cache
18
-
- name: data
19
-
emptyDir: {}
20
-
- name: anubis
21
-
configMap:
22
-
name: anubis-cfg
15
+
- name: cache
16
+
persistentVolumeClaim:
17
+
claimName: xesite-cache
18
+
- name: data
19
+
emptyDir: {}
20
+
- name: anubis
21
+
configMap:
22
+
name: anubis-cfg
23
23
containers:
24
-
- name: web
25
-
image: ghcr.io/xe/site/bin:latest
26
-
imagePullPolicy: Always
27
-
env:
28
-
- name: "BIND"
29
-
value: ":3000"
30
-
- name: "INTERNAL_API_BIND"
31
-
value: ":3001"
32
-
- name: "DATA_DIR"
33
-
value: "/xe/data"
34
-
- name: "SITE_URL"
35
-
value: "https://xeiaso.net"
36
-
- name: "ONION_DOMAIN"
37
-
value: "gi3bsuc5ci2dr4xbh5b3kja5c6p5zk226ymgszzx7ngmjpc25tmnhaqd.onion"
38
-
- name: "REDIRECT_DOMAIN"
39
-
value: "xeiaso.net"
40
-
- name: "PATREON_SAASPROXY_URL"
41
-
value: "http://xesite-patreon-saasproxy.default.svc"
42
-
envFrom:
43
-
- secretRef:
44
-
name: xesite
45
-
ports:
46
-
- containerPort: 3000
47
-
name: http
48
-
volumeMounts:
49
-
- mountPath: "/xe/data"
50
-
name: data
51
-
#- mountPath: "/root/.cache"
52
-
# name: cache
53
-
readinessProbe:
54
-
httpGet:
55
-
path: /healthz
56
-
port: 3001
57
-
httpHeaders:
58
-
- name: X-Kubernetes
59
-
value: "Is alright, I guess"
60
-
initialDelaySeconds: 60
61
-
periodSeconds: 5
62
-
failureThreshold: 69
63
-
livenessProbe:
64
-
httpGet:
65
-
path: /healthz
66
-
port: 3001
67
-
httpHeaders:
68
-
- name: X-Kubernetes
69
-
value: "Is alright, I guess"
70
-
initialDelaySeconds: 30
71
-
periodSeconds: 30
72
-
- name: anubis
73
-
image: ghcr.io/techarohq/anubis:latest
74
-
imagePullPolicy: Always
75
-
env:
76
-
- name: "BIND"
77
-
value: ":8081"
78
-
- name: "DIFFICULTY"
79
-
value: "4"
80
-
- name: "METRICS_BIND"
81
-
value: ":9090"
82
-
- name: "POLICY_FNAME"
83
-
value: "/xe/cfg/anubis/botPolicies.yaml"
84
-
- name: "SERVE_ROBOTS_TXT"
85
-
value: "false"
86
-
- name: "TARGET"
87
-
value: "http://localhost:3000"
88
-
# - name: "SLOG_LEVEL"
89
-
# value: "debug"
90
-
volumeMounts:
91
-
- name: anubis
92
-
mountPath: /xe/cfg/anubis
93
-
resources:
94
-
limits:
95
-
cpu: 500m
96
-
memory: 128Mi
97
-
requests:
98
-
cpu: 250m
99
-
memory: 128Mi
100
-
securityContext:
101
-
runAsUser: 1000
102
-
runAsGroup: 1000
103
-
runAsNonRoot: true
104
-
allowPrivilegeEscalation: false
105
-
capabilities:
106
-
drop:
107
-
- ALL
108
-
seccompProfile:
109
-
type: RuntimeDefault
24
+
- name: web
25
+
image: ghcr.io/xe/site/bin:latest
26
+
imagePullPolicy: Always
27
+
env:
28
+
- name: "BIND"
29
+
value: ":3000"
30
+
- name: "INTERNAL_API_BIND"
31
+
value: ":3001"
32
+
- name: "DATA_DIR"
33
+
value: "/xe/data"
34
+
- name: "SITE_URL"
35
+
value: "https://xeiaso.net"
36
+
- name: "ONION_DOMAIN"
37
+
value: "gi3bsuc5ci2dr4xbh5b3kja5c6p5zk226ymgszzx7ngmjpc25tmnhaqd.onion"
38
+
- name: "REDIRECT_DOMAIN"
39
+
value: "xeiaso.net"
40
+
- name: "PATREON_SAASPROXY_URL"
41
+
value: "http://xesite-patreon-saasproxy.default.svc"
42
+
envFrom:
43
+
- secretRef:
44
+
name: xesite
45
+
ports:
46
+
- containerPort: 3000
47
+
name: http
48
+
volumeMounts:
49
+
- mountPath: "/xe/data"
50
+
name: data
51
+
#- mountPath: "/root/.cache"
52
+
# name: cache
53
+
readinessProbe:
54
+
httpGet:
55
+
path: /healthz
56
+
port: 3001
57
+
httpHeaders:
58
+
- name: X-Kubernetes
59
+
value: "Is alright, I guess"
60
+
initialDelaySeconds: 60
61
+
periodSeconds: 5
62
+
failureThreshold: 69
63
+
livenessProbe:
64
+
httpGet:
65
+
path: /healthz
66
+
port: 3001
67
+
httpHeaders:
68
+
- name: X-Kubernetes
69
+
value: "Is alright, I guess"
70
+
initialDelaySeconds: 30
71
+
periodSeconds: 30
72
+
- name: anubis
73
+
image: ghcr.io/techarohq/anubis:latest
74
+
imagePullPolicy: Always
75
+
env:
76
+
- name: "BIND"
77
+
value: ":8081"
78
+
- name: "DIFFICULTY"
79
+
value: "4"
80
+
- name: "METRICS_BIND"
81
+
value: ":9090"
82
+
- name: "OG_PASSTHROUGH"
83
+
value: "true"
84
+
- name: "POLICY_FNAME"
85
+
value: "/xe/cfg/anubis/botPolicies.yaml"
86
+
- name: "SERVE_ROBOTS_TXT"
87
+
value: "false"
88
+
- name: "TARGET"
89
+
value: "http://localhost:3000"
90
+
# - name: "SLOG_LEVEL"
91
+
# value: "debug"
92
+
volumeMounts:
93
+
- name: anubis
94
+
mountPath: /xe/cfg/anubis
95
+
resources:
96
+
limits:
97
+
cpu: 500m
98
+
memory: 128Mi
99
+
requests:
100
+
cpu: 250m
101
+
memory: 128Mi
102
+
securityContext:
103
+
runAsUser: 1000
104
+
runAsGroup: 1000
105
+
runAsNonRoot: true
106
+
allowPrivilegeEscalation: false
107
+
capabilities:
108
+
drop:
109
+
- ALL
110
+
seccompProfile:
111
+
type: RuntimeDefault
+1
-1
manifest/xesite/ingress.yaml
+1
-1
manifest/xesite/ingress.yaml
+1
-1
manifest/xesite/kustomization.yaml
+1
-1
manifest/xesite/kustomization.yaml
+1
-1
manifest/xesite/machineproxy.yaml
+1
-1
manifest/xesite/machineproxy.yaml
+7
-7
manifest/xesite/onionservice.yaml
+7
-7
manifest/xesite/onionservice.yaml
+1
-1
manifest/xesite/pod-disruption-budget.yaml
+1
-1
manifest/xesite/pod-disruption-budget.yaml
+12
-12
manifest/xesite/service.yaml
+12
-12
manifest/xesite/service.yaml
···
8
8
selector:
9
9
app.kubernetes.io/name: xesite
10
10
ports:
11
-
- port: 80
12
-
targetPort: 3000
13
-
protocol: TCP
14
-
name: http
15
-
- port: 8080
16
-
targetPort: 3001
17
-
protocol: TCP
18
-
name: internalapi
19
-
- name: anubis
20
-
port: 8081
21
-
targetPort: 8081
22
-
protocol: TCP
11
+
- port: 80
12
+
targetPort: 3000
13
+
protocol: TCP
14
+
name: http
15
+
- port: 8080
16
+
targetPort: 3001
17
+
protocol: TCP
18
+
name: internalapi
19
+
- name: anubis
20
+
port: 8081
21
+
targetPort: 8081
22
+
protocol: TCP