The code and data behind xeiaso.net
5
fork

Configure Feed

Select the types of activity you want to include in your feed.

fix(k8s/xesite): disable Anubis for now

Signed-off-by: Xe Iaso <me@xeiaso.net>

+120 -118
+1 -1
manifest/xesite/1password.yaml
··· 3 3 metadata: 4 4 name: xesite 5 5 spec: 6 - itemPath: "vaults/lc5zo4zjz3if3mkeuhufjmgmui/items/ry2arlgm66sbms3po5s5tbuace" 6 + itemPath: "vaults/lc5zo4zjz3if3mkeuhufjmgmui/items/ry2arlgm66sbms3po5s5tbuace"
+96 -94
manifest/xesite/deployment.yaml
··· 12 12 app.kubernetes.io/name: xesite 13 13 spec: 14 14 volumes: 15 - - name: cache 16 - persistentVolumeClaim: 17 - claimName: xesite-cache 18 - - name: data 19 - emptyDir: {} 20 - - name: anubis 21 - configMap: 22 - name: anubis-cfg 15 + - name: cache 16 + persistentVolumeClaim: 17 + claimName: xesite-cache 18 + - name: data 19 + emptyDir: {} 20 + - name: anubis 21 + configMap: 22 + name: anubis-cfg 23 23 containers: 24 - - name: web 25 - image: ghcr.io/xe/site/bin:latest 26 - imagePullPolicy: Always 27 - env: 28 - - name: "BIND" 29 - value: ":3000" 30 - - name: "INTERNAL_API_BIND" 31 - value: ":3001" 32 - - name: "DATA_DIR" 33 - value: "/xe/data" 34 - - name: "SITE_URL" 35 - value: "https://xeiaso.net" 36 - - name: "ONION_DOMAIN" 37 - value: "gi3bsuc5ci2dr4xbh5b3kja5c6p5zk226ymgszzx7ngmjpc25tmnhaqd.onion" 38 - - name: "REDIRECT_DOMAIN" 39 - value: "xeiaso.net" 40 - - name: "PATREON_SAASPROXY_URL" 41 - value: "http://xesite-patreon-saasproxy.default.svc" 42 - envFrom: 43 - - secretRef: 44 - name: xesite 45 - ports: 46 - - containerPort: 3000 47 - name: http 48 - volumeMounts: 49 - - mountPath: "/xe/data" 50 - name: data 51 - #- mountPath: "/root/.cache" 52 - # name: cache 53 - readinessProbe: 54 - httpGet: 55 - path: /healthz 56 - port: 3001 57 - httpHeaders: 58 - - name: X-Kubernetes 59 - value: "Is alright, I guess" 60 - initialDelaySeconds: 60 61 - periodSeconds: 5 62 - failureThreshold: 69 63 - livenessProbe: 64 - httpGet: 65 - path: /healthz 66 - port: 3001 67 - httpHeaders: 68 - - name: X-Kubernetes 69 - value: "Is alright, I guess" 70 - initialDelaySeconds: 30 71 - periodSeconds: 30 72 - - name: anubis 73 - image: ghcr.io/techarohq/anubis:latest 74 - imagePullPolicy: Always 75 - env: 76 - - name: "BIND" 77 - value: ":8081" 78 - - name: "DIFFICULTY" 79 - value: "4" 80 - - name: "METRICS_BIND" 81 - value: ":9090" 82 - - name: "POLICY_FNAME" 83 - value: "/xe/cfg/anubis/botPolicies.yaml" 84 - - name: "SERVE_ROBOTS_TXT" 85 - value: "false" 86 - - name: "TARGET" 87 - value: "http://localhost:3000" 88 - # - name: "SLOG_LEVEL" 89 - # value: "debug" 90 - volumeMounts: 91 - - name: anubis 92 - mountPath: /xe/cfg/anubis 93 - resources: 94 - limits: 95 - cpu: 500m 96 - memory: 128Mi 97 - requests: 98 - cpu: 250m 99 - memory: 128Mi 100 - securityContext: 101 - runAsUser: 1000 102 - runAsGroup: 1000 103 - runAsNonRoot: true 104 - allowPrivilegeEscalation: false 105 - capabilities: 106 - drop: 107 - - ALL 108 - seccompProfile: 109 - type: RuntimeDefault 24 + - name: web 25 + image: ghcr.io/xe/site/bin:latest 26 + imagePullPolicy: Always 27 + env: 28 + - name: "BIND" 29 + value: ":3000" 30 + - name: "INTERNAL_API_BIND" 31 + value: ":3001" 32 + - name: "DATA_DIR" 33 + value: "/xe/data" 34 + - name: "SITE_URL" 35 + value: "https://xeiaso.net" 36 + - name: "ONION_DOMAIN" 37 + value: "gi3bsuc5ci2dr4xbh5b3kja5c6p5zk226ymgszzx7ngmjpc25tmnhaqd.onion" 38 + - name: "REDIRECT_DOMAIN" 39 + value: "xeiaso.net" 40 + - name: "PATREON_SAASPROXY_URL" 41 + value: "http://xesite-patreon-saasproxy.default.svc" 42 + envFrom: 43 + - secretRef: 44 + name: xesite 45 + ports: 46 + - containerPort: 3000 47 + name: http 48 + volumeMounts: 49 + - mountPath: "/xe/data" 50 + name: data 51 + #- mountPath: "/root/.cache" 52 + # name: cache 53 + readinessProbe: 54 + httpGet: 55 + path: /healthz 56 + port: 3001 57 + httpHeaders: 58 + - name: X-Kubernetes 59 + value: "Is alright, I guess" 60 + initialDelaySeconds: 60 61 + periodSeconds: 5 62 + failureThreshold: 69 63 + livenessProbe: 64 + httpGet: 65 + path: /healthz 66 + port: 3001 67 + httpHeaders: 68 + - name: X-Kubernetes 69 + value: "Is alright, I guess" 70 + initialDelaySeconds: 30 71 + periodSeconds: 30 72 + - name: anubis 73 + image: ghcr.io/techarohq/anubis:latest 74 + imagePullPolicy: Always 75 + env: 76 + - name: "BIND" 77 + value: ":8081" 78 + - name: "DIFFICULTY" 79 + value: "4" 80 + - name: "METRICS_BIND" 81 + value: ":9090" 82 + - name: "OG_PASSTHROUGH" 83 + value: "true" 84 + - name: "POLICY_FNAME" 85 + value: "/xe/cfg/anubis/botPolicies.yaml" 86 + - name: "SERVE_ROBOTS_TXT" 87 + value: "false" 88 + - name: "TARGET" 89 + value: "http://localhost:3000" 90 + # - name: "SLOG_LEVEL" 91 + # value: "debug" 92 + volumeMounts: 93 + - name: anubis 94 + mountPath: /xe/cfg/anubis 95 + resources: 96 + limits: 97 + cpu: 500m 98 + memory: 128Mi 99 + requests: 100 + cpu: 250m 101 + memory: 128Mi 102 + securityContext: 103 + runAsUser: 1000 104 + runAsGroup: 1000 105 + runAsNonRoot: true 106 + allowPrivilegeEscalation: false 107 + capabilities: 108 + drop: 109 + - ALL 110 + seccompProfile: 111 + type: RuntimeDefault
+1 -1
manifest/xesite/ingress.yaml
··· 32 32 service: 33 33 name: xesite 34 34 port: 35 - name: anubis 35 + number: 80
+1 -1
manifest/xesite/kustomization.yaml
··· 13 13 behavior: create 14 14 files: 15 15 - ./anubis/botPolicies.yaml 16 - - ./anubis/xesite-rss-feeds.yaml 16 + - ./anubis/xesite-rss-feeds.yaml
+1 -1
manifest/xesite/machineproxy.yaml
··· 6 6 org: personal 7 7 region: sjc 8 8 target: http://xesite-patreon-saasproxy.flycast 9 - port: 80 9 + port: 80
+7 -7
manifest/xesite/onionservice.yaml
··· 8 8 HiddenServiceNonAnonymousMode 1 9 9 HiddenServiceSingleHopMode 1 10 10 rules: 11 - - port: 12 - number: 80 13 - backend: 14 - service: 15 - name: xesite 16 - port: 17 - number: 80 11 + - port: 12 + number: 80 13 + backend: 14 + service: 15 + name: xesite 16 + port: 17 + number: 80
+1 -1
manifest/xesite/pod-disruption-budget.yaml
··· 6 6 minAvailable: 1 7 7 selector: 8 8 matchLabels: 9 - app.kubernetes.io/name: xesite 9 + app.kubernetes.io/name: xesite
+12 -12
manifest/xesite/service.yaml
··· 8 8 selector: 9 9 app.kubernetes.io/name: xesite 10 10 ports: 11 - - port: 80 12 - targetPort: 3000 13 - protocol: TCP 14 - name: http 15 - - port: 8080 16 - targetPort: 3001 17 - protocol: TCP 18 - name: internalapi 19 - - name: anubis 20 - port: 8081 21 - targetPort: 8081 22 - protocol: TCP 11 + - port: 80 12 + targetPort: 3000 13 + protocol: TCP 14 + name: http 15 + - port: 8080 16 + targetPort: 3001 17 + protocol: TCP 18 + name: internalapi 19 + - name: anubis 20 + port: 8081 21 + targetPort: 8081 22 + protocol: TCP