update postgres config

manifests/postgres/configmap.yaml

@@ -27,24 +27,61 @@ metadata:
   namespace: darkdork-dev
 data:
   postgresql.conf: |
-    # DB Version: 17
-    # OS Type: linux
-    # DB Type: web
-    # Total Memory (RAM): 8 GB
-    # Connections num: 20
-    # Data Storage: ssd
-
+    # connections settings
+    listen_addresses = '*'
     max_connections = 20
+
+    # memory settings
     shared_buffers = 2GB
-    effective_cache_size = 6GB
-    maintenance_work_mem = 512MB
-    checkpoint_completion_target = 0.9
-    wal_buffers = 16MB
-    default_statistics_target = 100
-    random_page_cost = 1.1
-    effective_io_concurrency = 200
+    effective_cache_size = 3GB
     work_mem = 74898kB
+    maintenance_work_mem = 512MB
+    temp_buffers = 32MB
     huge_pages = off
+
+    # wal settings
+    wal_buffers = 16MB
     min_wal_size = 1GB
     max_wal_size = 4GB
----
+
+    # checkpoint settings
+    checkpoint_completion_target = 0.9
+    checkpoint_timeout = 15min
+    checkpoint_flush_after = 0
+
+    # query planner settings
+    default_statistics_target = 100
+    random_page_cost = 1.1
+    seq_page_cost = 1.0
+    cpu_tuple_cost = 0.01
+    cpu_index_tuple_cost = 0.005
+    cpu_operator_cost = 0.0025
+    effective_io_concurrency = 200
+
+    # write performance optimizations
+    synchronous_commit = off
+    commit_delay = 10000
+    commit_siblings = 5
+
+    # bg writer settings
+    bgwriter_delay = 50ms
+    bgwriter_lru_maxpages = 1000
+    bgwriter_lru_multiplier = 10.0
+
+    # paralel query settings
+    max_worker_processes = 8
+    max_parallel_workers = 8
+    max_parallel_workers_per_gather = 2
+    max_parallel_maintenance_workers = 2
+
+    # misc settings
+    max_prepared_transactions = 0
+
+    # log settings
+    # log_destination = 'stderr'
+    # logging_collector = on
+    # log_directory = 'pg_log'
+    # log_filename = 'postgresql-%Y-%m-%d_%H%M%S.log'
+    # log_min_duration_statement = 1000
+    # log_lock_waits = on
+    # log_checkpoints = on

manifests/postgres/pvc.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: postgres-pvc
+  namespace: darkdork-dev
+  labels:
+    app: postgres
+spec:
+  volumeName: pvc-43c3a05b-5556-4d7c-83e3-ee6436f1a48e
+  accessModes: ["ReadWriteOnce"]
+  storageClassName: longhorn-ssd
+  resources:
+    requests:
+      storage: 10Gi

manifests/postgres/service.yaml

@@ -1,26 +1,24 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres-headless
+  namespace: darkdork-dev
+spec:
+  clusterIP: None
+  selector:
+    app: postgres
+  ports:
+  - port: 5432
+    targetPort: 5432
+    name: postgres
+
 ---
 apiVersion: v1
 kind: Service
 metadata:
   name: postgres
   namespace: darkdork-dev
-spec:
-  ports:
-  - port: 5432
-    targetPort: 5432
-    protocol: TCP
-  clusterIP: None
-  selector:
-    app: postgres
----
-# regular (non-headless) service for application access
-apiVersion: v1
-kind: Service
-metadata:
-  name: postgres-svc
-  namespace: darkdork-dev
-  labels:
-    app: postgres
 spec:
   selector:
     app: postgres
@@ -29,4 +27,3 @@ spec:
     targetPort: 5432
     name: postgres
   type: ClusterIP
----

manifests/postgres/statefulset.yaml

@@ -7,12 +7,11 @@ metadata:
   labels:
     app: postgres
 spec:
+  serviceName: postgres-headless
   replicas: 1
   selector:
     matchLabels:
       app: postgres
-  updateStrategy:
-    type: RollingUpdate
   template:
     metadata:
       labels:
@@ -23,37 +22,20 @@ spec:
       - name: registry-credentials
       securityContext:
         fsGroup: 1000
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 100
-            podAffinityTerm:
-              labelSelector:
-                matchExpressions:
-                - key: app
-                  operator: In
-                  values:
-                  - postgres
-              topologyKey: kubernetes.io/hostname
       containers:
       - name: postgres
         image: postgres:17-alpine
-          imagePullPolicy: Always
-          # securityContext:
-          #   runAsUser: 1001
-          #   runAsGroup: 1001
-          #   allowPrivilegeEscalation: false
-          volumeMounts:
-            - name: postgres-data-statefulset
-              mountPath: /var/lib/postgresql/data
-              subPath: pgdata # Using subPath to avoid permission issues
-            - name: postgres-init-volume
-              mountPath: /docker-entrypoint-initdb.d
-            - name: postgres-config-volume
-              mountPath: /etc/postgresql/postgresql.conf
-              subPath: postgresql.conf
+        imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 5432
+          name: postgres
+        resources:
+          requests:
+            memory: "3Gi"
+            cpu: "1000m"
+          limits:
+            memory: "4Gi"
+            cpu: "2000m"
         env:
         - name: POSTGRES_PASSWORD
           valueFrom:
@@ -67,35 +49,37 @@ spec:
               key: postgres-password
         - name: PGDATA
           value: /var/lib/postgresql/data/pgdata
-            - name: POSTGRES_INITDB_ARGS
-              value: "-c config_file=/etc/postgresql/postgresql.conf"
-          resources:
-            requests:
-              memory: "256Mi"
-              cpu: "100m"
-            limits:
-              memory: "8Gi"
-              cpu: "3000m"
+        volumeMounts:
+        - name: postgres-storage
+          mountPath: /var/lib/postgresql/data
+          subPath: pgdata # Using subPath to avoid permission issues
+        - name: dshm
+          mountPath: /dev/shm
+        - name: postgres-init-volume
+          mountPath: /docker-entrypoint-initdb.d
+        - name: postgres-config-volume
+          mountPath: /etc/postgresql/postgresql.conf
+          subPath: postgresql.conf
+        command:
+        - docker-entrypoint.sh
+        - -c
+        - config_file=/etc/postgresql/postgresql.conf
         livenessProbe:
           exec:
             command:
             - pg_isready
             - -U
             - postgres
-                - -d
-                - pleroma
           initialDelaySeconds: 30
           periodSeconds: 10
           timeoutSeconds: 5
-            failureThreshold: 6
+          failureThreshold: 3
         readinessProbe:
           exec:
             command:
             - pg_isready
             - -U
             - postgres
-                - -d
-                - pleroma
           initialDelaySeconds: 5
           periodSeconds: 5
           timeoutSeconds: 3
@@ -113,6 +97,10 @@ spec:
           timeoutSeconds: 3
           failureThreshold: 12
       volumes:
+      - name: dshm
+        emptyDir:
+          medium: Memory
+          sizeLimit: 2Gi
       - name: postgres-init-volume
         configMap:
           name: postgres-init
@@ -120,12 +108,6 @@ spec:
       - name: postgres-config-volume
         configMap:
           name: postgres-config
-  volumeClaimTemplates:
-  - metadata:
-      name: postgres-data-statefulset
-    spec:
-      accessModes: ["ReadWriteOnce"]
-      storageClassName: longhorn-ssd
-      resources:
-        requests:
-          storage: 10Gi
+      - name: postgres-storage
+        persistentVolumeClaim:
+          claimName: postgres-pvc