pleroma/manifests/pleroma/templates/deployment.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: pleromax
  namespace: darkdork-dev
spec:
  replicas: 1
  selector:
    matchLabels:
      app: pleroma
  template:
    metadata:
      labels:
        app: pleroma
    spec:
      imagePullSecrets:
      - name: registry-credentials
      initContainers:
      - name: init
        image: cr.forge.lan/darkdork-dev/pleroma:${CI_COMMIT_SHA}
        imagePullPolicy: IfNotPresent
        command: [ "sh", "-c", "mix ecto.migrate" ]
        env:
        - name: MIX_ENV
          value: prod
        - name: SIGNING_SALT
          value: quYau0c
        - name: DOMAIN
          value: darkdork.dev
        - name: INSTANCE_NAME
          value: DarkDork.dev
        - name: ADMIN_EMAIL
          value: pwm@crlf.ninja
        - name: NOTIFY_EMAIL
          value: pleroma@crlf.ninja
        - name: REGISTRATIONS_OPEN
          value: "false"
        - name: INVITES_ENABLED
          value: "true"
        - name: SECRET_KEY_BASE
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: secret-key-base
        - name: WEB_PUSH_PUBLIC_KEY
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: web-push-public-key
        - name: WEB_PUSH_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: web-push-private-key
        - name: DEFAULT_SIGNER
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: default-signer
        - name: MEDIA_URL
          value: "https://media.darkdork.dev"
        - name: S3_BUCKET
          value: pleroma.darkdork.dev
        - name: S3_ACCESS_KEY
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: minio-access-key
        - name: S3_SECRET_KEY
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: minio-secret-key
        - name: S3_SCHEME
          value: "http://"
        - name: S3_HOST
          value: minio
        - name: S3_PORT
          value: "80"
        - name: DB_HOST
          value: postgres
        - name: DB_NAME
          value: pleroma
        - name: DB_USER
          value: pleroma
        - name: DB_PASS
          valueFrom:
            secretKeyRef:
              name: postgres
              key: postgres-password
        volumeMounts:
        - name: pleroma-config-volume
          mountPath: /pleroma/config/prod.secret.exs
          subPath: prod.secret.exs
      containers:
      - name: pleroma
        image: cr.forge.lan/darkdork-dev/pleroma:${CI_COMMIT_SHA}
        imagePullPolicy: IfNotPresent
        command: ["sh", "-c", "elixir --sname pleroma -S mix phx.server --no-compile"]
        ports:
        - containerPort: 4000
        - containerPort: 4021
        env:
        - name: MIX_ENV
          value: prod
        - name: SIGNING_SALT
          value: quYau0c
        - name: DOMAIN
          value: darkdork.dev
        - name: INSTANCE_NAME
          value: DarkDork.dev
        - name: ADMIN_EMAIL
          value: pwm@crlf.ninja
        - name: NOTIFY_EMAIL
          value: pleroma@crlf.ninja
        - name: REGISTRATIONS_OPEN
          value: "false"
        - name: INVITES_ENABLED
          value: "true"
        - name: SECRET_KEY_BASE
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: secret-key-base
        - name: GRAFANA_HOST
          value: darkdork.grafana.lan
        - name: GRAFANA_TOKEN
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: grafana-token
        - name: WEB_PUSH_PUBLIC_KEY
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: web-push-public-key
        - name: WEB_PUSH_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: web-push-private-key
        - name: DEFAULT_SIGNER
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: default-signer
        - name: MEDIA_URL
          value: "https://media.darkdork.dev"
        - name: S3_BUCKET
          value: pleroma.darkdork.dev
        - name: S3_ACCESS_KEY
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: minio-access-key
        - name: S3_SECRET_KEY
          valueFrom:
            secretKeyRef:
              name: pleroma
              key: minio-secret-key
        - name: S3_SCHEME
          value: "http://"
        - name: S3_HOST
          value: minio
        - name: S3_PORT
          value: "80"
        - name: DB_HOST
          value: postgres
        - name: DB_NAME
          value: pleroma
        - name: DB_USER
          value: pleroma
        - name: DB_PASS
          valueFrom:
            secretKeyRef:
              name: postgres
              key: postgres-password
        volumeMounts:
        - name: pleroma-config-volume
          mountPath: /pleroma/config/prod.secret.exs
          subPath: prod.secret.exs
        - name: pleroma-emoji-volume
          mountPath: /static-files/emoji/
          subPath: emoji/
      volumes:
      - name: pleroma-config-volume
        configMap:
          name: pleroma-config
          defaultMode: 0640         # Pleroma is picky about config file permissions.
          items:
            - key: config.exs
              path: prod.secret.exs
      - name: pleroma-emoji-volume
        persistentVolumeClaim:
          claimName: pleroma-emoji
      securityContext:
        fsGroup: 1000               # Ensures peroma can still read the config file
---