You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

169 lines
4.4 KiB

  1. replicaCount: 1
  2. image:
  3. repository: tootsuite/mastodon
  4. pullPolicy: Always
  5. # https://hub.docker.com/r/tootsuite/mastodon/tags
  6. tag: v3.2.0
  7. # alternatively, use `latest` for the latest release or `edge` for the image
  8. # built from the most recent commit
  9. #
  10. # tag: latest
  11. ingress:
  12. enabled: false
  13. annotations:
  14. kubernetes.io/ingress.class: nginx
  15. kubernetes.io/tls-acme: "true"
  16. # cert-manager.io/cluster-issuer: "letsencrypt"
  17. #
  18. # ensure that NGINX's upload size matches Mastodon's
  19. # for the K8s ingress controller:
  20. # nginx.ingress.kubernetes.io/proxy-body-size: 40m
  21. # for the NGINX ingress controller:
  22. # nginx.org/client-max-body-size: 40m
  23. # this value is used for LOCAL_DOMAIN
  24. hostname: mastodon.local
  25. tls:
  26. - secretName: mastodon-tls
  27. hosts:
  28. - mastodon.local
  29. # create an initial administrator user; the password is autogenerated and will
  30. # have to be reset
  31. createAdmin:
  32. enabled: false
  33. username: not_gargron
  34. email: not@example.com
  35. # available locales: https://github.com/tootsuite/mastodon/blob/master/config/application.rb#L43
  36. locale: en
  37. application:
  38. web:
  39. port: 3000
  40. streaming:
  41. port: 4000
  42. # this should be set manually since os.cpus() returns the number of CPUs on
  43. # the node running the pod, which is unrelated to the resources allocated to
  44. # the pod by k8s
  45. workers: 1
  46. sidekiq:
  47. concurrency: 25
  48. # these must be set manually; autogenerated keys are rotated on each upgrade
  49. secrets:
  50. secret_key_base: ""
  51. otp_secret: ""
  52. vapid:
  53. private_key: ""
  54. public_key: ""
  55. smtp:
  56. auth_method: plain
  57. ca_file:
  58. delivery_method: smtp
  59. domain:
  60. enable_starttls_auto: true
  61. from_address: notifications@example.com
  62. login:
  63. openssl_verify_mode: peer
  64. password:
  65. port: 587
  66. reply_to:
  67. server: smtp.mailgun.org
  68. tls: false
  69. # https://github.com/bitnami/charts/tree/master/bitnami/elasticsearch#parameters
  70. elasticsearch:
  71. # `false` will disable full-text search
  72. #
  73. # if you enable ES after the initial install, you will need to manually run
  74. # RAILS_ENV=production bundle exec rake chewy:sync
  75. # (https://docs.joinmastodon.org/admin/optional/elasticsearch/)
  76. enabled: true
  77. # may be removed once https://github.com/tootsuite/mastodon/pull/13828 is part
  78. # of a tagged release
  79. image:
  80. tag: 6
  81. # https://github.com/bitnami/charts/tree/master/bitnami/postgresql#parameters
  82. postgresql:
  83. postgresqlDatabase: mastodon_production
  84. # you must set a password; the password generated by the postgresql chart will
  85. # be rotated on each upgrade:
  86. # https://github.com/bitnami/charts/tree/master/bitnami/postgresql#upgrade
  87. postgresqlPassword: ""
  88. postgresqlUsername: postgres
  89. # https://github.com/bitnami/charts/tree/master/bitnami/redis#parameters
  90. redis:
  91. # you must set a password; the password generated by the redis chart will be
  92. # rotated on each upgrade:
  93. password: ""
  94. persistence:
  95. assets:
  96. # ReadWriteOnce is more widely supported than ReadWriteMany, but limits
  97. # scalability, since it requires the Rails and Sidekiq pods to run on the
  98. # same node.
  99. accessMode: ReadWriteOnce
  100. resources:
  101. requests:
  102. storage: 10Gi
  103. system:
  104. accessMode: ReadWriteOnce
  105. resources:
  106. requests:
  107. storage: 100Gi
  108. service:
  109. type: ClusterIP
  110. port: 80
  111. # https://github.com/tootsuite/mastodon/blob/master/Dockerfile#L88
  112. #
  113. # if you manually change the UID/GID environment variables, ensure these values
  114. # match:
  115. podSecurityContext:
  116. runAsUser: 991
  117. runAsGroup: 991
  118. fsGroup: 991
  119. securityContext: {}
  120. serviceAccount:
  121. # Specifies whether a service account should be created
  122. create: true
  123. # Annotations to add to the service account
  124. annotations: {}
  125. # The name of the service account to use.
  126. # If not set and create is true, a name is generated using the fullname template
  127. name: ""
  128. podAnnotations: {}
  129. resources: {}
  130. # We usually recommend not to specify default resources and to leave this as a conscious
  131. # choice for the user. This also increases chances charts run on environments with little
  132. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  133. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  134. # limits:
  135. # cpu: 100m
  136. # memory: 128Mi
  137. # requests:
  138. # cpu: 100m
  139. # memory: 128Mi
  140. autoscaling:
  141. enabled: false
  142. minReplicas: 1
  143. maxReplicas: 100
  144. targetCPUUtilizationPercentage: 80
  145. # targetMemoryUtilizationPercentage: 80
  146. nodeSelector: {}
  147. tolerations: []
  148. affinity: {}