diff --git a/k8s/invoiceninja/database.yaml b/k8s/invoiceninja/database.yaml index ae6708f..9f3316a 100644 --- a/k8s/invoiceninja/database.yaml +++ b/k8s/invoiceninja/database.yaml @@ -21,14 +21,12 @@ spec: selector: matchLabels: app: mysql - app.kubernetes.io/name: mysql serviceName: mysql replicas: 1 template: metadata: labels: app: mysql - app.kubernetes.io/name: mysql spec: containers: - name: mysql @@ -53,7 +51,7 @@ spec: resources: requests: cpu: 500m - memory: 1Gi + memory: 500Mi livenessProbe: exec: command: ["mysqladmin", "ping"] diff --git a/k8s/invoiceninja/ingress.yaml b/k8s/invoiceninja/ingress.yaml index 4884f3d..18a7c83 100644 --- a/k8s/invoiceninja/ingress.yaml +++ b/k8s/invoiceninja/ingress.yaml @@ -5,7 +5,7 @@ metadata: namespace: invoiceninja spec: rules: - - host: invoice-ninja.home.finn.io + - host: billing.janky.solutions http: paths: - path: / diff --git a/k8s/invoiceninja/invoiceninja.yaml b/k8s/invoiceninja/invoiceninja.yaml index bb24a05..8f181e1 100644 --- a/k8s/invoiceninja/invoiceninja.yaml +++ b/k8s/invoiceninja/invoiceninja.yaml @@ -26,6 +26,9 @@ spec: labels: app: invoiceninja spec: + securityContext: + fsGroup: 1500 + fsGroupChangePolicy: "OnRootMismatch" containers: - image: docker.io/invoiceninja/invoiceninja name: invoiceninja @@ -40,7 +43,7 @@ spec: name: invoiceninja env: - name: APP_URL - value: https://invoice-ninja.home.finn.io/ + value: https://billing.janky.solutions/ - name: APP_DEBUG value: "true" - name: REQUIRE_HTTPS @@ -81,8 +84,6 @@ spec: - name: nginx-config mountPath: /etc/nginx/conf.d volumes: - - name: public - emptyDir: {} - name: nginx-config configMap: name: nginx-config @@ -93,7 +94,14 @@ spec: accessModes: ["ReadWriteOnce"] resources: requests: - storage: 10Gi + storage: 1Gi + - metadata: + name: public + spec: + accessModes: ["ReadWriteOnce"] + resources: + requests: + storage: 1Gi --- apiVersion: v1 kind: ConfigMap @@ -131,6 +139,7 @@ data: fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + fastcgi_param HTTPS on; fastcgi_intercept_errors off; fastcgi_buffer_size 16k; fastcgi_buffers 4 16k; diff --git a/k8s/invoiceninja/kustomization.yaml b/k8s/invoiceninja/kustomization.yaml index 01a2cae..c6b8a48 100644 --- a/k8s/invoiceninja/kustomization.yaml +++ b/k8s/invoiceninja/kustomization.yaml @@ -6,3 +6,4 @@ resources: - database.yaml - ingress.yaml - invoiceninja.yaml + - secrets.yaml