David Jeffers
f2cdf6b752
All checks were successful
continuous-integration/drone/push Build is passing
94 lines
2.0 KiB
YAML
94 lines
2.0 KiB
YAML
---
|
|
podSecurityContext:
|
|
runAsUser: 2000
|
|
runAsGroup: 2000
|
|
fsGroup: 2000
|
|
fsGroupChangePolicy: "OnRootMismatch"
|
|
runAsNonRoot: true
|
|
|
|
securityContext:
|
|
privileged: false
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: "RuntimeDefault"
|
|
|
|
image:
|
|
repository: nginx
|
|
tag: latest
|
|
|
|
ingress:
|
|
host: halloween.dajeffers.com
|
|
ingressClassName: nginx
|
|
tlsEnabled: true
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-cloudflare-prod
|
|
|
|
initContainers:
|
|
- name: init-con
|
|
image: debian
|
|
tag: stable
|
|
command: |
|
|
cp /hugo.conf/setup_hugo.sh /tmp/ &&
|
|
chmod +x /tmp/setup_hugo.sh &&
|
|
/tmp/setup_hugo.sh
|
|
securityContext:
|
|
runAsUser: 2000
|
|
runAsGroup: 2000
|
|
fsGroup: 2000
|
|
fsGroupChangePolicy: "OnRootMismatch"
|
|
runAsNonRoot: true
|
|
privileged: false
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: "RuntimeDefault"
|
|
|
|
monitor:
|
|
enabled: true
|
|
|
|
probe:
|
|
enabled: true
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
memory: 200Mi
|
|
limits:
|
|
memory: 200Mi
|
|
|
|
volumes:
|
|
- name: init-hugo
|
|
fileName: setup_hugo.sh
|
|
path: /hugo.conf
|
|
subPath: setup_hugo.sh
|
|
# yamllint disable rule:line-length
|
|
fileContent: |
|
|
#!/usr/bin/env bash
|
|
# Pre-reqs
|
|
apt-get update && apt-get install -y wget git
|
|
|
|
# Setting up Hugo
|
|
wget https://github.com/gohugoio/hugo/releases/download/v0.145.0/hugo_0.145.0_linux-arm64.tar.gz &&
|
|
tar -xzf hugo_0.111.3_Linux-64bit.tar.gz &&
|
|
chmod +x hugo &&
|
|
mv hugo /usr/local/bin && cd / &&
|
|
|
|
# Getting and building Hugo site source
|
|
git clone https://github.com/gimlet-io/hugo-site.git &&
|
|
cd hugo-site && hugo &&
|
|
|
|
# Copying the built Hugo site to the shared volume for serving with Nginx
|
|
mkdir -p /usr/share/nginx/html && cp -r ./public/. /usr/share/nginx/html
|
|
# yamllint enable rule:line-length
|
|
- name: shared-static-files
|
|
emptyDir: true
|
|
path: /usr/share/nginx/html
|
|
|
|
vars:
|
|
TZ: 'America/New_York'
|