157 lines
4.0 KiB
YAML
157 lines
4.0 KiB
YAML
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: data
|
|
namespace: paperless
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteMany
|
|
resources:
|
|
requests:
|
|
storage: 8Gi
|
|
storageClassName: cephfs-hyper
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: paperless
|
|
namespace: paperless
|
|
labels:
|
|
app: paperless
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: paperless
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: paperless
|
|
spec:
|
|
containers:
|
|
- name: paperless
|
|
image: paperlessngx/paperless-ngx
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- containerPort: 8000
|
|
env:
|
|
- name: PAPERLESS_ADMIN_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: paperless-user
|
|
key: username
|
|
optional: false
|
|
- name: PAPERLESS_ADMIN_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: paperless-user
|
|
key: pw
|
|
optional: false
|
|
- name: PAPERLESS_ADMIN_MAIL
|
|
value: "thrawn235@gmail.com"
|
|
- name: PAPERLESS_PORT
|
|
value: "8000"
|
|
- name: PAPERLESS_DBPASS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: paperless-db
|
|
key: user.pw
|
|
optional: false
|
|
- name: PAPERLESS_DBHOST
|
|
value: "db"
|
|
- name: PAPERLESS_REDIS
|
|
value: "redis://broker:6379"
|
|
- name: USERMAP_UID
|
|
value: "1000"
|
|
- name: USERMAP_GID
|
|
value: "1000"
|
|
- name: PAPERLESS_URL
|
|
value: "https://paperless.apps.undercloud.dev"
|
|
- name: PAPERLESS_SECRET_KEY
|
|
value: lsakdhfehjhmsnDFK
|
|
- name: PAPERLESS_TIME_ZONE
|
|
value: "Europe/Berlin"
|
|
#- name: PAPERLESS_OCR_LANGUAGE
|
|
# value: "de"
|
|
|
|
- name: PAPERLESS_APPS
|
|
value: "allauth.socialaccount.providers.openid_connect"
|
|
|
|
- name: PAPERLESS_ACCOUNT_ALLOW_SIGNUPS
|
|
value: "false"
|
|
|
|
- name: PAPERLESS_SOCIAL_AUTO_SIGNUP
|
|
value: "true"
|
|
|
|
- name: PAPERLESS_SOCIALACCOUNT_ALLOW_SIGNUPS
|
|
value: "true"
|
|
|
|
- name: PAPERLESS_SOCIAL_ACCOUNT_SYNC_GROUPS
|
|
value: "true"
|
|
|
|
- name: PAPERLESS_DISABLE_REGULAR_LOGIN
|
|
value: "false"
|
|
|
|
- name: PAPERLESS_REDIRECT_LOGIN_TO_SSO
|
|
value: "false"
|
|
|
|
- name: PAPERLESS_SOCIALACCOUNT_PROVIDERS
|
|
value: >-
|
|
{
|
|
"openid_connect": {
|
|
"SCOPE": ["openid", "profile", "email", "groups"],
|
|
"APPS": [
|
|
{
|
|
"provider_id": "paperless",
|
|
"name": "Authentik",
|
|
"client_id": "R0OcEONvQGIfG5iMuHKYh9e0KfxkA8DFbJC119Ei",
|
|
"secret": "JlU9OmhkdQYkf5MthO3Kw19qk3i7kDGDWp1aFJtAsF1GWsQxexgoI7srUHao8Q6FBMQguHDVM6LrKII290mchUIga3u7QUfdhLJM22XLmSdJ76UUNpppR9VNd7srOOb1",
|
|
"settings": {
|
|
"server_url": "https://auth.apps.undercloud.dev/application/o/paperless/.well-known/openid-configuration"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
volumeMounts:
|
|
- mountPath: "/usr/src/paperless/data"
|
|
name: data
|
|
subPath: data
|
|
- mountPath: "/usr/src/paperless/media"
|
|
name: data
|
|
subPath: media
|
|
- mountPath: "/usr/src/paperless/export"
|
|
name: data
|
|
subPath: export
|
|
- mountPath: "/usr/src/paperless/consume"
|
|
name: data
|
|
subPath: consumer
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: data
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: paperless
|
|
namespace: paperless
|
|
labels:
|
|
app: paperless
|
|
spec:
|
|
internalTrafficPolicy: Cluster
|
|
ipFamilies:
|
|
- IPv4
|
|
- IPv6
|
|
ipFamilyPolicy: PreferDualStack
|
|
ports:
|
|
- name: http
|
|
port: 80
|
|
protocol: TCP
|
|
targetPort: 8000
|
|
selector:
|
|
app: paperless
|
|
sessionAffinity: None
|
|
type: ClusterIP
|
|
---
|