Skip to content

Commit f1b73ac

Browse files
daurnimatordaurnimator
committed
misskey: initial commit
1 parent c3c45f3 commit f1b73ac

13 files changed

+517
-0
lines changed

‎misskey/README.md‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# Misskey
2+
![Misskey Status Indicator](https://argocd.hashbang.sh/api/badge?name=misskey)
3+
4+
## TODO:
5+
6+
- Add an elasticsearch instance
7+
- Likely need to set up ECK operator?
8+
- Add resource requests/limits

‎misskey/ingress.yaml‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
apiVersion: networking.k8s.io/v1
2+
kind: Ingress
3+
metadata:
4+
name: misskey-ingress
5+
annotations:
6+
cert-manager.io/cluster-issuer: letsencrypt-prod
7+
spec:
8+
ingressClassName: nginx
9+
rules:
10+
- host: misskey.hashbang.sh
11+
http:
12+
paths:
13+
- backend:
14+
service:
15+
name: misskey
16+
port:
17+
name: http
18+
path: /
19+
pathType: Prefix
20+
tls:
21+
- hosts:
22+
- misskey.hashbang.sh
23+
secretName: misskey-tls

‎misskey/kustomization.yaml‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
namespace: misskey
4+
commonLabels:
5+
app.kubernetes.io/name: misskey
6+
resources:
7+
- ./misskey
8+
- ./redis
9+
- networkpolicy.yaml
10+
- ingress.yaml

‎misskey/misskey/deployment.yaml‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
apiVersion: apps/v1
2+
kind: Deployment
3+
metadata:
4+
name: misskey
5+
spec:
6+
template:
7+
spec:
8+
initContainers:
9+
- name: migrate
10+
image: misskey/misskey
11+
command: [npm, run, migrate]
12+
env:
13+
- name: NODE_ENV
14+
value: production
15+
- name: PGPASSWORD
16+
valueFrom:
17+
secretKeyRef:
18+
name: misskey-configuration
19+
key: PGPASSWORD
20+
- name: PGSSLMODE
21+
value: no-verify
22+
volumeMounts:
23+
- name: misskey-configuration
24+
mountPath: /misskey/.config
25+
readOnly: true
26+
containers:
27+
- name: misskey
28+
image: misskey/misskey
29+
command: [npm, run, start]
30+
env:
31+
- name: NODE_ENV
32+
value: production
33+
- name: PGPASSWORD
34+
valueFrom:
35+
secretKeyRef:
36+
name: misskey-configuration
37+
key: PGPASSWORD
38+
- name: PGSSLMODE
39+
value: no-verify
40+
resources:
41+
requests:
42+
memory: 350M
43+
volumeMounts:
44+
- name: misskey-configuration
45+
mountPath: /misskey/.config
46+
readOnly: true
47+
ports:
48+
- containerPort: 3000
49+
volumes:
50+
- name: misskey-configuration
51+
configMap:
52+
name: misskey-configuration

‎misskey/misskey/files/default.yml‎

Lines changed: 148 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,148 @@
1+
#━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2+
# Misskey configuration
3+
#━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4+
5+
# ┌─────┐
6+
#───┘ URL └─────────────────────────────────────────────────────
7+
8+
# Final accessible URL seen by a user.
9+
url: https://misskey.hashbang.sh/
10+
11+
# ONCE YOU HAVE STARTED THE INSTANCE, DO NOT CHANGE THE
12+
# URL SETTINGS AFTER THAT!
13+
14+
# ┌───────────────────────┐
15+
#───┘ Port and TLS settings └───────────────────────────────────
16+
17+
#
18+
# Misskey requires a reverse proxy to support HTTPS connections.
19+
#
20+
# +----- https://example.tld/ ------------+
21+
# +------+ |+-------------+ +----------------+|
22+
# | User | ---> || Proxy (443) | ---> | Misskey (3000) ||
23+
# +------+ |+-------------+ +----------------+|
24+
# +---------------------------------------+
25+
#
26+
# You need to set up a reverse proxy. (e.g. nginx)
27+
# An encrypted connection with HTTPS is highly recommended
28+
# because tokens may be transferred in GET requests.
29+
30+
# The port that your Misskey server should listen on.
31+
port: 443
32+
33+
# ┌──────────────────────────┐
34+
#───┘ PostgreSQL configuration └────────────────────────────────
35+
36+
db:
37+
host: userdb-attempt-too-do-user-989073-0.db.ondigitalocean.com
38+
port: 25060
39+
40+
# Database name
41+
db: misskey
42+
43+
# Auth
44+
user: misskey
45+
#pass:
46+
47+
# Whether disable Caching queries
48+
#disableCache: true
49+
50+
# Extra Connection options
51+
#extra:
52+
# ssl: true
53+
54+
# ┌─────────────────────┐
55+
#───┘ Redis configuration └─────────────────────────────────────
56+
57+
redis:
58+
host: misskey-redis
59+
port: 6379
60+
#family: 0 # 0=Both, 4=IPv4, 6=IPv6
61+
#pass: example-pass
62+
#prefix: example-prefix
63+
#db: 1
64+
65+
# ┌─────────────────────────────┐
66+
#───┘ Elasticsearch configuration └─────────────────────────────
67+
68+
#elasticsearch:
69+
# host: localhost
70+
# port: 9200
71+
# ssl: false
72+
# user:
73+
# pass:
74+
75+
# ┌───────────────┐
76+
#───┘ ID generation └───────────────────────────────────────────
77+
78+
# You can select the ID generation method.
79+
# You don't usually need to change this setting, but you can
80+
# change it according to your preferences.
81+
82+
# Available methods:
83+
# aid ... Short, Millisecond accuracy
84+
# meid ... Similar to ObjectID, Millisecond accuracy
85+
# ulid ... Millisecond accuracy
86+
# objectid ... This is left for backward compatibility
87+
88+
# ONCE YOU HAVE STARTED THE INSTANCE, DO NOT CHANGE THE
89+
# ID SETTINGS AFTER THAT!
90+
91+
id: 'aid'
92+
93+
# ┌─────────────────────┐
94+
#───┘ Other configuration └─────────────────────────────────────
95+
96+
# Whether disable HSTS
97+
#disableHsts: true
98+
99+
# Number of worker processes
100+
#clusterLimit: 1
101+
102+
# Job concurrency per worker
103+
# deliverJobConcurrency: 128
104+
# inboxJobConcurrency: 16
105+
106+
# Job rate limiter
107+
# deliverJobPerSec: 128
108+
# inboxJobPerSec: 16
109+
110+
# Job attempts
111+
# deliverJobMaxAttempts: 12
112+
# inboxJobMaxAttempts: 8
113+
114+
# IP address family used for outgoing request (ipv4, ipv6 or dual)
115+
#outgoingAddressFamily: ipv4
116+
117+
# Proxy for HTTP/HTTPS
118+
#proxy: http://127.0.0.1:3128
119+
120+
proxyBypassHosts:
121+
- api.deepl.com
122+
- api-free.deepl.com
123+
- www.recaptcha.net
124+
- hcaptcha.com
125+
- challenges.cloudflare.com
126+
127+
# Proxy for SMTP/SMTPS
128+
#proxySmtp: http://127.0.0.1:3128 # use HTTP/1.1 CONNECT
129+
#proxySmtp: socks4://127.0.0.1:1080 # use SOCKS4
130+
#proxySmtp: socks5://127.0.0.1:1080 # use SOCKS5
131+
132+
# Media Proxy
133+
# Reference Implementation: https://github.com/misskey-dev/media-proxy
134+
#mediaProxy: https://example.com/proxy
135+
136+
# Proxy remote files (default: false)
137+
#proxyRemoteFiles: true
138+
139+
# Sign to ActivityPub GET request (default: true)
140+
signToActivityPubGet: true
141+
142+
#allowedPrivateNetworks: [
143+
# '127.0.0.1/32'
144+
#]
145+
146+
# Upload or download file size limits (bytes)
147+
#maxFileSize: 262144000
148+

‎misskey/misskey/kustomization.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
commonLabels:
4+
app.kubernetes.io/component: misskey
5+
resources:
6+
- deployment.yaml
7+
- service.yaml
8+
configMapGenerator:
9+
- name: misskey-configuration
10+
files:
11+
- files/default.yml
12+
generators:
13+
- secret-generator.yaml
14+
images:
15+
- name: misskey/misskey
16+
newTag: 13.5.2@sha256:1b8eae17b59cf793b96e3f9128e7021d35bbe0f44142a5bcdc09dbe8df962316

0 commit comments

Comments
 (0)