91 lines
1.8 KiB
YAML
91 lines
1.8 KiB
YAML
replicaCount: 2
|
|
|
|
image:
|
|
repository: backend-mln
|
|
tag: helm
|
|
pullPolicy: IfNotPresent
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8080
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 256Mi
|
|
|
|
autoscaling:
|
|
enabled: true
|
|
minReplicas: 2
|
|
maxReplicas: 5
|
|
targetCPUUtilizationPercentage: 70
|
|
|
|
persistence:
|
|
uploads:
|
|
enabled: true
|
|
size: 5Gi
|
|
# Répliqué sur 2 nœuds (Longhorn) : survit à la perte d'un nœud. Voir
|
|
# deploy/longhorn/storageclass.yml pour le prérequis d'installation.
|
|
# N'a d'effet que pour storage_driver=local (les uploads S3 ne passent
|
|
# jamais par ce PVC, voir ProvisionConfig.StorageDriver).
|
|
storageClass: "longhorn-replicated"
|
|
accessMode: ReadWriteOnce
|
|
|
|
env:
|
|
DB_HOST: postgres
|
|
DB_PORT: "5432"
|
|
DB_USER: postgres
|
|
DB_NAME: gestion_db
|
|
DB_SSLMODE: disable
|
|
REDIS_HOST: redis
|
|
REDIS_PORT: "6379"
|
|
API_PORT: "8080"
|
|
STORAGE_DRIVER: local
|
|
S3_REGION: us-east-1
|
|
S3_BUCKET: ""
|
|
S3_ENDPOINT: ""
|
|
TELEGRAM_BOT_USERNAME: ""
|
|
LBTELEGRAM_URL: ""
|
|
LBTELEGRAM_BOT1_USERNAME: ""
|
|
LBTELEGRAM_BOT2_USERNAME: ""
|
|
|
|
# Valeurs sensibles — à surcharger via --set-string ou un Secret Manager externe
|
|
secrets:
|
|
DB_PASSWORD: ""
|
|
SESSION_SECRET: ""
|
|
USER_JWT_SECRET: ""
|
|
ADMIN_JWT_SECRET: ""
|
|
REDIS_PASSWORD: ""
|
|
TOMTOM_API_KEY: ""
|
|
TOMTOM_API_KEY_1: ""
|
|
TOMTOM_API_KEY_2: ""
|
|
TOMTOM_API_KEY_3: ""
|
|
TELEGRAM_BOT_TOKEN: ""
|
|
TELEGRAM_WEBHOOK_URL: ""
|
|
TELEGRAM_WEBHOOK_SECRET: ""
|
|
NOWPAYMENTS_API_KEY: ""
|
|
NOWPAYMENTS_IPN_SECRET: ""
|
|
RUSTFS_ACCESS_KEY: ""
|
|
RUSTFS_SECRET_KEY: ""
|
|
BACKEND_LINK_SECRET: ""
|
|
|
|
podAnnotations: {}
|
|
|
|
podSecurityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 101
|
|
runAsGroup: 101
|
|
fsGroup: 101
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|