oleksandr/homelab
1
0
Fork 0
Code Pull Requests Activity

feat(k8s/gitea): add Gitea with PostgreSQL, backups, and Authelia OIDC

Browse Source
This commit is contained in:
Oleksandr Berezovskyi
2026-04-29 22:45:42 +03:00
parent db633544c6
commit fa61316abf
12 changed files with 619 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

150
kubernetes/app/gitea/cronjob-backup.yaml Normal file
View File

@@ -0,0 +1,150 @@
apiVersion: batch/v1
kind: CronJob
metadata:
name: gitea-db-backup
namespace: gitea
labels:
app: gitea-backup
spec:
schedule: "0 2 * * *"
concurrencyPolicy: Forbid
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
jobTemplate:
spec:
template:
metadata:
labels:
app: gitea-backup
spec:
restartPolicy: OnFailure
initContainers:
- name: pg-dump
image: postgres:17
imagePullPolicy: IfNotPresent
env:
- name: PGHOST
value: gitea-db
- name: PGUSER
valueFrom:
secretKeyRef:
name: gitea-credentials
key: DB_USERNAME
- name: PGPASSWORD
valueFrom:
secretKeyRef:
name: gitea-credentials
key: DB_PASSWORD
- name: PGDATABASE
valueFrom:
secretKeyRef:
name: gitea-credentials
key: DB_DATABASE_NAME
command:
- sh
- -c
- pg_dump --clean --if-exists > /backup/dump.sql
volumeMounts:
- name: backup-tmp
mountPath: /backup
containers:
- name: resticprofile
image: creativeprojects/resticprofile:0.32.0
imagePullPolicy: IfNotPresent
command:
- sh
- -c
- |
resticprofile -c /secrets/profiles.yaml -n gitea-db backup
resticprofile -c /secrets/profiles.yaml -n gitea-db copy
env:
- name: B2_ACCOUNT_ID
valueFrom:
secretKeyRef:
name: gitea-backup-config
key: B2_ACCOUNT_ID
- name: B2_ACCOUNT_KEY
valueFrom:
secretKeyRef:
name: gitea-backup-config
key: B2_ACCOUNT_KEY
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
memory: 1Gi
volumeMounts:
- name: secrets
mountPath: /secrets
readOnly: true
- name: backup-tmp
mountPath: /backup
volumes:
- name: secrets
secret:
secretName: gitea-backup-config
- name: backup-tmp
emptyDir: {}
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: gitea-data-backup
namespace: gitea
labels:
app: gitea-backup
spec:
schedule: "0 3 * * *"
concurrencyPolicy: Forbid
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
jobTemplate:
spec:
template:
metadata:
labels:
app: gitea-backup
spec:
restartPolicy: OnFailure
containers:
- name: resticprofile
image: creativeprojects/resticprofile:0.32.0
imagePullPolicy: IfNotPresent
command:
- sh
- -c
- |
resticprofile -c /secrets/profiles.yaml -n gitea-data backup
resticprofile -c /secrets/profiles.yaml -n gitea-data copy
env:
- name: B2_ACCOUNT_ID
valueFrom:
secretKeyRef:
name: gitea-backup-config
key: B2_ACCOUNT_ID
- name: B2_ACCOUNT_KEY
valueFrom:
secretKeyRef:
name: gitea-backup-config
key: B2_ACCOUNT_KEY
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
memory: 1Gi
volumeMounts:
- name: secrets
mountPath: /secrets
readOnly: true
- name: data
mountPath: /data
readOnly: true
volumes:
- name: secrets
secret:
secretName: gitea-backup-config
- name: data
persistentVolumeClaim:
claimName: gitea-data