4155719422
* cmd/anubis: allow setting key bytes in flag/envvar Docs are updated to generate a random key on load and when people press the recycle button. Signed-off-by: Xe Iaso <me@xeiaso.net> * review feedback fixups Signed-off-by: Xe Iaso <me@xeiaso.net> * Update cmd/anubis/main.go Signed-off-by: Xe Iaso <me@xeiaso.net> * Apply suggestions from code review Co-authored-by: Ryan Cao <70191398+ryanccn@users.noreply.github.com> Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Co-authored-by: Ryan Cao <70191398+ryanccn@users.noreply.github.com>
58 lines
1.4 KiB
YAML
58 lines
1.4 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: anubis-docs
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: anubis-docs
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: anubis-docs
|
|
spec:
|
|
containers:
|
|
- name: anubis-docs
|
|
image: ghcr.io/techarohq/anubis/docs:main
|
|
imagePullPolicy: Always
|
|
resources:
|
|
limits:
|
|
memory: "128Mi"
|
|
cpu: "500m"
|
|
ports:
|
|
- containerPort: 80
|
|
- name: anubis
|
|
image: ghcr.io/techarohq/anubis:main
|
|
imagePullPolicy: Always
|
|
env:
|
|
- name: "BIND"
|
|
value: ":8081"
|
|
- name: "DIFFICULTY"
|
|
value: "4"
|
|
- name: "METRICS_BIND"
|
|
value: ":9090"
|
|
- name: "POLICY_FNAME"
|
|
value: ""
|
|
- name: "SERVE_ROBOTS_TXT"
|
|
value: "false"
|
|
- name: "TARGET"
|
|
value: "http://localhost:80"
|
|
# - name: "SLOG_LEVEL"
|
|
# value: "debug"
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 128Mi
|
|
securityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|