onyx_pods/nbit_websites/nbit_websites.yaml

42 lines
1.4 KiB
YAML

---
apiVersion: v1
kind: Pod
metadata:
annotations:
bind-mount-options:/data/nbit-website/document_root: z
io.kubernetes.cri-o.TTY/nbit_websites: "false"
io.podman.annotations.autoremove/nbit_websites: "FALSE"
io.podman.annotations.init/nbit_websites: "FALSE"
io.podman.annotations.label/nbit_websites: type:container_runtime_t
io.podman.annotations.privileged/nbit_websites: "FALSE"
io.podman.annotations.publish-all/nbit_websites: "FALSE"
labels:
app: nbit_websites-pod
traefik.enable: true
traefik.http.services.nbitwebsite.loadbalancer.server.port: 80
traefik.http.routers.nbitwebsite.rule: "Host(`linux-freelancer.ch`,`www.linux-freelancer.ch`)"
traefik.http.routers.nbitwebsite.entrypoints: websecure
traefik.http.routers.nbitwebsite.tls.certresolver: myresolver
traefik.http.routers.nbitwebsite.tls.domains[0].main: www.linux-freelancer.ch
traefik.http.routers.nbitwebsite.tls.domains[0].sans: linux-freelancer.ch
name: nbit_websites-pod
spec:
containers:
- image: docker.io/library/nginx:latest
name: nginx
securityContext:
capabilities:
drop:
- CAP_MKNOD
- CAP_AUDIT_WRITE
seLinuxOptions:
type: container_runtime_t
volumeMounts:
- mountPath: /usr/share/nginx/html
name: data-nbit-website-host-0
volumes:
- hostPath:
path: /data/nbit-website/document_root
type: Directory
name: data-nbit-website-host-0