feat: add silverbullet

argocd-apps/applicationset.yaml

@@ -33,6 +33,7 @@ spec:
           - name: opentelemetry-operator
           - name: paperless-ngx
           - name: reloader
+          - name: silverbullet
           - name: tailout
           - name: tailscale-operator
           - name: vaultwarden

k8s-apps/silverbullet/Chart.yaml

@@ -0,0 +1,9 @@
+apiVersion: v2
+name: silverbullet
+description: Note-taking application optimized for people with a hacker mindset
+type: application
+version: 0.1.0
+dependencies:
+  - name: app-template
+    repository: https://bjw-s.github.io/helm-charts
+    version: 3.3.2

k8s-apps/silverbullet/values.yaml

@@ -0,0 +1,72 @@
+app-template:
+  defaultPodOptions:
+    automountServiceAccountToken: false
+    securityContext:
+      runAsUser: 568
+      runAsGroup: 568
+      fsGroup: 568
+      fsGroupChangePolicy: "OnRootMismatch"
+
+  controllers:
+    # Configure the main controller
+    main:
+      type: deployment
+      annotations:
+        reloader.stakater.com/auto: "true"
+
+      containers:
+        main:
+          image:
+            repository: zefhemel/silverbullet
+            tag: 0.9.2
+          ports:
+            - name: http
+              containerPort: 3000
+          probes:
+            liveness:
+              enabled: true
+              type: HTTP
+            readiness:
+              enabled: true
+              type: HTTP
+  service:
+    # Configure a service for the main application
+    main:
+      controller: main
+      type: ClusterIP
+      ports:
+        http:
+          port: 3000
+
+  ingress:
+    # Configure an Ingress for the main application
+    main:
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt
+        external-dns.alpha.kubernetes.io/target: home.terence.cloud
+        nginx.ingress.kubernetes.io/proxy-body-size: 100m
+        # nginx.ingress.kubernetes.io/auth-url: "https://$host/oauth2/auth"
+        # nginx.ingress.kubernetes.io/auth-signin: "https://$host/oauth2/start?rd=$escaped_request_uri"
+        # nginx.ingress.kubernetes.io/auth-response-headers: X-Auth-Request-User
+      className: "nginx"
+      hosts:
+        - host: &host silverbullet.terence.cloud
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                identifier: main
+                port: http
+      tls:
+        - secretName: silverbullet-tls
+          hosts:
+            - *host
+
+  persistence:
+    space:
+      enabled: true
+      size: 1Gi
+      accessMode: ReadWriteOnce
+      type: persistentVolumeClaim
+      globalMounts:
+        - path: /space