Erich Blume
11330ebea0
## Summary - Deploy Mealie (self-hosted recipe manager) on minikube-indri via ArgoCD - Build container from source via forge mirror (`mirrors/mealie`) — multi-stage Dockerfile with Node.js frontend + Python/uv backend - Add Caddy proxy entry for `meals.ops.eblu.me` - Part of a larger meal planning pipeline: Mealie stores categorized recipes, a planner script selects balanced meals, and Ollama generates unified cooking timelines ## Status - [x] Mirror mealie repo on forge - [x] Dockerfile (from-source build) - [x] ArgoCD app + k8s manifests - [x] Caddy proxy entry - [x] Service docs, routing table, app registry - [ ] Local Dagger build test - [ ] Container build + push to registry - [ ] Update kustomization.yaml with real image tag - [ ] Deploy and verify - [ ] Provision Caddy ## Test plan - Build container locally via `dagger call build --src=. --container-name=mealie` - Trigger CI build via `mise run container-build-and-release mealie` - Deploy from branch: `argocd app set mealie --revision deploy-mealie && argocd app sync mealie` - Verify Mealie UI at `https://meals.ops.eblu.me` - Verify API docs at `https://meals.ops.eblu.me/docs` Reviewed-on: #299
79 lines
2.2 KiB
YAML
79 lines
2.2 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: mealie
|
|
namespace: mealie
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: mealie
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: mealie
|
|
spec:
|
|
containers:
|
|
- name: mealie
|
|
image: registry.ops.eblu.me/blumeops/mealie:kustomized
|
|
ports:
|
|
- containerPort: 9000
|
|
env:
|
|
- name: BASE_URL
|
|
value: "https://meals.ops.eblu.me"
|
|
- name: ALLOW_SIGNUP
|
|
value: "false"
|
|
- name: TZ
|
|
value: "America/Los_Angeles"
|
|
- name: MAX_WORKERS
|
|
value: "1"
|
|
- name: WEB_CONCURRENCY
|
|
value: "1"
|
|
# OIDC — Authentik (public client, PKCE)
|
|
- name: OIDC_AUTH_ENABLED
|
|
value: "true"
|
|
- name: OIDC_CONFIGURATION_URL
|
|
value: "https://authentik.ops.eblu.me/application/o/mealie/.well-known/openid-configuration"
|
|
- name: OIDC_CLIENT_ID
|
|
value: "mealie"
|
|
- name: OIDC_CLIENT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: mealie-oidc
|
|
key: client-secret
|
|
- name: OIDC_AUTO_REDIRECT
|
|
value: "false"
|
|
- name: OIDC_PROVIDER_NAME
|
|
value: "Authentik"
|
|
- name: OIDC_ADMIN_GROUP
|
|
value: "admins"
|
|
- name: OIDC_SIGNUP_ENABLED
|
|
value: "true"
|
|
- name: OIDC_USER_CLAIM
|
|
value: "email"
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /app/data
|
|
resources:
|
|
requests:
|
|
memory: "128Mi"
|
|
cpu: "50m"
|
|
limits:
|
|
memory: "1000Mi"
|
|
cpu: "500m"
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /api/app/about
|
|
port: 9000
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 30
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /api/app/about
|
|
port: 9000
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: mealie-data
|