Erich Blume
735b643429
## Summary - Deploy miniflux in k8s via ArgoCD - Expose via Tailscale Ingress at feed.tail8d86e.ts.net - Retire brew PostgreSQL (no longer needed) - Rename k8s-pg to pg (canonical hostname) - Remove ansible miniflux and postgresql roles - Update borgmatic to backup pg.tail8d86e.ts.net - Update all zk documentation ## Deployment and Testing - [x] Miniflux pod running in k8s - [x] User login works at https://feed.tail8d86e.ts.net - [x] Feeds and entries visible - [x] brew miniflux and postgresql stopped - [x] Tailscale services migrated (feed, pg) - [x] zk documentation updated - [x] Run ansible to apply role removals - [ ] Verify borgmatic backup with new pg hostname 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/33
28 lines
935 B
YAML
28 lines
935 B
YAML
# Miniflux RSS Reader
|
|
# Requires: CloudNativePG PostgreSQL cluster and manual secret setup
|
|
#
|
|
# Before syncing, create the database secret:
|
|
# kubectl create namespace miniflux
|
|
# op inject -i argocd/manifests/miniflux/secret-db.yaml.tpl | kubectl apply -f -
|
|
#
|
|
# Note: The Tailscale Ingress may initially get hostname "feed-1" if "feed" is
|
|
# already claimed. After clearing the old service, delete the device from
|
|
# Tailscale admin to allow the Ingress to claim "feed".
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: miniflux
|
|
namespace: argocd
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: ssh://forgejo@indri.tail8d86e.ts.net:2200/eblume/blumeops.git
|
|
targetRevision: main
|
|
path: argocd/manifests/miniflux
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: miniflux
|
|
syncPolicy:
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
# Manual sync only - no automated sync on git push
|