review-apps-values.yaml 1.5 KB
Newer Older
Dominik Hebeler's avatar
Dominik Hebeler committed
1
2
postgresql:
    enabled: false
Dominik Hebeler's avatar
Dominik Hebeler committed
3
4
hpa: 
  enabled: false
5
resources:
Dominik Hebeler's avatar
Dominik Hebeler committed
6
7
  requests:
  limits:
Dominik Hebeler's avatar
Dominik Hebeler committed
8
ingress: 
Dominik Hebeler's avatar
Dominik Hebeler committed
9
  annotations:
Dominik Hebeler's avatar
Dominik Hebeler committed
10
    cert-manager.io/cluster-issuer: letsencrypt-prod
Dominik Hebeler's avatar
Dominik Hebeler committed
11
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
Dominik Hebeler's avatar
Dominik Hebeler committed
12
    nginx.ingress.kubernetes.io/configuration-snippet: |
Dominik Hebeler's avatar
Dominik Hebeler committed
13
      more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; media-src; object-src; prefetch-src; child-src; frame-src 'self'; worker-src; frame-ancestors 'self' https://scripts.zdv.uni-mainz.de; form-action 'self' www.paypal.com; base-uri; manifest-src; plugin-types; report-uri; report-to";
14
      more_set_headers "X-Frame-Options: sameorigin";
Dominik Hebeler's avatar
Dominik Hebeler committed
15
16
17
      more_set_headers "X-Content-Type-Options: nosniff";
      more_set_headers "ReferrerPolicy: origin";
      more_set_headers "X-XSS-Protection: 1; mode=block";
18
19
20
      if ($arg_out = "results-with-style") {
        more_set_headers "X-Frame-Options: allow-from https://scripts.zdv.uni-mainz.de/";
      }
Dominik Hebeler's avatar
Dominik Hebeler committed
21
  tls: 
22
23
    enabled: true
    secretName: "metager-de-tls"
Dominik Hebeler's avatar
Dominik Hebeler committed
24
25
service: 
  commonName: ""
Dominik Hebeler's avatar
Dominik Hebeler committed
26
27
  externalPort: 80
  internalPort: 80
28
deploymentApiVersion: apps/v1
29
resourcesPhpfpm: 
30
31
  requests:
  limits:
32
resourcesNginx: 
33
34
  requests:
  limits:
35
resourcesRedis: 
36
37
  requests:
  limits:
38
resourcesFetcher: 
39
  requests:
Dominik Hebeler's avatar
Dominik Hebeler committed
40
  limits: