development-values.yaml 1.53 KB
Newer Older
1 2 3
service:
  externalPort: 80
  internalPort: 80
Dominik Hebeler's avatar
Dominik Hebeler committed
4
hpa:
Dominik Hebeler's avatar
Dominik Hebeler committed
5
  enabled: true
6
  minReplicas: 2
Dominik Hebeler's avatar
Dominik Hebeler committed
7
  maxReplicas: 5
8 9 10 11 12 13 14
resources:
  limits:
    cpu: 500m
    memory: 1Gi
  requests:
    cpu: 500m
    memory: 1Gi
Dominik Hebeler's avatar
Dominik Hebeler committed
15 16 17
podDisruptionBudget:
  enabled: true
  minAvailable: 1
Dominik Hebeler's avatar
Dominik Hebeler committed
18
  maxUnavailable:
19 20 21 22
podAnnotations:
  prometheus.io/scrape: "true"
  prometheus.io/path: /metrics
  prometheus.io/port: "80"
Dominik Hebeler's avatar
Dominik Hebeler committed
23
deploymentApiVersion: apps/v1
24 25
ingress:
  annotations:
Dominik Hebeler's avatar
Dominik Hebeler committed
26
    cert-manager.io/cluster-issuer: letsencrypt-prod
Dominik Hebeler's avatar
Dominik Hebeler committed
27
    nginx.ingress.kubernetes.io/configuration-snippet: |
Dominik Hebeler's avatar
Dominik Hebeler committed
28
      more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; connect-src 'self'; media-src; object-src; prefetch-src; child-src; frame-src 'self'; worker-src; frame-ancestors 'self' https://scripts.zdv.uni-mainz.de; form-action 'self'; base-uri; manifest-src; plugin-types; report-uri; report-to";
29
      more_set_headers "X-Frame-Options: sameorigin";
Dominik Hebeler's avatar
Dominik Hebeler committed
30 31 32
      more_set_headers "X-Content-Type-Options: nosniff";
      more_set_headers "ReferrerPolicy: origin";
      more_set_headers "X-XSS-Protection: 1; mode=block";
33 34 35
      if ($arg_out = "results-with-style") {
        more_set_headers "X-Frame-Options: allow-from https://scripts.zdv.uni-mainz.de/";
      }
Dominik Hebeler's avatar
Dominik Hebeler committed
36 37
      if ($host = "www.metager3.de") {
          return 301 https://metager3.de$request_uri;
38
      }