production-values.yaml 1.55 KB
Newer Older
Dominik Hebeler's avatar
Dominik Hebeler committed
1 2 3
service:
  externalPort: 80
  internalPort: 80
Dominik Hebeler's avatar
Dominik Hebeler committed
4
hpa:
Dominik Hebeler's avatar
Dominik Hebeler committed
5
  minReplicas: 5
6
  maxReplicas: 100
7 8 9 10 11 12 13
resources:
  limits:
    cpu: 500m
    memory: 1Gi
  requests:
    cpu: 500m
    memory: 1Gi
Dominik Hebeler's avatar
Dominik Hebeler committed
14 15
podDisruptionBudget:
  enabled: true
16
  minAvailable: 4
Dominik Hebeler's avatar
Dominik Hebeler committed
17
  maxUnavailable:
18 19 20 21
podAnnotations:
  prometheus.io/scrape: "true"
  prometheus.io/path: /metrics
  prometheus.io/port: "80"
Dominik Hebeler's avatar
Dominik Hebeler committed
22 23
ingress:
  annotations:
Dominik Hebeler's avatar
Dominik Hebeler committed
24
    cert-manager.io/cluster-issuer: letsencrypt-prod
Dominik Hebeler's avatar
Dominik Hebeler committed
25
    nginx.ingress.kubernetes.io/configuration-snippet: |
Dominik Hebeler's avatar
Dominik Hebeler committed
26 27 28 29 30
      more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem; script-src-attr; style-src 'self' 'unsafe-inline'; style-src-elem; style-src-attr; img-src 'self'; font-src 'self'; connect-src 'self'; media-src; object-src; prefetch-src; child-src; frame-src 'self'; worker-src; frame-ancestors 'self' https://scripts.zdv.uni-mainz.de; form-action 'self'; base-uri; manifest-src; plugin-types; report-uri; report-to";
      more_set_headers "X-Frame-Options: DENY";
      more_set_headers "X-Content-Type-Options: nosniff";
      more_set_headers "ReferrerPolicy: origin";
      more_set_headers "X-XSS-Protection: 1; mode=block";
Dominik Hebeler's avatar
Dominik Hebeler committed
31 32 33 34 35 36 37 38
      if ($host = "www.metager.de") {
          return 301 https://metager.de$request_uri;
      }
      if ($host = "www.metager.org") {
          return 301 https://metager.org$request_uri;
      }
      if ($host = "www.metager.es") {
          return 301 https://metager.es$request_uri;
39 40 41
      }
      if ($host = "klassik.metager.org") {
          return 301 https://metager.de$request_uri;
Dominik Hebeler's avatar
Dominik Hebeler committed
42
      }