diff --git a/apps/crowdsec/helmchart.yaml b/apps/crowdsec/helmchart.yaml index bc7948c..2d13bee 100644 --- a/apps/crowdsec/helmchart.yaml +++ b/apps/crowdsec/helmchart.yaml @@ -34,6 +34,7 @@ spec: - namespace: infra-net podName: ingress-nginx-controller-* program: nginx + poll_without_inotify: true env: - name: COLLECTIONS value: "crowdsecurity/nginx" diff --git a/apps/gitea/helmchart.yaml b/apps/gitea/helmchart.yaml index b801f0c..0e59b12 100644 --- a/apps/gitea/helmchart.yaml +++ b/apps/gitea/helmchart.yaml @@ -36,6 +36,8 @@ spec: queue: TYPE: redis CONN_STR: redis://:ribiPwYQNU6GWxCYR0Nj@redis-master.infra-data:6379/0 + repository: + DEFAULT_REPO_UNITS: repo.code,repo.releases,repo.issues,repo.pulls service: DISABLE_REGISTRATION: true NO_REPLY_ADDRESS: noreply.dev.cm @@ -44,6 +46,8 @@ spec: i18n: LANGS: zh-CN,en-US NAMES: 简体中文,English + other: + SHOW_FOOTER_VERSION: false log: LEVEL: Info extraVolumes: diff --git a/apps/gitea/ingress-http.yaml b/apps/gitea/ingress-http.yaml index 5c1c6a7..8d96add 100644 --- a/apps/gitea/ingress-http.yaml +++ b/apps/gitea/ingress-http.yaml @@ -3,6 +3,8 @@ kind: Ingress metadata: name: gitea-http namespace: infra-devops + annotations: + nginx.ingress.kubernetes.io/proxy-body-size: "50m" spec: ingressClassName: nginx rules: @@ -16,7 +18,7 @@ spec: name: gitea-http port: number: 3000 - +--- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: diff --git a/core/nginx/helmchart.yaml b/core/nginx/helmchart.yaml index 4e424d2..738fd54 100644 --- a/core/nginx/helmchart.yaml +++ b/core/nginx/helmchart.yaml @@ -64,13 +64,9 @@ spec: - name: API_URL value: "http://crowdsec-service.infra-monitor.svc.cluster.local:8080" - name: API_KEY - value: "OKMrkF5QolkRMx0LRW1xzgy6uu+iJK+qlfJhgNyHSVg" + value: "gISXV0a5N9oflSL4PCsfmDHjq+VNz0G6mRkMhuDZTvY" - name: BOUNCER_CONFIG value: "/crowdsec/crowdsec-bouncer.conf" - - name: MODE - value: "stream" - - name: UPDATE_FREQUENCY - value: "60" command: ['sh', '-c', "bash /docker_start.sh; mkdir -p /lua_plugins/crowdsec/; cp -R /crowdsec/* /lua_plugins/crowdsec/"] volumeMounts: - name: crowdsec-bouncer-plugin