76 lines
2.6 KiB
YAML
76 lines
2.6 KiB
YAML
image:
|
|
repository: who-need-help
|
|
tag: local
|
|
pullPolicy: IfNotPresent
|
|
|
|
web:
|
|
replicas: 2
|
|
poolSize: "4"
|
|
|
|
worker:
|
|
replicas: 2
|
|
poolSize: "2"
|
|
maintenanceConcurrency: "2"
|
|
pushConcurrency: "1"
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 80
|
|
nodePort: null
|
|
|
|
app:
|
|
host: localhost
|
|
scheme: https
|
|
urlPort: "443"
|
|
port: "4000"
|
|
migratePoolSize: "2"
|
|
# OTP otherwise derives this from the container nofile ulimit. Some
|
|
# Kubernetes runtimes expose a value so large that each BEAM instance
|
|
# preallocates a multi-gigabyte port table.
|
|
erlangPortLimit: 65536
|
|
clusterInterface: eth0
|
|
codexSessionId: not-configured
|
|
# Initial pilot product policy. Use exactly "{}" only for an isolated test
|
|
# release that intentionally disables every shared counter.
|
|
rateLimitPoliciesJson: '{"registration_email":{"limit":4,"window_seconds":3600},"registration_ip":{"limit":120,"window_seconds":3600},"magic_link_email":{"limit":4,"window_seconds":3600},"magic_link_ip":{"limit":120,"window_seconds":3600},"password_login_email":{"limit":10,"window_seconds":900},"password_login_ip":{"limit":300,"window_seconds":900},"email_change_email":{"limit":3,"window_seconds":86400},"email_change_ip":{"limit":60,"window_seconds":3600},"support_request":{"limit":5,"window_seconds":86400},"support_request_ip":{"limit":120,"window_seconds":3600},"content_removal_notice":{"limit":20,"window_seconds":86400},"content_removal_notice_ip":{"limit":120,"window_seconds":3600}}'
|
|
publicContactVerificationMaxAgeSeconds: "86400"
|
|
publicCaseAccessMaxAgeSeconds: "31536000"
|
|
mapTileUrl: https://tile.openstreetmap.org/{z}/{x}/{y}.png
|
|
emailDeliveryProvider: smtp
|
|
smtpRelay: mailpit
|
|
smtpPort: "1025"
|
|
|
|
# Required. The Secret must contain DATABASE_URL, SECRET_KEY_BASE,
|
|
# HANDOVER_SECRET, RELEASE_COOKIE, and METRICS_TOKEN. It may also contain both
|
|
# GITHUB_OAUTH_CLIENT_ID and GITHUB_OAUTH_CLIENT_SECRET to enable verified
|
|
# GitHub linking, and both GOOGLE_OAUTH_CLIENT_ID and
|
|
# GOOGLE_OAUTH_CLIENT_SECRET to enable Google registration/sign-in. Optional
|
|
# SUPPORT_INBOX_ADDRESS enables metadata-only operator alerts and Reply-To.
|
|
# SMTP provider credentials can be kept in this Secret.
|
|
# Push is
|
|
# opt-in: provide PUSH_HTTP_ENDPOINT,
|
|
# PUSH_HTTP_BEARER_TOKEN, PUSH_HTTP_MAX_ATTEMPTS,
|
|
# PUSH_HTTP_RECEIVE_TIMEOUT_MS, PUSH_HTTP_CONNECT_TIMEOUT_MS, and
|
|
# PUSH_HTTP_RETRY_DELAY_MS as one complete set.
|
|
existingSecret: ""
|
|
|
|
ingress:
|
|
enabled: false
|
|
className: ""
|
|
annotations: {}
|
|
hosts:
|
|
- host: who-need-help.local
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls: []
|
|
|
|
networkPolicy:
|
|
enabled: true
|
|
|
|
podAnnotations: {}
|
|
podLabels: {}
|
|
nodeSelector: {}
|
|
tolerations: []
|
|
affinity: {}
|