disable searngx (mem usage is too much)
All checks were successful
Check Kubernetes YAMLs / scan (push) Successful in 20s

This commit is contained in:
Lee
2024-09-24 08:01:21 +01:00
parent 6318c34ad1
commit 1fb2cedf28
9 changed files with 2 additions and 2 deletions

View File

@ -1,25 +0,0 @@
---
apiVersion: v1
kind: ConfigMap
metadata:
name: searxng-config
data:
limiter.toml: |
# This configuration file updates the default configuration file
# See https://github.com/searxng/searxng/blob/master/searx/limiter.toml
[botdetection.ip_limit]
# activate link_token method in the ip_limit method
link_token = true
settings.yml: |
# see https://docs.searxng.org/admin/settings/settings.html#settings-use-default-settings
use_default_settings: true
server:
# base_url is defined in the SEARXNG_BASE_URL environment variable, see .env and docker-compose.yml
limiter: true # can be disabled for a private instance
image_proxy: false
ui:
static_use_hash: true
redis:
url: redis://searxng-redis:6379/0

View File

@ -1,47 +0,0 @@
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: searxng
namespace: public-services
spec:
replicas: 1
selector:
matchLabels:
app: searxng
template:
metadata:
labels:
app: searxng
spec:
containers:
- name: searxng
image: docker.io/searxng/searxng:2024.9.23-6be56aee1
ports:
- containerPort: 8080
env:
- name: SEARXNG_BASE_URL
value: "https://search.fascinated.cc"
- name: SEARXNG_SECRET
valueFrom:
secretKeyRef:
name: searxng-secret
key: secret_key
volumeMounts:
- name: searxng-config-volume
mountPath: /etc/searxng/limiter.toml
subPath: limiter.toml
- name: searxng-config-volume
mountPath: /etc/searxng/settings.yml
subPath: settings.yml
resources:
requests:
memory: "384Mi"
cpu: "100m"
limits:
memory: "512Mi"
cpu: "500m"
volumes:
- name: searxng-config-volume
configMap:
name: searxng-config

View File

@ -1,21 +0,0 @@
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: searxng-ingress
namespace: public-services
annotations:
kubernetes.io/ingress.class: traefik-external
spec:
entryPoints:
- websecure
routes:
- match: Host(`search.fascinated.cc`)
kind: Rule
middlewares:
- name: default-headers
namespace: traefik
services:
- name: searxng-service
port: 8080
tls:
secretName: fascinated-cc

View File

@ -1,13 +0,0 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: public-services
resources:
- ./redis/pvc.yaml
- ./redis/redis.yaml
- ./redis/service.yaml
- config.yaml
- sealed-secrets.yaml
- deployment.yaml
- service.yaml
- ingress.yaml

View File

@ -1,12 +0,0 @@
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: searxng-redis-pvc
namespace: public-services
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 1Gi

View File

@ -1,33 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: searxng-redis
namespace: public-services
spec:
replicas: 1
selector:
matchLabels:
app: searxng-redis
template:
metadata:
labels:
app: searxng-redis
spec:
containers:
- name: searxng-redis
image: docker.io/valkey/valkey:8-alpine
command:
["valkey-server", "--save", "30", "1", "--loglevel", "warning"]
ports:
- containerPort: 6379
volumeMounts:
- name: redis-data
mountPath: /data
resources:
limits:
memory: "128Mi"
cpu: "100m"
volumes:
- name: redis-data
persistentVolumeClaim:
claimName: searxng-redis-pvc

View File

@ -1,13 +0,0 @@
---
apiVersion: v1
kind: Service
metadata:
name: searxng-redis
namespace: public-services
spec:
type: ClusterIP
ports:
- port: 6379
targetPort: 6379
selector:
app: searxng-redis

View File

@ -1,16 +0,0 @@
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
name: searxng-secret
namespace: public-services
spec:
encryptedData:
secret_key: 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
template:
metadata:
creationTimestamp: null
name: searxng-secret
namespace: public-services
type: Opaque

View File

@ -1,13 +0,0 @@
---
apiVersion: v1
kind: Service
metadata:
name: searxng-service
namespace: public-services
spec:
type: ClusterIP
ports:
- port: 8080
targetPort: 8080
selector:
app: searxng