Add K8s manifests for calendars backend, frontend (Caddy), CalDAV server, and Celery worker. Wire Pingora routing for cal.sunbeam.pt with path-based backend/caldav/static splits. Add OAuth2Client for OIDC, VaultDynamicSecret for DB credentials, VaultStaticSecret for Django/CalDAV keys, and TLS cert coverage for the cal subdomain. Register calendars in the integration service gaufre widget.
31 lines
1.2 KiB
YAML
31 lines
1.2 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: calendars-config
|
|
namespace: lasuite
|
|
data:
|
|
DJANGO_CONFIGURATION: Production
|
|
DJANGO_SETTINGS_MODULE: calendars.settings
|
|
DJANGO_ALLOWED_HOSTS: cal.DOMAIN_SUFFIX,calendars-backend.lasuite.svc.cluster.local,localhost
|
|
DJANGO_CSRF_TRUSTED_ORIGINS: https://cal.DOMAIN_SUFFIX
|
|
DB_NAME: calendars_db
|
|
DB_USER: calendars
|
|
CALDAV_URL: http://calendars-caldav.lasuite.svc.cluster.local:80
|
|
CALDAV_CALLBACK_BASE_URL: http://calendars-backend.lasuite.svc.cluster.local:8000
|
|
REDIS_URL: redis://valkey.data.svc.cluster.local:6379/5
|
|
DRAMATIQ_BROKER_URL: redis://valkey.data.svc.cluster.local:6379/5
|
|
DRAMATIQ_RESULT_BACKEND_URL: redis://valkey.data.svc.cluster.local:6379/6
|
|
APP_URL: https://cal.DOMAIN_SUFFIX
|
|
DEFAULT_FROM_EMAIL: noreply@sunbeam.pt
|
|
CALENDAR_INVITATION_FROM_EMAIL: calendar@sunbeam.pt
|
|
CALENDAR_ITIP_ENABLED: "True"
|
|
LOGIN_REDIRECT_URL: /
|
|
LOGIN_REDIRECT_URL_FAILURE: /
|
|
LOGOUT_REDIRECT_URL: /
|
|
FRONTEND_THEME: sunbeam
|
|
FRONTEND_HIDE_GAUFRE: "False"
|
|
NEXT_PUBLIC_VISIO_BASE_URL: https://meet.DOMAIN_SUFFIX
|
|
FRONTEND_CSS_URL: https://integration.DOMAIN_SUFFIX/api/v2/theme.css
|
|
OIDC_USERINFO_FULLNAME_FIELDS: given_name,family_name
|
|
THEME_CUSTOMIZATION_FILE_PATH: /app/theme.json
|