---
namespace: "apps"
environment:
- name: "KEEPORG_MASTER_KEY_FILE"
  value: "/etc/keeporg/config.txt"
- name: "KEEPORG_EXTERNAL_URL"
  value: "https://keeporg.tiredsysadmin.cc"
# nginx reaches the pod from the cluster's private network; its
# X-Forwarded-For is what the sign-in rate limits count by.
- name: "KEEPORG_TRUSTED_PROXIES"
  value: "10.0.0.0/8,172.16.0.0/12,192.168.0.0/16"
image:
  name: "repo.rcmd.space/keeporg"
  version: "v0.1.0"
network:
  ports:
  - name: "main"
    node: 32970
    source: 8765
    destination: 8765
mounts:
  - name: "db"
    source: "/var/lib/keeporg"
    destination: "/var/lib/keeporg"
secrets:
  - name: "keeporg-encryption"
    destination: "/etc/keeporg"