etherpad: cleanup for production

apps/etherpadlite-ssl/etherpad/settings.json

@@ -170,7 +170,7 @@
 
   "dbType": "dirty",
   "dbSettings": {
-    "filename": "var/dirty.db"
+    "filename": "/data/dirty.db"
   },
 
   /*

apps/etherpadlite-ssl/foo

@@ -1,2 +0,0 @@
-nginx-certbot-helm-1624126293-aservice.default.svc.c2.k8s.ooo
-nginx-certbot-helm-1624126293-aservice   ClusterIP   2a0a:e5c0:13:e2::f808   <none>        80/TCP,443/TCP   2m13s

apps/etherpadlite-ssl/nginx/http.conf

@@ -1,16 +0,0 @@
-server {
-    listen *:80;
-    listen [::]:80;
-
-    server_name _;
-
-    # Forward for certbot
-    location /.well-known/acme-challenge/ {
-        root /usr/share/nginx/html;
-    }
-
-    # Everything else -> ssl
-    location / {
-        return 301 https://$host$request_uri;
-    }
-}

apps/etherpadlite-ssl/templates/deployment.yaml

@@ -23,18 +23,10 @@ spec:
             - name: etherpadconfig
               mountPath: "/opt/etherpad-lite/settings.json"
               subPath: settings.json
-        - name: nginx
-          image: nginx:1.21.0-alpine
-          ports:
-            - containerPort: 80
-            - containerPort: 443
-          volumeMounts:
-            - name: nginx-config
-              mountPath: "/etc/nginx/conf.d/"
             - name: etcletsencrypt
               mountPath: "/etc/letsencrypt"
-            - name: webroot
-              mountPath: "/usr/share/nginx/html"
+            - name: data
+              mountPath: "/data"
       volumes:
         - name: nginx-config
           configMap:
@@ -42,9 +34,9 @@ spec:
         - name: etcletsencrypt
           persistentVolumeClaim:
             claimName: {{ .Release.Name }}-letsencrypt-certs
-        - name: webroot
+        - name: data
           persistentVolumeClaim:
-            claimName: {{ .Release.Name }}-webroot
+            claimName: {{ .Release.Name }}-data
 ---
 apiVersion: v1
 kind: Service
@@ -85,7 +77,7 @@ spec:
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: {{ .Release.Name }}-webroot
+  name: {{ .Release.Name }}-data
 spec:
   accessModes:
     - ReadWriteMany
@@ -115,6 +107,10 @@ spec:
             value: "{{ .Release.Name }}-{{ .Values.serviceName }}.{{ .Release.Namespace }}.svc.{{ .Values.clusterDomain }}"
           - name: EMAIL
             value: "{{ .Values.email }}"
+          {{ if eq .Values.letsencryptStaging "no" }}
+          - name: STAGING
+            value: "no"
+          {{ end }}
         volumeMounts:
           - name: etcletsencrypt
             mountPath: "/etc/letsencrypt"

apps/etherpadlite-ssl/values.yaml

@@ -1,3 +1,4 @@
-serviceName: aservice
+serviceName: pad
 clusterDomain: c2.k8s.ooo
 email: technik@ungleich.ch
+letsencryptStaging: "no"