Always pull git-sync image

manifests/git-sync.yaml

@@ -0,0 +1,94 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: git-sync
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: git-sync-github
+  namespace: git-sync
+  annotations:
+    kube-1password: cfo2ufhgem57clbscxetxgevue
+    kube-1password/vault: Kubernetes
+    kube-1password/password-key: token
+type: Opaque
+data:
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: git-sync-gitea
+  namespace: git-sync
+  annotations:
+    kube-1password: b7kpdlcvt7y63bozu3i4j4lojm
+    kube-1password/vault: Kubernetes
+    kube-1password/password-key: token
+type: Opaque
+data:
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: git-sync-gitlab
+  namespace: git-sync
+  annotations:
+    kube-1password: t47v3xdgadiifgoi4wmqibrlty
+    kube-1password/vault: Kubernetes
+    kube-1password/password-key: token
+type: Opaque
+data:
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: git-sync-bitbucket
+  namespace: git-sync
+  annotations:
+    kube-1password: adrki45krr2tq34sug7dhdk5iy
+    kube-1password/vault: Kubernetes
+    kube-1password/password-key: token
+type: Opaque
+data:
+---
+apiVersion: batch/v1beta1
+kind: CronJob
+metadata:
+  name: git-sync
+  namespace: git-sync
+spec:
+  schedule: "0 */1 * * *"
+  concurrencyPolicy: Forbid
+  failedJobsHistoryLimit: 1
+  successfulJobsHistoryLimit: 1
+  jobTemplate:
+    spec:
+      backoffLimit: 1
+      template:
+        spec:
+          containers:
+          - name: sync
+            image: docker.cluster.fun/averagemarcus/git-sync:latest
+            imagePullPolicy: Always
+            env:
+            - name: GITHUB_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: git-sync-github
+                  key: token
+            - name: GITEA_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: git-sync-gitea
+                  key: token
+            - name: GITLAB_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: git-sync-gitlab
+                  key: token
+            - name: BITBUCKET_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: git-sync-bitbucket
+                  key: token
+          restartPolicy: Never

manifests/photoprism_chart.yaml

@@ -14,7 +14,7 @@ spec:
     - ReadWriteOnce
   resources:
     requests:
-      storage: 1Gi
+      storage: 20Gi
 
 ---
 
@@ -41,10 +41,12 @@ spec:
       PHOTOPRISM_SITE_CAPTION: ""
     persistence:
       enabled: true
-      storagePath: /photoprism/storage
+      cachePath: /data/cache
+      originalsPath: /data/originals
+      storagePath: /data/storage
       volumeMounts:
       - name: storage
-        mountPath: /photoprism/storage
+        mountPath: /data
       volumes:
       - name: storage
         persistentVolumeClaim:

manifests/svg-to-dxf.yaml

@@ -0,0 +1,68 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: svg-to-dxf
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: svg-to-dxf
+  namespace: svg-to-dxf
+spec:
+  type: ClusterIP
+  ports:
+  - port: 80
+    targetPort: web
+    name: web
+  selector:
+    app: svg-to-dxf
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: svg-to-dxf
+  namespace: svg-to-dxf
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: svg-to-dxf
+  template:
+    metadata:
+      labels:
+        app: svg-to-dxf
+    spec:
+      containers:
+      - name: web
+        image: docker.cluster.fun/averagemarcus/svg-to-dxf:latest
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+          name: web
+        resources:
+          requests:
+            memory: 100Mi
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: svg-to-dxf
+  namespace: svg-to-dxf
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    traefik.ingress.kubernetes.io/frontend-entry-points: http,https
+    traefik.ingress.kubernetes.io/redirect-entry-point: https
+    traefik.ingress.kubernetes.io/redirect-permanent: "true"
+spec:
+  tls:
+  - hosts:
+    - svg-to-dxf.cluster.fun
+    secretName: svg-to-dxf-ingress
+  rules:
+  - host: svg-to-dxf.cluster.fun
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: svg-to-dxf
+          servicePort: 80