- Multi-host flake.nix (3x N97 x86_64 + 2x RPi4 aarch64) - Shared modules: k3s-cluster, tailscale, meos-gateway - Node configs: n97-1 (control plane), n97-2/n97-3 (Ollama workers), rpi4-1/rpi4-2 (ARM workers) - K8s manifests: Forgejo, Postgres (CNPG), Umami, OpenBrain, MeOS Dashboard, MCP servers - Bootstrap and DB migration scripts - Migration plan doc (7-day phased rollout)
67 lines
No EOL
1.4 KiB
YAML
67 lines
No EOL
1.4 KiB
YAML
# Umami analytics — deployed to ARM worker (rpi4-2)
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: umami
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: umami
|
|
namespace: umami
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: umami
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: umami
|
|
spec:
|
|
nodeSelector:
|
|
kubernetes.io/arch: arm64
|
|
tolerations:
|
|
- key: "arm64"
|
|
operator: "Exists"
|
|
effect: "NoSchedule"
|
|
containers:
|
|
- name: umami
|
|
image: ghcr.io/umami-software/umami:postgresql-v2
|
|
ports:
|
|
- containerPort: 3000
|
|
env:
|
|
- name: DATABASE_TYPE
|
|
value: postgresql
|
|
- name: DATABASE_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: umami-db
|
|
key: url
|
|
- name: APP_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: umami-secret
|
|
key: secret
|
|
- name: DISABLE_TELEMETRY
|
|
value: "1"
|
|
resources:
|
|
requests:
|
|
memory: "128Mi"
|
|
cpu: "100m"
|
|
limits:
|
|
memory: "256Mi"
|
|
cpu: "500m"
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: umami
|
|
namespace: umami
|
|
spec:
|
|
ports:
|
|
- port: 3000
|
|
targetPort: 3000
|
|
selector:
|
|
app: umami |