123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419 |
- apiVersion: v1
- kind: ConfigMap
- metadata:
- name: {{ include "mastodon.fullname" . }}-env
- labels:
- {{- include "mastodon.labels" . | nindent 4 }}
- data:
- {{- if .Values.postgresql.enabled }}
- DB_HOST: {{ template "mastodon.postgresql.fullname" . }}
- DB_PORT: "5432"
- {{- else }}
- DB_HOST: {{ .Values.postgresql.postgresqlHostname }}
- DB_PORT: {{ .Values.postgresql.postgresqlPort | default "5432" | quote }}
- {{- end }}
- DB_NAME: {{ .Values.postgresql.auth.database }}
- DB_POOL: {{ include "mastodon.maxDbPool" . }}
- DB_USER: {{ .Values.postgresql.auth.username }}
- {{- if .Values.postgresql.readReplica.hostname }}
- REPLICA_DB_HOST: {{ .Values.postgresql.readReplica.hostname }}
- {{- end }}
- {{- if .Values.postgresql.readReplica.port }}
- REPLICA_DB_PORT: {{ .Values.postgresql.readReplica.port }}
- {{- end }}
- {{- if .Values.postgresql.readReplica.auth.database }}
- REPLICA_DB_NAME: {{ .Values.postgresql.readReplica.auth.database }}
- {{- end }}
- {{- if .Values.postgresql.readReplica.auth.username }}
- REPLICA_DB_USER: {{ .Values.postgresql.readReplica.auth.username }}
- {{- end }}
- {{- if .Values.postgresql.readReplica.auth.password }}
- REPLICA_DB_PASS: {{ .Values.postgresql.readReplica.auth.password }}
- {{- end }}
- PREPARED_STATEMENTS: {{ .Values.mastodon.preparedStatements | quote }}
- DEFAULT_LOCALE: {{ .Values.mastodon.locale }}
- {{- if .Values.elasticsearch.enabled }}
- ES_ENABLED: "true"
- ES_PRESET: {{ .Values.elasticsearch.preset | default "single_node_cluster" | quote }}
- ES_HOST: {{ template "mastodon.elasticsearch.fullname" . }}-master-hl
- ES_PORT: "9200"
- {{- else if .Values.elasticsearch.hostname }}
- ES_ENABLED: "true"
- ES_PRESET: {{ .Values.elasticsearch.preset | default "single_node_cluster" | quote }}
- ES_HOST: {{ include "mastodon.elasticsearch.fullHostname" .}}
- ES_PORT: {{ .Values.elasticsearch.port | default "9200" | quote }}
- {{- end }}
- {{- with .Values.elasticsearch.user }}
- ES_USER: {{ . }}
- {{- end }}
- LOCAL_DOMAIN: {{ .Values.mastodon.local_domain }}
- {{- with .Values.mastodon.web_domain }}
- WEB_DOMAIN: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.alternate_domains }}
- ALTERNATE_DOMAINS: {{ join "," . }}
- {{- end }}
- {{- with .Values.mastodon.singleUserMode }}
- SINGLE_USER_MODE: "true"
- {{- end }}
- {{- with .Values.mastodon.authorizedFetch }}
- AUTHORIZED_FETCH: {{ . | quote }}
- {{- end }}
- {{- with .Values.mastodon.limitedFederationMode }}
- LIMITED_FEDERATION_MODE: {{ . | quote }}
- {{- end }}
- # https://devcenter.heroku.com/articles/tuning-glibc-memory-behavior
- MALLOC_ARENA_MAX: "2"
- NODE_ENV: "production"
- RAILS_ENV: "production"
- {{- if .Values.redis.enabled }}
- REDIS_HOST: {{ template "mastodon.redis.fullname" . }}-master
- {{- else }}
- REDIS_HOST: {{ required "When the redis chart is disabled .Values.redis.hostname is required" .Values.redis.hostname }}
- {{- end }}
- REDIS_PORT: {{ .Values.redis.port | default "6379" | quote }}
- {{- if .Values.redis.sidekiq.enabled }}
- {{- if .Values.redis.sidekiq.hostname }}
- SIDEKIQ_REDIS_HOST: {{ .Values.redis.sidekiq.hostname }}
- {{- else }}
- SIDEKIQ_REDIS_HOST: {{ .Values.redis.hostname }}
- {{- end }}
- {{- if .Values.redis.sidekiq.port }}
- SIDEKIQ_REDIS_PORT: {{ .Values.redis.sidekiq.port | quote }}
- {{- else }}
- SIDEKIQ_REDIS_PORT: {{ .Values.redis.port | default "6379" | quote }}
- {{- end }}
- {{- end }}
- {{- if .Values.redis.cache.enabled }}
- {{- if .Values.redis.cache.hostname }}
- CACHE_REDIS_HOST: {{ .Values.redis.cache.hostname }}
- {{- else }}
- CACHE_REDIS_HOST: {{ .Values.redis.hostname}}
- {{- end }}
- {{- if .Values.redis.cache.port }}
- CACHE_REDIS_PORT: {{ .Values.redis.cache.port | quote }}
- {{- else }}
- CACHE_REDIS_PORT: {{ .Values.redis.port | default "6379" | quote }}
- {{- end }}
- {{- end }}
- {{- if .Values.mastodon.s3.enabled }}
- S3_BUCKET: {{ .Values.mastodon.s3.bucket }}
- S3_ENABLED: "true"
- S3_ENDPOINT: {{ .Values.mastodon.s3.endpoint }}
- S3_HOSTNAME: {{ .Values.mastodon.s3.hostname }}
- S3_PROTOCOL: "https"
- {{- if .Values.mastodon.s3.permission }}
- S3_PERMISSION: {{ .Values.mastodon.s3.permission }}
- {{- end }}
- {{- with .Values.mastodon.s3.region }}
- S3_REGION: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.s3.alias_host }}
- S3_ALIAS_HOST: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.s3.multipart_threshold }}
- S3_MULTIPART_THRESHOLD: "{{ . }}"
- {{- end }}
- {{- with .Values.mastodon.s3.override_path_style }}
- S3_OVERRIDE_PATH_STYLE: "{{ . }}"
- {{- end }}
- {{- end }}
- {{- with .Values.mastodon.smtp.auth_method }}
- SMTP_AUTH_METHOD: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.ca_file }}
- SMTP_CA_FILE: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.delivery_method }}
- SMTP_DELIVERY_METHOD: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.domain }}
- SMTP_DOMAIN: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.enable_starttls }}
- SMTP_ENABLE_STARTTLS: {{ . | quote }}
- {{- end }}
- {{- with .Values.mastodon.smtp.enable_starttls_auto }}
- SMTP_ENABLE_STARTTLS_AUTO: {{ . | quote }}
- {{- end }}
- {{- with .Values.mastodon.smtp.from_address }}
- SMTP_FROM_ADDRESS: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.return_path }}
- SMTP_RETURN_PATH: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.openssl_verify_mode }}
- SMTP_OPENSSL_VERIFY_MODE: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.port }}
- SMTP_PORT: {{ . | quote }}
- {{- end }}
- {{- with .Values.mastodon.smtp.reply_to }}
- SMTP_REPLY_TO: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.server }}
- SMTP_SERVER: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.tls }}
- SMTP_TLS: {{ . | quote }}
- {{- end }}
- STREAMING_CLUSTER_NUM: {{ .Values.mastodon.streaming.workers | quote }}
- {{- with .Values.mastodon.streaming.base_url }}
- STREAMING_API_BASE_URL: {{ . | quote }}
- {{- end }}
- {{- if .Values.mastodon.trusted_proxy_ip }}
- TRUSTED_PROXY_IP: {{ .Values.mastodon.trusted_proxy_ip }}
- {{ end }}
- {{- if .Values.externalAuth.oidc.enabled }}
- OIDC_ENABLED: {{ .Values.externalAuth.oidc.enabled | quote }}
- OIDC_DISPLAY_NAME: {{ .Values.externalAuth.oidc.display_name }}
- OIDC_ISSUER: {{ .Values.externalAuth.oidc.issuer }}
- OIDC_DISCOVERY: {{ .Values.externalAuth.oidc.discovery | quote }}
- OIDC_SCOPE: {{ .Values.externalAuth.oidc.scope | quote }}
- OIDC_UID_FIELD: {{ .Values.externalAuth.oidc.uid_field }}
- OIDC_CLIENT_ID: {{ .Values.externalAuth.oidc.client_id }}
- OIDC_CLIENT_SECRET: {{ .Values.externalAuth.oidc.client_secret }}
- OIDC_REDIRECT_URI: {{ .Values.externalAuth.oidc.redirect_uri }}
- OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ .Values.externalAuth.oidc.assume_email_is_verified | quote }}
- {{- with .Values.externalAuth.oidc.client_auth_method }}
- OIDC_CLIENT_AUTH_METHOD: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.response_type }}
- OIDC_RESPONSE_TYPE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.response_mode }}
- OIDC_RESPONSE_MODE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.display }}
- OIDC_DISPLAY: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.prompt }}
- OIDC_PROMPT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.send_nonce }}
- OIDC_SEND_NONCE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.send_scope_to_token_endpoint }}
- OIDC_SEND_SCOPE_TO_TOKEN_ENDPOINT: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.idp_logout_redirect_uri }}
- OIDC_IDP_LOGOUT_REDIRECT_URI: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.http_scheme }}
- OIDC_HTTP_SCHEME: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.host }}
- OIDC_HOST: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.port }}
- OIDC_PORT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.jwks_uri }}
- OIDC_JWKS_URI: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.auth_endpoint }}
- OIDC_AUTH_ENDPOINT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.token_endpoint }}
- OIDC_TOKEN_ENDPOINT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.user_info_endpoint }}
- OIDC_USER_INFO_ENDPOINT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.end_session_endpoint }}
- OIDC_END_SESSION_ENDPOINT: {{ . }}
- {{- end }}
- {{- end }}
- {{- if .Values.externalAuth.saml.enabled }}
- SAML_ENABLED: {{ .Values.externalAuth.saml.enabled | quote }}
- SAML_ACS_URL: {{ .Values.externalAuth.saml.acs_url }}
- SAML_ISSUER: {{ .Values.externalAuth.saml.issuer }}
- SAML_IDP_SSO_TARGET_URL: {{ .Values.externalAuth.saml.idp_sso_target_url }}
- SAML_IDP_CERT: {{ .Values.externalAuth.saml.idp_cert | quote }}
- {{- with .Values.externalAuth.saml.idp_cert_fingerprint }}
- SAML_IDP_CERT_FINGERPRINT: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.name_identifier_format }}
- SAML_NAME_IDENTIFIER_FORMAT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.saml.cert }}
- SAML_CERT: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.private_key }}
- SAML_PRIVATE_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.want_assertion_signed }}
- SAML_SECURITY_WANT_ASSERTION_SIGNED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.want_assertion_encrypted }}
- SAML_SECURITY_WANT_ASSERTION_ENCRYPTED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.assume_email_is_verified }}
- SAML_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.uid_attribute }}
- SAML_UID_ATTRIBUTE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.uid }}
- SAML_ATTRIBUTES_STATEMENTS_UID: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.email }}
- SAML_ATTRIBUTES_STATEMENTS_EMAIL: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.full_name }}
- SAML_ATTRIBUTES_STATEMENTS_FULL_NAME: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.first_name }}
- SAML_ATTRIBUTES_STATEMENTS_FIRST_NAME: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.last_name }}
- SAML_ATTRIBUTES_STATEMENTS_LAST_NAME: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.verified }}
- SAML_ATTRIBUTES_STATEMENTS_VERIFIED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.verified_email }}
- SAML_ATTRIBUTES_STATEMENTS_VERIFIED_EMAIL: {{ . | quote }}
- {{- end }}
- {{- end }}
- {{- with .Values.externalAuth.oauth_global.omniauth_only }}
- OMNIAUTH_ONLY: {{ . | quote }}
- {{- end }}
- {{- if .Values.externalAuth.cas.enabled }}
- CAS_ENABLED: {{ .Values.externalAuth.cas.enabled | quote }}
- CAS_URL: {{ .Values.externalAuth.cas.url }}
- CAS_HOST: {{ .Values.externalAuth.cas.host }}
- CAS_PORT: {{ .Values.externalAuth.cas.port }}
- CAS_SSL: {{ .Values.externalAuth.cas.ssl | quote }}
- {{- with .Values.externalAuth.cas.validate_url }}
- CAS_VALIDATE_URL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.callback_url }}
- CAS_CALLBACK_URL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.logout_url }}
- CAS_LOGOUT_URL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.login_url }}
- CAS_LOGIN_URL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.uid_field }}
- CAS_UID_FIELD: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.ca_path }}
- CAS_CA_PATH: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.disable_ssl_verification }}
- CAS_DISABLE_SSL_VERIFICATION: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.assume_email_is_verified }}
- CAS_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.uid }}
- CAS_UID_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.name }}
- CAS_NAME_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.email }}
- CAS_EMAIL_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.nickname }}
- CAS_NICKNAME_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.first_name }}
- CAS_FIRST_NAME_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.last_name }}
- CAS_LAST_NAME_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.location }}
- CAS_LOCATION_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.image }}
- CAS_IMAGE_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.phone }}
- CAS_PHONE_KEY: {{ . | quote }}
- {{- end }}
- {{- end }}
- {{- with .Values.externalAuth.pam.enabled }}
- PAM_ENABLED: {{ . | quote }}
- {{- with .Values.externalAuth.pam.email_domain }}
- PAM_EMAIL_DOMAIN: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.pam.default_service }}
- PAM_DEFAULT_SERVICE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.pam.controlled_service }}
- PAM_CONTROLLED_SERVICE: {{ . }}
- {{- end }}
- {{- end }}
- {{- if .Values.externalAuth.ldap.enabled }}
- LDAP_ENABLED: {{ .Values.externalAuth.ldap.enabled | quote }}
- LDAP_HOST: {{ .Values.externalAuth.ldap.host }}
- LDAP_PORT: {{ .Values.externalAuth.ldap.port | quote }}
- LDAP_METHOD: {{ .Values.externalAuth.ldap.method }}
- {{- if .Values.externalAuth.ldap.tls_no_verify }}
- LDAP_TLS_NO_VERIFY: {{ .Values.externalAuth.ldap.tls_no_verify | quote }}
- {{- end }}
- {{- if .Values.externalAuth.ldap.base }}
- LDAP_BASE: {{ .Values.externalAuth.ldap.base }}
- {{- end }}
- {{- if .Values.externalAuth.ldap.bind_dn }}
- LDAP_BIND_DN: {{ .Values.externalAuth.ldap.bind_dn }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.password }}
- LDAP_PASSWORD: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.uid }}
- LDAP_UID: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.mail }}
- LDAP_MAIL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.search_filter }}
- LDAP_SEARCH_FILTER: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.uid_conversion.enabled }}
- LDAP_UID_CONVERSION_ENABLED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.uid_conversion.search }}
- LDAP_UID_CONVERSION_SEARCH: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.uid_conversion.replace }}
- LDAP_UID_CONVERSION_REPLACE: {{ . }}
- {{- end }}
- {{- end }}
- {{- if .Values.mastodon.metrics.statsd.address }}
- STATSD_ADDR: {{ .Values.mastodon.metrics.statsd.address }}
- {{- else if .Values.mastodon.metrics.statsd.exporter.enabled }}
- STATSD_ADDR: localhost:9125
- {{- end }}
- {{- range $k, $v := .Values.mastodon.extraEnvVars }}
- {{ $k }}: {{ quote $v }}
- {{- end }}
- {{- if .Values.mastodon.deepl.enabled }}
- DEEPL_PLAN: {{ .Values.mastodon.deepl.plan }}
- {{- end }}
- {{- if .Values.mastodon.hcaptcha.enabled }}
- HCAPTCHA_SITE_KEY: {{ .Values.mastodon.hcaptcha.siteId }}
- {{- end }}
- {{- if .Values.mastodon.cacheBuster.enabled }}
- CACHE_BUSTER_ENABLED: "true"
- {{- if .Values.mastodon.cacheBuster.httpMethod }}
- CACHE_BUSTER_HTTP_METHOD: {{ .Values.mastodon.cacheBuster.httpMethod }}
- {{- end }}
- {{- if .Values.mastodon.cacheBuster.authHeader }}
- CACHE_BUSTER_SECRET_HEADER: {{ .Values.mastodon.cacheBuster.authHeader }}
- {{- end }}
- {{- else }}
- CACHE_BUSTER_ENABLED: "false"
- {{- end }}
- {{- with .Values.timezone }}
- TZ: {{ . | quote }}
- {{- end }}
|