Add Outline

applications/outline/outline/outline-deployment.yaml

@@ -0,0 +1,118 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: outline
+  name: outline
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: outline
+  template:
+    metadata:
+      labels:
+        app: outline
+    spec:
+      restartPolicy: Always
+      terminationGracePeriodSeconds: 60
+      containers:
+        - name: outline
+          image: docker.getoutline.com/outlinewiki/outline:1.8.1
+          resources:
+            requests:
+              memory: "512Mi"
+              cpu: "250m"
+            limits:
+              memory: "2Gi"
+              cpu: "2000m"
+          ports:
+            - containerPort: 3000
+          env:
+            - name: TZ
+              value: "Europe/Brussels"
+            - name: NODE_ENV
+              value: "production"
+            - name: URL
+              value: "https://outline.jsme.be"
+            - name: PORT
+              value: "3000"
+            # TLS is terminated at the gateway and X-Forwarded-Proto is set to
+            # https on the HTTPRoute, so Outline must not force an https redirect.
+            - name: FORCE_HTTPS
+              value: "false"
+
+            # --- Database (PostgreSQL) ---
+            - name: DATABASE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: outline-secrets
+                  key: database_url
+            # In-cluster Postgres has no TLS; disable SSL on the connection.
+            - name: PGSSLMODE
+              value: "disable"
+
+            # --- Cache / queue (Redis-compatible Valkey) ---
+            - name: REDIS_URL
+              value: "redis://outline-redis.outline.svc.cluster.local:6379"
+
+            # --- Secrets ---
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: outline-secrets
+                  key: secret_key
+            - name: UTILS_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: outline-secrets
+                  key: utils_secret
+
+            # --- File storage (MinIO / S3) ---
+            - name: FILE_STORAGE
+              value: "s3"
+            - name: AWS_REGION
+              value: "us-east-1"
+            - name: AWS_S3_UPLOAD_BUCKET_URL
+              value: "https://s3.jsme.be"
+            - name: AWS_S3_UPLOAD_BUCKET_NAME
+              value: "outline"
+            - name: AWS_S3_FORCE_PATH_STYLE
+              value: "true"
+            - name: AWS_S3_ACL
+              value: "private"
+            - name: AWS_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: outline-secrets
+                  key: s3_access_key
+            - name: AWS_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: outline-secrets
+                  key: s3_secret_key
+
+            # --- Authentication (Authentik OIDC) ---
+            - name: OIDC_DISPLAY_NAME
+              value: "Authentik"
+            - name: OIDC_AUTH_URI
+              value: "https://auth.jsme.be/application/o/authorize/"
+            - name: OIDC_TOKEN_URI
+              value: "https://auth.jsme.be/application/o/token/"
+            - name: OIDC_USERINFO_URI
+              value: "https://auth.jsme.be/application/o/userinfo/"
+            - name: OIDC_LOGOUT_URI
+              value: "https://auth.jsme.be/application/o/outline/end-session/"
+            - name: OIDC_USERNAME_CLAIM
+              value: "preferred_username"
+            - name: OIDC_SCOPES
+              value: "openid profile email"
+            - name: OIDC_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: outline-secrets
+                  key: oidc_client_id
+            - name: OIDC_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: outline-secrets
+                  key: oidc_client_secret