Bulwark is stateful (local /app/data) — Vercel serverless (read-only fs) crashes it. Deploy as a container with 4 persistent volumes on microk8s, alongside bulwark.sandbox.vnc.de. Adds deploy/k8s/ (namespace, pvc, deployment, service, ingress, secret template, runbook) + rewrites setup doc off Vercel. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
51 lines
1.1 KiB
YAML
51 lines
1.1 KiB
YAML
# Four persistent volumes — mirror the fork's docker-compose volumes.
|
|
# storageClassName: microk8s default is "microk8s-hostpath". Match your
|
|
# cluster: `kubectl get sc`. Change all four if yours differs.
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: vncmail-settings
|
|
namespace: vncmail
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
storageClassName: microk8s-hostpath
|
|
resources:
|
|
requests:
|
|
storage: 1Gi
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: vncmail-admin
|
|
namespace: vncmail
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
storageClassName: microk8s-hostpath
|
|
resources:
|
|
requests:
|
|
storage: 256Mi
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: vncmail-admin-state
|
|
namespace: vncmail
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
storageClassName: microk8s-hostpath
|
|
resources:
|
|
requests:
|
|
storage: 256Mi
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: vncmail-telemetry
|
|
namespace: vncmail
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
storageClassName: microk8s-hostpath
|
|
resources:
|
|
requests:
|
|
storage: 256Mi
|