k8s: fixes and formating

- Add checkmk secrets example
- space-tab fixes (linter)
- switcher kener redis to statefulset
- disabled netronome voulme mount (not needed). postgres statefulset instead
-  switched naio to 8888 port (traefik port conflict)
- changed nextcloud ips and ports to prod

netronome/k8s/netronome.yaml

@@ -7,9 +7,9 @@ spec:
   selector:
     app: netronome
   ports:
-  - port: 7575
-    protocol: TCP
-    targetPort: 7575
+    - port: 7575
+      protocol: TCP
+      targetPort: 7575
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -29,49 +29,30 @@ spec:
         app: netronome
     spec:
       containers:
-      - name: netronome
-        image: ghcr.io/autobrr/netronome:latest
-        ports:
-        - name: netronome-port
-          protocol: TCP
-          containerPort: 7575
-        envFrom:
-        - configMapRef:
-            name: netronome-config
-        env:
-        - name: NETRONOME__DB_USER
-          valueFrom:
-            secretKeyRef:
-              name: netronome-secret
-              key: NETRONOME__DB_USER
-        - name: NETRONOME__DB_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: netronome-secret
-              key: NETRONOME__DB_PASSWORD
-        resources:
-          requests:
-            memory: "512Mi"
-            cpu: "500m"
-          limits:
-            memory: "1Gi"
-            cpu: "1000m"
-        volumeMounts:
-        - name: netronome-data
-          mountPath: /data
-      volumes:
-      - name: netronome-data
-        persistentVolumeClaim:
-          claimName: netronome-pvc
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: netronome-pvc
-  namespace: netronome
-spec:
-  resources:
-    requests:
-      storage: 1Gi
-  accessModes:
-    - ReadWriteOnce
+        - name: netronome
+          image: ghcr.io/autobrr/netronome:latest
+          ports:
+            - name: netronome-port
+              protocol: TCP
+              containerPort: 7575
+          envFrom:
+            - configMapRef:
+                name: netronome-config
+          env:
+            - name: NETRONOME__DB_USER
+              valueFrom:
+                secretKeyRef:
+                  name: netronome-secrets
+                  key: NETRONOME__DB_USER
+            - name: NETRONOME__DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: netronome-secrets
+                  key: NETRONOME__DB_PASSWORD
+          resources:
+            requests:
+              memory: "512Mi"
+              cpu: "500m"
+            limits:
+              memory: "1Gi"
+              cpu: "1000m"

netronome/k8s/postgres.yaml

@@ -0,0 +1,71 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: netronome-postgres-service
+  namespace: netronome
+spec:
+  selector:
+    app: netronome-postgres
+  ports:
+    - protocol: TCP
+      port: 5432
+      targetPort: 5432
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: netronome-postgres
+  namespace: netronome
+spec:
+  serviceName: "netronome-postgres-service"
+  replicas: 1
+  selector:
+    matchLabels:
+      app: netronome-postgres
+  template:
+    metadata:
+      labels:
+        app: netronome-postgres
+    spec:
+      containers:
+        - name: netronome-postgres
+          image: postgres:17-alpine
+          ports:
+            - name: postgres-port
+              protocol: TCP
+              containerPort: 5432
+          env:
+            - name: POSTGRES_USER
+              valueFrom:
+                secretKeyRef:
+                  name: netronome-secrets
+                  key: NETRONOME__DB_USER
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: netronome-secrets
+                  key: NETRONOME__DB_PASSWORD
+            - name: POSTGRES_DB
+              valueFrom:
+                configMapKeyRef:
+                  name: netronome-config
+                  key: NETRONOME__DB_NAME
+          resources:
+            requests:
+              memory: "512Mi"
+              cpu: "500m"
+            limits:
+              memory: "1Gi"
+              cpu: "1000m"
+          volumeMounts:
+            - name: netronome-pg-data
+              mountPath: /var/lib/postgresql/data
+  volumeClaimTemplates:
+    - metadata:
+        name: netronome-pg-data
+      spec:
+        accessModes:
+          - ReadWriteOnce
+        resources:
+          requests:
+            storage: 1Gi