From 43ca0370fd5bb0984eaab9e23c89ca7db8a9f423 Mon Sep 17 00:00:00 2001
From: Martyn <m@rtyn.berlin>
Date: Tue, 23 Sep 2025 12:52:52 +0200
Subject: [PATCH] Filestash added manifests

---
 apps-kustomized/filestash/app-svc.yaml  | 11 ++++
 apps-kustomized/filestash/deploy.yaml   | 84 +++++++++++++++++++++++++
 apps-kustomized/filestash/ing.yaml      | 27 ++++++++
 apps-kustomized/filestash/pvc.yaml      | 11 ++++
 apps-kustomized/filestash/wopi-svc.yaml | 11 ++++
 5 files changed, 144 insertions(+)
 create mode 100644 apps-kustomized/filestash/app-svc.yaml
 create mode 100644 apps-kustomized/filestash/deploy.yaml
 create mode 100644 apps-kustomized/filestash/ing.yaml
 create mode 100644 apps-kustomized/filestash/pvc.yaml
 create mode 100644 apps-kustomized/filestash/wopi-svc.yaml

diff --git a/apps-kustomized/filestash/app-svc.yaml b/apps-kustomized/filestash/app-svc.yaml
new file mode 100644
index 0000000..8c2fe85
--- /dev/null
+++ b/apps-kustomized/filestash/app-svc.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: app
+  name: app
+spec:
+  ports:
+  - port: 8334
+  selector:
+    app: app
diff --git a/apps-kustomized/filestash/deploy.yaml b/apps-kustomized/filestash/deploy.yaml
new file mode 100644
index 0000000..0a0d389
--- /dev/null
+++ b/apps-kustomized/filestash/deploy.yaml
@@ -0,0 +1,84 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: app
+  name: app
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: app
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: app
+    spec:
+      initContainers:
+      - image: busybox
+        command:
+        - /bin/sh
+        - -c
+        - mkdir -p /app/data/state/log ; chmod -R 777 /app/data/state
+        name: mkdirs
+        volumeMounts:
+        - name: data
+          mountPath: /app/data/state
+      containers:
+      - env:
+        - name: APPLICATION_URL
+          value: uploader.martyn.berlin
+        - name: CANARY
+          value: "true"
+        - name: OFFICE_URL
+          value: http://wopi:9980
+        - name: OFFICE_FILESTASH
+          value: http://app:8334
+        - name: OFFICE_REWRITE_URL
+          value: http://127.0.0.1:9980
+        image: machines/filestash:latest
+        name: filestash
+        ports:
+        - containerPort: 8334
+        volumeMounts:
+        - name: data
+          mountPath: /app/data/state
+      volumes:
+      - name: data
+        persistentVolumeClaim:
+          claimName: filestash-data
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: wopi
+  name: wopi
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: wopi
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: wopi
+    spec:
+      containers:
+      - command:
+        - /bin/bash
+        - -c
+        - curl -o /usr/share/coolwsd/browser/dist/branding-desktop.css https://gist.githubusercontent.com/mickael-kerjean/bc1f57cd312cf04731d30185cc4e7ba2/raw/d706dcdf23c21441e5af289d871b33defc2770ea/destop.css ; /bin/su -s /bin/bash -c '/start-collabora-online.sh' cool
+        env:
+        - name: extra_params
+          value: "--o:ssl.enable=false"
+        - name: aliasgroup1
+          value: "https://.*:443"
+        image: collabora/code:24.04.10.2.1
+        name: collabora
+        ports:
+        - containerPort: 9980
+      securityContext:
+        runAsUser: 0
diff --git a/apps-kustomized/filestash/ing.yaml b/apps-kustomized/filestash/ing.yaml
new file mode 100644
index 0000000..7d34b57
--- /dev/null
+++ b/apps-kustomized/filestash/ing.yaml
@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    external-dns.alpha.kubernetes.io/target: armnleg.martyn.berlin
+    nginx.ingress.kubernetes.io/auth-signin: https://homeauth.martyn.berlin/oauth2/start?rd=https://$host$escaped_request_uri
+    nginx.ingress.kubernetes.io/auth-url: https://homeauth.martyn.berlin/oauth2/auth
+  labels:
+    app.kubernetes.io/name: uploader
+  name: uploader
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: uploader.martyn.berlin
+    http:
+      paths:
+      - backend:
+          service:
+            name: app
+            port:
+              number: 8334
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - uploader.martyn.berlin
diff --git a/apps-kustomized/filestash/pvc.yaml b/apps-kustomized/filestash/pvc.yaml
new file mode 100644
index 0000000..da26249
--- /dev/null
+++ b/apps-kustomized/filestash/pvc.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: filestash-data
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
+  storageClassName: longhorn-fast
diff --git a/apps-kustomized/filestash/wopi-svc.yaml b/apps-kustomized/filestash/wopi-svc.yaml
new file mode 100644
index 0000000..84a493d
--- /dev/null
+++ b/apps-kustomized/filestash/wopi-svc.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: wopi
+  name: wopi
+spec:
+  ports:
+  - port: 9980
+  selector:
+    app: wopi