feat(notesnook): migrate self-hosted Notesnook to k3s

Adds apps/notesnook (namespace, config, mongo rs0 StatefulSet, minio, identity/sync/sse/monograph deployments + Traefik/cert-manager ingresses) and argocd/notesnook.yaml. Secret applied out-of-band (only .example committed). Includes design spec + implementation plan under docs/superpowers. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-15 22:33:56 -07:00
parent 08cb555ce9
commit 4b801e3444
27 changed files with 1995 additions and 0 deletions
@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: notesnook-s3
+  namespace: notesnook
+spec:
+  replicas: 1
+  strategy: { type: Recreate }
+  selector:
+    matchLabels:
+      app: notesnook-s3
+  template:
+    metadata:
+      labels:
+        app: notesnook-s3
+    spec:
+      containers:
+        - name: minio
+          image: minio/minio:RELEASE.2024-07-29T22-14-52Z
+          args: ["server", "/data/s3", "--console-address", ":9090"]
+          envFrom:
+            - secretRef: { name: notesnook-secret }
+          env:
+            - name: MINIO_BROWSER
+              value: "on"
+          ports:
+            - { containerPort: 9000, name: api }
+            - { containerPort: 9090, name: console }
+          volumeMounts:
+            - name: s3data
+              mountPath: /data/s3
+          readinessProbe:
+            tcpSocket: { port: 9000 }
+            initialDelaySeconds: 10
+            periodSeconds: 15
+          resources:
+            requests: { cpu: "50m", memory: "128Mi" }
+            limits: { cpu: "500m", memory: "512Mi" }
+      volumes:
+        - name: s3data
+          persistentVolumeClaim:
+            claimName: notesnook-s3-data