This commit is contained in:
@@ -8,6 +8,17 @@ image:
|
|||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
tag: "latest"
|
tag: "latest"
|
||||||
|
|
||||||
|
# Build-time configuration (used during docker build)
|
||||||
|
# Note: This is for documentation. Actual build uses Makefile NPM_REGISTRY variable
|
||||||
|
# To override npm registry during build:
|
||||||
|
# make docker-build NPM_REGISTRY=https://your-npm-registry.com/
|
||||||
|
build:
|
||||||
|
npmRegistry: "https://registry.npmjs.org/" # Default npm registry URL
|
||||||
|
# Optional: Set if behind proxy (not needed for servers outside Iran)
|
||||||
|
# httpProxy: ""
|
||||||
|
# httpsProxy: ""
|
||||||
|
# noProxy: ""
|
||||||
|
|
||||||
imagePullSecrets: []
|
imagePullSecrets: []
|
||||||
|
|
||||||
# Registry secret auto-creation (for private registry)
|
# Registry secret auto-creation (for private registry)
|
||||||
@@ -209,6 +220,12 @@ networkPolicy:
|
|||||||
- protocol: TCP
|
- protocol: TCP
|
||||||
port: 3000
|
port: 3000
|
||||||
egress:
|
egress:
|
||||||
|
# Allow DNS resolution (required for all external connections)
|
||||||
|
- to: []
|
||||||
|
ports:
|
||||||
|
- protocol: UDP
|
||||||
|
port: 53 # DNS
|
||||||
|
# Allow internal cluster traffic (PostgreSQL, Redis, etc.)
|
||||||
- to:
|
- to:
|
||||||
- namespaceSelector: {}
|
- namespaceSelector: {}
|
||||||
ports:
|
ports:
|
||||||
@@ -216,12 +233,14 @@ networkPolicy:
|
|||||||
port: 5432 # PostgreSQL
|
port: 5432 # PostgreSQL
|
||||||
- protocol: TCP
|
- protocol: TCP
|
||||||
port: 6379 # Redis
|
port: 6379 # Redis
|
||||||
|
# Allow external internet access (npm registry, APIs, etc.)
|
||||||
|
# Empty 'to' selector means all destinations (including external)
|
||||||
|
- to: []
|
||||||
|
ports:
|
||||||
- protocol: TCP
|
- protocol: TCP
|
||||||
port: 443 # HTTPS
|
port: 443 # HTTPS (npm registry, APIs, etc.)
|
||||||
- protocol: TCP
|
- protocol: TCP
|
||||||
port: 80 # HTTP
|
port: 80 # HTTP
|
||||||
- protocol: UDP
|
|
||||||
port: 53 # DNS
|
|
||||||
|
|
||||||
monitoring:
|
monitoring:
|
||||||
serviceMonitor:
|
serviceMonitor:
|
||||||
|
|||||||
Reference in New Issue
Block a user