From 2fe7fa547ccf754e7482d1e5031d2ec8aa2af603 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Sat, 21 Feb 2026 15:57:25 +0000 Subject: [PATCH] [ci skip] Configure f1-stream: WebAuthn, NFS storage, headless browser - Set WEBAUTHN_RPID/ORIGIN for f1.viktorbarzin.me domain - Add NFS volume at /mnt/main/f1-stream for persistent session/stream data - Enable headless browser extraction (HEADLESS_EXTRACT_ENABLED=true) - Reduce replicas to 1 (file-based sessions don't work across replicas) --- modules/kubernetes/f1-stream/main.tf | 29 ++++++++++++++++++++++++++- secrets/nfs_directories.txt | Bin 1668 -> 1678 bytes 2 files changed, 28 insertions(+), 1 deletion(-) diff --git a/modules/kubernetes/f1-stream/main.tf b/modules/kubernetes/f1-stream/main.tf index 075b9b72..fc28af20 100644 --- a/modules/kubernetes/f1-stream/main.tf +++ b/modules/kubernetes/f1-stream/main.tf @@ -20,7 +20,7 @@ resource "kubernetes_deployment" "f1-stream" { } } spec { - replicas = 3 + replicas = 1 selector { match_labels = { app = "f1-stream" @@ -49,6 +49,33 @@ resource "kubernetes_deployment" "f1-stream" { port { container_port = 8080 } + env { + name = "WEBAUTHN_RPID" + value = "f1.viktorbarzin.me" + } + env { + name = "WEBAUTHN_ORIGIN" + value = "https://f1.viktorbarzin.me" + } + env { + name = "WEBAUTHN_DISPLAY_NAME" + value = "F1 Stream" + } + env { + name = "HEADLESS_EXTRACT_ENABLED" + value = "true" + } + volume_mount { + name = "data" + mount_path = "/data" + } + } + volume { + name = "data" + nfs { + server = "10.0.10.15" + path = "/mnt/main/f1-stream" + } } } } diff --git a/secrets/nfs_directories.txt b/secrets/nfs_directories.txt index d11d62180e6860ed6fc47d8483358abe5b3f14b5..b904e921ca7a3f0c37c465ffad157eddd2ee1e91 100644 GIT binary patch literal 1678 zcmV;9266cSM@dveQdv+`0M&#s{I%=9MigR~dn8bRlbPrnRL#kUCs7nI6iPM#Y**T2 zOnsHoCf9G)z?@J&vhQ67StLk@#@=BWD^9se8$Hr?f^$D?;?&XG_4r#RJXANX-&q7; zFm08-TR2S%bG^03tX~xwx%}h4$+XY{O-LFD5$gNSo1!#yvn!ezNN&{LQ2wgJBdJ~! zqGZ>2%Z5TcN_$`}sQVLD1D2iiDQmXH4MPeUHk^Jj9RrR6*&6VK0m7t+gRk`OTS}R^ zwEGd-8^7vn)mn;%EM_@R?|wY)ho8MtI6~lVY08ab^PSHX>>>McK1J)M|KqZ+6cfYn z{W-dqo*xa$LL`b=LlCZ`>$D={;Q0Ax_A3-&e1|fM@}y9WOCus>wFg^UT!fq_#WlJ; zUTU+k>oP&gyZCW^pJh_la(rma^(JBQ>VXeb_5wL56Boz@>ySxZlhg*XJGp?VO#JMw zTv~rTDWw3x7#8NMCU2*bFcE(Dq4=ezcwg(x{AO9z2MSj?y}=4Q{g}Ps`E8 zm=)iD4>iW?y2XE|8I>gP}1ky-Q!6v0JOIndyqZ`Dfl^Cw`#oU1^<&2nr%k$75DTWUVD*6>FKeU7b=M0>YB3V?v^f^`ER>HXOyC&!?(69z6)$!ImKL z@9G{|5J>d~D=^<0;l$!ITa+yOMaJIecNBg);KfSR5idkx{vGbFFY^b{L_Nh=*RUV)*yK9NN{eDr4s?@}I=a)>%B)nxZ@#9wzZaN?w7|=A4vpj9|)|z*f zAKyA@3%=`v?`tm-y?jn9SpAEHWcsg*#dd<8)Dd>n|ub&V)#aB~x!I)z#xm%^vGv$k==baQF6 zn>$52j~6bb59i1>KxvLFtlo`)@l2ju!36Ho8G${fVdei}iN>vmBEXMrJ zB+%CtH6vV{HnDG}`LGlYa^I(B5IxK7+x9Op_X0C2Zi;td>##yIfvtMqHutDRku6(;1C?z9YJCxCOfi|wRd`b8>g?`gWBlMqBZlCQ1pVy=@t z?S7a+5i)6SB6;O#i<_E6RLQ=Pahk(+w*;LafAmwhu&%M(&~9&}cp;kgI9b@S4IyWQ zuz63%<~fd8#R@F`d~2><{9 literal 1668 zcmV-~27CDcM@dveQdv+`03NhDdb*yT3xrQ+(4k4b=x0Q+4tIN0%UQg>xVR_Zk-!#z#V&MZWmR%iqv0=I98rFEXAmJnGbdU9VDTf8T#x(EKa^63?t;`5^vUa zcyn|J04BFk)c{b)^w(46I~76maa^`1kps95(w zDv$6*=INIsqr3!D*7#o6hz@xQ-jsgMR3^2{X3G4WqLe4HSC)}iwaV(I55T748)|gx zG!x;Qe%E{r64w@0$lpv&|M0w}Kpw~hsy7UOmkUtLB*~f0%bBOWDyQ@l>cwA_dkdKd zKnuJHjmE@@LiYN6veYX?1<}(s$VQ3p6A?O%ZoWG<;$Hx0btj=MAc_sYAskPo45bcs zHWW2mpYu#5=QK0?*%_Sl#pcx2eWsy%Zo6iA$~ z5))?yanL{jK|m!_Q!rWK)o9&?J;#XPe1a34IFrURuC1$=Z;iIDc{$dl1%eP*)Eu2O z1ui~EOO4<)PJ^ueE+WIog|81i;;5*(A_au9IGX_DxGO+`o zEtEuP*>jbXndscB(@2#q{fTjG*fQZnO8Rr<+Ha1Sw4L>O%p@{Ap70dA77gX#2p+U6 z)!N;1$m0e|DT@T5nz{)~)}u)R2SkmLf{r)7FOJXLUW$y2($zHt*G1O^?6&I~fzgS8 z-v!2ODUBCZE9wiy$N57^9v~XThFz6tq{fndao3Sl8)J#ID$>^Ur;q)z`uAe_#Bu$N z#|g?VKyLi`KdTjwo_{HjKqCy~0SX;i`4 zb5S>hE9naG&Rd{`kh`huDHz2e4^B*M-cSMu@w1q_56aw)p`&{?f#%;W)8P0o5K(E8 z0i-JDr~M@aa9bI8MsUMj{IHA2YTx>_P;!f9oYXmXpywW6MN2>lmOyW$ z^lsH*wDE?dg>a5^%(0XWCx2=;bOfMFjuL5RVhZHUYBA|f);FiG9+pyOeCDYdR1h_Y zKSpGhDunXykUHIGx!WL5$SVvYL6oMhuL_7&wkc&EQTJcJ&|BOhfSuZw%WB01|L`cT zSd-;qVJ2`kiN3`Kh4DWC&B}k`-Q3hL#A1~DaWO|AHu_5rO2QJQNd~3>`+xKR)9xeB zvZ$Er|Dn|>V#=4Ow~=)RtRx-&tRm=a0CLrN_d2<|XP|zxu$cUA8fq*cVL3i%tY+m9 zb2|o7Ggba-d3H zvV*ONEph7}6-4I0m?7n)#Yi&(P@$zN-4~?ef*`W20tuW35A!fX8}5X z3th3XhAY+Nh6%AAISg;C8`BgKxOKJ>vG<}7@O%=QxJs|}uvcu_Y3SSqNI|$&imtO& zo7n)BaBSf~msMIw2x>35h5XkX8Y2(zl!e;(OM)S@`qMi3?qg{b(Xh9ea~wzO1~0_^ zf^^JsL;@1I<|;+lObY_rKW74__LvUQHmCR~ zD-(|+@DCW74my#IXxAxl)6oc&R*$pJd%Jxv7z zWcXrF>HKHRDY8wW8IdQtB!9J&Zelj3DY&HlIomJQA4$KzBAsG~UJ@w4FT7~QLrx#y zXU>Kd3GA;9EwwjdzZU2!?@4`P%?f$jco-(zII1o4k~GQy