Release 0.2.0

charts/wger/Chart.yaml

@@ -1,6 +1,6 @@
 ---
 apiVersion: v2
-version: 0.2.0-rc.1
+version: 0.2.0
 appVersion: latest
 name: wger
 description: A Helm chart for Wger installation on Kubernetes

charts/wger/templates/_helpers.tpl

@@ -24,6 +24,9 @@ environment:
     value: "[email protected]"
   - name: EMAIL_BACKEND
     value: "django.core.mail.backends.console.EmailBackend"
+  # Set your name and email to be notified if an internal server error occurs.
+  #- name: DJANGO_ADMINS
+  #  value: "SysAdmin, [email protected]"
   # django db
   - name: DJANGO_PERFORM_MIGRATIONS
     value: "True"

charts/wger/templates/configmap.yaml

@@ -19,9 +19,15 @@ data:
       keepalive 2;
     }
 
+    # if no Host match, close the connection to prevent host spoofing
+    server {
+      listen 80 default_server;
+      return 444;
+    }
+
     # webserver
     server {
-      listen 8080;
+      listen 8080 deferred;
       client_max_body_size 4G;
 
       # set the correct host(s) for your site
@@ -58,18 +64,12 @@ data:
         proxy_buffers 64 4k;
         proxy_max_temp_file_size 0;
 
-        # send 500 when timeout
-        proxy_next_upstream error timeout http_500;
+        # give gunicorn time to process
+        proxy_read_timeout 1800;
 
         proxy_redirect off;
         proxy_pass http://app_server;
       }
-
-      # error handling
-      error_page 500 502 503 504 /500.html;
-      location = /500.html {
-        root /var/www/html/;
-      }
     }
 {{- end }}
 ---

example/prod_values.yaml

@@ -49,6 +49,8 @@ app:
       value: "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
     - name: FROM_EMAIL
       value: "[email protected]"
+    - name: DJANGO_ADMINS
+      value: "SysAdmin, [email protected]
     - name: GUNICORN_CMD_ARGS
       value: "--timeout 240 --workers 2 --worker-class gthread --threads 3 --forwarded-allow-ips * --proxy-protocol True --access-logformat='%(h)s %(l)s %({client-ip}i)s %(l)s %({x-real-ip}i)s %(l)s %({x-forwarded-for}i)s %(l)s %(t)s \"%(r)s\" %(s)s %(b)s \"%(f)s\" \"%(a)s\"' --access-logfile - --error-logfile -"