Initial commit: k3s deployment configurations

k3s/n8n/n8n-stack.yaml

@@ -0,0 +1,120 @@
+# 1. 独立的命名空间
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: n8n-system
+
+---
+
+# 2. 数据持久化 (保存工作流和账号信息)
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: n8n-pvc
+  namespace: n8n-system
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 5Gi
+
+---
+
+# 3. 核心应用
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: n8n
+  namespace: n8n-system
+  labels:
+    app: n8n
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: n8n
+  template:
+    metadata:
+      labels:
+        app: n8n
+    spec:
+      securityContext:
+        fsGroup: 1000
+      containers:
+      - name: n8n
+        image: n8nio/n8n:latest
+        securityContext:
+          runAsUser: 1000
+          runAsGroup: 1000
+        ports:
+        - containerPort: 5678
+        env:
+        # ▼▼▼ 关键配置 ▼▼▼
+        - name: N8N_HOST
+          value: "n8n.u9.net3w.com"
+        - name: N8N_PORT
+          value: "5678"
+        - name: N8N_PROTOCOL
+          value: "https"
+        - name: WEBHOOK_URL
+          value: "https://n8n.u9.net3w.com/"
+        # 时区设置 (方便定时任务)
+        - name: GENERIC_TIMEZONE
+          value: "Asia/Shanghai"
+        - name: TZ
+          value: "Asia/Shanghai"
+        # 禁用 n8n 的一些统计收集
+        - name: N8N_DIAGNOSTICS_ENABLED
+          value: "false"
+        volumeMounts:
+        - name: data
+          mountPath: /home/node/.n8n
+      volumes:
+      - name: data
+        persistentVolumeClaim:
+          claimName: n8n-pvc
+
+---
+
+# 4. 服务暴露
+apiVersion: v1
+kind: Service
+metadata:
+  name: n8n-service
+  namespace: n8n-system
+spec:
+  selector:
+    app: n8n
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 5678
+
+---
+
+# 5. Ingress (自动 HTTPS)
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: n8n-ingress
+  namespace: n8n-system
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  tls:
+  - hosts:
+    - n8n.u9.net3w.com
+    secretName: n8n-tls
+  rules:
+  - host: n8n.u9.net3w.com
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: n8n-service
+            port:
+              number: 80