From 237436eabceea06b4f206951b44241b21373344f Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Tue, 17 Sep 2024 11:35:55 +0800
Subject: [PATCH] fix(gotosocial): missing media

---
 kube/deploy/apps/gotosocial/app/hr.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/kube/deploy/apps/gotosocial/app/hr.yaml b/kube/deploy/apps/gotosocial/app/hr.yaml
index 26b7dd4a..8dd4d0f7 100644
--- a/kube/deploy/apps/gotosocial/app/hr.yaml
+++ b/kube/deploy/apps/gotosocial/app/hr.yaml
@@ -55,6 +55,7 @@ spec:
               # OIDC secrets in ExternalSecret envFrom
               GTS_DB_TYPE: "postgres"
               GTS_DB_TLS_MODE: "enable"
+              GTS_DB_TLS_CA_CERT: &pgca /secrets/pg/ca.crt
               GTS_DB_ADDRESS: "pg-gotosocial-primary.gotosocial.svc.cluster.local"
               #  valueFrom:
               #    secretKeyRef:
@@ -146,6 +147,14 @@ spec:
         globalMounts:
           - subPath: tmp
             path: /tmp # ffmpeg WASM stuff
+      pg-ca:
+        type: secret
+        #name: pg-authentik-pgbouncer
+        name: pg-gotosocial-cluster-cert
+        defaultMode: 0400
+        globalMounts:
+          - subPath: ca.crt
+            path: *pgca
     defaultPodOptions:
       automountServiceAccountToken: false
       enableServiceLinks: false