initial

mindforge.cronjob/deploy/README.md

@@ -0,0 +1,20 @@
+# Deploy
+
+## Setup environment
+
+```bash
+kubectl create ns mindforge
+kubectl create secret generic mindforge-secrets \
+    --from-literal=GIT_REPOSITORY="your_git_repository" \
+    --from-literal=GEMINI_API_KEY="your_gemini_api_key" \
+    --from-literal=OPENAI_API_KEY="your_openai_api_key" \
+    --from-literal=DISCORD_WEBHOOK_URL="your_discord_webhook_url" \
+    --from-literal=HAVEN_NOTIFY_URL="your_haven_notify_url" \
+    --from-literal=SSH_PRIVATE_KEY="your_ssh_private_key"
+```
+
+## Deployment itself
+
+```bash
+kubectl apply -f mindforge-cronjob.yaml
+```

mindforge.cronjob/deploy/mindforge-cronjob.yaml

@@ -0,0 +1,72 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: mindforge-cronjob
+spec:
+  schedule: "0 9 * * *"
+  jobTemplate:
+    spec:
+      template:
+        metadata:
+          labels:
+            app: mindforge-cronjob
+        spec:
+          containers:
+            - name: mindforge-cronjob
+              image: git.ivanch.me/ivanch/mindforge-cronjob:latest
+          imagePullPolicy: Always
+          env:
+            - name: DISCORD_WEBHOOK_URL
+              valueFrom:
+                secretKeyRef:
+                  name: mindforge-secrets
+                  key: GIT_REPOSITORY
+            - name: GEMINI_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: mindforge-secrets
+                  key: GEMINI_API_KEY
+            - name: OPENAI_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: mindforge-secrets
+                  key: OPENAI_API_KEY
+            - name: DISCORD_WEBHOOK_URL
+              valueFrom:
+                secretKeyRef:
+                  name: mindforge-secrets
+                  key: DISCORD_WEBHOOK_URL
+            - name: HAVEN_NOTIFY_URL
+              valueFrom:
+                secretKeyRef:
+                  name: mindforge-secrets
+                  key: HAVEN_NOTIFY_URL
+            - name: SUMMARY_CREATOR_PROVIDER
+              value: gemini
+            - name: SUMMARY_FORMATTER_PROVIDER
+              value: openai
+            - name: GEMINI_MODEL
+              value: gemini-3-flash-preview
+            - name: OPENAI_MODEL
+              value: gpt-5-mini
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "1"
+            limits:
+              memory: "512Mi"
+              cpu: "2"
+          volumeMounts:
+            - name: ssh-key
+              mountPath: /root/.ssh/id_rsa
+              subPath: id_rsa
+              readOnly: true
+          restartPolicy: OnFailure
+          volumes:
+            - name: ssh-key
+              secret:
+                secretName: mindforge-secrets
+                items:
+                  - key: SSH_PRIVATE_KEY
+                    path: id_rsa
+              defaultMode: 0400