From 69ec8aeec2401ecdbc915ce61ac784b1de4a320f Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Thu, 27 Aug 2026 21:37:47 -0700
Subject: [PATCH] fix: Obsidian service port and health checks, use Longhorn
 storage

---
 k8s/app/obsidian.yaml | 51 ++++++++++++-------------------------------
 1 file changed, 14 insertions(+), 37 deletions(-)

diff --git a/k8s/app/obsidian.yaml b/k8s/app/obsidian.yaml
index 62f7607..d094bcc 100644
--- a/k8s/app/obsidian.yaml
+++ b/k8s/app/obsidian.yaml
@@ -21,17 +21,13 @@ spec:
         app.kubernetes.io/part-of: poimen-memory
     spec:
       serviceAccountName: obsidian-server
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 1000
-        fsGroup: 1000
       containers:
       - name: obsidian-server
         image: ppatlabs/obsidian:latest
         imagePullPolicy: IfNotPresent
         ports:
         - name: http
-          containerPort: 8080
+          containerPort: 27124
           protocol: TCP
         env:
         - name: VAULT_NAME
@@ -45,7 +41,7 @@ spec:
         volumeMounts:
         - name: vault
           mountPath: /vault
-        - name: obsidian-config
+        - name: config
           mountPath: /config
         resources:
           requests:
@@ -56,23 +52,26 @@ spec:
             memory: 512Mi
         livenessProbe:
           httpGet:
-            path: /health
+            path: /
             port: http
-          initialDelaySeconds: 10
+            scheme: HTTPS
+          initialDelaySeconds: 30
           periodSeconds: 10
+          timeoutSeconds: 5
         readinessProbe:
           httpGet:
-            path: /health
+            path: /
             port: http
-          initialDelaySeconds: 5
+            scheme: HTTPS
+          initialDelaySeconds: 15
           periodSeconds: 5
+          timeoutSeconds: 5
       volumes:
       - name: vault
         persistentVolumeClaim:
           claimName: obsidian-vault
-      - name: obsidian-config
-        configMap:
-          name: obsidian-config
+      - name: config
+        emptyDir: {}
 
 ---
 # PVC for vault storage
@@ -86,7 +85,7 @@ metadata:
 spec:
   accessModes:
     - ReadWriteOnce
-  storageClassName: local-path
+  storageClassName: longhorn
   resources:
     requests:
       storage: 10Gi
@@ -105,7 +104,7 @@ spec:
   ports:
   - name: http
     port: 80
-    targetPort: http
+    targetPort: 27124
     protocol: TCP
   selector:
     app.kubernetes.io/name: obsidian-server
@@ -120,28 +119,6 @@ metadata:
   labels:
     app.kubernetes.io/name: obsidian-server
 
----
-# ConfigMap for Obsidian configuration
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: obsidian-config
-  namespace: poimen
-data:
-  obsidian.conf: |
-    # Obsidian Server Configuration
-    # Enable API endpoints for vault operations
-    enableApi: true
-    
-    # Enable sync with external services
-    enableSync: true
-    
-    # API settings
-    apiPath: /api
-    apiPort: 8080
-    vaultPath: /vault
-    restApiEnabled: true
-
 ---
 # Ingress for external access
 apiVersion: networking.k8s.io/v1