Here's a helm chart for deploying Outline Wiki in a Kubernetes
cluster. It is the closest to a self hosted Notion solution in my
opinion. The chart is far from perfect, but it will get better over
time. Contributions are always welcome. Enjoy!
reddit / selfhosted

----------------------------------------------------------------------
Ill-Engineering7895 · 2023-12-27 06:11

EDIT: Oops! I spoke too soon! I took a better look and looks like the
chart does support redis authentication. my bad. I still recommend
adding network policies, but it's less important if it's password
protected.

\------

I see two areas of improvement with this helm chart:

1. The redis (cache) instance should support password protection. I
believe this helm chart deploys it without a password.
2. Network policies should be added so that both the redis and
postgres services can only be accessed by the "outline" pod and not by
other pods

Network policies are important because the default DNS Policy for
Kubernetes deployments is "Cluster First", which means any other
container in your cluster can access any service in the cluster
(unless network policy is specified).

Without these protections, if any other unrelated container in your
cluster is compromised, it can potentially read or write data to your
redis cache and potentially compromise your Outline deployment as
well.

Hope it helps!

----------------------------------------------------------------------
nuskovg · 2023-12-27 06:15

Thanks for the tips! The network policy is surely going to be a great
addition, I guess I was more focused on getting all the environment
configuration in order for the first version haha. About redis though,
it's using the bitnami chart as a dependency, and you can actually
provide a password if you follow the same values configuration in that
chart. However, I agree, there isn't a way for outline to access redis
if you give it a password. I will look into it!