From 101be3512a61713b40c21ed41136abb607ff11cb Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Wed, 18 Feb 2026 19:29:12 -0500
Subject: [PATCH] attic: enable S3 support

---
 attic/bucket.yaml     | 10 ++++++++++
 attic/config.yaml     | 36 ++++++++++++++++++++++++++++++++++++
 attic/deployment.yaml | 10 +++++++++-
 3 files changed, 55 insertions(+), 1 deletion(-)
 create mode 100644 attic/bucket.yaml
 create mode 100644 attic/config.yaml

diff --git a/attic/bucket.yaml b/attic/bucket.yaml
new file mode 100644
index 0000000..b6f345c
--- /dev/null
+++ b/attic/bucket.yaml
@@ -0,0 +1,10 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: attic-bucket
+  namespace: attic
+spec:
+  additionalConfig:
+    maxSize: 100Gi
+  bucketName: attic-bucket
+  storageClassName: weyma-s3-bucket
\ No newline at end of file
diff --git a/attic/config.yaml b/attic/config.yaml
new file mode 100644
index 0000000..d95b699
--- /dev/null
+++ b/attic/config.yaml
@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: attic-config
+data:
+  server.toml: |
+    listen = "[::]:8080"
+    allowed-hosts = []
+
+    #api-endpoint = "https://nix-cache.dubyatp.xyz/"
+
+    [database]
+    url = "sqlite:///var/empty/.local/share/attic/server.db"
+
+    [storage]
+    path = "/data/.local/share/attic/storage"
+    type = "local"
+    #region = "us-east-1"
+    #bucket = "attic-bucket"
+    #endpoint = "https://weyma-s3.infra.dubyatp.xyz"
+
+    [chunking]
+    nar-size-threshold = 65536
+    min-size = 16384
+    avg-size = 65536
+    max-size = 262144
+
+    [compression]
+    type = "zstd"
+
+    [garbage-collection]
+    interval = "12 hours"
+
+    [jwt]
+
+    [jwt.signing]
diff --git a/attic/deployment.yaml b/attic/deployment.yaml
index bb10384..08a292a 100644
--- a/attic/deployment.yaml
+++ b/attic/deployment.yaml
@@ -3,6 +3,7 @@ kind: Deployment
 metadata:
   name: attic
 spec:
+  replicas: 1
   selector:
     matchLabels:
       app: attic
@@ -17,13 +18,20 @@ spec:
         envFrom:
         - secretRef:
             name: attic-secret
+        - secretRef:
+            name: attic-bucket
         volumeMounts:
         - name: attic-pvc
-          mountPath: /var/empty
+          mountPath: /var/empty/
         resources:
           limits:
             memory: "2Gi"
             cpu: "500m"
+      - name: multitool
+        image: wbitt/network-multitool
+        volumeMounts:
+        - name: attic-pvc
+          mountPath: /var/empty/
       volumes:
       - name: attic-pvc
         persistentVolumeClaim: