Merge pull request #67 from n1rjal/main

feat: Media setup with nginx pod
GNOME-Nepal · Nov 16, 2024 · feedebf · feedebf
2 parents 3cef810 + ebfaf79
commit feedebf
Show file tree

Hide file tree

Showing 10 changed files with 317 additions and 54 deletions.
diff --git a/.openshift/database.yaml b/.openshift/database.yaml
@@ -130,7 +130,6 @@ items:
               persistentVolumeClaim:
                 claimName: db-run-storage
 
-
   - apiVersion: v1
     kind: PersistentVolumeClaim
     metadata:

diff --git a/.openshift/secrets.enc.yaml b/.openshift/secrets.enc.yaml
@@ -6,39 +6,40 @@ metadata:
         app: gnome-nepal-server
 type: Opaque
 data:
-    #ENC[AES256_GCM,data:AbF1QgvjsDcmm232ARjEBPDdx9OQ,iv:LheJ5ny9WUrQrthRKnBX1VopNhmEXF/OdEDhMmHbF2o=,tag:F0U7b4ubSTawg38VqQeoMw==,type:comment]
-    MEDIA_ROOT: ENC[AES256_GCM,data:nXs+HEYYGOs=,iv:gXJL+gzM+IqPJDruqeJNNnjruBLak1GsOWYapX3f5e0=,tag:pmUy5JP22pMvEPd5Rcbe5w==,type:str]
-    #ENC[AES256_GCM,data:cvETX4XOoQ7N0/X2X9DOwpna2cvp,iv:sSLRhH0rRXhOV2Vcm16U2mDQ0I6BmMwxDgD5SBbn1rA=,tag:/2IxQ9ooknm9pWk/NmAj/Q==,type:comment]
-    DJANGO_SECRET_KEY: ENC[AES256_GCM,data:6SFqNmJS3aNwpPpaiaeURtLef9IKPCCkhlz47I0XHEc19OZj9yYF2lRNjeM=,iv:i0vgZ+JwKQ+/9wBvfZ9/d1vAHhCqfnOfMT/s9EnvoZo=,tag:248vCxwh5RcOq10nueMOZw==,type:str]
-    #ENC[AES256_GCM,data:4BBgRNSKaPpHRjSuis/LiFphZMOK,iv:ncW9ROs3MwA5YYrn1mjNG2YTkM4gk/+s6nvwvaJvAQY=,tag:44bk/bAR+n2R39qoCr306g==,type:comment]
-    CACHE_HOST: ENC[AES256_GCM,data:nYhz7x7nz9r/k+yChc/ESxqV75ru+XTIXLykP92XtZw=,iv:x1CYEUnwgQyyHNZahC3OOcQ7qVwytyiIHKTxHLuwWtU=,tag:tcHJ1bXplT8zTV5arRNpYA==,type:str]
-    #ENC[AES256_GCM,data:V4y07tpCDqwpw/h8ibPE+NoSlZwr,iv:jh4Q4eY8DBAk37Sz+TD1JyzbexE9f11Bie4Hun3IQIY=,tag:zNKLrP8Wyk6uPSptTpcakA==,type:comment]
-    CELERY_BROKER_URL: ENC[AES256_GCM,data:eyCr1TLQuwBEFInKV9wOpHTTyTNI7Z2WOBY57A==,iv:6bpyR7zI21WaIapnKrLqXqfNGt+f/8Vq7hPpmzQwYaQ=,tag:xM7C8f2pJfv68K1o34079A==,type:str]
-    #ENC[AES256_GCM,data:T6OhZgWEFuoMvjsGet5H7MiDj3dl,iv:JfMm6ZiPIhNjxpEKa8CgMQeBRGdPeWr/MZ0s5qo7bYU=,tag:JG6NKIiD3MjGXhZ+nnrgYA==,type:comment]
-    DB_NAME: ENC[AES256_GCM,data:lFbJrhiHAhSooBD0,iv:MKzoX9ZQHecVLSkUB8yqIEbbByV0lBfTXE1CZZ+A1Yo=,tag:iMY2/as9G+lH6qZiv8QmvA==,type:str]
-    #ENC[AES256_GCM,data:Zp633i5F/2C+rSbKpflgtb+N//TV,iv:/ROaSM6x9eZo/kUen52bL+zkScVplGMeeKzGGZJ6z4M=,tag:oalxfoUyT21VKwEk5shg6w==,type:comment]
-    DB_USER: ENC[AES256_GCM,data:eOsbDoQE2Ts=,iv:ovLFkW6IALJmEJXnQMSr4rubZOWq6wo9h7yp9sHsg9g=,tag:KsA6e5JgHE+jIkASMh9d+A==,type:str]
-    #ENC[AES256_GCM,data:dInd+R4Z5C+mnmCnZcpyYAHuiWgF,iv:5ti7iHGfSFpDIcDv8P4TSm6c07ty2Inl6C5l40BD4vc=,tag:PwTn37Oz2UlF7tYe4cCcDQ==,type:comment]
-    DB_PASSWORD: ENC[AES256_GCM,data:b5oqBuA69TBNodYL,iv:44sdlrjcWd6zIwWxaiEGAZU74S2En0Hjjv0xZCLax/M=,tag:G4dRoGgfozNBzE7IDkQJbQ==,type:str]
-    #ENC[AES256_GCM,data:3H3NQwrNA/k7DmymyMrktyWkimdlh+Q=,iv:sxKWzdjS5FgNZIZy2uFez5iZA3lVO0U/lH/uJWH61cg=,tag:ZCZcJti1s+Du0ULJ0B38zQ==,type:comment]
-    DB_HOST: ENC[AES256_GCM,data:wvhIonfiattP1kVza3zf/85YjJeolco+AtQnDBHYv1detb9Iz/ym3wU8PnmYnkv0jiAdDfpCEDO6vIZN,iv:/QndgL6iXrTQZgvnBQ7L14gwO9jiLy6uIuHcdpEgtu4=,tag:iVKPnTnR1AyNYZe/78+fyQ==,type:str]
-    #ENC[AES256_GCM,data:dpzDlGX/Zj68YKZlhXHSVWdkRrkI,iv:EC07Hw/dyu12hpRrBAHOt0jTOm2nkzthQD5S/3zaUto=,tag:yr5dM+dm32Vfymbwgf7N1g==,type:comment]
-    DB_PORT: ENC[AES256_GCM,data:jYRS/F+2o8U=,iv:eCh6YjeP5YGjPApP+Cj5PVbrVCTb1Y7AvzYxNlW8URg=,tag:s8s4PzygxKH4PRlVUmkB7w==,type:str]
-    #ENC[AES256_GCM,data:Qws3/NtE+53UGvrl7T9dxGXOwQhvTW+KIV4G6icjCRza,iv:/1poczHaUgSucwtVcquMPQ8Kd3myzWYRwFmUPzg02+E=,tag:ISRwOPLPrGFNF+sH4QnLkw==,type:comment]
+    #ENC[AES256_GCM,data:Txbz+teEdOoD+MymLmO2NaMlwHGJ,iv:fG2KNOirlPi0aMHVsMBEjXe/kYvtSpUw4oU36HUDxrE=,tag:SIk1tH/g+mgVw0iA+erVzA==,type:comment]
+    MEDIA_ROOT: ENC[AES256_GCM,data:IkiDF9WFDi4=,iv:Y6TqRrM161NF5YB+qfiUbB/Geec4OJYumn9OEWs8aVQ=,tag:fSJgv6i/C4m7oHk0eftA6Q==,type:str]
+    #ENC[AES256_GCM,data:/FoTB6GQ9LlJOUd1z+gFenGDHaXQ,iv:wiB2H4amhUi7lYgKjtMINd70utGBj5OJb7MEFTMHL5M=,tag:EPdBzCxJCgBVZX2d/B0eBQ==,type:comment]
+    DJANGO_SECRET_KEY: ENC[AES256_GCM,data:FJpb8GQP/vhA6joessG3j+eVgxH+OF2oen+sy6ylN/Q9TjWOr9f89WvM5Tw=,iv:wiVrPSeEz1cU+Ibu/bN1u/YFy/tvrRmQhklY9X8iwhE=,tag:/r+hNPuqZ08Q1OmJgOW2Hg==,type:str]
+    #ENC[AES256_GCM,data:FJABR3oVQl11mCRfdhbp6niSN4ln,iv:J9b2t6s8I9h8hKSNJSYrGiLAXIenrFt+8uTuWjoslsc=,tag:rM+SvX5EMbbR6PTX4mo7rw==,type:comment]
+    CACHE_HOST: ENC[AES256_GCM,data:pceQcwrjhud6qZzzU/2PT+ycyr3nDGcD5Zynb+mQOpk=,iv:qwWiCG3HjGDJme8PaUEcKQeV2zciOyrfkQ7g+IEm2D4=,tag:FeXpNAvyed1cyxBVJD+axg==,type:str]
+    #ENC[AES256_GCM,data:m3jTBYUPIC0xvYKikZviervETqdj,iv:jOOEctc5RXbon8UhRCA3+jpwF0eiNmitXHjj8qJv77g=,tag:qsUPuizRefXMFvg6Xj4s0w==,type:comment]
+    CELERY_BROKER_URL: ENC[AES256_GCM,data:g5lfSp1PktcHmEIfIBjkvwESCrvKUeN0Mijp/g==,iv:ExPuwi7YTC4Mr+YBAvT6/6HWbx0nB8/qDlWAVGPB1Ug=,tag:B94CQlao5/X21ijPgSd0Uw==,type:str]
+    #ENC[AES256_GCM,data:Y8Y4qw3v/vn3Cd7L1Ife4Obsvwy6,iv:DfuhNaEQNwfnl5jymHsnlNXaH0r1oju+b8EGkp/PJkI=,tag:UeBtl0Kwtasq+nbCI1HBxw==,type:comment]
+    DB_NAME: ENC[AES256_GCM,data:u7TtuYAeWv35VARP,iv:r5iTtBLOAv8yWjut8ALcA99S8qZSzeht9G3kH20IRvU=,tag:cBJ1eYbMygVp+mfGVhoQ6g==,type:str]
+    #ENC[AES256_GCM,data:UZcYEtdSuZ2cmeLdshK5uGvFE7pQ,iv:oDDl/efippjnSakA1KaLoUwefb2alz2SBOMnmSBA0M4=,tag:tR+MQ8TDjRouJ1wmypG89g==,type:comment]
+    DB_USER: ENC[AES256_GCM,data:814xDHUY+yg=,iv:FF5It6uVwufd5gC7LgxEP/HuvB3jAT6Jho7iwj6a6Bs=,tag:2NifLrFL8N/rT6lBLj1iog==,type:str]
+    #ENC[AES256_GCM,data:WZFM+uZP8+10Ni5x7YB/lVHbigNL,iv:u69Pa8fARIwJYwvTtxx9JCpmkOj3OFQsDL8k8ytZq2o=,tag:EESc8c/mi/0WltQOd3CWLw==,type:comment]
+    DB_PASSWORD: ENC[AES256_GCM,data:ld/4tPyG1pWBDdGr,iv:JbtymBXbF24fTmXLl9Ht6PdlwMrU/m7ew9pr4DE5yC4=,tag:dO46v1YwN0waTJLiU+uwfQ==,type:str]
+    #ENC[AES256_GCM,data:X/Q14/EoAYyI6xrgde6p6ZFFLbhB904=,iv:KrB81y9EQ0E5BlhgjN7OJYJFUk2LDto3p5RVtF21G5w=,tag:kD4FXwFJVYs/UBzL7AhFrw==,type:comment]
+    DB_HOST: ENC[AES256_GCM,data:1jGJWZS+6LZ3O9VwlfB9cbYvM8cedd2tGiYNGhtpNilI7jMrgfcBB5JQru3BCKYfJOfu/0/PD/Yw+SA7,iv:F2URoyPNVQTQOgJS69cktgj4p7xmpW6BPRyR7o/Kq3o=,tag:0RbkG5QmSV87+VSzLhSe/g==,type:str]
+    #ENC[AES256_GCM,data:1gSCKROxYVgj2GBR8mDrS3y+GgFf,iv:v/E5UlSnu2cE9TZB7dPpva+Sq5m/iPFbRCmCa62czww=,tag:mvDBjZJeET27m172BjRTiQ==,type:comment]
+    DB_PORT: ENC[AES256_GCM,data:giOVQFeqqTQ=,iv:Q4l4Lci+5qXjpZBEC0MkGXhBAIW2Zz4HRydhvRCD8t8=,tag:MqvXwCOZLPmfsFHwD/96fw==,type:str]
+    #ENC[AES256_GCM,data:bc6YmpzfpBSL1j4xZUegVXxgd5ESUs0zBMJGA9IuB6Lg,iv:DHvPND4JqKN5PGd7jbirjapKxFpGJCpPr55uWHf8pHQ=,tag:8chcX3ZHLCoCZ0tc7K2EoQ==,type:comment]
     SENTRY_DSN: ""
-    #ENC[AES256_GCM,data:Pb0DfVAJmQCcRz5DV2nOOt+m+P9u8WqMzj3OoziUSHVRA9/jDw==,iv:uvTOnWzqoOCjr9PafFPeHSnfdcoi2yCkuBzGVGozvds=,tag:PYxND7VYboXagRAJiPtVGQ==,type:comment]
-    DJANGO_DEBUG: ENC[AES256_GCM,data:g4A+cdU3mis=,iv:ldToWjykNTKJ9MywsbJiYOeLTGn0cac57qoWR+L6B94=,tag:F4ki9H4VWO2nG+p5qD/b0w==,type:str]
-    #ENC[AES256_GCM,data:0wHJqvfE4pNPAfmsaWgetaaOCZBT,iv:9TfNFa18Ddj8oaoFQa6hbykjhYPgBWdHPmyTkcOUpB8=,tag:lMQWG/44izNjSIlpdnmChQ==,type:comment]
-    DJANGO_ALLOWED_HOSTS: ENC[AES256_GCM,data:5Clu5axaKiFCN749Be7Z3bF4oP+n27bSBp8kE+eLiaWnv2OWmEtJLfB+CSGzezdixVm/t6ZL8ro8yeXWsmEDM03RK5IXUnKZK7vK7ThAqeGPi6ynBVgFlg==,iv:OchCIuYlgpg7zzP/2Lg0apjttJnZ++cL8OL3fKF12PA=,tag:y9hT7HzusrD3LR2KrusFqA==,type:str]
-    #ENC[AES256_GCM,data:EUQrLIPZRaiaTyxZoNadolR7AaQ5,iv:IXVQ6ttSzkOLrCgvQZVVitEjQoDYeDZGPBehBFL/+5M=,tag:o+rxcbFGst+sZxXfwKN99Q==,type:comment]
-    DJANGO_ADMIN_USERNAME: ENC[AES256_GCM,data:HxbF5Ntd93j9VARg+8PjZBBwDPM=,iv:EJS+HbA5s5L7mr8uatYzrUas5mWdBjCL+teuArvdiWI=,tag:+Nx8pdIvLVRAVtyEKERElA==,type:str]
-    #ENC[AES256_GCM,data:3BmgZ/cV3c1Go0RdJgevltmMeYNK,iv:NVlzKI4DPUFX80ayWgPSeWpJXIDgLUz599QIuO17b5E=,tag:DfBv7/JwZZCkXvJJaiND9g==,type:comment]
-    DJANGO_ADMIN_PASSWORD: ENC[AES256_GCM,data:NtForaKqH9z4AnZgMbFrqhEEGXdOwjHYJbu2TOvpPEGOOIzo,iv:DrqvrEuo8F8myBPUa9K2oShB1W89qmaJBMccAyoq2wI=,tag:kwwMhZ6ZfkbwTgeiYGmB1w==,type:str]
-    #ENC[AES256_GCM,data:OWIs3nHCFbWAPzyIu2y8t87W39DW,iv:t5w5xJ5EiOye9XOZT8YrM8XekKWXeNc9eAMBAgxsAfY=,tag:2xW9GWXLPowpRLQuilWBeg==,type:comment]
-    DJANGO_ADMIN_EMAIL: ENC[AES256_GCM,data:ftViOWfbxxv4jCqzpfIPPPQZ00EXLEUa,iv:ntARX/n0+vqfJmEISfElc6ppVeb7y8WgCUkK2NwUATE=,tag:Y2miKOvT9LOQMIEIBdjI3Q==,type:str]
-    #ENC[AES256_GCM,data:t9dWfx2OHEEb1zfdAjk+AXzpAvbHe9miLenX9NhIARGz2T0XkHhpIGw=,iv:d/Zg625Ge8r57f5axevK3X6pFUwi3pe5uI2BKxAaA9I=,tag:LPFSCOwh/mqTPIbpCnTZwA==,type:comment]
-    DOCKERFILE_TARGET: ENC[AES256_GCM,data:fdDVeFpPhpSnfBaZZUALDA==,iv:CxDVLhTOck8f7qc7coSMx4rOWXSJWl1uoo41vT6uQw8=,tag:MzNrL/VOyn2CCj5iuPGUdA==,type:str]
-    DJANGO_CSRF_TRUSTED_ORIGINS: ENC[AES256_GCM,data:UJK5p6GbGK/WJ0C8SnNnGkBBPbs0zxfpW9O1m9qX+LkOjKnru2Ho0cZMFwq3xcUOl8/phc7HBWk7ROpRXlLA84xJHAei4S3YtSGGoQPMC9hObeRc/t+6nkBMZ1kNbGJ8HAMvL/U3tBHfhda0MAhHya5+wYviboPI8KZl4Zjsto40ypQIduVth0+zQbqVYj7Yg4AVEw==,iv:YGSyOYhc8waVAWB8415iDhI2X0t9k/nZ4rOTAYy/epQ=,tag:JTmY81GSBBJDdrlLVAAHKg==,type:str]
+    #ENC[AES256_GCM,data:jsrpRks7Wyu8hLcu91W8F/h++10p1UrXyv5P7AVRZ2+KHkkVUw==,iv:LLGoCCsXKRO/8+s25XKbs1LqlmqXoMGQcAKGRwqbLg4=,tag:VyA+enlDrCh5j/BBpY16XA==,type:comment]
+    DJANGO_DEBUG: ENC[AES256_GCM,data:+FRoMYhjuIg=,iv:1wzoiMl0w8aagk0VicLodejVII3/rPyA6ncc1/Ubz2s=,tag:QWbobR3Sa0/HAG7S5tpo7w==,type:str]
+    #ENC[AES256_GCM,data:Y0e0Tjo5MLe7U6rJgzz1Kh84UZMX,iv:yEg6knc/lV4Cg3heeg8t8evf19zp4zGkTwkiIHThcSI=,tag:eJ/Ay38oLy3AeasYeeX/dg==,type:comment]
+    DJANGO_ALLOWED_HOSTS: ENC[AES256_GCM,data:n2QdK7JidP2b+rWbA3QSo1ca0WxeI5q+bcKYJ+5NjA/ITezizxUua0ld/3l7WCArF3T6AWtFUedSAAXY9ADMCtsDO1Ai9DP7Zj4QECLdbGUBTokhImzjKw==,iv:YiDPas/gqOa691H9XNg2MdMTlfPhauuEnjXF6IIvCxw=,tag:XG5cwf9vg1Mtz4uzkjTdcg==,type:str]
+    #ENC[AES256_GCM,data:N4Gy+XqJiLTqIM387nGyo1i2p8xc,iv:V0PCIQDoDPQM2924dD4QKyxwqzduHr4vPdwKrEfpzkk=,tag:+dt2dml18QwklxF4pBEv2Q==,type:comment]
+    DJANGO_ADMIN_USERNAME: ENC[AES256_GCM,data:dCXYNOe4DkW9Xp71//GA9NnrmnE=,iv:yvyqqJKvzlqIR3BT9iIza8IBdGLb8+SXw3lxDoLvIBE=,tag:YOIhs4pCMHv/Dk9gfYawFg==,type:str]
+    #ENC[AES256_GCM,data:PKWf9nxf221hDHeF88pf1nu/qAS8,iv:BCgmMODTJwVk8wRBSSr//wFlZfT5dAdZAf7I8tER2rk=,tag:kOlUkzExO0LlhUjfpJ4Uew==,type:comment]
+    DJANGO_ADMIN_PASSWORD: ENC[AES256_GCM,data:fCSnsQiR6HI4OduftxWeL0N0pMOseF5e0GSsgbt0YJv11W6/,iv:UNvsqsOa08kioBaEU1J5FscUOyMBGbClEY8YUNxB49Q=,tag:oXs/sbEuHac65v4RsSWC6g==,type:str]
+    #ENC[AES256_GCM,data:64z3C0ZjOy4sC/VMlRD9MHPG22pS,iv:EAcNwX+2cyca+J8xapx4IxZDtqVz1OVSM3kztZldb4Y=,tag:v4hkgiD3P2ebDqYbofYSwQ==,type:comment]
+    DJANGO_ADMIN_EMAIL: ENC[AES256_GCM,data:tF2mngDTz9S+SRAtTPgDDyn/I/uVNV42,iv:nN6qs6fAnjYM36ElEGtDngvurE5wskUxtyyOV/jQAO8=,tag:ejtcdPr9srqch/YeWX9O4Q==,type:str]
+    #ENC[AES256_GCM,data:SgljLkYfMQ1UwHI1Kgj2Uj9oX9b/ec+VXFpafLYKtE2iyeD10qeGxsc=,iv:X6SyP+9Z2+qTtnUbthsFR0+FDcdSOIkvfw3SsqF1aV0=,tag:3z71Gk4vMnaVrEoKjN4nXA==,type:comment]
+    DOCKERFILE_TARGET: ENC[AES256_GCM,data:p/SXkzBTxduclqPdMO7DSw==,iv:w//gt/pDkkam65sCf6mtsr0oRiEM2rOyDuK2zUxmEHE=,tag:lOzNVF3kdBryBkNtNRobMg==,type:str]
+    DJANGO_CSRF_TRUSTED_ORIGINS: ENC[AES256_GCM,data:q55wOCsJ+qYKFBzMTP2hgxQdY6BN4mk7rtA25dXXAFyGqKjV6O0PH9DvvS6JgHhRmgM+BSgT/s2kCE6ZFUvCpLBRIoy6fWxmJiHwol0zimCnW/jyugZC6LZThr+5T/ayYajvrEZ9c6gRwB3z8mQyTe6YTDNkBfxHf91bWfcEZeXTUfhReRe1Y0Bsrua/XFYy+uz0Rg==,iv:2xc/UNAMmoV5D4gaw30l6uSc48G0EqkKw3T8verbJQk=,tag:9sACysaCqn4aZ25zc/KZQw==,type:str]
+    nginx.conf: ENC[AES256_GCM,data:Bp0jF4K9yYGFQ8B46sn6Okhvy5SWDY8yqb6glzDC4+ILAluVXaxKnbtggbS/Xs9U/2kDP9H5NRlE58mmdOhcAgrVy3JEcL32Y7Ohets3o8IEC16z9iDskOusNaIx/oIFSFrkLA6ya4nNHX9yPwynlNz9KXEjYIobKjKvyNMvTl0qAU78gGMueSFXt9F8TmFm7/9acxQ1DBLh8mNSAwNHz9ct89dlO7i8WuSU0qTi1oc1yTEutfrms85zRYGgDUK6YtY6V7em8irqX1VbaIoAqIMHrqB5v7Ygb5LP6uneFPynLXfaFuMK9Gc13VIqSwZJpJNNYlqHP/maKc2IjpHux9y4ZMMNpLiEvHVrQIgr248mqIV0WEZI8b/39DS49c1sPYpYt+BX6mPR6Z4GLInpqnkZk9aT0kAsAHNunKOUkVgNeE5iP+oIuqZVRKWHSWfJrDyllM1ZNipqgaev+Bhn32kxZ+4O7r4BpcHHJDYDl9dsF4locr8SJjAEhwXQN7nk3tIEGgDXsFPlQLmp0SCAVWBIHQDEjgXicfnVodPp9STHEG0812+WLtHdOhkneIeRA357WE16Y59qwDom+hm18vV5127zcqELxGeR5mMH/3nKEOFK1k9bMCKsEFn++DJTNAei/APDuplHujMcf0Zi4ujBf4+ameV3ywwT4ZYbYhUodT+ipixyBG3c5rkO9xZTOcbLu7MWiasTNbHiqKmoj6jtm6Bu8Yr1RHbMDiGGltHGdZLAfWSHwIt37CLuXLvnCsVDjLMae2U6kZ4sQwSeRcrdi2l3KO2iYovotppBnTFtPo+tZUaV6NqjCOSQPDOLODdBW+DOuwt7mgr43+I16oYt+AB9R+aorsoRdVI69Eri63R7J93x2+QO08G/KJ/pB9AOcTRMUdbwWB/7msaE4XrnXnlUFtCUyh0b6SgQBRFELUm0Y2MtEjikXkOdH+8e0MffRm/2Mwib+jxO2a/93Ph/XJKNyC+0/FPO4Jxbr37xDtAaPBi0ImAb/aSLqy4Gl9GMINaTN/jDKlhZQlh5W3rwxGDJ7uw40HQLk+e1yklMQ6i182xGb5VgmoqazBNtleOGuTj3MA2fs1auiEn6XEWEBvVTfaiJSG9MKy6NvbOXEkhhVXi+46Z4LOSzJ/n8U3srttOusl7Rrzjw1L3uc6POQ5MQCv8El5Di6ALvvH9x/t6fw3ovHVOdPgIjK3XPgQv74eLDHy4Y2Gi2SLKOoyl/UZ6J7pliNKqkEBpslQEhzUhzuzqOjVlCMRI=,iv:XM5+N8aMVpdDTne05Z0LJOxKHDtzxkR+qLv3momTBq0=,tag:NYzz9Tx8rRp9O4pBeCec8A==,type:str] # yamllint disable-line
 sops:
     kms: []
     gcp_kms: []
@@ -48,14 +49,14 @@ sops:
         - recipient: age1v6dxu9u5tv5kqapzrws55vpudj4jvxuwu9ty3fve5cvwqv0z4vrq3yeezp
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpblZIZDUydDlUb2dvb3hy
-            bURncEw1R3VOMEpvYjNRS3RzbW03WXF4dEN3CjBaclpROHljMG1NWlcxN05hemNE
-            cFd2VzM1YmcxQmtwcDJNOG1rQmRhRmMKLS0tICtzbnd5RGJUM1NWdnNBdmNtaWpF
-            aVNIdVJnYTVRaXBjVVFQRm0yR0VNTUUKl8jVVsiFH7Q+bHPnP+SimT3TC++9Tk7g
-            2SkBpO74dCi8sBmx2kUNfqKtEd8RmFJAfYJ3AgHTdNXJEbeNC8wYpw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNytZZUw1T1NpWkE3NmpR
+            cHMrbXFMLzJjWHlQV05XaE9MMjczRVdaTEhZCnpmUTA5eGJNWkhKM3BJeTlSMWdR
+            MzMrbVRnSkMyeUtGTGlFQXB4TW5DeUkKLS0tIEVZUmpnSU4yZU16SWlMRzF5bWls
+            OWJiRk92Zk1YQkkwS3ArclUrMk9ROGsKXWwN0pNGZjJBrcolFUDppus/FJMlPJua
+            ei6ioRNfPcpJd8l6yPBe4ewUyLoBLHn/vE815rrIO+sureTv5bds7g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-15T17:12:45Z"
-    mac: ENC[AES256_GCM,data:FJNfLdv+XgekGCIz9IHpxOamHDKERcQmWTNHALBSfkDmkF3Aoo5GMDFQXfb6epmv9rgANVlR8b4rRAGSxH6pPnVfStNaQDc37uVFmTwj0J7JG6fNTBjoXUDu1tFE/AghcuWy1nxPaVMNrqBej1aVd6vm4mCCxfHGbvlXfKOM3Nc=,iv:MlLMc/bxq1EpkFHut36vTQ1AiR9WQPeXoxvkPm+xRrE=,tag:lOI76681cWjJY1HJktBGvw==,type:str]
+    lastmodified: "2024-11-16T04:46:14Z"
+    mac: ENC[AES256_GCM,data:y08s0WzSnYNOiEqDwK6YoXiFoQywWN7vIa0gJEn2JT+W7yu0Sw5RYmyI53leixy9oPafTuxTdxo2o1OZPUXj7s4IE/sFb1u1Y8ngHUMK3xlSWPexY9LDhQ8xNXpZre7yRu/kbEFHgUrZLdXu8fWcPTDL0Sy4azanXD/oRuu8Gr4=,iv:pC91gVPHjt2wK7KY92W8R40g5xf/l6jpBVcocCcQ8wU=,tag:EqcIa2OwS9S31cfx2eS5yQ==,type:str]
     pgp: []
     encrypted_regex: ^(secret|key|data)$
     version: 3.9.1
diff --git a/.openshift/server.yaml b/.openshift/server.yaml
@@ -1,6 +1,82 @@
 apiVersion: v1
 kind: List
 items:
+
+  - apiVersion: v1
+    kind: Service
+    metadata:
+      name: gnome-nepal-server-nginx-service
+    spec:
+      selector:
+        app: gnome-nepal-server-nginx  # Updated to match Deployment labels
+      ports:
+        - name: http  # Added port name
+          port: 8080
+          targetPort: 8080
+
+
+  - apiVersion: apps/v1
+    kind: Deployment
+    metadata:
+      name: gnome-nepal-server-nginx
+      labels:
+        app: gnome-nepal-server-nginx  # Ensured consistency
+    spec:
+      replicas: 1
+      strategy:
+        type: Recreate
+      selector:
+        matchLabels:
+          app: gnome-nepal-server-nginx  # Ensured consistency
+      template:
+        annotations:
+          alpha.image.policy.openshift.io/resolve-names: '*'
+        metadata:
+          labels:
+            app: gnome-nepal-server-nginx  # Ensured consistency
+        spec:
+          containers:
+            - name: gnome-nepal-media-nginx
+              image: public.ecr.aws/nginx/nginx:stable-alpine
+              imagePullPolicy: Always
+              ports:
+                - name: http
+                  containerPort: 8080
+                  appProtocol: http
+              command: ["/bin/sh", "-c"]
+              args:
+                - |
+                  mkdir -p /var/cache/nginx/client_temp &&
+                  nginx -g 'daemon off;'
+          # Use an official Nginx image as the base image
+              volumeMounts:
+                - name: nginx-conf-file
+                  mountPath: /etc/nginx/nginx.conf
+                  subPath: nginx.conf
+
+                - name: media-storage
+                  mountPath: /media
+
+                - name: nginx-cache-storage
+                  mountPath: /var/cache
+
+          volumes:
+            - name: nginx-conf-file
+              secret:
+                secretName: django-server-secret
+                items:
+                  - key: nginx.conf
+                    path: nginx.conf
+
+            - name: media-storage
+              persistentVolumeClaim:
+                claimName: media-storage
+
+            - name: nginx-cache-storage
+              persistentVolumeClaim:
+                claimName: nginx-cache-storage
+
+
   - apiVersion: v1
     kind: Service
     metadata:
@@ -152,17 +228,25 @@ items:
 
               volumeMounts:
                 - name: server-storage
-                  mountPath: /app/staticfiles/  # Replace with the actual path where you want to mount the volume
+                  mountPath: /app/staticfiles/  # replace with the actual path where you want to mount the volume
                 - name: logs-storage
-                  mountPath: /app/logs/
+                  mountPath: /app/logs
+
+                - name: media-storage
+                  mountPath: /app/media
           volumes:
             - name: server-storage
               persistentVolumeClaim:
                 claimName: server-storage
+
             - name: logs-storage
               persistentVolumeClaim:
                 claimName: logs-storage
 
+            - name: media-storage
+              persistentVolumeClaim:
+                claimName: media-storage
+
   - apiVersion: v1
     kind: PersistentVolumeClaim
     metadata:
@@ -179,31 +263,59 @@ items:
   - apiVersion: v1
     kind: PersistentVolumeClaim
     metadata:
-      name: db-storage
+      name: media-storage
       labels:
-        app: gnome-nepal-server   # Updated to match labels
+        app: gnome-nepal-server  # Updated to match labels
     spec:
       storageClassName: efs-csi
       accessModes:
-        - ReadWriteOnce
+        - ReadWriteMany
       resources:  # Corrected from 'resource' to 'resources'
         requests:  # Corrected from 'request' to 'requests'
           storage: 20Gi
 
-
   - apiVersion: v1
     kind: PersistentVolumeClaim
     metadata:
       name: logs-storage
       labels:
         app: gnome-nepal-server  # Updated to match labels
     spec:
+      storageClassName: efs-csi
       accessModes:
         - ReadWriteOnce
       resources:  # Corrected from 'resource' to 'resources'
         requests:  # Corrected from 'request' to 'requests'
           storage: 2Gi
 
+  - apiVersion: v1
+    kind: PersistentVolumeClaim
+    metadata:
+      name: nginx-storage
+      labels:
+        app: gnome-nepal-server-nginx  # Updated to match labels
+    spec:
+      storageClassName: efs-csi
+      accessModes:
+        - ReadWriteOnce
+      resources:  # Corrected from 'resource' to 'resources'
+        requests:  # Corrected from 'request' to 'requests'
+          storage: 1Gi
+
+  - apiVersion: v1
+    kind: PersistentVolumeClaim
+    metadata:
+      name: nginx-cache-storage
+      labels:
+        app: gnome-nepal-server-nginx  # Updated to match labels
+    spec:
+      storageClassName: efs-csi
+      accessModes:
+        - ReadWriteOnce
+      resources:  # Corrected from 'resource' to 'resources'
+        requests:  # Corrected from 'request' to 'requests'
+          storage: 1Gi
+
 ---
 apiVersion: route.openshift.io/v1
 kind: Route
@@ -212,10 +324,32 @@ metadata:
   labels:
     app: gnome-nepal-server
 spec:
+  host: server-route-gnome-np.apps.openshift.gnome.org
+  path: /
   to:
     kind: Service
     name: server-service
   port:
     targetPort: http  # Use the port name defined in the Service
   tls:
     termination: edge
+
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+  name: server-nginx-route
+
+  labels:
+    app: gnome-nepal-server
+spec:
+  host: server-route-gnome-np.apps.openshift.gnome.org
+  path: "/media"   # Second path
+  to:
+    kind: Service
+    name: gnome-nepal-server-nginx-service
+  port:
+    tagretPort: http
+  tls:
+    termination: edge
diff --git a/Dockerfile b/Dockerfile
@@ -26,7 +26,6 @@ COPY . .
 RUN chmod +x Makefile
 # make empty directory for logs and media
 RUN mkdir logs media
-
 RUN chown -R gnome_user:gnome_group /app
 USER gnome_user