pi-ux-ce/Terraform_kube
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

find a way to add gluetun as proxy instead as a sidecar container

Browse Source
This commit is contained in:
pi-ux-ce
2025-05-08 00:28:18 +01:00
parent b094e78620
commit 0327588463
3 changed files with 213 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
variables.auto.tfvars
+174 -29
View File
@@ -358,10 +358,10 @@ kubernetes = {
redis = {
image = "docker.io/library/redis:7" }
requirements = {
limits-cpu = "800Mi"
limits-cpu = "800m"
limits-memory = "800Mi"
requests-cpu = "800Mi"
requests-memory = "800Mi"
requests-cpu = "10m"
requests-memory = "300Mi"
}
extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/paperless/Paperless.secret.yaml"]
#config_map_ref = ["config"]
@@ -395,13 +395,13 @@ kubernetes = {
value = "https://paper.tryton.geeraert.eu"
}
PAPERLESS_TIKA_ENABLED = {
value = "1"
value = "0"
}
PAPERLESS_TIKA_GOTENBERG_ENDPOINT = {
value = "http://gotenberg-svc.gotenberg.svc:3000"
value = "http://gotenberg-svc.paper.svc:3000"
}
PAPERLESS_TIKA_ENDPOINT = {
value = "http://tika-svc.tika.svc:9998"
value = "http://tika-svc.paper.svc:9998"
}
@@ -453,12 +453,12 @@ kubernetes = {
pvc_size = "2Mi"
mount_path = "/usr/src/paperless/data"
}
export = {
host_path = "/tmp"
name = "export"
pvc_size = "2Mi"
mount_path = "/usr/src/paperless/export"
}
# export = {
# host_path = "/tmp"
# name = "export"
# pvc_size = "2Mi"
# mount_path = "/usr/src/paperless/export"
# }
consume = {
pvc = true
name = "consume"
@@ -468,12 +468,11 @@ kubernetes = {
}
}
gotenberg = {
enabled = false
name = "gotenberg"
namespace = "paper"
block_namespace_creation = true
image = "gotenberg/gotenberg:7.9.2"
service_port = 3000
enabled = false
name = "gotenberg"
connected_namespace = "paper"
image = "gotenberg/gotenberg:7.9.2"
service_port = 3000
requirements = {
limits-cpu = "100m"
@@ -485,10 +484,11 @@ kubernetes = {
}
tika = {
enabled = false
name = "tika"
image = "ghcr.io/paperless-ngx/tika"
service_port = 9998
enabled = false
name = "tika"
connected_namespace = "paper"
image = "ghcr.io/paperless-ngx/tika"
service_port = 9998
requirements = {
limits-cpu = "100m"
@@ -735,10 +735,10 @@ kubernetes = {
}
pinchflat = {
# enabled = false
connected_namespace = "screeps"
image = "ghcr.io/kieraneglin/pinchflat:latest"
service_port = 8945
enabled = false
connected_namespace = "screeps"
image = "ghcr.io/kieraneglin/pinchflat:latest"
service_port = 8945
pvc = {
pinchflat-config = {
@@ -763,10 +763,10 @@ kubernetes = {
}
jobspy = {
enabled = false
enabled = false
connected_namespace = "stash"
image = "rainmanjam/jobspy-api:latest"
service_port = 8000
image = "rainmanjam/jobspy-api:latest"
service_port = 8000
environment = {
ENABLE_API_KEY_AUTH = {
value = "true"
@@ -784,4 +784,149 @@ kubernetes = {
}
gluetun = {
enabled = false
namespace = "tservarr"
dns_nameservers = "10.2.0.1"
replicas = 01
image = "qmcgaw/gluetun:latest"
service_port = 8888
extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/servarr/gluetun-secret-netherland.yaml"]
security_context = true
# requirements = {
# limits-cpu = "800Mi"
# limits-memory = "800Mi"
# requests-cpu = "800Mi"
# requests-memory = "800Mi"
# }
environment = {
DNS_ADDRESS = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-netherland"
key = "VPN_DNS_IP"
}
}
}
WIREGUARD_ENDPOINT_IP = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-netherland"
key = "VPN_ENDPOINT_IP"
}
}
}
WIREGUARD_ENDPOINT_PORT = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-netherland"
key = "VPN_ENDPOINT_PORT"
}
}
}
WIREGUARD_PRIVATE_KEY = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-netherland"
key = "WIREGUARD_PRIVATE_KEY"
}
}
}
WIREGUARD_PUBLIC_KEY = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-netherland"
key = "WIREGUARD_PUBLIC_KEY"
}
}
}
# SHADOWSOCKS = {
HTTPPROXY = {
value = "on"
}
#SHADOWSOCKS_LOG = {
HTTPPROXY_LOG = {
value = "on"
}
HTTPPROXY_LISTENING_ADDRESS = {
#SHADOWSOCKS_LISTENING_ADDRESS = {
value = "0.0.0.0:8888"
}
# HTTPPROXY_USER = {
# value = "user"
# }
#SHADOWSOCKS_PASSWORD = {
# HTTPPROXY_PASSWORD = {
# value = "user"
#}
DNS_KEEP_NAMESERVER = {
value = "off"
}
VPN_SERVICE_PROVIDER = {
value = "custom"
}
VPN_TYPE = {
value = "wireguard"
}
WIREGUARD_ADDRESSES = {
value = "10.2.0.2/32"
}
FIREWALL_INPUT_PORTS = {
value = "8081,7878,9696,9091,51413,8080,6881,8989,8191,8888,8000"
}
PUBLICIP_API = {
value = "ip2location"
}
HEALTH_TARGET_ADDRESS = {
value = "protonvpn.com"
}
}
}
prowlarr = {
enabled = false
image = "linuxserver/prowlarr:latest"
connected_namespace = "tservarr"
# dns_nameservers = "10.2.0.1"
service_port = 9696
environment = {
PUID = {
value = "1000"
}
PGID = {
value = "1000"
}
TZ = {
value = "Etc/UTC"
}
}
# requirements = {
# limits-cpu = "1000m"
# limits-memory = "1Gi"
# requests-cpu = "500m"
# requests-memory = "400Mi"
# }
pvc = {
prowlarr-config = {
name = "prowlarr-config"
pvc_size = "10Mi"
pvc = true
mount_path = "/config"
}
servarr-data = {
name = "servarr-data"
pvc_size = "10Mi"
pvc = false
host_path = "/data"
mount_path = "/disk"
}
}
}
}