fixed gluetun issue

This commit is contained in:
2026-05-19 21:50:59 +01:00
parent fde0fedc1e
commit 76bc297d3a
2 changed files with 33 additions and 61 deletions
+7 -3
View File
@@ -17,7 +17,7 @@ provider "kubernetes" {
provider "bitwarden-secrets" { provider "bitwarden-secrets" {
api_url = "https://bitwarden.tryton.geeraert.eu/api" api_url = "https://bitwarden.tryton.geeraert.eu/api"
identity_url = "https://bitwarden.tryton.geeraert.eu/identity" identity_url = "https://bitwarden.tryton.geeraert.eu/identity"
access_token = "0.dd9b243a-b5f5-4b26-aaba-b3f70170088c.fjoaQEShPaEEZa7GmkTJXQYEmF5wVp:5B4jhLp5gRymNcwktMDyOg==" access_token = "0.7720f24b-4328-41ef-b70b-b419018270a3.nhBoRMSkfrlxqJVZ9W0W1g3lNFrmfI:35muVQz2mO3coR46bIZgcQ=="
organization_id = "a6361589-badd-4bde-9cb4-af8901161c0d" organization_id = "a6361589-badd-4bde-9cb4-af8901161c0d"
} }
@@ -60,6 +60,8 @@ variable "kubernetes" {
liveness_http_get = optional(string) liveness_http_get = optional(string)
liveness_http_get_path = optional(string) liveness_http_get_path = optional(string)
database = optional(map(string)) database = optional(map(string))
database_command = optional(list(string))
database_args = optional(list(string))
redis = optional(map(string)) redis = optional(map(string))
enabled = optional(bool, true) enabled = optional(bool, true)
secret_ref = optional(list(string)) secret_ref = optional(list(string))
@@ -589,6 +591,7 @@ resource "kubernetes_deployment_v1" "automatic" {
} }
} }
} }
depends_on = [kubernetes_persistent_volume_claim_v1.automatic-pvc]
} }
@@ -650,7 +653,7 @@ resource "kubernetes_deployment_v1" "database-automatic" {
} }
command = try([each.value.database.command], []) command = try([each.value.database.command], [])
#command = [try(each.value.database.command,"")] args = each.value.database_args != null ? each.value.database_args : []
dynamic "env_from" { dynamic "env_from" {
for_each = each.value.database != null && each.value.enabled == true && !(try(each.value.database.shunt, false)) ? ["${each.key}-db-terraform"] : [] for_each = each.value.database != null && each.value.enabled == true && !(try(each.value.database.shunt, false)) ? ["${each.key}-db-terraform"] : []
@@ -973,6 +976,7 @@ resource "kubernetes_secret_v1" "automatic-database-secret" {
PGDATABASE = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_name[each.key].value}" PGDATABASE = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_name[each.key].value}"
DB_HOST = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_host[each.key].value}" DB_HOST = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_host[each.key].value}"
PGHOST = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_host[each.key].value}" PGHOST = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_host[each.key].value}"
POSTGRES_HOST = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_host[each.key].value}"
DB_PASSWORD = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_password[each.key].value}" DB_PASSWORD = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_password[each.key].value}"
MYSQL_PASSWORD = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_password[each.key].value}" MYSQL_PASSWORD = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_password[each.key].value}"
MYSQL_ROOT_PASSWORD = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_password[each.key].value}" MYSQL_ROOT_PASSWORD = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_password[each.key].value}"
@@ -982,7 +986,7 @@ resource "kubernetes_secret_v1" "automatic-database-secret" {
POSTGRES_USER = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_username[each.key].value}" POSTGRES_USER = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_username[each.key].value}"
MYSQL_USER = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_username[each.key].value}" MYSQL_USER = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_username[each.key].value}"
PGUSER = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_username[each.key].value}" PGUSER = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_username[each.key].value}"
DATABASE_URL = "postgresql://${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_username[each.key].value}:${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_password[each.key].value}@${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_host[each.key].value}:${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_port[each.key].value}/${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_db_name[each.key].value}"
} }
} }
+26 -58
View File
@@ -156,12 +156,12 @@ kubernetes = {
gluetun = { gluetun = {
# enabled = false # enabled = false
dns_nameservers = "10.2.0.1" dns_nameservers = "1.1.1.1"
replicas = 01 replicas = 01
image = "qmcgaw/gluetun:latest" image = "qmcgaw/gluetun:latest"
service_port = [8888] service_port = [8888]
#extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/gluetun/gluetun-secret-netherlandNL-FREE-280.yaml"] #extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/gluetun/gluetun-secret-netherlandNL-FREE-280.yaml"]
secret_import = ["5527ba11-07e3-415b-8d1f-b3ee0154eb56", "b0d22160-d81a-4702-a3dd-b40e0168d617","643dbe99-ace0-4ef5-8a2e-b44f014dccb0"] secret_import = ["5527ba11-07e3-415b-8d1f-b3ee0154eb56", "b0d22160-d81a-4702-a3dd-b40e0168d617", "643dbe99-ace0-4ef5-8a2e-b44f014dccb0"]
security_context = true security_context = true
# requirements = { # requirements = {
# limits-cpu = "800Mi" # limits-cpu = "800Mi"
@@ -170,30 +170,6 @@ kubernetes = {
# requests-memory = "800Mi" # requests-memory = "800Mi"
# } # }
environment = { environment = {
DNS_ADDRESS = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-nl-free-280"
key = "VPN_DNS_IP"
}
}
}
WIREGUARD_ENDPOINT_IP = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-nl-free-280"
key = "VPN_ENDPOINT_IP"
}
}
}
WIREGUARD_ENDPOINT_PORT = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-nl-free-280"
key = "VPN_ENDPOINT_PORT"
}
}
}
WIREGUARD_PRIVATE_KEY = { WIREGUARD_PRIVATE_KEY = {
value_from = { value_from = {
secret_key_ref = { secret_key_ref = {
@@ -202,46 +178,38 @@ kubernetes = {
} }
} }
} }
WIREGUARD_PUBLIC_KEY = {
value_from = {
secret_key_ref = {
name = "gluetun-secret-nl-free-280"
key = "WIREGUARD_PUBLIC_KEY"
}
}
}
# SHADOWSOCKS = {
HTTPPROXY = { HTTPPROXY = {
value = "on" value = "on"
} }
#SHADOWSOCKS_LOG = {
HTTPPROXY_LOG = { HTTPPROXY_LOG = {
value = "on" value = "on"
} }
HTTPPROXY_LISTENING_ADDRESS = { HTTPPROXY_LISTENING_ADDRESS = {
#SHADOWSOCKS_LISTENING_ADDRESS = {
value = "0.0.0.0:8888" value = "0.0.0.0:8888"
} }
# HTTPPROXY_USER = { # DNS_KEEP_NAMESERVER = {
# value = "user" # value = "on"
# } # }
#SHADOWSOCKS_PASSWORD = {
# HTTPPROXY_PASSWORD = {
# value = "user"
#}
DNS_KEEP_NAMESERVER = {
value = "on"
}
VPN_SERVICE_PROVIDER = { VPN_SERVICE_PROVIDER = {
value = "custom" value = "protonvpn"
} }
VPN_TYPE = { VPN_TYPE = {
value = "wireguard" value = "wireguard"
} }
WIREGUARD_ADDRESSES = { SERVER_COUNTRIES = {
value = "10.2.0.2/32" value = "Netherlands"
} }
HEALTH_TARGET_ADDRESS = {
value = "0.0.0.0:8888"
}
FREE_ONLY = {
value = "on"
}
# WIREGUARD_ADDRESSES = {
# value = "10.2.0.2/32"
# }
FIREWALL_INPUT_PORTS = { FIREWALL_INPUT_PORTS = {
value = "8081,7878,9696,9091,51413,8080,6881,8989,8191,8888,8000" value = "8081,7878,9696,9091,51413,8080,6881,8989,8191,8888,8000"
} }
@@ -249,11 +217,11 @@ kubernetes = {
value = "ip2location" value = "ip2location"
} }
HEALTH_TARGET_ADDRESS = { # HEALTH_TARGET_ADDRESS = {
value = "protonvpn.com:80" # value = "protonvpn.com:80"
} # }
FIREWALL_OUTBOUND_SUBNETS = { # FIREWALL_OUTBOUND_SUBNETS = {
value = "10.0.0.0/24" } # value = "10.0.0.0/24" }
} }