From ba746c9c41e508c58cdb849a67be25708b3e95f8 Mon Sep 17 00:00:00 2001
From: pierre <pierre@geeraert.eu>
Date: Mon, 12 May 2025 11:55:18 +0100
Subject: [PATCH] try poste.io

---
 variables.auto.tfvars | 152 ++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 146 insertions(+), 6 deletions(-)

diff --git a/variables.auto.tfvars b/variables.auto.tfvars
index c3b26a6..9982e49 100644
--- a/variables.auto.tfvars
+++ b/variables.auto.tfvars
@@ -193,6 +193,111 @@ kubernetes = {
 
   }
 
+  stashgluetun = {
+    enabled             = false
+    connected_namespace = "stash"
+    dns_nameservers     = "10.2.0.1"
+    replicas            = 01
+    image               = "qmcgaw/gluetun:latest"
+    service_port        = 8888
+    extra_manifest      = ["/opt/kubernetes/Terraform_kube/external_manifests/stash/gluetun-secret-netherland.yaml"]
+    security_context    = true
+    #    requirements = {
+    #      limits-cpu      = "800Mi"
+    #      limits-memory   = "800Mi"
+    #      requests-cpu    = "800Mi"
+    #      requests-memory = "800Mi"
+    #    }
+    environment = {
+      DNS_ADDRESS = {
+        value_from = {
+          secret_key_ref = {
+            name = "gluetun-secret-netherland"
+            key  = "VPN_DNS_IP"
+          }
+        }
+      }
+      WIREGUARD_ENDPOINT_IP = {
+        value_from = {
+          secret_key_ref = {
+            name = "gluetun-secret-netherland"
+            key  = "VPN_ENDPOINT_IP"
+          }
+        }
+      }
+      WIREGUARD_ENDPOINT_PORT = {
+        value_from = {
+          secret_key_ref = {
+            name = "gluetun-secret-netherland"
+            key  = "VPN_ENDPOINT_PORT"
+          }
+        }
+      }
+      WIREGUARD_PRIVATE_KEY = {
+        value_from = {
+          secret_key_ref = {
+            name = "gluetun-secret-netherland"
+            key  = "WIREGUARD_PRIVATE_KEY"
+          }
+        }
+      }
+      WIREGUARD_PUBLIC_KEY = {
+        value_from = {
+          secret_key_ref = {
+            name = "gluetun-secret-netherland"
+            key  = "WIREGUARD_PUBLIC_KEY"
+          }
+        }
+      }
+      #      SHADOWSOCKS = {
+      HTTPPROXY = {
+        value = "on"
+      }
+      #SHADOWSOCKS_LOG = {
+      HTTPPROXY_LOG = {
+        value = "on"
+      }
+      HTTPPROXY_LISTENING_ADDRESS = {
+        #SHADOWSOCKS_LISTENING_ADDRESS = {
+        value = "0.0.0.0:8888"
+      }
+      #      HTTPPROXY_USER = {
+      #        value = "user"
+      #      }
+
+      #SHADOWSOCKS_PASSWORD = {
+      #      HTTPPROXY_PASSWORD = {
+      #  value = "user"
+      #}
+      DNS_KEEP_NAMESERVER = {
+        value = "off"
+      }
+      VPN_SERVICE_PROVIDER = {
+        value = "custom"
+      }
+      VPN_TYPE = {
+        value = "wireguard"
+      }
+      WIREGUARD_ADDRESSES = {
+        value = "10.2.0.2/32"
+      }
+      FIREWALL_INPUT_PORTS = {
+        value = "8081,7878,9696,9091,51413,8080,6881,8989,8191,8888,8000"
+      }
+      PUBLICIP_API = {
+        value = "ip2location"
+      }
+
+      HEALTH_TARGET_ADDRESS = {
+        value = "protonvpn.com"
+      }
+
+    }
+
+  }
+
+
+
   onitama = {
     enabled      = false
     namespace    = "onitama"
@@ -663,7 +768,8 @@ kubernetes = {
   }
 
   jellyfin = {
-    enabled      = false
+    #  enabled      = false
+    replicas     = 0
     image        = "jellyfin/jellyfin:latest"
     service_port = 8096
 
@@ -785,7 +891,7 @@ kubernetes = {
   }
 
   gluetun = {
-    #enabled        = false
+    enabled          = false
     namespace        = "tservarr"
     dns_nameservers  = "10.2.0.1"
     replicas         = 01
@@ -888,7 +994,7 @@ kubernetes = {
   }
 
   prowlarr = {
-    #enabled      = false
+    enabled             = false
     image               = "linuxserver/prowlarr:latest"
     connected_namespace = "tservarr"
     #    dns_nameservers     = "10.2.0.1"
@@ -929,7 +1035,7 @@ kubernetes = {
 
   }
   radarr = {
-    #enabled      = false
+    enabled             = false
     image               = "lscr.io/linuxserver/radarr:latest"
     connected_namespace = "tservarr"
     service_port        = 7878
@@ -971,7 +1077,7 @@ kubernetes = {
 
 
   sonarr = {
-#    enabled             = false
+    enabled             = false
     image               = "lscr.io/linuxserver/sonarr:latest"
     connected_namespace = "tservarr"
     service_port        = 8989
@@ -1013,7 +1119,7 @@ kubernetes = {
 
 
   flaresolverr = {
-    #enabled      = false
+    enabled             = false
     image               = "ghcr.io/flaresolverr/flaresolverr:latest"
     connected_namespace = "tservarr"
     service_port        = 8191
@@ -1038,4 +1144,38 @@ kubernetes = {
 
   }
 
+  poste = {
+    enabled      = false
+    image        = "analogic/poste.io:latest"
+    service_port = 443
+
+    environment = {
+      PUID = {
+        value = "1000"
+      }
+      PGID = {
+        value = "1000"
+      }
+      TZ = {
+        value = "Etc/UTC"
+      }
+    }
+    #    requirements = {
+    #      limits-cpu      = "1000m"
+    #      limits-memory   = "1Gi"
+    #      requests-cpu    = "500m"
+    #      requests-memory = "400Mi"
+    #    }
+
+    pvc = {
+      poste-data = {
+        name       = "poste-data"
+        pvc_size   = "10Mi"
+        pvc        = true
+        mount_path = "/data"
+      }
+    }
+
+  }
+
 }