399 lines
12 KiB
HCL
399 lines
12 KiB
HCL
kubernetes = {
|
|
reverse-proxy = {
|
|
#enabled = false
|
|
#docker = true
|
|
image = "nginx:latest"
|
|
service_port = [80, 443]
|
|
service_type = "NodePort"
|
|
external_port = true
|
|
pvc = {
|
|
sites-terraform = {
|
|
#requires to run the reverse proxy terraform with the kubernetes enabled
|
|
mount_path = "/etc/nginx/conf.d/"
|
|
host_path = "/data/kubernetes/reverse-proxy/reverse-proxy-sites"
|
|
#config_map = sites-terraform
|
|
}
|
|
|
|
reverse-proxy-log = {
|
|
name = "reverse-proxy-log"
|
|
mount_path = "/var/log/nginx/"
|
|
host_path = "/data/kubernetes/reverse-proxy/reverse-proxy-log"
|
|
|
|
}
|
|
|
|
reverse-proxy-ssl = {
|
|
name = "reverse-proxy-ssl"
|
|
mount_path = "/etc/nginx/ssl/"
|
|
host_path = "/data/kubernetes/reverse-proxy/reverse-proxy-ssl"
|
|
|
|
}
|
|
nginx-configfile = {
|
|
name = "nginx-configfile"
|
|
mount_path = "/etc/nginx/nginx.conf"
|
|
host_path = "/data/kubernetes/reverse-proxy/reverse-proxy-configfile/nginx.conf"
|
|
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
gitea = {
|
|
#enabled = false
|
|
#docker = true
|
|
image = "gitea/gitea:1.27.0"
|
|
service_port = [3000]
|
|
# no service_port: nginx reaches http://gitea:3000 over deployment_network
|
|
database = {
|
|
image = "postgres:17"
|
|
mountPath = "/var/lib/postgresql/data"
|
|
host_path = "/data/kubernetes/gitea/gitea-db-data"
|
|
}
|
|
# shared by the gitea and gitea-db containers (the db ignores GITEA__*, gitea ignores POSTGRES_*)
|
|
environment = {
|
|
POSTGRES_USER = { value = "gitea-KY56Q" }
|
|
POSTGRES_PASSWORD = { value = "Modulator-Yearning-Gills3" }
|
|
POSTGRES_DB = { value = "gitea-database" }
|
|
|
|
GITEA__database__DB_TYPE = { value = "postgres" }
|
|
#GITEA__database__HOST = { value = "gitea-db:5432" } # for docker
|
|
GITEA__database__HOST = { value = "gitea-db-svc:5432" } # for k8s
|
|
GITEA__database__USER = { value = "gitea-KY56Q" }
|
|
GITEA__database__PASSWD = { value = "Modulator-Yearning-Gills3" }
|
|
GITEA__database__NAME = { value = "gitea-database" }
|
|
}
|
|
pvc = {
|
|
gitea-data = {
|
|
name = "gitea-data"
|
|
mount_path = "/data"
|
|
host_path = "/data/kubernetes/gitea/gitea-data"
|
|
}
|
|
gitea-documents-backup = {
|
|
name = "gitea-documents-backup"
|
|
mount_path = "/backup"
|
|
host_path = "/data/kubernetes/gitea/gitea-documents-backup"
|
|
}
|
|
}
|
|
}
|
|
|
|
gitea-runner = {
|
|
#enabled = false
|
|
#docker = true
|
|
image = "gitea/act_runner:latest"
|
|
connected_namespace = "gitea"
|
|
environment = {
|
|
GITEA_INSTANCE_URL = { value = "https://gitea.geeraert.eu/" }
|
|
GITEA_RUNNER_REGISTRATION_TOKEN = { value = "rqi4mFW8LXoc5MhIrUD1rjzdmKVY8n9X14BP6sWd" }
|
|
GITEA_RUNNER_NAME = { value = "runner" }
|
|
GITEA_RUNNER_LABELS = { value = "label" }
|
|
}
|
|
pvc = {
|
|
gitea-runner-data = {
|
|
name = "gitea-runner-data"
|
|
mount_path = "/data"
|
|
host_path = "/data/kubernetes/gitea/gitea-runner-data"
|
|
}
|
|
docker-sock = {
|
|
name = "docker-sock"
|
|
mount_path = "/var/run/docker.sock"
|
|
host_path = "/var/run/docker.sock"
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
echo = {
|
|
#enabled = false
|
|
#docker = true
|
|
image = "ealen/echo-server:latest"
|
|
service_port = [4580]
|
|
external_port = true
|
|
service_type = "NodePort"
|
|
#command = ["-text=Hello authenticated world!"]
|
|
pvc = {
|
|
echo-config = {
|
|
mount_path = "/app/configs"
|
|
}
|
|
echo-testing = {
|
|
mount_path = "/app/test"
|
|
}
|
|
}
|
|
environment = {
|
|
PORT = {
|
|
value = 4580
|
|
}
|
|
PAPERLESS_REDIS = {
|
|
value = "redis://paperless-redis-svc:6379"
|
|
}
|
|
database = {
|
|
value = "datgg"
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
|
|
bitwarden-admin = {
|
|
#enabled = false
|
|
namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-admin"
|
|
image = "ghcr.io/bitwarden/admin:2026.1.0"
|
|
extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/config.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/global.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/global.override.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/mssql.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/mssql.override.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/uid.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml"]
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env", "global.override.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-ca-certificates-pvc = {
|
|
mount_path = "/etc/bitwarden/ca-certificates"
|
|
}
|
|
|
|
bitwarden-core-pvc = {
|
|
mount_path = "/etc/bitwarden/core"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/etc/bitwarden/logs"
|
|
sub_path = "admin"
|
|
}
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
bitwarden-api = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-api"
|
|
image = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_api:2026.1.0"
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env", "global.override.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-ca-certificates-pvc = {
|
|
mount_path = "/etc/bitwarden/ca-certificates"
|
|
}
|
|
|
|
bitwarden-core-pvc = {
|
|
mount_path = "/etc/bitwarden/core"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/etc/bitwarden/logs"
|
|
sub_path = "api"
|
|
}
|
|
|
|
|
|
}
|
|
|
|
}
|
|
bitwarden-attachments = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-attachments"
|
|
image = "ghcr.io/bitwarden/attachments:2026.1.0"
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-core-pvc = {
|
|
mount_path = "/etc/bitwarden/core/attachments"
|
|
sub_path = "attachments"
|
|
}
|
|
|
|
}
|
|
}
|
|
bitwarden-events = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-events"
|
|
image = "ghcr.io/bitwarden/events:2026.1.0"
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env", "global.override.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-ca-certificates-pvc = {
|
|
mount_path = "/etc/bitwarden/ca-certificates"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/etc/bitwarden/logs"
|
|
sub_path = "events"
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
bitwarden-icons = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-icons"
|
|
image = "ghcr.io/bitwarden/icons:2026.1.0"
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-ca-certificates-pvc = {
|
|
mount_path = "/etc/bitwarden/ca-certificates"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/etc/bitwarden/logs"
|
|
sub_path = "icons"
|
|
}
|
|
}
|
|
}
|
|
|
|
bitwarden-identity = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-identity"
|
|
image = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_identity:2026.1.0"
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env", "global.override.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-identity-pvc = {
|
|
mount_path = "/etc/bitwarden/identity"
|
|
}
|
|
bitwarden-ca-certificates-pvc = {
|
|
mount_path = "/etc/bitwarden/ca-certificates"
|
|
}
|
|
|
|
bitwarden-core-pvc = {
|
|
mount_path = "/etc/bitwarden/core"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/etc/bitwarden/logs"
|
|
sub_path = "identity"
|
|
}
|
|
}
|
|
}
|
|
bitwarden-mssql = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-mssql"
|
|
image = "ghcr.io/bitwarden/mssql:2026.1.0"
|
|
service_port = [1433, 5000]
|
|
config_map_ref = ["mssql.env", "uid.env", "mssql.override.env"]
|
|
environment = {}
|
|
database = {
|
|
shunt = "true"
|
|
engine = "sqlserver"
|
|
username = "sa"
|
|
host = "bitwarden-mssql-svc"
|
|
name = "bitwarden_vault"
|
|
}
|
|
|
|
pvc = {
|
|
bitwarden-mssql-pvc = {
|
|
mount_path = "/var/opt/mssql/data"
|
|
sub_path = "data"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/etc/bitwarden/logs"
|
|
sub_path = "mssql"
|
|
}
|
|
}
|
|
}
|
|
bitwarden-nginx = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-nginx"
|
|
image = "ghcr.io/bitwarden/nginx:2026.1.0"
|
|
service_port = [5000, 8080, 8443]
|
|
config_map_ref = ["uid.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-nginx-pvc = {
|
|
mount_path = "/etc/bitwarden/nginx"
|
|
}
|
|
bitwarden-letsencrypt-pvc = {
|
|
mount_path = "/etc/letsencrypt"
|
|
}
|
|
|
|
bitwarden-ssl-pvc = {
|
|
mount_path = "/etc/ssl"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/var/log/nginx"
|
|
sub_path = "nginx"
|
|
}
|
|
}
|
|
}
|
|
bitwarden-notifications = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-notifications"
|
|
image = "ghcr.io/bitwarden/notifications:2026.1.0"
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env", "global.override.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-ca-certificates-pvc = {
|
|
mount_path = "/etc/bitwarden/ca-certificates"
|
|
name = "bitwarden-ca-certificates-pvc"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/etc/bitwarden/logs"
|
|
sub_path = "notifications"
|
|
}
|
|
}
|
|
}
|
|
bitwarden-sso = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-sso"
|
|
image = "ghcr.io/bitwarden/sso:2026.1.0"
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env", "global.override.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-identity-pvc = {
|
|
mount_path = "/etc/bitwarden/identity"
|
|
}
|
|
bitwarden-core-pvc = {
|
|
mount_path = "/etc/bitwarden/core"
|
|
}
|
|
bitwarden-ca-certificates-pvc = {
|
|
mount_path = "/etc/bitwarden/ca-certificates"
|
|
}
|
|
bitwarden-logs-pvc = {
|
|
mount_path = "/etc/bitwarden/logs"
|
|
sub_path = "sso"
|
|
}
|
|
}
|
|
}
|
|
bitwarden-web = {
|
|
#enabled = false
|
|
connected_namespace = "bitwarden"
|
|
replicas = 1
|
|
name = "bitwarden-web"
|
|
image = "ghcr.io/bitwarden/web:2026.1.0"
|
|
service_port = [5000]
|
|
config_map_ref = ["global.env", "uid.env"]
|
|
environment = {}
|
|
|
|
pvc = {
|
|
bitwarden-web-pvc = {
|
|
mount_path = "/etc/bitwarden/web"
|
|
}
|
|
}
|
|
}
|
|
|
|
}
|