viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add some homepage credentials to some services to block tls renew tfa[ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2024-10-18 22:37:47 +00:00
parent 490b5ef24d
commit 1b1aa215db
5 changed files with 42 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/kubernetes/immich/chart_values.tpl
View file

@ -29,6 +29,8 @@ env:
image:
tag: v1.116.2
# tag: v1.117.0 # not working
# tag: v1.118.1
immich:
persistence:

15
modules/kubernetes/immich/main.tf
View file

@ -1,5 +1,6 @@
variable "tls_secret_name" {}
variable "postgresql_password" {}
variable "homepage_token" {}
module "tls_secret" {
source = "../setup_tls_secret"
@ -94,7 +95,9 @@ resource "helm_release" "immich" {
repository = "https://immich-app.github.io/immich-charts"
chart = "immich"
atomic = true
version = "0.7.0"
version = "0.8.1"
# version = "0.7.2"
timeout = 6000
values = [templatefile("${path.module}/chart_values.tpl", { postgresql_password = var.postgresql_password })]
}
@ -135,6 +138,15 @@ resource "kubernetes_ingress_v1" "immich" {
# "nginx.ingress.kubernetes.io/session-cookie-name" : "STICKY_SESSION"
# "nginx.ingress.kubernetes.io/use-regex" : false
"nginx.org/websocket-services" : "immich-server"
"gethomepage.dev/enabled" = "true"
"gethomepage.dev/description" = "Photos library"
"gethomepage.dev/icon" = "immich.png"
"gethomepage.dev/name" = "Immich"
"gethomepage.dev/widget.type" = "immich"
"gethomepage.dev/widget.url" = "https://immich.viktorbarzin.me"
"gethomepage.dev/pod-selector" = ""
"gethomepage.dev/widget.key" = var.homepage_token
}
}
@ -155,6 +167,7 @@ resource "kubernetes_ingress_v1" "immich" {
port {
# number = 8080
number = 3001
# number = 2283
}
}
}