viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix immich ingress video playback [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2025-08-02 12:27:15 +00:00
parent f6b91247ae
commit 5db261046f
No known key found for this signature in database
GPG key ID: 4056458DBDBF8863
1 changed files with 53 additions and 56 deletions
Download patch file Download diff file Expand all files Collapse all files

109
modules/kubernetes/immich/main.tf
View file

@ -184,66 +184,63 @@ resource "helm_release" "immich" {
values = [templatefile("${path.module}/chart_values.tpl", { postgresql_password = var.postgresql_password })]
}
module "ingress" {
source = "../ingress_factory"
namespace = "immich"
name = "immich"
tls_secret_name = var.tls_secret_name
port = 2283
service_name = "immich-server"
extra_annotations = {
"kubernetes.io/ingress.class" = "nginx"
# WARNING: When changing any of the below settings, ensure that large file uploads continue working
"nginx.ingress.kubernetes.io/proxy-read-timeout" : "6000",
"nginx.ingress.kubernetes.io/proxy-send-timeout" : "6000",
"nginx.ingress.kubernetes.io/proxy-connect-timeout" : "6000"
"nginx.ingress.kubernetes.io/client-max-body-size" : "0"
# "nginx.ingress.kubernetes.io/proxy-body-size" : "5G",
"nginx.ingress.kubernetes.io/proxy-body-size" : "0",
# "nginx.ingress.kubernetes.io/proxy-buffering" : "on"
# "nginx.ingress.kubernetes.io/proxy-max-temp-file-size" : "4096m"
# "nginx.ingress.kubernetes.io/proxy-request-buffering" : "off"
# "nginx.ingress.kubernetes.io/client-body-buffer-size" : "5G"
# "nginx.ingress.kubernetes.io/proxy-buffer-size" : "16k"
# "nginx.ingress.kubernetes.io/proxy-buffers-number" : "8"
resource "kubernetes_ingress_v1" "ingress" {
metadata {
namespace = "immich"
name = "immich"
annotations = {
# NOTE: when changing - test video playback from mobile and web!
# Easy to break!
"kubernetes.io/ingress.class" = "nginx"
"nginx.ingress.kubernetes.io/backend-protocol" = "HTTP"
# As per https://immich.app/docs/administration/reverse-proxy
"nginx.org/websocket-services" : "immich-server"
# Allow big uploads
"nginx.ingress.kubernetes.io/client-max-body-size" : "0"
# Websockets
"nginx.ingress.kubernetes.io/proxy-http-version" : "1.1"
"nginx.ingress.kubernetes.io/proxy-set-header" : "Upgrade $http_upgrade"
"nginx.ingress.kubernetes.io/proxy-set-header" : "Connection $connection_upgrade" # this makes a difference for web!!!
"nginx.ingress.kubernetes.io/proxy-redirect-from" : "off"
# Timeouts
"nginx.ingress.kubernetes.io/proxy-read-timeout" : "6000s",
"nginx.ingress.kubernetes.io/proxy-send-timeout" : "6000s",
# "nginx.ingress.kubernetes.io/client-body-buffer-size" : "5000m"
# "nginx.ingress.kubernetes.io/proxy-buffers-number" : "8"
# "nginx.ingress.kubernetes.io/proxy-buffer-size" : "16k"
# "nginx.ingress.kubernetes.io/proxy-body-size" : "0",
# "nginx.ingress.kubernetes.io/affinity" : "cookie"
# "nginx.ingress.kubernetes.io/affinity-mode" : "persistent"
# "nginx.ingress.kubernetes.io/session-cookie-change-on-failure" : true
# "nginx.ingress.kubernetes.io/session-cookie-expires" : 172800
# "nginx.ingress.kubernetes.io/session-cookie-max-age" : 172800
# "nginx.ingress.kubernetes.io/session-cookie-name" : "STICKY_SESSION"
# "nginx.ingress.kubernetes.io/use-regex" : false
"nginx.org/websocket-services" : "immich-server"
"gethomepage.dev/enabled" = "true"
"gethomepage.dev/description" = "Photos library"
"gethomepage.dev/icon" = "immich.png"
"gethomepage.dev/name" = "Immich"
"gethomepage.dev/widget.type" = "immich"
"gethomepage.dev/widget.url" = "https://immich.viktorbarzin.me"
"gethomepage.dev/pod-selector" = ""
"gethomepage.dev/widget.key" = var.homepage_token
}
}
"gethomepage.dev/enabled" = "true"
"gethomepage.dev/description" = "Photos library"
"gethomepage.dev/icon" = "immich.png"
"gethomepage.dev/name" = "Immich"
"gethomepage.dev/widget.type" = "immich"
"gethomepage.dev/widget.url" = "https://immich.viktorbarzin.me"
"gethomepage.dev/pod-selector" = ""
"gethomepage.dev/widget.key" = var.homepage_token
spec {
tls {
hosts = ["immich.viktorbarzin.me"]
secret_name = var.tls_secret_name
}
rule {
host = "immich.viktorbarzin.me"
http {
path {
backend {
service {
name = "immich-server"
port {
number = 2283
# location ~* \.(png|jpg|jpeg|gif|webp|svg)$ {
# expires 1M;
# add_header Cache-Control "public, max-age=31536000, immutable";
# }
"nginx.ingress.kubernetes.io/configuration-snippet" = <<-EOF
proxy_cache static-cache;
proxy_cache_valid 404 1m;
proxy_cache_use_stale error timeout updating http_404 http_500 http_502 http_503 http_504;
proxy_cache_bypass $http_x_purge;
add_header X-Cache-Status $upstream_cache_status;
EOF
"nginx.ingress.kubernetes.io/limit-connections" : 0
"nginx.ingress.kubernetes.io/limit-rps" : 0
"nginx.ingress.kubernetes.io/limit-rpm" : 0
}
}
}
}
}
}
}
}