viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix immich ingress video playback [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2025-08-02 12:27:15 +00:00
parent f6b91247ae
commit 5db261046f
No known key found for this signature in database
GPG key ID: 4056458DBDBF8863
1 changed files with 53 additions and 56 deletions
Download patch file Download diff file Expand all files Collapse all files

109
modules/kubernetes/immich/main.tf
View file

@ -184,66 +184,63 @@ resource "helm_release" "immich" {
values = [templatefile("${path.module}/chart_values.tpl", { postgresql_password = var.postgresql_password })] values = [templatefile("${path.module}/chart_values.tpl", { postgresql_password = var.postgresql_password })]
} }
module "ingress" { resource "kubernetes_ingress_v1" "ingress" {
source = "../ingress_factory" metadata {
namespace = "immich" namespace = "immich"
name = "immich" name = "immich"
tls_secret_name = var.tls_secret_name annotations = {
port = 2283 # NOTE: when changing - test video playback from mobile and web!
service_name = "immich-server" # Easy to break!
extra_annotations = {
"kubernetes.io/ingress.class" = "nginx" "kubernetes.io/ingress.class" = "nginx"
# WARNING: When changing any of the below settings, ensure that large file uploads continue working "nginx.ingress.kubernetes.io/backend-protocol" = "HTTP"
"nginx.ingress.kubernetes.io/proxy-read-timeout" : "6000",
"nginx.ingress.kubernetes.io/proxy-send-timeout" : "6000", # As per https://immich.app/docs/administration/reverse-proxy
"nginx.ingress.kubernetes.io/proxy-connect-timeout" : "6000" "nginx.org/websocket-services" : "immich-server"
"nginx.ingress.kubernetes.io/client-max-body-size" : "0" # Allow big uploads
# "nginx.ingress.kubernetes.io/proxy-body-size" : "5G", "nginx.ingress.kubernetes.io/client-max-body-size" : "0"
"nginx.ingress.kubernetes.io/proxy-body-size" : "0", # Websockets
# "nginx.ingress.kubernetes.io/proxy-buffering" : "on" "nginx.ingress.kubernetes.io/proxy-http-version" : "1.1"
# "nginx.ingress.kubernetes.io/proxy-max-temp-file-size" : "4096m" "nginx.ingress.kubernetes.io/proxy-set-header" : "Upgrade $http_upgrade"
# "nginx.ingress.kubernetes.io/proxy-request-buffering" : "off" "nginx.ingress.kubernetes.io/proxy-set-header" : "Connection $connection_upgrade" # this makes a difference for web!!!
# "nginx.ingress.kubernetes.io/client-body-buffer-size" : "5G" "nginx.ingress.kubernetes.io/proxy-redirect-from" : "off"
# "nginx.ingress.kubernetes.io/proxy-buffer-size" : "16k" # Timeouts
# "nginx.ingress.kubernetes.io/proxy-buffers-number" : "8" "nginx.ingress.kubernetes.io/proxy-read-timeout" : "6000s",
"nginx.ingress.kubernetes.io/proxy-send-timeout" : "6000s",
# "nginx.ingress.kubernetes.io/client-body-buffer-size" : "5000m" "gethomepage.dev/enabled" = "true"
# "nginx.ingress.kubernetes.io/proxy-buffers-number" : "8" "gethomepage.dev/description" = "Photos library"
# "nginx.ingress.kubernetes.io/proxy-buffer-size" : "16k" "gethomepage.dev/icon" = "immich.png"
# "nginx.ingress.kubernetes.io/proxy-body-size" : "0", "gethomepage.dev/name" = "Immich"
# "nginx.ingress.kubernetes.io/affinity" : "cookie" "gethomepage.dev/widget.type" = "immich"
# "nginx.ingress.kubernetes.io/affinity-mode" : "persistent" "gethomepage.dev/widget.url" = "https://immich.viktorbarzin.me"
# "nginx.ingress.kubernetes.io/session-cookie-change-on-failure" : true "gethomepage.dev/pod-selector" = ""
# "nginx.ingress.kubernetes.io/session-cookie-expires" : 172800 "gethomepage.dev/widget.key" = var.homepage_token
# "nginx.ingress.kubernetes.io/session-cookie-max-age" : 172800 }
# "nginx.ingress.kubernetes.io/session-cookie-name" : "STICKY_SESSION" }
# "nginx.ingress.kubernetes.io/use-regex" : false
"nginx.org/websocket-services" : "immich-server"
"gethomepage.dev/enabled" = "true" spec {
"gethomepage.dev/description" = "Photos library" tls {
"gethomepage.dev/icon" = "immich.png" hosts = ["immich.viktorbarzin.me"]
"gethomepage.dev/name" = "Immich" secret_name = var.tls_secret_name
"gethomepage.dev/widget.type" = "immich" }
"gethomepage.dev/widget.url" = "https://immich.viktorbarzin.me" rule {
"gethomepage.dev/pod-selector" = "" host = "immich.viktorbarzin.me"
"gethomepage.dev/widget.key" = var.homepage_token http {
path {
backend {
service {
name = "immich-server"
port {
number = 2283
# location ~* \.(png|jpg|jpeg|gif|webp|svg)$ { }
# expires 1M; }
# add_header Cache-Control "public, max-age=31536000, immutable"; }
# } }
"nginx.ingress.kubernetes.io/configuration-snippet" = <<-EOF }
proxy_cache static-cache; }
proxy_cache_valid 404 1m;
proxy_cache_use_stale error timeout updating http_404 http_500 http_502 http_503 http_504;
proxy_cache_bypass $http_x_purge;
add_header X-Cache-Status $upstream_cache_status;
EOF
"nginx.ingress.kubernetes.io/limit-connections" : 0
"nginx.ingress.kubernetes.io/limit-rps" : 0
"nginx.ingress.kubernetes.io/limit-rpm" : 0
} }
} }