viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add flaresolverr and prowlar; also move all services in a single namespace [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2025-09-06 21:41:02 +00:00
parent 7eacc9d6c8
commit 615d0549e8
5 changed files with 160 additions and 139 deletions
Download patch file Download diff file Expand all files Collapse all files

71
modules/kubernetes/servarr/flaresolverr/main.tf
View file

@ -1,24 +1,9 @@
variable "tls_secret_name" {}
resource "kubernetes_namespace" "flaresolverr" {
metadata {
name = "flaresolverr"
# labels = {
# "istio-injection" : "enabled"
# }
}
}
module "tls_secret" {
source = "../../setup_tls_secret"
namespace = "flaresolverr"
tls_secret_name = var.tls_secret_name
}
resource "kubernetes_deployment" "flaresolverr" {
metadata {
name = "flaresolverr"
namespace = "flaresolverr"
namespace = "servarr"
labels = {
app = "flaresolverr"
}
@ -56,7 +41,7 @@ resource "kubernetes_deployment" "flaresolverr" {
resource "kubernetes_service" "flaresolverr" {
metadata {
name = "flaresolverr"
namespace = "flaresolverr"
namespace = "servarr"
labels = {
app = "flaresolverr"
}
@ -67,49 +52,21 @@ resource "kubernetes_service" "flaresolverr" {
app = "flaresolverr"
}
port {
name = "http"
port = 8191
name = "http"
target_port = 8191
port = 80
}
}
}
resource "kubernetes_ingress_v1" "flaresolverr" {
metadata {
name = "flaresolverr"
namespace = "flaresolverr"
annotations = {
"kubernetes.io/ingress.class" = "nginx"
# "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth"
# "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri"
module "ingress" {
source = "../../ingress_factory"
namespace = "servarr"
name = "flaresolverr"
tls_secret_name = var.tls_secret_name
protected = true
# extra_annotations = {
# "nginx.ingress.kubernetes.io/proxy-body-size" : "1G" // allow uploading .torrent files
# }
"nginx.ingress.kubernetes.io/auth-url" = "http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx"
"nginx.ingress.kubernetes.io/auth-signin" = "https://authentik.viktorbarzin.me/outpost.goauthentik.io/start?rd=$scheme%3A%2F%2F$host$escaped_request_uri"
"nginx.ingress.kubernetes.io/auth-response-headers" = "Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid"
"nginx.ingress.kubernetes.io/auth-snippet" = "proxy_set_header X-Forwarded-Host $http_host;"
}
}
spec {
tls {
hosts = ["flaresolverr.viktorbarzin.me"]
secret_name = var.tls_secret_name
}
rule {
host = "flaresolverr.viktorbarzin.me"
http {
path {
path = "/"
backend {
service {
name = "flaresolverr"
port {
number = 8191
}
}
}
}
}
}
}
}