viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add semi working authelia [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2025-12-28 20:02:28 +00:00
parent a5645e7396
commit aac4cb48d9
No known key found for this signature in database
GPG key ID: 4056458DBDBF8863
2 changed files with 169 additions and 1860 deletions
Download patch file Download diff file Expand all files Collapse all files

301
modules/kubernetes/authelia/main.tf
View file

@ -15,163 +15,164 @@ module "tls_secret" {
tls_secret_name = var.tls_secret_name
}
# resource "helm_release" "authelia" {
# namespace = "authelia"
# create_namespace = true
# name = "authelia"
# atomic = true
resource "helm_release" "authelia" {
namespace = "authelia"
name = "authelia"
atomic = true
# repository = "https://charts.authelia.com"
# chart = "authelia"
# version = "4.38.9"
repository = "https://charts.authelia.com"
chart = "authelia"
version = "0.10.49"
# values = [templatefile("${path.module}/values.yaml", {})]
depends_on = [kubernetes_namespace.authelia]
values = [templatefile("${path.module}/values.yaml", {})]
}
# resource "kubernetes_config_map" "configuration" {
# metadata {
# name = "configuration"
# namespace = "authelia"
# labels = {
# app = "configuration"
# }
# annotations = {
# "reloader.stakater.com/match" = "true"
# }
# }
# data = {
# # "configuration.yml" = yamldecode(file("${path.module}/configuration.yml"))
# "configuration.yml" = file("${path.module}/configuration.yml")
# "users_database.yml" = file("${path.module}/users_database.yml")
# }
# }
resource "kubernetes_config_map" "configuration" {
metadata {
name = "configuration"
namespace = "authelia"
labels = {
app = "configuration"
}
annotations = {
"reloader.stakater.com/match" = "true"
}
}
# resource "kubernetes_deployment" "authelia" {
# metadata {
# name = "authelia"
# namespace = "authelia"
# labels = {
# app = "authelia"
# }
# annotations = {
# "reloader.stakater.com/search" = "true"
# }
# }
# spec {
# replicas = 1
# selector {
# match_labels = {
# app = "authelia"
# }
# }
# template {
# metadata {
# labels = {
# app = "authelia"
# }
# }
# spec {
# container {
# image = "authelia/authelia:4.38"
# name = "authelia"
# # command = ["tail", "-f", "/etc/passwd"]
data = {
# "configuration.yml" = yamldecode(file("${path.module}/configuration.yml"))
"configuration.yml" = file("${path.module}/configuration.yml")
"users_database.yml" = file("${path.module}/users_database.yml")
}
}
# port {
# container_port = 9091
# }
# port {
# container_port = 8080
# }
# volume_mount {
# name = "config"
# # mount_path = "/etc/authelia/configuration.yml"
# mount_path = "/config/configuration.yml"
# sub_path = "configuration.yml"
# }
# volume_mount {
# name = "users-database"
# # mount_path = "/etc/authelia/users_database.yml"
# mount_path = "/config/users_database.yml"
# sub_path = "users_database.yml"
# }
# }
# volume {
# name = "config"
# config_map {
# name = "configuration"
# }
# }
# volume {
# name = "users-database"
# config_map {
# name = "configuration"
# }
# }
# }
# }
# }
# }
# resource "kubernetes_service" "authelia" {
# metadata {
# name = "authelia"
# namespace = "authelia"
# labels = {
# "app" = "authelia"
# }
# }
resource "kubernetes_deployment" "authelia" {
metadata {
name = "authelia"
namespace = "authelia"
labels = {
app = "authelia"
}
annotations = {
"reloader.stakater.com/search" = "true"
}
}
spec {
replicas = 1
selector {
match_labels = {
app = "authelia"
}
}
template {
metadata {
labels = {
app = "authelia"
}
}
spec {
container {
image = "authelia/authelia:4.38"
name = "authelia"
# command = ["tail", "-f", "/etc/passwd"]
# spec {
# selector = {
# app = "authelia"
# }
# port {
# name = "http"
# port = 80
# protocol = "TCP"
# # target_port = 8080
# target_port = 9091
# }
# }
# }
port {
container_port = 9091
}
port {
container_port = 8080
}
volume_mount {
name = "config"
# mount_path = "/etc/authelia/configuration.yml"
mount_path = "/config/configuration.yml"
sub_path = "configuration.yml"
}
volume_mount {
name = "users-database"
# mount_path = "/etc/authelia/users_database.yml"
mount_path = "/config/users_database.yml"
sub_path = "users_database.yml"
}
}
volume {
name = "config"
config_map {
name = "configuration"
}
}
volume {
name = "users-database"
config_map {
name = "configuration"
}
}
}
}
}
}
# resource "kubernetes_ingress_v1" "authelia" {
# metadata {
# name = "authelia"
# namespace = "authelia"
# annotations = {
# "kubernetes.io/ingress.class" = "nginx"
# # "nginx.ingress.kubernetes.io/affinity" = "cookie"
# # "nginx.ingress.kubernetes.io/auth-tls-verify-client" = "on"
# # "nginx.ingress.kubernetes.io/auth-tls-secret" = "default/ca-secret"
# # "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth"
# # "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri"
# }
# }
resource "kubernetes_service" "authelia" {
metadata {
name = "authelia"
namespace = "authelia"
labels = {
"app" = "authelia"
}
}
spec {
selector = {
app = "authelia"
}
port {
name = "http"
port = 80
protocol = "TCP"
# target_port = 8080
target_port = 9091
}
}
}
resource "kubernetes_ingress_v1" "authelia" {
metadata {
name = "authelia"
namespace = "authelia"
annotations = {
"kubernetes.io/ingress.class" = "nginx"
# "nginx.ingress.kubernetes.io/affinity" = "cookie"
# "nginx.ingress.kubernetes.io/auth-tls-verify-client" = "on"
# "nginx.ingress.kubernetes.io/auth-tls-secret" = "default/ca-secret"
# "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth"
# "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri"
}
}
spec {
tls {
hosts = ["auth.viktorbarzin.me"]
secret_name = var.tls_secret_name
}
rule {
host = "auth.viktorbarzin.me"
http {
path {
path = "/"
backend {
service {
name = "authelia"
port {
number = 80
}
}
}
}
}
}
}
}
# spec {
# tls {
# hosts = ["auth.viktorbarzin.me"]
# secret_name = var.tls_secret_name
# }
# rule {
# host = "auth.viktorbarzin.me"
# http {
# path {
# path = "/"
# backend {
# service {
# name = "authelia"
# port {
# number = 80
# }
# }
# }
# }
# }
# }
# }
# }

1728
modules/kubernetes/authelia/values.yaml
View file

File diff suppressed because it is too large Load diff