variable "tls_secret_name" {} resource "kubernetes_namespace" "matrix" { metadata { name = "matrix" labels = { "istio-injection" : "disabled" } } } module "tls_secret" { source = "../setup_tls_secret" namespace = "matrix" tls_secret_name = var.tls_secret_name } resource "kubernetes_deployment" "matrix" { metadata { name = "matrix" namespace = "matrix" labels = { app = "matrix" } } spec { replicas = 1 selector { match_labels = { app = "matrix" } } template { metadata { labels = { app = "matrix" } } spec { container { image = "matrixdotorg/synapse:latest" name = "matrix" port { container_port = 8008 } env { name = "SYNAPSE_SERVER_NAME" value = "matrix.viktorbarzin.me" } env { name = "SYNAPSE_REPORT_STATS" value = "yes" } volume_mount { name = "data" mount_path = "/data" } } volume { name = "data" nfs { server = "10.0.10.15" path = "/mnt/main/matrix" } } } } } } resource "kubernetes_service" "matrix" { metadata { name = "matrix" namespace = "matrix" labels = { "app" = "matrix" } } spec { selector = { app = "matrix" } port { name = "http" port = "80" target_port = "8008" } } } resource "kubernetes_ingress_v1" "matrix" { metadata { name = "matrix" namespace = "matrix" annotations = { "kubernetes.io/ingress.class" = "nginx" } } spec { tls { hosts = ["matrix.viktorbarzin.me"] secret_name = var.tls_secret_name } rule { host = "matrix.viktorbarzin.me" http { path { path = "/" backend { service { name = "matrix" port { number = 80 } } } } } } } }