Add Kubernetes ingress annotations for Homepage auto-discovery across ~88 services organized into 11 groups. Enable serviceAccount for RBAC, configure group layouts, and add Grafana/Frigate/Speedtest widgets.
129 lines
3 KiB
HCL
129 lines
3 KiB
HCL
variable "tls_secret_name" {}
|
||
variable "tier" { type = string }
|
||
variable "aiostreams_database_connection_string" { type = string }
|
||
variable "nfs_server" { type = string }
|
||
|
||
resource "kubernetes_namespace" "aiostreams" {
|
||
metadata {
|
||
name = "aiostreams"
|
||
labels = {
|
||
"istio-injection" : "disabled"
|
||
}
|
||
}
|
||
}
|
||
|
||
resource "random_id" "secret_key" {
|
||
byte_length = 32 # 32 bytes × 2 hex chars = 64 hex characters
|
||
}
|
||
|
||
module "nfs_data" {
|
||
source = "../../../modules/kubernetes/nfs_volume"
|
||
name = "aiostreams-data"
|
||
namespace = kubernetes_namespace.aiostreams.metadata[0].name
|
||
nfs_server = var.nfs_server
|
||
nfs_path = "/mnt/main/servarr/aiostreams"
|
||
}
|
||
|
||
resource "kubernetes_deployment" "aiostreams" {
|
||
metadata {
|
||
name = "aiostreams"
|
||
namespace = kubernetes_namespace.aiostreams.metadata[0].name
|
||
labels = {
|
||
app = "aiostreams"
|
||
tier = var.tier
|
||
}
|
||
}
|
||
spec {
|
||
replicas = 1
|
||
selector {
|
||
match_labels = {
|
||
app = "aiostreams"
|
||
}
|
||
}
|
||
template {
|
||
metadata {
|
||
labels = {
|
||
app = "aiostreams"
|
||
}
|
||
}
|
||
spec {
|
||
container {
|
||
image = "viren070/aiostreams:nightly"
|
||
name = "aiostreams"
|
||
port {
|
||
container_port = 3000
|
||
}
|
||
env {
|
||
name = "BASE_URL"
|
||
value = "https://aiostreams.viktorbarzin.me"
|
||
}
|
||
env {
|
||
name = "SECRET_KEY"
|
||
value = random_id.secret_key.hex
|
||
}
|
||
env {
|
||
name = "DATABASE_URI"
|
||
value = var.aiostreams_database_connection_string
|
||
}
|
||
volume_mount {
|
||
name = "data"
|
||
mount_path = "/app/data"
|
||
}
|
||
resources {
|
||
requests = {
|
||
cpu = "25m"
|
||
memory = "256Mi"
|
||
}
|
||
limits = {
|
||
cpu = "500m"
|
||
memory = "1Gi"
|
||
}
|
||
}
|
||
}
|
||
volume {
|
||
name = "data"
|
||
persistent_volume_claim {
|
||
claim_name = module.nfs_data.claim_name
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
resource "kubernetes_service" "aiostreams" {
|
||
metadata {
|
||
name = "aiostreams"
|
||
namespace = kubernetes_namespace.aiostreams.metadata[0].name
|
||
labels = {
|
||
"app" = "aiostreams"
|
||
}
|
||
}
|
||
|
||
spec {
|
||
selector = {
|
||
app = "aiostreams"
|
||
}
|
||
port {
|
||
name = "http"
|
||
port = 80
|
||
target_port = 3000
|
||
}
|
||
}
|
||
}
|
||
|
||
module "ingress" {
|
||
source = "../../../modules/kubernetes/ingress_factory"
|
||
namespace = kubernetes_namespace.aiostreams.metadata[0].name
|
||
name = "aiostreams"
|
||
tls_secret_name = var.tls_secret_name
|
||
# protected = true
|
||
extra_annotations = {
|
||
"gethomepage.dev/enabled" = "true"
|
||
"gethomepage.dev/name" = "AIOStreams"
|
||
"gethomepage.dev/description" = "Streaming addon manager"
|
||
"gethomepage.dev/icon" = "stremio.png"
|
||
"gethomepage.dev/group" = "Media & Entertainment"
|
||
"gethomepage.dev/pod-selector" = ""
|
||
}
|
||
}
|