infra/modules/kubernetes/jellyfin/main.tf
Viktor Barzin 348d706a48
[ci skip] Refactor raw ingresses to use ingress_factory module
Enhance ingress_factory with full_host, extra_middlewares, and
skip_default_rate_limit variables. Fix TLS hosts bug to use
effective_host. Migrate 13 services from raw kubernetes_ingress_v1
resources to centralized ingress_factory module calls, removing
manual rybbit middleware CRDs where the factory now handles them.
2026-02-10 21:11:46 +00:00

117 lines
2.3 KiB
HCL

variable "tls_secret_name" {}
resource "kubernetes_namespace" "jellyfin" {
metadata {
name = "jellyfin"
}
}
module "tls_secret" {
source = "../setup_tls_secret"
namespace = kubernetes_namespace.jellyfin.metadata[0].name
tls_secret_name = var.tls_secret_name
}
resource "kubernetes_deployment" "jellyfin" {
metadata {
name = "jellyfin"
namespace = kubernetes_namespace.jellyfin.metadata[0].name
labels = {
app = "jellyfin"
}
annotations = {
"reloader.stakater.com/search" = "true"
}
}
spec {
replicas = 1
strategy {
type = "Recreate"
}
selector {
match_labels = {
app = "jellyfin"
}
}
template {
metadata {
labels = {
app = "jellyfin"
}
}
spec {
container {
image = "jellyfin/jellyfin"
name = "jellyfin"
port {
container_port = 8096
}
volume_mount {
name = "media"
mount_path = "/media"
}
volume_mount {
name = "config"
mount_path = "/config"
}
volume_mount {
name = "cache"
mount_path = "/cache"
}
}
volume {
name = "media"
nfs {
path = "/mnt/main/jellyfin/media"
server = "10.0.10.15"
}
}
volume {
name = "config"
nfs {
path = "/mnt/main/jellyfin/config"
server = "10.0.10.15"
}
}
volume {
name = "cache"
nfs {
path = "/mnt/main/jellyfin/cache"
server = "10.0.10.15"
}
}
}
}
}
}
resource "kubernetes_service" "jellyfin" {
metadata {
name = "jellyfin"
namespace = kubernetes_namespace.jellyfin.metadata[0].name
labels = {
"app" = "jellyfin"
}
}
spec {
selector = {
app = "jellyfin"
}
port {
name = "http"
target_port = 8096
port = 80
protocol = "TCP"
}
}
}
module "ingress" {
source = "../ingress_factory"
namespace = kubernetes_namespace.jellyfin.metadata[0].name
name = "jellyfin"
tls_secret_name = var.tls_secret_name
}