infra/modules/kubernetes/matrix/main.tf
2024-11-05 21:55:45 +00:00

124 lines
2.2 KiB
HCL

variable "tls_secret_name" {}
resource "kubernetes_namespace" "matrix" {
metadata {
name = "matrix"
labels = {
"istio-injection" : "disabled"
}
}
}
module "tls_secret" {
source = "../setup_tls_secret"
namespace = "matrix"
tls_secret_name = var.tls_secret_name
}
resource "kubernetes_deployment" "matrix" {
metadata {
name = "matrix"
namespace = "matrix"
labels = {
app = "matrix"
}
}
spec {
replicas = 1
selector {
match_labels = {
app = "matrix"
}
}
template {
metadata {
labels = {
app = "matrix"
}
}
spec {
container {
image = "matrixdotorg/synapse:latest"
name = "matrix"
port {
container_port = 8008
}
env {
name = "SYNAPSE_SERVER_NAME"
value = "matrix.viktorbarzin.me"
}
env {
name = "SYNAPSE_REPORT_STATS"
value = "yes"
}
volume_mount {
name = "data"
mount_path = "/data"
}
}
volume {
name = "data"
nfs {
server = "10.0.10.15"
path = "/mnt/main/matrix"
}
}
}
}
}
}
resource "kubernetes_service" "matrix" {
metadata {
name = "matrix"
namespace = "matrix"
labels = {
"app" = "matrix"
}
}
spec {
selector = {
app = "matrix"
}
port {
name = "http"
port = "80"
target_port = "8008"
}
}
}
resource "kubernetes_ingress_v1" "matrix" {
metadata {
name = "matrix"
namespace = "matrix"
annotations = {
"kubernetes.io/ingress.class" = "nginx"
}
}
spec {
tls {
hosts = ["matrix.viktorbarzin.me"]
secret_name = var.tls_secret_name
}
rule {
host = "matrix.viktorbarzin.me"
http {
path {
path = "/"
backend {
service {
name = "matrix"
port {
number = 80
}
}
}
}
}
}
}
}