infra/modules/kubernetes/send/main.tf
2025-12-18 08:53:19 +00:00

120 lines
2.4 KiB
HCL

variable "tls_secret_name" {}
resource "kubernetes_namespace" "send" {
metadata {
name = "send"
labels = {
"istio-injection" : "disabled"
}
}
}
module "tls_secret" {
source = "../setup_tls_secret"
namespace = "send"
tls_secret_name = var.tls_secret_name
}
resource "kubernetes_deployment" "send" {
metadata {
name = "send"
namespace = "send"
labels = {
app = "send"
}
annotations = {
"reloader.stakater.com/search" = "true"
}
}
spec {
replicas = 1
selector {
match_labels = {
app = "send"
}
}
template {
metadata {
labels = {
app = "send"
}
}
spec {
container {
image = "registry.gitlab.com/timvisee/send:latest"
name = "send"
port {
container_port = 1443
}
env {
name = "FILE_DIR"
value = "/uploads"
}
env {
name = "BASE_URL"
value = "https://send.viktorbarzin.me"
}
env {
name = "MAX_FILE_SIZE"
value = "5368709120"
}
env {
name = "MAX_DOWNLOADS"
value = 10 # try to minimize abusive behaviour
}
env {
name = "MAX_EXPIRE_SECONDS"
value = 7 * 24 * 3600
}
env {
name = "REDIS_HOST"
value = "redis.redis.svc.cluster.local"
}
volume_mount {
name = "data"
mount_path = "/uploads"
}
}
volume {
name = "data"
nfs {
path = "/mnt/main/send"
server = "10.0.10.15"
}
}
}
}
}
}
resource "kubernetes_service" "send" {
metadata {
name = "send"
namespace = "send"
labels = {
app = "send"
}
}
spec {
selector = {
app = "send"
}
port {
name = "http"
port = 1443
}
}
}
module "ingress" {
source = "../ingress_factory"
namespace = "send"
name = "send"
tls_secret_name = var.tls_secret_name
port = 1443
extra_annotations = {
"nginx.ingress.kubernetes.io/client-max-body-size" : "0"
"nginx.ingress.kubernetes.io/proxy-body-size" : "0",
}
rybbit_site_id = "c1b8f8aa831b"
}