infra/modules/kubernetes/navidrome/main.tf
2026-01-10 16:28:14 +00:00

119 lines
2.5 KiB
HCL

variable "tls_secret_name" {}
variable "tier" { type = string }
resource "kubernetes_namespace" "navidrome" {
metadata {
name = "navidrome"
labels = {
"istio-injection" : "disabled"
}
}
}
module "tls_secret" {
source = "../setup_tls_secret"
namespace = kubernetes_namespace.navidrome.metadata[0].name
tls_secret_name = var.tls_secret_name
}
resource "kubernetes_deployment" "navidrome" {
metadata {
name = "navidrome"
namespace = kubernetes_namespace.navidrome.metadata[0].name
labels = {
app = "navidrome"
tier = var.tier
}
}
spec {
replicas = 1
strategy {
type = "Recreate"
}
selector {
match_labels = {
app = "navidrome"
}
}
template {
metadata {
labels = {
app = "navidrome"
}
}
spec {
container {
name = "navidrome"
image = "deluan/navidrome:latest"
volume_mount {
name = "data"
mount_path = "/data"
}
volume_mount {
name = "music"
mount_path = "/music"
read_only = true
}
volume_mount {
name = "lidarr"
mount_path = "/lidarr"
read_only = true
}
port {
name = "http"
container_port = 4533
protocol = "TCP"
}
}
volume {
name = "data"
nfs {
path = "/mnt/main/navidrome"
server = "10.0.10.15"
}
}
volume {
name = "music"
nfs {
path = "/volume1/music"
server = "192.168.1.13"
}
}
volume {
name = "lidarr"
nfs {
path = "/mnt/main/servarr/lidarr"
server = "10.0.10.15"
}
}
}
}
}
}
resource "kubernetes_service" "navidrome" {
metadata {
name = "navidrome"
namespace = kubernetes_namespace.navidrome.metadata[0].name
labels = {
"app" = "navidrome"
}
}
spec {
selector = {
app = "navidrome"
}
port {
port = "80"
target_port = "4533"
}
}
}
module "ingress" {
source = "../ingress_factory"
namespace = kubernetes_namespace.navidrome.metadata[0].name
name = "navidrome"
tls_secret_name = var.tls_secret_name
rybbit_site_id = "8a3844ff75ba"
}