568 lines
22 KiB
HCL
568 lines
22 KiB
HCL
variable "prod" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
variable "proxmox_pm_api_url" { type = string }
|
|
variable "proxmox_pm_api_token_id" { type = string }
|
|
variable "proxmox_pm_api_token_secret" { type = string }
|
|
variable "k8s_join_command" { type = string }
|
|
variable "vm_wizard_password" { type = string }
|
|
variable "proxmox_host" { type = string }
|
|
variable "tls_secret_name" {}
|
|
variable "tls_crt" {
|
|
default = ""
|
|
}
|
|
variable "tls_key" {
|
|
default = ""
|
|
}
|
|
variable "client_certificate_secret_name" {}
|
|
variable "mailserver_accounts" {}
|
|
variable "mailserver_aliases" {}
|
|
variable "mailserver_opendkim_key" {}
|
|
variable "mailserver_roundcubemail_db_password" { type = string }
|
|
variable "mailserver_sasl_passwd" {}
|
|
variable "pihole_web_password" {}
|
|
variable "webhook_handler_secret" {}
|
|
variable "wireguard_wg_0_conf" {}
|
|
variable "wireguard_firewall_sh" {}
|
|
variable "hackmd_db_password" {}
|
|
variable "bind_db_viktorbarzin_me" {}
|
|
variable "bind_db_viktorbarzin_lan" {}
|
|
variable "bind_named_conf_options" {}
|
|
variable "alertmanager_account_password" {}
|
|
variable "wireguard_wg_0_key" {}
|
|
variable "dbaas_root_password" {}
|
|
variable "dbaas_postgresql_root_password" {}
|
|
variable "dbaas_pgadmin_password" {}
|
|
variable "drone_github_client_id" {}
|
|
variable "drone_github_client_secret" {}
|
|
variable "drone_rpc_secret" {}
|
|
variable "dockerhub_registry_password" {}
|
|
variable "oauth2_proxy_client_id" {}
|
|
variable "oauth2_proxy_client_secret" {}
|
|
variable "oauth2_proxy_authenticated_emails" {}
|
|
variable "url_shortener_mysql_password" {}
|
|
variable "url_shortener_geolite_license_key" {}
|
|
variable "url_shortener_api_key" {}
|
|
variable "webhook_handler_fb_verify_token" {}
|
|
variable "webhook_handler_fb_page_token" {}
|
|
variable "webhook_handler_fb_app_secret" {}
|
|
variable "webhook_handler_git_user" {}
|
|
variable "technitium_username" {}
|
|
variable "technitium_password" {}
|
|
variable "webhook_handler_git_token" {}
|
|
variable "webhook_handler_ssh_key" {}
|
|
variable "monitoring_idrac_username" {}
|
|
variable "monitoring_idrac_password" {}
|
|
variable "alertmanager_slack_api_url" {}
|
|
variable "home_assistant_configuration" {}
|
|
variable "shadowsocks_password" {}
|
|
variable "finance_app_db_connection_string" {}
|
|
variable "finance_app_currency_converter_api_key" {}
|
|
variable "finance_app_graphql_api_secret" {}
|
|
variable "finance_app_gocardless_secret_key" {}
|
|
variable "finance_app_gocardless_secret_id" {}
|
|
variable "headscale_config" {}
|
|
variable "headscale_acl" {}
|
|
variable "immich_postgresql_password" {}
|
|
variable "immich_frame_api_key" {}
|
|
variable "ingress_honeypotapikey" {}
|
|
variable "ingress_crowdsec_api_key" {}
|
|
variable "ingress_crowdsec_captcha_secret_key" {}
|
|
variable "ingress_crowdsec_captcha_site_key" {}
|
|
variable "crowdsec_enroll_key" { type = string }
|
|
variable "crowdsec_db_password" { type = string }
|
|
variable "crowdsec_dash_api_key" { type = string }
|
|
variable "crowdsec_dash_machine_id" { type = string }
|
|
variable "crowdsec_dash_machine_password" { type = string }
|
|
variable "vaultwarden_smtp_password" {}
|
|
variable "resume_database_url" {}
|
|
variable "resume_database_password" {}
|
|
variable "resume_redis_url" {}
|
|
variable "frigate_valchedrym_camera_credentials" { default = "" }
|
|
variable "paperless_db_password" {}
|
|
variable "diun_nfty_token" {}
|
|
variable "diun_slack_url" {}
|
|
variable "docker_config" {}
|
|
variable "nextcloud_db_password" {}
|
|
variable "homepage_credentials" {
|
|
type = map(any)
|
|
}
|
|
variable "authentik_secret_key" {}
|
|
variable "authentik_postgres_password" {}
|
|
|
|
variable "ansible_prefix" {
|
|
default = "ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible/vault_pass.txt ansible-playbook -i playbook/hosts.yaml playbook/linux.yml -t linux/initial_setup"
|
|
description = "Provisioner command"
|
|
}
|
|
variable "linkwarden_postgresql_password" {}
|
|
variable "linkwarden_authentik_client_id" {}
|
|
variable "linkwarden_authentik_client_secret" {}
|
|
variable "cloudflare_api_key" {}
|
|
variable "cloudflare_email" {}
|
|
variable "cloudflare_account_id" {}
|
|
variable "cloudflare_zone_id" {}
|
|
variable "cloudflare_tunnel_id" {}
|
|
variable "public_ip" {}
|
|
variable "cloudflare_proxied_names" {}
|
|
variable "cloudflare_non_proxied_names" {}
|
|
variable "cloudflare_tunnel_token" {}
|
|
variable "owntracks_credentials" {}
|
|
variable "dawarich_database_password" {}
|
|
variable "geoapify_api_key" {}
|
|
variable "tandoor_database_password" {}
|
|
variable "n8n_postgresql_password" {}
|
|
variable "realestate_crawler_db_password" {}
|
|
variable "realestate_crawler_notification_settings" {
|
|
type = map(string)
|
|
}
|
|
variable "kured_notify_url" {}
|
|
variable "onlyoffice_db_password" { type = string }
|
|
variable "onlyoffice_jwt_token" { type = string }
|
|
variable "xray_reality_clients" { type = list(map(string)) }
|
|
variable "xray_reality_private_key" { type = string }
|
|
variable "xray_reality_short_ids" { type = list(string) }
|
|
variable "tiny_tuya_api_key" { type = string }
|
|
variable "tiny_tuya_api_secret" { type = string }
|
|
variable "tiny_tuya_service_secret" { type = string }
|
|
variable "tiny_tuya_slack_url" { type = string }
|
|
variable "haos_api_token" { type = string }
|
|
variable "pve_password" { type = string }
|
|
variable "grafana_db_password" { type = string }
|
|
variable "clickhouse_password" { type = string }
|
|
variable "clickhouse_postgres_password" { type = string }
|
|
variable "wealthfolio_password_hash" { type = string }
|
|
variable "aiostreams_database_connection_string" { type = string }
|
|
variable "actualbudget_credentials" { type = map(any) }
|
|
variable "speedtest_db_password" { type = string }
|
|
variable "freedify_credentials" { type = map(any) }
|
|
|
|
provider "kubernetes" {
|
|
config_path = var.prod ? "" : "~/.kube/config"
|
|
}
|
|
|
|
provider "helm" {
|
|
kubernetes = {
|
|
config_path = var.prod ? "" : "~/.kube/config"
|
|
}
|
|
}
|
|
|
|
provider "proxmox" {
|
|
pm_api_url = var.proxmox_pm_api_url
|
|
pm_api_token_id = var.proxmox_pm_api_token_id
|
|
pm_api_token_secret = var.proxmox_pm_api_token_secret
|
|
pm_tls_insecure = true
|
|
}
|
|
# TODO: add DEFCON levels
|
|
|
|
# Main module to init infra from
|
|
|
|
locals {
|
|
k8s_vm_template = "ubuntu-2404-cloudinit-k8s-template"
|
|
k8s_cloud_init_snippet_name = "k8s_cloud_init.yaml"
|
|
k8s_cloud_init_image_path = "/var/lib/vz/template/iso/noble-server-cloudimg-amd64-k8s.img"
|
|
|
|
non_k8s_vm_template = "ubuntu-2404-cloudinit-non-k8s-template"
|
|
non_k8s_cloud_init_snippet_name = "non_k8s_cloud_init.yaml"
|
|
non_k8s_cloud_init_image_path = "/var/lib/vz/template/iso/noble-server-cloudimg-amd64-non-k8s.img"
|
|
|
|
cloud_init_image_url = "https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.img"
|
|
}
|
|
|
|
module "k8s-node-template" {
|
|
source = "./modules/create-template-vm"
|
|
proxmox_host = var.proxmox_host
|
|
proxmox_user = "root" # SSH user on Proxmox host
|
|
|
|
cloud_image_url = local.cloud_init_image_url
|
|
image_path = local.k8s_cloud_init_image_path
|
|
template_id = 2000
|
|
template_name = local.k8s_vm_template
|
|
user_passwd = var.vm_wizard_password
|
|
|
|
is_k8s_template = true # provision cloud init file with k8s deps
|
|
snippet_name = local.k8s_cloud_init_snippet_name
|
|
# Add mirror registry
|
|
containerd_config_update_command = <<-EOF
|
|
# BELOW IS DEPRECATED - replace with config_path version!!!!
|
|
echo '[plugins.\"io.containerd.grpc.v1.cri\".registry.mirrors.\"*\"]' >> /etc/containerd/config.toml && echo ' endpoint = [\"http://10.0.20.10:5000\"]' >> /etc/containerd/config.toml # docker registry vm
|
|
|
|
sed -i 's/.*max_concurrent_downloads = 3/max_concurrent_downloads = 20/g' /etc/containerd/config.toml # Enable multiple concurrent downloads
|
|
sudo sed -i '/serializeImagePulls:/d' /var/lib/kubelet/config.yaml && \
|
|
sudo sed -i '/maxParallelImagePulls:/d' /var/lib/kubelet/config.yaml && \
|
|
echo -e 'serializeImagePulls: false\nmaxParallelImagePulls: 50' | sudo tee -a /var/lib/kubelet/config.yaml
|
|
EOF
|
|
k8s_join_command = var.k8s_join_command
|
|
}
|
|
|
|
module "non-k8s-node-template" {
|
|
source = "./modules/create-template-vm"
|
|
proxmox_host = var.proxmox_host
|
|
proxmox_user = "root" # SSH user on Proxmox host
|
|
|
|
cloud_image_url = local.cloud_init_image_url
|
|
image_path = local.non_k8s_cloud_init_image_path
|
|
template_id = 1000
|
|
template_name = local.non_k8s_vm_template
|
|
user_passwd = var.vm_wizard_password
|
|
|
|
is_k8s_template = false # provision cloud init file without k8s deps
|
|
snippet_name = local.non_k8s_cloud_init_snippet_name
|
|
}
|
|
|
|
module "docker-registry-template" {
|
|
source = "./modules/create-template-vm"
|
|
|
|
proxmox_host = var.proxmox_host
|
|
proxmox_user = "root" # SSH user on Proxmox host
|
|
|
|
cloud_image_url = local.cloud_init_image_url
|
|
image_path = local.non_k8s_cloud_init_image_path # keke
|
|
template_id = 1001
|
|
template_name = "docker-registry-template"
|
|
|
|
user_passwd = var.vm_wizard_password
|
|
|
|
is_k8s_template = false # provision cloud init file without k8s deps
|
|
snippet_name = "docker-registry.yaml"
|
|
|
|
# Setup registry config and start container
|
|
provision_cmds = [
|
|
"mkdir -p /etc/docker-registry",
|
|
format("echo %s | base64 -d > /etc/docker-registry/config.yml",
|
|
base64encode(
|
|
templatefile("./modules/docker-registry/config.yaml", {
|
|
password = var.dockerhub_registry_password
|
|
}
|
|
)
|
|
)
|
|
),
|
|
"( crontab -l 2>/dev/null; echo '0 3 * * 0 /usr/bin/docker exec registry registry garbage-collect -m /etc/docker/registry/config.yml' ) | crontab -",
|
|
"( crontab -l 2>/dev/null; echo '0 * * * * /usr/bin/docker restart registry' ) | crontab -",
|
|
"docker run -p 5000:5000 -p 5001:5001 -d --restart always --name registry -v /etc/docker-registry/config.yml:/etc/docker/registry/config.yml registry:2",
|
|
# Setup the registry nginx config; We want clients to connect via the nginx to serialize requests for the same blobs
|
|
# Otherwise race conditions lead to corrupt blobs
|
|
"mkdir -p /var/cache/nginx/registry",
|
|
format("echo %s | base64 -d > /etc/nginx/conf.d/registry.conf",
|
|
base64encode(
|
|
templatefile("${path.root}/modules/docker-registry/nginx_registry.conf", {})
|
|
)
|
|
),
|
|
]
|
|
}
|
|
|
|
|
|
module "docker-registry-vm" {
|
|
source = "./modules/create-vm"
|
|
vmid = 220
|
|
|
|
vm_cpus = 4
|
|
vm_mem_mb = 4196
|
|
vm_disk_size = "64G"
|
|
|
|
template_name = "docker-registry-template"
|
|
vm_name = "docker-registry"
|
|
cisnippet_name = "docker-registry.yaml"
|
|
|
|
vm_mac_address = "DE:AD:BE:EF:22:22" # mapped to 10.0.20.10 in dhcp
|
|
bridge = "vmbr1"
|
|
vlan_tag = "20"
|
|
# ports:
|
|
# 5000 -> registry
|
|
# 5001 -> metrics
|
|
# 5002 -> ngin proxy <-- use this to prevent races on the same blobs
|
|
}
|
|
|
|
# module that provisions the proxmox host?
|
|
# make dns stateless?
|
|
# pfsense/truenas configs in code
|
|
# etcd db backup in code
|
|
|
|
# module "k8s_node5" {
|
|
# template_name = local.vm_template_name
|
|
# source = "./modules/create-vm"
|
|
# vm_name = "k8s-node5"
|
|
# vmid = 205
|
|
# cisnippet_name = local.vm_cloud_init_snippet_name
|
|
|
|
# vm_mac_address = "00:50:56:87:4a:2d"
|
|
# bridge = "vmbr1"
|
|
# vlan_tag = "20"
|
|
# }
|
|
|
|
# module "k8s_master" {
|
|
# source = "./modules/create-vm"
|
|
# vm_name = "k8s-master"
|
|
# vm_mac_address = "00:50:56:b0:a1:39"
|
|
# network = "dKubernetes"
|
|
# provisioner_command = "${var.ansible_prefix} -t linux/k8s/master -e hostname=k8s-master"
|
|
|
|
# vsphere_password = var.vsphere_password
|
|
# vsphere_user = var.vsphere_user
|
|
# vsphere_server = var.vsphere_server
|
|
# vsphere_datastore = "r730-datastore"
|
|
# vsphere_resource_pool = "R730"
|
|
|
|
# }
|
|
# module "k8s_node1" {
|
|
# source = "./modules/create-vm"
|
|
# vm_name = "k8s-node1"
|
|
# vm_mac_address = "00:50:56:b0:e0:c9"
|
|
# network = "dKubernetes"
|
|
# provisioner_command = "${var.ansible_prefix} -t linux/k8s/node -e hostname=k8s-node1 -e k8s_master='wizard@${module.k8s_master.guest_ip}'"
|
|
|
|
# vsphere_password = var.vsphere_password
|
|
# vsphere_user = var.vsphere_user
|
|
# vsphere_server = var.vsphere_server
|
|
# vsphere_datastore = "r730-datastore"
|
|
# vsphere_resource_pool = "R730"
|
|
|
|
# }
|
|
|
|
# module "k8s_node2" {
|
|
# source = "./modules/create-vm"
|
|
# vm_name = "k8s-node2"
|
|
# vm_mac_address = "00:50:56:b0:a1:36"
|
|
# network = "dKubernetes"
|
|
# provisioner_command = "${var.ansible_prefix} -t linux/k8s/node -e hostname=k8s-node2 -e k8s_master='wizard@${module.k8s_master.guest_ip}'"
|
|
|
|
# vsphere_password = var.vsphere_password
|
|
# vsphere_user = var.vsphere_user
|
|
# vsphere_server = var.vsphere_server
|
|
# vsphere_datastore = "r730-datastore"
|
|
# vsphere_resource_pool = "R730"
|
|
# }
|
|
|
|
# module "k8s_node3" {
|
|
# source = "./modules/create-vm"
|
|
# vm_name = "k8s-node3"
|
|
# vm_mac_address = "00:50:56:b0:a1:37"
|
|
# network = "dKubernetes"
|
|
# provisioner_command = "${var.ansible_prefix} -t linux/k8s/node -e hostname=k8s-node3 -e k8s_master='wizard@${module.k8s_master.guest_ip}'"
|
|
|
|
# vsphere_password = var.vsphere_password
|
|
# vsphere_user = var.vsphere_user
|
|
# vsphere_server = var.vsphere_server
|
|
# vsphere_datastore = "r730-datastore"
|
|
# vsphere_resource_pool = "R730"
|
|
# }
|
|
|
|
# module "k8s_node4" {
|
|
# source = "./modules/create-vm"
|
|
# vm_name = "k8s-node4"
|
|
# vmid = 204
|
|
# template_name = local.vm_template_name
|
|
# cisnippet_name = local.vm_cloud_init_snippet_name
|
|
|
|
# vm_mac_address = "00:50:56:b0:a1:38"
|
|
# bridge = "vmbr1"
|
|
# vlan_tag = "20"
|
|
# }
|
|
|
|
# module "k8s_node5" {
|
|
# source = "./modules/create-vm"
|
|
# vm_name = "k8s-node5"
|
|
# vm_mac_address = "00:50:56:b0:a1:40"
|
|
# network = "dKubernetes"
|
|
# provisioner_command = "${var.ansible_prefix} -t linux/k8s/node -e hostname=k8s-node5 -e k8s_master='wizard@${module.k8s_master.guest_ip}'"
|
|
|
|
# vsphere_password = var.vsphere_password
|
|
# vsphere_user = var.vsphere_user
|
|
# vsphere_server = var.vsphere_server
|
|
# vsphere_datastore = "r730-datastore"
|
|
# vsphere_resource_pool = "R730"
|
|
|
|
# }
|
|
# module "devvm" {
|
|
# source = "./modules/create-vm"
|
|
# vm_name = "devvm"
|
|
# vm_mac_address = "00:50:56:b0:a1:41"
|
|
# network = "dKubernetes"
|
|
# # provisioner_command = "${var.ansible_prefix} -t linux/k8s/node -e hostname=k8s-node5 -e k8s_master='wizard@${module.k8s_master.guest_ip}'"
|
|
|
|
# vsphere_password = var.vsphere_password
|
|
# vsphere_user = var.vsphere_user
|
|
# vsphere_server = var.vsphere_server
|
|
# vsphere_datastore = "r730-datastore"
|
|
# vsphere_resource_pool = "R730"
|
|
# }
|
|
|
|
# resource "null_resource" "test" {
|
|
# provisioner "local-exec" {
|
|
# working_dir = "/home/viktor/"
|
|
# command = "ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible/vault_pass.txt ansible-playbook -i playbook/hosts.yaml playbook/linux.yml -t linux/k8s/node -e host='10.0.40.126'"
|
|
# }
|
|
# }
|
|
|
|
module "kubernetes_cluster" {
|
|
source = "./modules/kubernetes"
|
|
|
|
prod = var.prod
|
|
tls_secret_name = var.tls_secret_name
|
|
# dockerhub_password = var.dockerhub_password
|
|
client_certificate_secret_name = var.client_certificate_secret_name
|
|
mailserver_accounts = var.mailserver_accounts
|
|
mailserver_sasl_passwd = var.mailserver_sasl_passwd
|
|
mailserver_aliases = var.mailserver_aliases
|
|
mailserver_opendkim_key = var.mailserver_opendkim_key
|
|
mailserver_roundcubemail_db_password = var.mailserver_roundcubemail_db_password
|
|
pihole_web_password = var.pihole_web_password
|
|
|
|
# Webhook tokens
|
|
webhook_handler_secret = var.webhook_handler_secret
|
|
webhook_handler_fb_verify_token = var.webhook_handler_fb_verify_token
|
|
webhook_handler_fb_page_token = var.webhook_handler_fb_page_token
|
|
webhook_handler_fb_app_secret = var.webhook_handler_fb_app_secret
|
|
webhook_handler_git_user = var.webhook_handler_git_user
|
|
webhook_handler_git_token = var.webhook_handler_git_token
|
|
webhook_handler_ssh_key = var.webhook_handler_ssh_key
|
|
|
|
wireguard_wg_0_conf = var.wireguard_wg_0_conf
|
|
wireguard_wg_0_key = var.wireguard_wg_0_key
|
|
wireguard_firewall_sh = var.wireguard_firewall_sh
|
|
hackmd_db_password = var.hackmd_db_password
|
|
|
|
# using the following hack to dynamically update dns from outside
|
|
bind_db_viktorbarzin_me = replace(var.bind_db_viktorbarzin_me, "85.130.108.6", "85.130.108.6")
|
|
bind_db_viktorbarzin_lan = var.bind_db_viktorbarzin_lan
|
|
bind_named_conf_options = var.bind_named_conf_options
|
|
|
|
alertmanager_account_password = var.alertmanager_account_password
|
|
alertmanager_slack_api_url = var.alertmanager_slack_api_url
|
|
|
|
# Drone
|
|
drone_github_client_id = var.drone_github_client_id
|
|
drone_github_client_secret = var.drone_github_client_secret
|
|
drone_rpc_secret = var.drone_rpc_secret
|
|
|
|
# Oauth proxy
|
|
oauth2_proxy_client_id = var.oauth2_proxy_client_id
|
|
oauth2_proxy_client_secret = var.oauth2_proxy_client_secret
|
|
oauth2_proxy_authenticated_emails = var.oauth2_proxy_authenticated_emails
|
|
# oauth_client_id = var.oauth_client_id
|
|
# oauth_client_secret = var.oauth_client_secret
|
|
# depends_on = [module.k8s_master, module.k8s_node1, module.k8s_node2] # wait until master and at least 2 nodes are up
|
|
|
|
idrac_username = var.monitoring_idrac_username
|
|
idrac_password = var.monitoring_idrac_password
|
|
|
|
url_shortener_geolite_license_key = var.url_shortener_geolite_license_key
|
|
url_shortener_api_key = var.url_shortener_api_key
|
|
url_shortener_mysql_password = var.url_shortener_mysql_password
|
|
|
|
# dbaas
|
|
dbaas_root_password = var.dbaas_root_password
|
|
dbaas_postgresql_root_password = var.dbaas_postgresql_root_password
|
|
dbaas_pgadmin_password = var.dbaas_pgadmin_password
|
|
|
|
# home-assistant
|
|
home_assistant_configuration = var.home_assistant_configuration
|
|
|
|
# shadowsocks
|
|
shadowsocks_password = var.shadowsocks_password
|
|
|
|
# finance app
|
|
finance_app_graphql_api_secret = var.finance_app_graphql_api_secret
|
|
finance_app_db_connection_string = var.finance_app_db_connection_string
|
|
finance_app_currency_converter_api_key = var.finance_app_currency_converter_api_key
|
|
finance_app_gocardless_secret_key = var.finance_app_gocardless_secret_key
|
|
finance_app_gocardless_secret_id = var.finance_app_gocardless_secret_id
|
|
|
|
headscale_config = var.headscale_config
|
|
headscale_acl = var.headscale_acl
|
|
|
|
immich_postgresql_password = var.immich_postgresql_password
|
|
immich_frame_api_key = var.immich_frame_api_key
|
|
|
|
ingress_honeypotapikey = var.ingress_honeypotapikey
|
|
ingress_crowdsec_api_key = var.ingress_crowdsec_api_key
|
|
ingress_crowdsec_captcha_secret_key = var.ingress_crowdsec_captcha_secret_key
|
|
ingress_crowdsec_captcha_site_key = var.ingress_crowdsec_captcha_site_key
|
|
crowdsec_enroll_key = var.crowdsec_enroll_key
|
|
crowdsec_db_password = var.crowdsec_db_password
|
|
crowdsec_dash_api_key = var.crowdsec_dash_api_key
|
|
crowdsec_dash_machine_id = var.crowdsec_dash_machine_id
|
|
crowdsec_dash_machine_password = var.crowdsec_dash_machine_password
|
|
|
|
vaultwarden_smtp_password = var.vaultwarden_smtp_password
|
|
|
|
resume_redis_url = var.resume_redis_url
|
|
resume_database_password = var.resume_database_password
|
|
resume_database_url = var.resume_database_url
|
|
|
|
frigate_valchedrym_camera_credentials = var.frigate_valchedrym_camera_credentials
|
|
|
|
// updating technitium records
|
|
technitium_username = var.technitium_username
|
|
technitium_password = var.technitium_password
|
|
|
|
paperless_db_password = var.paperless_db_password
|
|
|
|
diun_nfty_token = var.diun_nfty_token
|
|
diun_slack_url = var.diun_slack_url
|
|
|
|
nextcloud_db_password = var.nextcloud_db_password
|
|
homepage_credentials = var.homepage_credentials
|
|
|
|
authentik_secret_key = var.authentik_secret_key
|
|
authentik_postgres_password = var.authentik_postgres_password
|
|
|
|
linkwarden_postgresql_password = var.linkwarden_postgresql_password
|
|
linkwarden_authentik_client_id = var.linkwarden_authentik_client_id
|
|
linkwarden_authentik_client_secret = var.linkwarden_authentik_client_secret
|
|
|
|
# Cloudflare credentials
|
|
cloudflare_api_key = var.cloudflare_api_key
|
|
cloudflare_email = var.cloudflare_email
|
|
cloudflare_account_id = var.cloudflare_account_id
|
|
cloudflare_zone_id = var.cloudflare_zone_id
|
|
cloudflare_tunnel_id = var.cloudflare_tunnel_id
|
|
public_ip = var.public_ip
|
|
cloudflare_proxied_names = var.cloudflare_proxied_names
|
|
cloudflare_non_proxied_names = var.cloudflare_non_proxied_names
|
|
cloudflare_tunnel_token = var.cloudflare_tunnel_token
|
|
|
|
owntracks_credentials = var.owntracks_credentials
|
|
|
|
dawarich_database_password = var.dawarich_database_password
|
|
geoapify_api_key = var.geoapify_api_key
|
|
|
|
tandoor_database_password = var.tandoor_database_password
|
|
tandoor_email_password = var.mailserver_accounts["info@viktorbarzin.me"]
|
|
|
|
n8n_postgresql_password = var.n8n_postgresql_password
|
|
|
|
realestate_crawler_db_password = var.realestate_crawler_db_password
|
|
realestate_crawler_notification_settings = var.realestate_crawler_notification_settings
|
|
|
|
kured_notify_url = var.kured_notify_url
|
|
|
|
onlyoffice_db_password = var.onlyoffice_db_password
|
|
onlyoffice_jwt_token = var.onlyoffice_jwt_token
|
|
|
|
xray_reality_clients = var.xray_reality_clients
|
|
xray_reality_private_key = var.xray_reality_private_key
|
|
xray_reality_short_ids = var.xray_reality_short_ids
|
|
|
|
tiny_tuya_api_key = var.tiny_tuya_api_key
|
|
tiny_tuya_api_secret = var.tiny_tuya_api_secret
|
|
tiny_tuya_service_secret = var.tiny_tuya_service_secret
|
|
tiny_tuya_slack_url = var.tiny_tuya_slack_url
|
|
haos_api_token = var.haos_api_token
|
|
pve_password = var.pve_password
|
|
grafana_db_password = var.grafana_db_password
|
|
|
|
clickhouse_password = var.clickhouse_password
|
|
clickhouse_postgres_password = var.clickhouse_postgres_password
|
|
|
|
wealthfolio_password_hash = var.wealthfolio_password_hash
|
|
|
|
aiostreams_database_connection_string = var.aiostreams_database_connection_string
|
|
|
|
actualbudget_credentials = var.actualbudget_credentials
|
|
|
|
speedtest_db_password = var.speedtest_db_password
|
|
freedify_credentials = var.freedify_credentials
|
|
}
|
|
|
|
|