eb32190461
- osrm-bicycle: 1Gi limit (loads 403MB routing graph) - aiostreams: 768Mi limit (loads 44K anime entries) - listenarr: 1Gi limit (.NET + Playwright/Chromium) - authentik server: 1Gi limit, worker: 1Gi limit (Django + gunicorn) - servarr: pass nfs_server variable to all submodules
114 lines
2.5 KiB
HCL
114 lines
2.5 KiB
HCL
variable "tls_secret_name" {}
|
||
variable "tier" { type = string }
|
||
variable "aiostreams_database_connection_string" { type = string }
|
||
variable "nfs_server" { type = string }
|
||
|
||
resource "kubernetes_namespace" "aiostreams" {
|
||
metadata {
|
||
name = "aiostreams"
|
||
labels = {
|
||
"istio-injection" : "disabled"
|
||
}
|
||
}
|
||
}
|
||
|
||
resource "random_id" "secret_key" {
|
||
byte_length = 32 # 32 bytes × 2 hex chars = 64 hex characters
|
||
}
|
||
|
||
resource "kubernetes_deployment" "aiostreams" {
|
||
metadata {
|
||
name = "aiostreams"
|
||
namespace = kubernetes_namespace.aiostreams.metadata[0].name
|
||
labels = {
|
||
app = "aiostreams"
|
||
tier = var.tier
|
||
}
|
||
}
|
||
spec {
|
||
replicas = 1
|
||
selector {
|
||
match_labels = {
|
||
app = "aiostreams"
|
||
}
|
||
}
|
||
template {
|
||
metadata {
|
||
labels = {
|
||
app = "aiostreams"
|
||
}
|
||
}
|
||
spec {
|
||
container {
|
||
image = "viren070/aiostreams:nightly"
|
||
name = "aiostreams"
|
||
port {
|
||
container_port = 3000
|
||
}
|
||
env {
|
||
name = "BASE_URL"
|
||
value = "https://aiostreams.viktorbarzin.me"
|
||
}
|
||
env {
|
||
name = "SECRET_KEY"
|
||
value = random_id.secret_key.hex
|
||
}
|
||
env {
|
||
name = "DATABASE_URI"
|
||
value = var.aiostreams_database_connection_string
|
||
}
|
||
volume_mount {
|
||
name = "data"
|
||
mount_path = "/app/data"
|
||
}
|
||
resources {
|
||
requests = {
|
||
cpu = "50m"
|
||
memory = "256Mi"
|
||
}
|
||
limits = {
|
||
cpu = "500m"
|
||
memory = "768Mi"
|
||
}
|
||
}
|
||
}
|
||
volume {
|
||
name = "data"
|
||
nfs {
|
||
server = var.nfs_server
|
||
path = "/mnt/main/servarr/aiostreams"
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
resource "kubernetes_service" "aiostreams" {
|
||
metadata {
|
||
name = "aiostreams"
|
||
namespace = kubernetes_namespace.aiostreams.metadata[0].name
|
||
labels = {
|
||
"app" = "aiostreams"
|
||
}
|
||
}
|
||
|
||
spec {
|
||
selector = {
|
||
app = "aiostreams"
|
||
}
|
||
port {
|
||
name = "http"
|
||
port = 80
|
||
target_port = 3000
|
||
}
|
||
}
|
||
}
|
||
|
||
module "ingress" {
|
||
source = "../../../modules/kubernetes/ingress_factory"
|
||
namespace = kubernetes_namespace.aiostreams.metadata[0].name
|
||
name = "aiostreams"
|
||
tls_secret_name = var.tls_secret_name
|
||
# protected = true
|
||
}
|