infra/stacks/stirling-pdf/main.tf
Viktor Barzin cb8a808700 feat(storage): migrate 38 NFS PVCs to proxmox-lvm (Wave 2)
Add proxmox-lvm PVCs with pvc-autoresizer annotations for all
remaining single-pod app data services. Deployments updated to
use new block storage PVCs. Old NFS modules retained for rollback.

Services: affine, changedetection, diun, excalidraw, f1-stream,
hackmd, isponsorblocktv, matrix, n8n, send, grampsweb, health,
onlyoffice, owntracks, paperless-ngx, privatebin, resume,
speedtest, stirling-pdf, tandoor, rybbit (clickhouse), tor-proxy
(torrserver), whisper+piper, frigate (config), ollama (ui),
servarr (prowlarr/listenarr/qbittorrent), aiostreams, freshrss
(extensions), meshcentral (data+files), openclaw (data+home+
openlobster), technitium, mailserver (data+roundcube html+enigma),
dbaas (pgadmin).

Strategy set to Recreate where needed for RWO volumes.
2026-04-04 19:25:12 +03:00

147 lines
3.4 KiB
HCL

variable "tls_secret_name" {
type = string
sensitive = true
}
variable "nfs_server" { type = string }
resource "kubernetes_namespace" "stirling-pdf" {
metadata {
name = "stirling-pdf"
labels = {
"istio-injection" : "disabled"
tier = local.tiers.aux
}
}
}
module "tls_secret" {
source = "../../modules/kubernetes/setup_tls_secret"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
tls_secret_name = var.tls_secret_name
}
module "nfs_configs" {
source = "../../modules/kubernetes/nfs_volume"
name = "stirling-pdf-configs"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
nfs_server = var.nfs_server
nfs_path = "/mnt/main/stirling-pdf"
}
resource "kubernetes_persistent_volume_claim" "configs_proxmox" {
wait_until_bound = false
metadata {
name = "stirling-pdf-configs-proxmox"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
annotations = {
"resize.topolvm.io/threshold" = "80%"
"resize.topolvm.io/increase" = "100%"
"resize.topolvm.io/storage_limit" = "5Gi"
}
}
spec {
access_modes = ["ReadWriteOnce"]
storage_class_name = "proxmox-lvm"
resources {
requests = {
storage = "1Gi"
}
}
}
}
resource "kubernetes_deployment" "stirling-pdf" {
metadata {
name = "stirling-pdf"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
labels = {
app = "stirling-pdf"
tier = local.tiers.aux
}
}
spec {
replicas = 1
strategy {
type = "Recreate"
}
selector {
match_labels = {
app = "stirling-pdf"
}
}
template {
metadata {
labels = {
app = "stirling-pdf"
}
}
spec {
container {
image = "stirlingtools/stirling-pdf:latest"
name = "stirling-pdf"
resources {
requests = {
cpu = "25m"
memory = "1536Mi"
}
limits = {
memory = "1536Mi"
}
}
port {
container_port = 8080
}
volume_mount {
name = "configs"
mount_path = "/configs"
}
}
volume {
name = "configs"
persistent_volume_claim {
claim_name = kubernetes_persistent_volume_claim.configs_proxmox.metadata[0].name
}
}
}
}
}
}
resource "kubernetes_service" "stirling-pdf" {
metadata {
name = "stirling-pdf"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
labels = {
"app" = "stirling-pdf"
}
}
spec {
selector = {
app = "stirling-pdf"
}
port {
name = "http"
port = 80
target_port = 8080
}
}
}
module "ingress" {
source = "../../modules/kubernetes/ingress_factory"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
name = "stirling-pdf"
tls_secret_name = var.tls_secret_name
rybbit_site_id = "a55ac54ec749"
extra_annotations = {
"gethomepage.dev/enabled" = "true"
"gethomepage.dev/name" = "Stirling PDF"
"gethomepage.dev/description" = "PDF toolkit"
"gethomepage.dev/icon" = "stirling-pdf.png"
"gethomepage.dev/group" = "Productivity"
"gethomepage.dev/pod-selector" = ""
}
}