This commit is contained in:
2023-08-07 13:33:29 +02:00
parent 6780389cba
commit 1f8c36e3bf
12 changed files with 437 additions and 437 deletions

View File

@@ -60,7 +60,7 @@ resource "authentik_provider_proxy" "prj_forward" {
resource "authentik_application" "prj_application" { resource "authentik_application" "prj_application" {
name = local.app-name name = local.app-name
slug = local.app-name slug = "${var.component}-${var.instance}"
protocol_provider = authentik_provider_proxy.prj_forward.id protocol_provider = authentik_provider_proxy.prj_forward.id
meta_launch_url = local.external-url meta_launch_url = local.external-url
meta_icon = format("%s/%s", local.external-url, local.app-icon) meta_icon = format("%s/%s", local.external-url, local.app-icon)

View File

@@ -6,26 +6,68 @@ metadata:
name: code-server name: code-server
description: null description: null
options: options:
issuer:
default: letsencrypt-prod
examples:
- letsencrypt-prod
type: string
ingress-class: ingress-class:
default: traefik default: traefik
examples: examples:
- traefik - traefik
type: string type: string
domain:
default: your-company
examples:
- your-company
type: string
domain-name: domain-name:
default: your_company.com default: your_company.com
examples: examples:
- your_company.com - your_company.com
type: string type: string
timezone:
default: Europe/Paris
examples:
- Europe/Paris
type: string
storage:
default:
accessMode: ReadWriteOnce
size: 20Gi
type: Filesystem
examples:
- accessMode: ReadWriteOnce
size: 20Gi
type: Filesystem
properties:
accessMode:
default: ReadWriteOnce
enum:
- ReadWriteOnce
- ReadOnlyMany
- ReadWriteMany
type: string
size:
default: 20Gi
type: string
type:
default: Filesystem
enum:
- Filesystem
- block
type: string
type: object
domain:
default: your-company
examples:
- your-company
type: string
admin:
default:
cluster: false
namespace: false
examples:
- cluster: false
namespace: false
properties:
cluster:
default: false
type: boolean
namespace:
default: false
type: boolean
type: object
images: images:
default: default:
codeserver: codeserver:
@@ -65,58 +107,16 @@ options:
type: number type: number
type: object type: object
type: object type: object
timezone:
default: Europe/Paris
examples:
- Europe/Paris
type: string
admin:
default:
cluster: false
namespace: false
examples:
- cluster: false
namespace: false
properties:
cluster:
default: false
type: boolean
namespace:
default: false
type: boolean
type: object
storage:
default:
accessMode: ReadWriteOnce
size: 20Gi
type: Filesystem
examples:
- accessMode: ReadWriteOnce
size: 20Gi
type: Filesystem
properties:
accessMode:
default: ReadWriteOnce
enum:
- ReadWriteOnce
- ReadOnlyMany
- ReadWriteMany
type: string
size:
default: 20Gi
type: string
type:
default: Filesystem
enum:
- Filesystem
- block
type: string
type: object
no-editor: no-editor:
default: false default: false
examples: examples:
- false - false
type: boolean type: boolean
issuer:
default: letsencrypt-prod
examples:
- letsencrypt-prod
type: string
sub-domain: sub-domain:
default: code default: code
examples: examples:

View File

@@ -49,7 +49,7 @@ resource "authentik_policy_binding" "dolibarr_ldap_access_vynil" {
} }
resource "authentik_application" "dolibarr_application_saml" { resource "authentik_application" "dolibarr_application_saml" {
name = var.component==var.instance?var.component:"${var.component}-${var.instance}" name = "${var.instance}"
slug = "${var.component}-${var.instance}" slug = "${var.component}-${var.instance}"
protocol_provider = authentik_provider_saml.dolibarr.id protocol_provider = authentik_provider_saml.dolibarr.id
meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name) meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name)

View File

@@ -6,37 +6,44 @@ metadata:
name: dolibarr name: dolibarr
description: null description: null
options: options:
redis: postgres:
default: default:
exporter: replicas: 1
enabled: true storage: 5Gi
image: quay.io/opstree/redis-exporter:v1.44.0 version: '14'
image: quay.io/opstree/redis:v7.0.5
storage: 2Gi
examples: examples:
- exporter: - replicas: 1
enabled: true storage: 5Gi
image: quay.io/opstree/redis-exporter:v1.44.0 version: '14'
image: quay.io/opstree/redis:v7.0.5
storage: 2Gi
properties: properties:
exporter: replicas:
default: default: 1
enabled: true type: integer
image: quay.io/opstree/redis-exporter:v1.44.0
properties:
enabled:
default: true
type: boolean
image:
default: quay.io/opstree/redis-exporter:v1.44.0
type: string
type: object
image:
default: quay.io/opstree/redis:v7.0.5
type: string
storage: storage:
default: 2Gi default: 5Gi
type: string
version:
default: '14'
type: string
type: object
sub-domain:
default: erp
examples:
- erp
type: string
ingress-class:
default: traefik
examples:
- traefik
type: string
parameters:
default:
MAIN_LANG_DEFAULT: auto
examples:
- MAIN_LANG_DEFAULT: auto
properties:
MAIN_LANG_DEFAULT:
default: auto
type: string type: string
type: object type: object
hpa: hpa:
@@ -59,26 +66,19 @@ options:
default: 1 default: 1
type: integer type: integer
type: object type: object
postgres: modules:
default: default:
replicas: 1 - societe
storage: 5Gi
version: '14'
examples: examples:
- replicas: 1 - - societe
storage: 5Gi items:
version: '14' type: string
properties: type: array
replicas: domain-name:
default: 1 default: your_company.com
type: integer examples:
storage: - your_company.com
default: 5Gi type: string
type: string
version:
default: '14'
type: string
type: object
resources: resources:
default: default:
limits: limits:
@@ -120,62 +120,74 @@ options:
type: string type: string
type: object type: object
type: object type: object
sub-domain: storage:
default: erp default:
accessMode: ReadWriteOnce
size: 10Gi
type: Filesystem
examples: examples:
- erp - accessMode: ReadWriteOnce
size: 10Gi
type: Filesystem
properties:
accessMode:
default: ReadWriteOnce
enum:
- ReadWriteOnce
- ReadOnlyMany
- ReadWriteMany
type: string
size:
default: 10Gi
type: string
type:
default: Filesystem
enum:
- Filesystem
- block
type: string
type: object
domain:
default: your-company
examples:
- your-company
type: string type: string
issuer: issuer:
default: letsencrypt-prod default: letsencrypt-prod
examples: examples:
- letsencrypt-prod - letsencrypt-prod
type: string type: string
log-level: redis:
default: 5
examples:
- 5
type: integer
ingress-class:
default: traefik
examples:
- traefik
type: string
modules:
default: default:
- societe exporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.44.0
image: quay.io/opstree/redis:v7.0.5
storage: 2Gi
examples: examples:
- - societe - exporter:
items: enabled: true
type: string image: quay.io/opstree/redis-exporter:v1.44.0
type: array image: quay.io/opstree/redis:v7.0.5
domain-name: storage: 2Gi
default: your_company.com
examples:
- your_company.com
type: string
user-groups:
default:
- admin: true
name: dolibarr-admin
examples:
- - admin: true
name: dolibarr-admin
items:
properties:
admin:
type: boolean
name:
type: string
type: object
type: array
parameters:
default:
MAIN_LANG_DEFAULT: auto
examples:
- MAIN_LANG_DEFAULT: auto
properties: properties:
MAIN_LANG_DEFAULT: exporter:
default: auto default:
enabled: true
image: quay.io/opstree/redis-exporter:v1.44.0
properties:
enabled:
default: true
type: boolean
image:
default: quay.io/opstree/redis-exporter:v1.44.0
type: string
type: object
image:
default: quay.io/opstree/redis:v7.0.5
type: string
storage:
default: 2Gi
type: string type: string
type: object type: object
images: images:
@@ -243,38 +255,26 @@ options:
type: string type: string
type: object type: object
type: object type: object
domain: log-level:
default: your-company default: 5
examples: examples:
- your-company - 5
type: string type: integer
storage: user-groups:
default: default:
accessMode: ReadWriteOnce - admin: true
size: 10Gi name: dolibarr-admin
type: Filesystem
examples: examples:
- accessMode: ReadWriteOnce - - admin: true
size: 10Gi name: dolibarr-admin
type: Filesystem items:
properties: properties:
accessMode: admin:
default: ReadWriteOnce type: boolean
enum: name:
- ReadWriteOnce type: string
- ReadOnlyMany type: object
- ReadWriteMany type: array
type: string
size:
default: 10Gi
type: string
type:
default: Filesystem
enum:
- Filesystem
- block
type: string
type: object
dependencies: dependencies:
- dist: null - dist: null
category: share category: share

View File

@@ -66,7 +66,7 @@ spec:
command: command:
- /bin/bash - /bin/bash
- "-c" - "-c"
- "echo -ne 'drop view if exists metric_helpers.pg_stat_statements;\ndrop function if exists metric_helpers.pg_stat_statements;\nDROP EXTENSION IF EXISTS pg_stat_statements;\nDROP EXTENSION IF EXISTS pg_stat_kcache;\nDROP EXTENSION IF EXISTS set_user;\n'| PGPASSWORD=\"$PASSWORD\" psql -U $USERNAME -d $DBNAME -h $DBURL" - "echo -ne 'drop view if exists metric_helpers.pg_stat_statements;\ndrop function if exists metric_helpers.pg_stat_statements;\nDROP EXTENSION IF EXISTS pg_stat_kcache;\nDROP EXTENSION IF EXISTS pg_stat_statements;\nDROP EXTENSION IF EXISTS set_user;\n'| PGPASSWORD=\"$PASSWORD\" psql -U $USERNAME -d $DBNAME -h $DBURL"
EOF EOF
} }

View File

@@ -9,46 +9,21 @@ metadata:
A painless self-hosted Git service. A painless self-hosted Git service.
Gitea is a community managed lightweight code hosting solution written in Go. It is published under the MIT license. Gitea is a community managed lightweight code hosting solution written in Go. It is published under the MIT license.
options: options:
release: issuer:
default: 8.3.0 default: letsencrypt-prod
examples: examples:
- 8.3.0 - letsencrypt-prod
type: string type: string
disable-registration:
default: true
examples:
- true
type: boolean
admin:
default:
email: git-admin@git.your_company.com
name: gitea_admin
examples:
- email: git-admin@git.your_company.com
name: gitea_admin
properties:
email:
default: git-admin@git.your_company.com
type: string
name:
default: gitea_admin
type: string
type: object
ingress-class:
default: traefik
examples:
- traefik
type: string
ssh-port:
default: 2222
examples:
- 2222
type: integer
theme: theme:
default: gitea-modern default: gitea-modern
examples: examples:
- gitea-modern - gitea-modern
type: string type: string
default-branch:
default: main
examples:
- main
type: string
volume: volume:
default: default:
size: 10Gi size: 10Gi
@@ -59,11 +34,26 @@ options:
default: 10Gi default: 10Gi
type: string type: string
type: object type: object
domain: ingress-class:
default: your-company default: traefik
examples: examples:
- your-company - traefik
type: string type: string
sub-domain:
default: git
examples:
- git
type: string
disable-registration:
default: true
examples:
- true
type: boolean
replicas:
default: 1
examples:
- 1
type: integer
postgres: postgres:
default: default:
replicas: 1 replicas: 1
@@ -84,16 +74,21 @@ options:
default: '14' default: '14'
type: string type: string
type: object type: object
timezone: domain:
default: Europe/Paris default: your-company
examples: examples:
- Europe/Paris - your-company
type: string type: string
issuer: release:
default: letsencrypt-prod default: 8.3.0
examples: examples:
- letsencrypt-prod - 8.3.0
type: string type: string
ssh-port:
default: 2222
examples:
- 2222
type: integer
push-create: push-create:
default: default:
org: 'true' org: 'true'
@@ -119,15 +114,20 @@ options:
examples: examples:
- your_company.com - your_company.com
type: string type: string
replicas: load-balancer:
default: 1 default:
ip: ''
examples: examples:
- 1 - ip: ''
type: integer properties:
default-branch: ip:
default: main default: ''
type: string
type: object
timezone:
default: Europe/Paris
examples: examples:
- main - Europe/Paris
type: string type: string
images: images:
default: default:
@@ -192,11 +192,21 @@ options:
type: string type: string
type: object type: object
type: object type: object
sub-domain: admin:
default: git default:
email: git-admin@git.your_company.com
name: gitea_admin
examples: examples:
- git - email: git-admin@git.your_company.com
type: string name: gitea_admin
properties:
email:
default: git-admin@git.your_company.com
type: string
name:
default: gitea_admin
type: string
type: object
webhook: webhook:
default: default:
allowed-hosts: private allowed-hosts: private
@@ -212,16 +222,6 @@ options:
default: false default: false
type: boolean type: boolean
type: object type: object
load-balancer:
default:
ip: ''
examples:
- ip: ''
properties:
ip:
default: ''
type: string
type: object
dependencies: dependencies:
- dist: null - dist: null
category: share category: share

View File

@@ -79,8 +79,8 @@ resource "authentik_provider_ldap" "gitea_provider_ldap" {
} }
resource "authentik_application" "gitea_application" { resource "authentik_application" "gitea_application" {
name = "gitea" name = "${var.instance}"
slug = "gitea" slug = "${var.component}-${var.instance}-ldap"
protocol_provider = authentik_provider_ldap.gitea_provider_ldap.id protocol_provider = authentik_provider_ldap.gitea_provider_ldap.id
meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name) meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name)
meta_icon = format("https://%s.%s/%s", var.sub-domain, var.domain-name, "assets/img/logo.svg") meta_icon = format("https://%s.%s/%s", var.sub-domain, var.domain-name, "assets/img/logo.svg")

View File

@@ -66,7 +66,7 @@ spec:
command: command:
- /bin/bash - /bin/bash
- "-c" - "-c"
- "echo -ne 'drop view if exists metric_helpers.pg_stat_statements;\ndrop function if exists metric_helpers.pg_stat_statements;\nDROP EXTENSION IF EXISTS pg_stat_statements;\nDROP EXTENSION IF EXISTS pg_stat_kcache;\nDROP EXTENSION IF EXISTS set_user;\n'| PGPASSWORD=\"$PASSWORD\" psql -U $USERNAME -d $DBNAME -h $DBURL" - "echo -ne 'drop view if exists metric_helpers.pg_stat_statements;\ndrop function if exists metric_helpers.pg_stat_statements;\nDROP EXTENSION IF EXISTS pg_stat_kcache;\nDROP EXTENSION IF EXISTS pg_stat_statements;\nDROP EXTENSION IF EXISTS set_user;\n'| PGPASSWORD=\"$PASSWORD\" psql -U $USERNAME -d $DBNAME -h $DBURL"
EOF EOF
} }

View File

@@ -10,7 +10,7 @@ data "authentik_group" "readed_groups" {
} }
resource "authentik_application" "prj_app" { resource "authentik_application" "prj_app" {
name = "${var.component}" name = "${var.instance}"
slug = "${var.component}-${var.instance}" slug = "${var.component}-${var.instance}"
protocol_provider = authentik_provider_oauth2.oauth2.id protocol_provider = authentik_provider_oauth2.oauth2.id
meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name) meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name)

View File

@@ -6,10 +6,110 @@ metadata:
name: nextcloud name: nextcloud
description: null description: null
options: options:
issuer: apps:
default: letsencrypt-prod default:
audioplayer: false
bookmarks: false
bpm: false
calendar: false
collabora: false
contacts: false
deck: false
groupfolders: true
mindmap: false
music: false
notes: false
onlyoffice: false
passman: false
spreed: false
tables: false
tasks: false
texteditor: true
examples: examples:
- letsencrypt-prod - audioplayer: false
bookmarks: false
bpm: false
calendar: false
collabora: false
contacts: false
deck: false
groupfolders: true
mindmap: false
music: false
notes: false
onlyoffice: false
passman: false
spreed: false
tables: false
tasks: false
texteditor: true
properties:
audioplayer:
default: false
type: boolean
bookmarks:
default: false
type: boolean
bpm:
default: false
type: boolean
calendar:
default: false
type: boolean
collabora:
default: false
type: boolean
contacts:
default: false
type: boolean
deck:
default: false
type: boolean
groupfolders:
default: true
type: boolean
mindmap:
default: false
type: boolean
music:
default: false
type: boolean
notes:
default: false
type: boolean
onlyoffice:
default: false
type: boolean
passman:
default: false
type: boolean
spreed:
default: false
type: boolean
tables:
default: false
type: boolean
tasks:
default: false
type: boolean
texteditor:
default: true
type: boolean
type: object
admin:
default:
name: nextcloud_admin
examples:
- name: nextcloud_admin
properties:
name:
default: nextcloud_admin
type: string
type: object
domain-name:
default: your_company.com
examples:
- your_company.com
type: string type: string
images: images:
default: default:
@@ -174,190 +274,11 @@ options:
type: string type: string
type: object type: object
type: object type: object
domain:
default: your-company
examples:
- your-company
type: string
storage:
default:
accessMode: ReadWriteOnce
size: 10Gi
examples:
- accessMode: ReadWriteOnce
size: 10Gi
properties:
accessMode:
default: ReadWriteOnce
enum:
- ReadWriteOnce
- ReadOnlyMany
- ReadWriteMany
type: string
size:
default: 10Gi
type: string
type: object
hpa:
default:
avg-cpu: 50
max-replicas: 5
min-replicas: 1
examples:
- avg-cpu: 50
max-replicas: 5
min-replicas: 1
properties:
avg-cpu:
default: 50
type: integer
max-replicas:
default: 5
type: integer
min-replicas:
default: 1
type: integer
type: object
admin:
default:
name: nextcloud_admin
examples:
- name: nextcloud_admin
properties:
name:
default: nextcloud_admin
type: string
type: object
ingress-class: ingress-class:
default: traefik default: traefik
examples: examples:
- traefik - traefik
type: string type: string
openid-name:
default: vynil
examples:
- vynil
type: string
sub-domain:
default: files
examples:
- files
type: string
domain-name:
default: your_company.com
examples:
- your_company.com
type: string
postgres:
default:
replicas: 1
storage: 5Gi
version: '14'
examples:
- replicas: 1
storage: 5Gi
version: '14'
properties:
replicas:
default: 1
type: integer
storage:
default: 5Gi
type: string
version:
default: '14'
type: string
type: object
apps:
default:
audioplayer: false
bookmarks: false
bpm: false
calendar: false
collabora: false
contacts: false
deck: false
groupfolders: true
mindmap: false
music: false
notes: false
onlyoffice: false
passman: false
spreed: false
tables: false
tasks: false
texteditor: true
examples:
- audioplayer: false
bookmarks: false
bpm: false
calendar: false
collabora: false
contacts: false
deck: false
groupfolders: true
mindmap: false
music: false
notes: false
onlyoffice: false
passman: false
spreed: false
tables: false
tasks: false
texteditor: true
properties:
audioplayer:
default: false
type: boolean
bookmarks:
default: false
type: boolean
bpm:
default: false
type: boolean
calendar:
default: false
type: boolean
collabora:
default: false
type: boolean
contacts:
default: false
type: boolean
deck:
default: false
type: boolean
groupfolders:
default: true
type: boolean
mindmap:
default: false
type: boolean
music:
default: false
type: boolean
notes:
default: false
type: boolean
onlyoffice:
default: false
type: boolean
passman:
default: false
type: boolean
spreed:
default: false
type: boolean
tables:
default: false
type: boolean
tasks:
default: false
type: boolean
texteditor:
default: true
type: boolean
type: object
redis: redis:
default: default:
exporter: exporter:
@@ -391,6 +312,85 @@ options:
default: 2Gi default: 2Gi
type: string type: string
type: object type: object
sub-domain:
default: files
examples:
- files
type: string
domain:
default: your-company
examples:
- your-company
type: string
postgres:
default:
replicas: 1
storage: 5Gi
version: '14'
examples:
- replicas: 1
storage: 5Gi
version: '14'
properties:
replicas:
default: 1
type: integer
storage:
default: 5Gi
type: string
version:
default: '14'
type: string
type: object
storage:
default:
accessMode: ReadWriteOnce
size: 10Gi
examples:
- accessMode: ReadWriteOnce
size: 10Gi
properties:
accessMode:
default: ReadWriteOnce
enum:
- ReadWriteOnce
- ReadOnlyMany
- ReadWriteMany
type: string
size:
default: 10Gi
type: string
type: object
issuer:
default: letsencrypt-prod
examples:
- letsencrypt-prod
type: string
openid-name:
default: vynil
examples:
- vynil
type: string
hpa:
default:
avg-cpu: 50
max-replicas: 5
min-replicas: 1
examples:
- avg-cpu: 50
max-replicas: 5
min-replicas: 1
properties:
avg-cpu:
default: 50
type: integer
max-replicas:
default: 5
type: integer
min-replicas:
default: 1
type: integer
type: object
dependencies: dependencies:
- dist: null - dist: null
category: share category: share

View File

@@ -58,8 +58,8 @@ resource "authentik_provider_proxy" "prj_forward" {
resource "authentik_application" "prj_application" { resource "authentik_application" "prj_application" {
name = local.app-name name = "${var.component}"
slug = local.app-name slug = "${var.component}-${var.instance}"
protocol_provider = authentik_provider_proxy.prj_forward.id protocol_provider = authentik_provider_proxy.prj_forward.id
meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name) meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name)
meta_icon = format("https://%s.%s/%s", var.sub-domain, var.domain-name, local.app-icon) meta_icon = format("https://%s.%s/%s", var.sub-domain, var.domain-name, local.app-icon)

View File

@@ -6,10 +6,10 @@ metadata:
name: traefik-ui name: traefik-ui
description: Access to the Traefik UI description: Access to the Traefik UI
options: options:
issuer: ingress-class:
default: letsencrypt-prod default: traefik
examples: examples:
- letsencrypt-prod - traefik
type: string type: string
sub-domain: sub-domain:
default: traefik default: traefik
@@ -21,10 +21,10 @@ options:
examples: examples:
- your_company.com - your_company.com
type: string type: string
ingress-class: issuer:
default: traefik default: letsencrypt-prod
examples: examples:
- traefik - letsencrypt-prod
type: string type: string
domain: domain:
default: your-company default: your-company