This commit is contained in:
2023-10-23 18:19:11 +02:00
parent ff3eef4814
commit 5c7bcb4bf0
2 changed files with 107 additions and 98 deletions

View File

@@ -44,11 +44,13 @@ resource "kubectl_manifest" "directus_config" {
STORAGE_LOCATIONS: "local"
STORAGE_LOCAL_ROOT: "/var/store"
ADMIN_EMAIL: "admin@${var.domain-name}"
NODE_EXTRA_CA_CERTS: "/etc/local-ca/ca.crt"
TELEMETRY: "false"
AUTH_PROVIDERS: "vynil"
AUTH_VYNIL_DRIVER: "oauth2"
AUTH_PROVIDERS: "VYNIL"
AUTH_VYNIL_DRIVER: "openid"
AUTH_VYNIL_ALLOW_PUBLIC_REGISTRATION: "true"
AUTH_VYNIL_ISSUER_URL: "https://${data.kubernetes_ingress_v1.authentik.spec[0].rule[0].host}/application/o/directus-${replace(var.sub-domain, ".", "-")}-${var.instance}/.well-known/openid-configuration"
AUTH_VYNIL_IDENTIFIER_KEY: "nickname"
AUTH_VYNIL_IDENTIFIER_KEY: "email"
PUBLIC_URL: "https://${local.directus-dns-name}"
EOF
}
@@ -177,7 +179,14 @@ resource "kubectl_manifest" "directus_deploy" {
volumeMounts:
- name: store
mountPath: /var/store
- name: certs
mountPath: /etc/local-ca
readOnly: true
volumes:
- name: certs
secret:
secretName: "${var.instance}-directus-cert"
defaultMode: 0444
- name: store
persistentVolumeClaim:
claimName: "${var.component}-${var.instance}-directus"