Compare commits
5 Commits
6e83dea4a3
...
c4273f5e63
| Author | SHA1 | Date | |
|---|---|---|---|
| c4273f5e63 | |||
| f8006a4595 | |||
| 108cfa79b7 | |||
| 7b0148696c | |||
| d531f8c44a |
@@ -17,3 +17,7 @@ jobs:
|
|||||||
|
|
||||||
kubectl annotate ingressclass nginx \
|
kubectl annotate ingressclass nginx \
|
||||||
ingressclass.kubernetes.io/is-default-class="true" --overwrite
|
ingressclass.kubernetes.io/is-default-class="true" --overwrite
|
||||||
|
- name: audiobookshelf
|
||||||
|
working-directory: /home/gitea-runner/infrastructure
|
||||||
|
run: |
|
||||||
|
kubectl apply -f kubernetes/audiobookshelf/
|
||||||
@@ -103,41 +103,36 @@ services:
|
|||||||
network_mode: host
|
network_mode: host
|
||||||
|
|
||||||
|
|
||||||
zwave-js-ui:
|
# zwave-js-ui:
|
||||||
container_name: zwave-js-ui
|
# container_name: zwave-js-ui
|
||||||
image: zwavejs/zwave-js-ui:latest
|
# image: zwavejs/zwave-js-ui:latest
|
||||||
restart: always
|
# restart: always
|
||||||
tty: true
|
# tty: true
|
||||||
stop_signal: SIGINT
|
# stop_signal: SIGINT
|
||||||
environment:
|
# environment:
|
||||||
- SESSION_SECRET=iqpwoeinf9384bw3p48gbwer
|
# - SESSION_SECRET=iqpwoeinf9384bw3p48gbwer
|
||||||
- TZ=America/Denver
|
# - TZ=America/Denver
|
||||||
devices:
|
# devices:
|
||||||
# Do not use /dev/ttyUSBX serial devices, as those mappings can change over time.
|
# # Do not use /dev/ttyUSBX serial devices, as those mappings can change over time.
|
||||||
# Instead, use the /dev/serial/by-id/X serial device for your Z-Wave stick.
|
# # Instead, use the /dev/serial/by-id/X serial device for your Z-Wave stick.
|
||||||
# - '/dev/serial/by-id/insert_stick_reference_here:/dev/zwave'
|
# # - '/dev/serial/by-id/insert_stick_reference_here:/dev/zwave'
|
||||||
- /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if00-port0:/dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if00-port0
|
# - /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if00-port0:/dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if00-port0
|
||||||
- /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if01-port0:/dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if01-port0
|
# - /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if01-port0:/dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if01-port0
|
||||||
volumes:
|
# volumes:
|
||||||
- /data/zwave:/usr/src/app/store
|
# - /data/zwave:/usr/src/app/store
|
||||||
ports:
|
# ports:
|
||||||
- '3050:8091'
|
# - '3050:8091'
|
||||||
- '3051:3051'
|
# - '3051:3051'
|
||||||
|
|
||||||
music-assistant-server:
|
# music-assistant-server:
|
||||||
image: ghcr.io/music-assistant/server:2
|
# image: ghcr.io/music-assistant/server:2
|
||||||
container_name: music-assistant-server
|
# container_name: music-assistant-server
|
||||||
restart: unless-stopped
|
# restart: unless-stopped
|
||||||
network_mode: host
|
# network_mode: host
|
||||||
volumes:
|
# volumes:
|
||||||
- /data/music-assistant-server/data:/data/
|
# - /data/music-assistant-server/data:/data/
|
||||||
# cap_add:
|
# environment:
|
||||||
# - SYS_ADMIN
|
# - LOG_LEVEL=info
|
||||||
# - DAC_READ_SEARCH
|
|
||||||
# security_opt:
|
|
||||||
# - apparmor:unconfined
|
|
||||||
environment:
|
|
||||||
- LOG_LEVEL=info
|
|
||||||
|
|
||||||
prometheus:
|
prometheus:
|
||||||
image: public.ecr.aws/bitnami/prometheus:2
|
image: public.ecr.aws/bitnami/prometheus:2
|
||||||
@@ -213,18 +208,18 @@ services:
|
|||||||
# - proxy
|
# - proxy
|
||||||
|
|
||||||
|
|
||||||
audiobookshelf:
|
# audiobookshelf:
|
||||||
image: ghcr.io/advplyr/audiobookshelf:latest
|
# image: ghcr.io/advplyr/audiobookshelf:latest
|
||||||
restart: unless-stopped
|
# restart: unless-stopped
|
||||||
ports:
|
# ports:
|
||||||
- 13378:80
|
# - 13378:80
|
||||||
volumes:
|
# volumes:
|
||||||
- /data/media/audiobooks:/audiobooks
|
# - /data/media/audiobooks:/audiobooks
|
||||||
- /data/media/audiobooks-libation:/audiobooks-libation
|
# - /data/media/audiobooks-libation:/audiobooks-libation
|
||||||
- /data/audiobookshelf/config:/config
|
# - /data/audiobookshelf/config:/config
|
||||||
- /data/audiobookshelf/metadata:/metadata
|
# - /data/audiobookshelf/metadata:/metadata
|
||||||
networks:
|
# networks:
|
||||||
- proxy
|
# - proxy
|
||||||
|
|
||||||
copilot-api:
|
copilot-api:
|
||||||
image: node:latest
|
image: node:latest
|
||||||
|
|||||||
@@ -94,23 +94,23 @@ server {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
server {
|
# server {
|
||||||
listen 443 ssl;
|
# listen 443 ssl;
|
||||||
listen [::]:443 ssl;
|
# listen [::]:443 ssl;
|
||||||
server_name audiobook.alexmickelson.guru;
|
# server_name audiobook.alexmickelson.guru;
|
||||||
|
|
||||||
location / {
|
# location / {
|
||||||
proxy_pass http://audiobookshelf:80;
|
# proxy_pass http://audiobookshelf:80;
|
||||||
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
# proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
proxy_set_header Host $host;
|
# proxy_set_header Host $host;
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
# proxy_set_header Upgrade $http_upgrade;
|
||||||
proxy_set_header Connection "upgrade";
|
# proxy_set_header Connection "upgrade";
|
||||||
|
|
||||||
proxy_http_version 1.1;
|
# proxy_http_version 1.1;
|
||||||
}
|
# }
|
||||||
}
|
# }
|
||||||
|
|
||||||
# server {
|
# server {
|
||||||
# listen 443 ssl;
|
# listen 443 ssl;
|
||||||
@@ -176,24 +176,24 @@ server {
|
|||||||
proxy_pass http://immich_server:2283;
|
proxy_pass http://immich_server:2283;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
server {
|
# server {
|
||||||
listen 443 ssl;
|
# listen 443 ssl;
|
||||||
listen [::]:443 ssl;
|
# listen [::]:443 ssl;
|
||||||
server_name sound.alexmickelson.guru;
|
# server_name sound.alexmickelson.guru;
|
||||||
location / {
|
# location / {
|
||||||
proxy_pass http://host.docker.internal:8095;
|
# proxy_pass http://host.docker.internal:8095;
|
||||||
|
|
||||||
proxy_set_header Host $host;
|
# proxy_set_header Host $host;
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
# proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
# proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
proxy_set_header X-Forwarded-Protocol $scheme;
|
# proxy_set_header X-Forwarded-Protocol $scheme;
|
||||||
proxy_set_header X-Forwarded-Host $http_host;
|
# proxy_set_header X-Forwarded-Host $http_host;
|
||||||
proxy_set_header Host $host;
|
# proxy_set_header Host $host;
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
# proxy_set_header Upgrade $http_upgrade;
|
||||||
proxy_set_header Connection "upgrade";
|
# proxy_set_header Connection "upgrade";
|
||||||
}
|
# }
|
||||||
}
|
# }
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 443 ssl;
|
listen 443 ssl;
|
||||||
|
|||||||
95
kubernetes/audiobookshelf/audiobook.yml
Normal file
95
kubernetes/audiobookshelf/audiobook.yml
Normal file
@@ -0,0 +1,95 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: audiobookshelf
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: audiobookshelf
|
||||||
|
namespace: audiobookshelf
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: audiobookshelf
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: audiobookshelf
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: audiobookshelf
|
||||||
|
image: ghcr.io/advplyr/audiobookshelf:latest
|
||||||
|
imagePullPolicy: Always
|
||||||
|
ports:
|
||||||
|
- containerPort: 80
|
||||||
|
hostPort: 13378
|
||||||
|
volumeMounts:
|
||||||
|
- name: audiobooks
|
||||||
|
mountPath: /audiobooks
|
||||||
|
- name: audiobooks-libation
|
||||||
|
mountPath: /audiobooks-libation
|
||||||
|
- name: config
|
||||||
|
mountPath: /config
|
||||||
|
- name: metadata
|
||||||
|
mountPath: /metadata
|
||||||
|
volumes:
|
||||||
|
- name: audiobooks
|
||||||
|
hostPath:
|
||||||
|
path: /data/media/audiobooks
|
||||||
|
type: DirectoryOrCreate
|
||||||
|
- name: audiobooks-libation
|
||||||
|
hostPath:
|
||||||
|
path: /data/media/audiobooks-libation
|
||||||
|
type: DirectoryOrCreate
|
||||||
|
- name: config
|
||||||
|
hostPath:
|
||||||
|
path: /data/audiobookshelf/config
|
||||||
|
type: DirectoryOrCreate
|
||||||
|
- name: metadata
|
||||||
|
hostPath:
|
||||||
|
path: /data/audiobookshelf/metadata
|
||||||
|
type: DirectoryOrCreate
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: audiobookshelf
|
||||||
|
namespace: audiobookshelf
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: audiobookshelf
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
protocol: TCP
|
||||||
|
port: 13378
|
||||||
|
targetPort: 80
|
||||||
|
---
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: audiobookshelf-ingress
|
||||||
|
namespace: audiobookshelf
|
||||||
|
annotations:
|
||||||
|
cert-manager.io/cluster-issuer: cloudflare-issuer
|
||||||
|
spec:
|
||||||
|
ingressClassName: nginx
|
||||||
|
tls:
|
||||||
|
- hosts:
|
||||||
|
- audiobook.alexmickelson.guru
|
||||||
|
secretName: audiobookshelf-tls-cert
|
||||||
|
rules:
|
||||||
|
- host: audiobook.alexmickelson.guru
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: audiobookshelf
|
||||||
|
port:
|
||||||
|
number: 13378
|
||||||
|
---
|
||||||
61
kubernetes/copilot/copilot-dep.yml
Normal file
61
kubernetes/copilot/copilot-dep.yml
Normal file
@@ -0,0 +1,61 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: copilot
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: copilot-api
|
||||||
|
namespace: copilot
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: copilot-api
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: copilot-api
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: copilot-api
|
||||||
|
image: node:latest
|
||||||
|
imagePullPolicy: Always
|
||||||
|
workingDir: /app
|
||||||
|
command: ["sh", "-c"]
|
||||||
|
args: ["npm cache clean --force && npx copilot-api@latest start --github-token $COPILOT_TOKEN --port 4444"]
|
||||||
|
env:
|
||||||
|
- name: COPILOT_TOKEN
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: copilot-secret
|
||||||
|
key: token
|
||||||
|
ports:
|
||||||
|
- containerPort: 4444
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: copilot-api
|
||||||
|
namespace: copilot
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: copilot-api
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
protocol: TCP
|
||||||
|
port: 4444
|
||||||
|
targetPort: 4444
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: copilot-secret
|
||||||
|
namespace: copilot
|
||||||
|
type: Opaque
|
||||||
|
stringData:
|
||||||
|
token: "YOUR_COPILOT_TOKEN_HERE"
|
||||||
|
---
|
||||||
75
kubernetes/homeassistant/1-music-assistant.yml
Normal file
75
kubernetes/homeassistant/1-music-assistant.yml
Normal file
@@ -0,0 +1,75 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: music-assistant-server
|
||||||
|
namespace: homeassistant
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: music-assistant-server
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: music-assistant-server
|
||||||
|
spec:
|
||||||
|
hostNetwork: true
|
||||||
|
containers:
|
||||||
|
- name: music-assistant-server
|
||||||
|
image: ghcr.io/music-assistant/server:2
|
||||||
|
imagePullPolicy: Always
|
||||||
|
env:
|
||||||
|
- name: LOG_LEVEL
|
||||||
|
value: "info"
|
||||||
|
- name: TZ
|
||||||
|
value: "America/Denver"
|
||||||
|
volumeMounts:
|
||||||
|
- name: data
|
||||||
|
mountPath: /data
|
||||||
|
volumes:
|
||||||
|
- name: data
|
||||||
|
hostPath:
|
||||||
|
path: /data/music-assistant-server/data
|
||||||
|
type: DirectoryOrCreate
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: music-assistant
|
||||||
|
namespace: homeassistant
|
||||||
|
# annotations:
|
||||||
|
# tailscale.com/expose: "true"
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: music-assistant-server
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
protocol: TCP
|
||||||
|
port: 8095
|
||||||
|
targetPort: 8095
|
||||||
|
---
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: music-assistant-ingress
|
||||||
|
namespace: homeassistant
|
||||||
|
annotations:
|
||||||
|
cert-manager.io/cluster-issuer: cloudflare-issuer
|
||||||
|
spec:
|
||||||
|
ingressClassName: nginx
|
||||||
|
tls:
|
||||||
|
- hosts:
|
||||||
|
- sound.alexmickelson.guru
|
||||||
|
secretName: music-assistant-tls-cert
|
||||||
|
rules:
|
||||||
|
- host: sound.alexmickelson.guru
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: music-assistant
|
||||||
|
port:
|
||||||
|
number: 8095
|
||||||
|
---
|
||||||
74
kubernetes/homeassistant/1-zwave-dep.yml
Normal file
74
kubernetes/homeassistant/1-zwave-dep.yml
Normal file
@@ -0,0 +1,74 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: zwave-js-ui
|
||||||
|
namespace: homeassistant
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: zwave-js-ui
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: zwave-js-ui
|
||||||
|
spec:
|
||||||
|
hostNetwork: true
|
||||||
|
containers:
|
||||||
|
- name: zwave-js-ui
|
||||||
|
image: zwavejs/zwave-js-ui:latest
|
||||||
|
imagePullPolicy: Always
|
||||||
|
tty: true
|
||||||
|
env:
|
||||||
|
- name: SESSION_SECRET
|
||||||
|
value: "iqpwoeinf9384bw3p48gbwer"
|
||||||
|
- name: TZ
|
||||||
|
value: "America/Denver"
|
||||||
|
volumeMounts:
|
||||||
|
- name: zwave-data
|
||||||
|
mountPath: /usr/src/app/store
|
||||||
|
- name: zwave-device-if00
|
||||||
|
mountPath: /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if00-port0
|
||||||
|
- name: zwave-device-if01
|
||||||
|
mountPath: /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if01-port0
|
||||||
|
securityContext:
|
||||||
|
privileged: true
|
||||||
|
ports:
|
||||||
|
- containerPort: 8091
|
||||||
|
name: http
|
||||||
|
- containerPort: 3051
|
||||||
|
name: websocket
|
||||||
|
volumes:
|
||||||
|
- name: zwave-data
|
||||||
|
hostPath:
|
||||||
|
path: /data/zwave
|
||||||
|
type: DirectoryOrCreate
|
||||||
|
- name: zwave-device-if00
|
||||||
|
hostPath:
|
||||||
|
path: /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if00-port0
|
||||||
|
type: CharDevice
|
||||||
|
- name: zwave-device-if01
|
||||||
|
hostPath:
|
||||||
|
path: /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_31500417-if01-port0
|
||||||
|
type: CharDevice
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: zwave-js-ui
|
||||||
|
namespace: homeassistant
|
||||||
|
annotations:
|
||||||
|
tailscale.com/expose: "true"
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: zwave-js-ui
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
protocol: TCP
|
||||||
|
port: 8091
|
||||||
|
targetPort: 8091
|
||||||
|
- name: websocket
|
||||||
|
protocol: TCP
|
||||||
|
port: 3051
|
||||||
|
targetPort: 3051
|
||||||
|
---
|
||||||
96
kubernetes/minecraft/minecraft-dep.yml
Normal file
96
kubernetes/minecraft/minecraft-dep.yml
Normal file
@@ -0,0 +1,96 @@
|
|||||||
|
# apiVersion: v1
|
||||||
|
# kind: Namespace
|
||||||
|
# metadata:
|
||||||
|
# name: minecraft
|
||||||
|
# ---
|
||||||
|
# apiVersion: apps/v1
|
||||||
|
# kind: Deployment
|
||||||
|
# metadata:
|
||||||
|
# name: minecraft
|
||||||
|
# namespace: minecraft
|
||||||
|
# spec:
|
||||||
|
# replicas: 1
|
||||||
|
# selector:
|
||||||
|
# matchLabels:
|
||||||
|
# app: minecraft
|
||||||
|
# template:
|
||||||
|
# metadata:
|
||||||
|
# labels:
|
||||||
|
# app: minecraft
|
||||||
|
# spec:
|
||||||
|
# containers:
|
||||||
|
# - name: tailscale
|
||||||
|
# image: tailscale/tailscale:latest
|
||||||
|
# env:
|
||||||
|
# - name: TS_STATE_DIR
|
||||||
|
# value: "/var/lib/tailscale"
|
||||||
|
# - name: TS_AUTHKEY
|
||||||
|
# value: "tskey-auth-REPLACE_ME"
|
||||||
|
# - name: TS_HOSTNAME
|
||||||
|
# value: "minecraft"
|
||||||
|
# volumeMounts:
|
||||||
|
# - name: tailscale-data
|
||||||
|
# mountPath: /var/lib/tailscale
|
||||||
|
# - name: dev-tun
|
||||||
|
# mountPath: /dev/net/tun
|
||||||
|
# securityContext:
|
||||||
|
# capabilities:
|
||||||
|
# add:
|
||||||
|
# - NET_ADMIN
|
||||||
|
# - SYS_MODULE
|
||||||
|
# - name: minecraft
|
||||||
|
# image: itzg/minecraft-server:java21
|
||||||
|
# stdin: true
|
||||||
|
# tty: true
|
||||||
|
# env:
|
||||||
|
# - name: EULA
|
||||||
|
# value: "true"
|
||||||
|
# - name: MEMORY
|
||||||
|
# value: "6G"
|
||||||
|
# - name: CF_OVERRIDES_EXCLUSIONS
|
||||||
|
# value: |
|
||||||
|
# # Not applicable for server side
|
||||||
|
# shaderpacks/**
|
||||||
|
# volumeMounts:
|
||||||
|
# - name: minecraft-data
|
||||||
|
# mountPath: /data
|
||||||
|
# - name: modpacks
|
||||||
|
# mountPath: /modpacks
|
||||||
|
# readOnly: true
|
||||||
|
# resources:
|
||||||
|
# requests:
|
||||||
|
# memory: "6Gi"
|
||||||
|
# limits:
|
||||||
|
# memory: "8Gi"
|
||||||
|
# volumes:
|
||||||
|
# - name: minecraft-data
|
||||||
|
# hostPath:
|
||||||
|
# path: /data/minecraft/data
|
||||||
|
# type: DirectoryOrCreate
|
||||||
|
# - name: modpacks
|
||||||
|
# hostPath:
|
||||||
|
# path: /data/minecraft/modpacks
|
||||||
|
# type: DirectoryOrCreate
|
||||||
|
# - name: tailscale-data
|
||||||
|
# hostPath:
|
||||||
|
# path: /data/minecraft/tailscale-data
|
||||||
|
# type: DirectoryOrCreate
|
||||||
|
# - name: dev-tun
|
||||||
|
# hostPath:
|
||||||
|
# path: /dev/net/tun
|
||||||
|
# type: CharDevice
|
||||||
|
# ---
|
||||||
|
# # apiVersion: v1
|
||||||
|
# # kind: Service
|
||||||
|
# # metadata:
|
||||||
|
# # name: minecraft
|
||||||
|
# # namespace: minecraft
|
||||||
|
# # spec:
|
||||||
|
# # selector:
|
||||||
|
# # app: minecraft
|
||||||
|
# # ports:
|
||||||
|
# # - name: minecraft
|
||||||
|
# # protocol: TCP
|
||||||
|
# # port: 25565
|
||||||
|
# # targetPort: 25565
|
||||||
|
# # type: ClusterIP
|
||||||
1
kubernetes/nfs-server/.gitignore
vendored
1
kubernetes/nfs-server/.gitignore
vendored
@@ -1 +0,0 @@
|
|||||||
test/
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
FROM alpine:latest
|
|
||||||
|
|
||||||
RUN apk add --no-cache nfs-utils bash
|
|
||||||
|
|
||||||
RUN mkdir -p /exports
|
|
||||||
|
|
||||||
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
||||||
RUN chmod +x /usr/local/bin/entrypoint.sh
|
|
||||||
|
|
||||||
EXPOSE 2049 20048
|
|
||||||
|
|
||||||
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|
|
||||||
|
|
||||||
@@ -1,24 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
set -e
|
|
||||||
|
|
||||||
ALLOWED_CLIENTS="${ALLOWED_CLIENTS:-*}"
|
|
||||||
|
|
||||||
echo "/exports $ALLOWED_CLIENTS(rw,sync,no_subtree_check,no_root_squash)" > /etc/exports
|
|
||||||
|
|
||||||
rpcbind || true
|
|
||||||
rpc.statd || true
|
|
||||||
|
|
||||||
echo "Starting NFS server..."
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
mount -t nfsd nfsd /proc/fs/nfsd
|
|
||||||
|
|
||||||
rpc.nfsd -N 3 -V 4 --grace-time 10 $nfsd_debug_opt &
|
|
||||||
rpc.mountd -N 2 -N 3 -V 4 --foreground $mountd_debug_opt &
|
|
||||||
|
|
||||||
wait
|
|
||||||
|
|
||||||
# rpc.mountd -N 2 -N 3 -V 4 --foreground
|
|
||||||
|
|
||||||
# wait
|
|
||||||
@@ -1,19 +0,0 @@
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
<https://wiki.alpinelinux.org/wiki/Setting_up_an_NFS_server>
|
|
||||||
|
|
||||||
|
|
||||||
example docker run
|
|
||||||
|
|
||||||
```bash
|
|
||||||
docker run --rm -it \
|
|
||||||
--name nfs-server \
|
|
||||||
--cap-add SYS_ADMIN \
|
|
||||||
-e ALLOWED_CLIENTS="127.0.0.1.0/24" \
|
|
||||||
-v (pwd)/test:/exports \
|
|
||||||
--network host \
|
|
||||||
nfs-server
|
|
||||||
```
|
|
||||||
|
|
||||||
currently not working, i like the idea of running the nfs server in a docker container, but doing it as a nixos module is probably better
|
|
||||||
@@ -1,53 +1,53 @@
|
|||||||
apiVersion: networking.k8s.io/v1
|
# apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
# kind: Ingress
|
||||||
metadata:
|
# metadata:
|
||||||
name: audiobookshelf-ingress
|
# name: audiobookshelf-ingress
|
||||||
namespace: projects
|
# namespace: projects
|
||||||
annotations:
|
# annotations:
|
||||||
cert-manager.io/cluster-issuer: cloudflare-issuer
|
# cert-manager.io/cluster-issuer: cloudflare-issuer
|
||||||
spec:
|
# spec:
|
||||||
ingressClassName: nginx
|
# ingressClassName: nginx
|
||||||
tls:
|
# tls:
|
||||||
- hosts:
|
# - hosts:
|
||||||
- audiobook.alexmickelson.guru
|
# - audiobook.alexmickelson.guru
|
||||||
secretName: audiobookshelf-tls-cert
|
# secretName: audiobookshelf-tls-cert
|
||||||
rules:
|
# rules:
|
||||||
- host: audiobook.alexmickelson.guru
|
# - host: audiobook.alexmickelson.guru
|
||||||
http:
|
# http:
|
||||||
paths:
|
# paths:
|
||||||
- path: /
|
# - path: /
|
||||||
pathType: Prefix
|
# pathType: Prefix
|
||||||
backend:
|
# backend:
|
||||||
service:
|
# service:
|
||||||
name: audiobookshelf
|
# name: audiobookshelf
|
||||||
port:
|
# port:
|
||||||
number: 13378
|
# number: 13378
|
||||||
---
|
# ---
|
||||||
apiVersion: v1
|
# apiVersion: v1
|
||||||
kind: Service
|
# kind: Service
|
||||||
metadata:
|
# metadata:
|
||||||
name: audiobookshelf
|
# name: audiobookshelf
|
||||||
namespace: projects
|
# namespace: projects
|
||||||
spec:
|
# spec:
|
||||||
ports:
|
# ports:
|
||||||
- port: 13378
|
# - port: 13378
|
||||||
targetPort: 13378
|
# targetPort: 13378
|
||||||
protocol: TCP
|
# protocol: TCP
|
||||||
---
|
# ---
|
||||||
apiVersion: discovery.k8s.io/v1
|
# apiVersion: discovery.k8s.io/v1
|
||||||
kind: EndpointSlice
|
# kind: EndpointSlice
|
||||||
metadata:
|
# metadata:
|
||||||
name: audiobookshelf
|
# name: audiobookshelf
|
||||||
namespace: projects
|
# namespace: projects
|
||||||
labels:
|
# labels:
|
||||||
kubernetes.io/service-name: audiobookshelf
|
# kubernetes.io/service-name: audiobookshelf
|
||||||
addressType: IPv4
|
# addressType: IPv4
|
||||||
ports:
|
# ports:
|
||||||
- name: http
|
# - name: http
|
||||||
port: 13378
|
# port: 13378
|
||||||
protocol: TCP
|
# protocol: TCP
|
||||||
endpoints:
|
# endpoints:
|
||||||
- addresses:
|
# - addresses:
|
||||||
- 100.122.128.107
|
# - 100.122.128.107
|
||||||
conditions:
|
# conditions:
|
||||||
ready: true
|
# ready: true
|
||||||
|
|||||||
@@ -1,53 +1,53 @@
|
|||||||
apiVersion: networking.k8s.io/v1
|
# apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
# kind: Ingress
|
||||||
metadata:
|
# metadata:
|
||||||
name: musicassistant-ingress
|
# name: musicassistant-ingress
|
||||||
namespace: projects
|
# namespace: projects
|
||||||
annotations:
|
# annotations:
|
||||||
cert-manager.io/cluster-issuer: cloudflare-issuer
|
# cert-manager.io/cluster-issuer: cloudflare-issuer
|
||||||
spec:
|
# spec:
|
||||||
ingressClassName: nginx
|
# ingressClassName: nginx
|
||||||
tls:
|
# tls:
|
||||||
- hosts:
|
# - hosts:
|
||||||
- sound.alexmickelson.guru
|
# - sound.alexmickelson.guru
|
||||||
secretName: sound-tls-cert
|
# secretName: sound-tls-cert
|
||||||
rules:
|
# rules:
|
||||||
- host: sound.alexmickelson.guru
|
# - host: sound.alexmickelson.guru
|
||||||
http:
|
# http:
|
||||||
paths:
|
# paths:
|
||||||
- path: /
|
# - path: /
|
||||||
pathType: Prefix
|
# pathType: Prefix
|
||||||
backend:
|
# backend:
|
||||||
service:
|
# service:
|
||||||
name: musicassistant
|
# name: musicassistant
|
||||||
port:
|
# port:
|
||||||
number: 8095
|
# number: 8095
|
||||||
---
|
# ---
|
||||||
apiVersion: v1
|
# apiVersion: v1
|
||||||
kind: Service
|
# kind: Service
|
||||||
metadata:
|
# metadata:
|
||||||
name: musicassistant
|
# name: musicassistant
|
||||||
namespace: projects
|
# namespace: projects
|
||||||
spec:
|
# spec:
|
||||||
ports:
|
# ports:
|
||||||
- port: 8095
|
# - port: 8095
|
||||||
targetPort: 8095
|
# targetPort: 8095
|
||||||
protocol: TCP
|
# protocol: TCP
|
||||||
---
|
# ---
|
||||||
apiVersion: discovery.k8s.io/v1
|
# apiVersion: discovery.k8s.io/v1
|
||||||
kind: EndpointSlice
|
# kind: EndpointSlice
|
||||||
metadata:
|
# metadata:
|
||||||
name: musicassistant
|
# name: musicassistant
|
||||||
namespace: projects
|
# namespace: projects
|
||||||
labels:
|
# labels:
|
||||||
kubernetes.io/service-name: musicassistant
|
# kubernetes.io/service-name: musicassistant
|
||||||
addressType: IPv4
|
# addressType: IPv4
|
||||||
ports:
|
# ports:
|
||||||
- name: http
|
# - name: http
|
||||||
port: 8095
|
# port: 8095
|
||||||
protocol: TCP
|
# protocol: TCP
|
||||||
endpoints:
|
# endpoints:
|
||||||
- addresses:
|
# - addresses:
|
||||||
- 100.122.128.107
|
# - 100.122.128.107
|
||||||
conditions:
|
# conditions:
|
||||||
ready: true
|
# ready: true
|
||||||
|
|||||||
Reference in New Issue
Block a user