Add Gitea and Mail modules with configuration and resources

- Created Gitea module with outputs, provider, and variables for deployment.
- Implemented Mail module including configuration for Dovecot and Postfix, along with necessary resources such as secrets, config maps, and deployments.
- Added Python script for bcrypt password hashing and integrated it into the Mail module.
- Defined persistent volumes and claims for Seafile module, along with Nginx configuration for serving content.
- Established necessary variables for all modules to ensure flexibility and configurability.

terraform/modules/seafile/config.tf

@@ -0,0 +1,7 @@
+locals {
+  persistent_folder = var.persistent_folder
+  websites_path     = "${local.persistent_folder}/web"
+  primary_domain    = var.primary_domain
+  websites          = var.websites
+}
+

terraform/modules/seafile/main.tf

@@ -0,0 +1,128 @@
+#
+# Namespace for Seafile
+#
+resource "kubernetes_namespace" "seafile" {
+  metadata {
+    annotations = {
+      name = "seafile"
+    }
+
+    labels = {
+      name = "seafile"
+    }
+
+    name = "seafile"
+  }
+}
+
+#
+# Persistent Volume for Seafile data
+#
+resource "kubernetes_persistent_volume" "seafile_data" {
+  metadata {
+    name = "seafile-data"
+    labels = {
+      type = "local" # Example label, adjust as needed
+    }
+  }
+  spec {
+    capacity = {
+      storage = "10Gi"
+    }
+    access_modes = ["ReadWriteOnce"]
+    persistent_volume_source {
+      host_path {
+        path = "/opt/seafile-data" # Consider making this configurable via variables
+      }
+    }
+    persistent_volume_reclaim_policy = "Retain" # Or Delete, depending on desired behavior
+    storage_class_name               = "manual" # Or your specific storage class
+    volume_mode                      = "Filesystem"
+  }
+}
+
+#
+# Persistent Volume Claim for Seafile data
+#
+resource "kubernetes_persistent_volume_claim" "seafile_data" {
+  metadata {
+    name      = "seafile-data"
+    namespace = kubernetes_namespace.seafile.metadata[0].name
+  }
+  spec {
+    access_modes = ["ReadWriteOnce"]
+    resources {
+      requests = {
+        storage = "10Gi"
+      }
+    }
+    storage_class_name = "manual" # Must match the PV's storage class
+    volume_name        = kubernetes_persistent_volume.seafile_data.metadata[0].name
+  }
+  wait_until_bound = false # Set to true if you need to ensure binding before proceeding
+}
+
+#
+# ConfigMap for Seafile environment variables
+#
+resource "kubernetes_config_map" "seafile_env" {
+  metadata {
+    name      = "seafile-env"
+    namespace = kubernetes_namespace.seafile.metadata[0].name
+  }
+  data = {
+    # for Seafile server
+    TIME_ZONE               = "UTC" # Consider making this configurable
+    SEAFILE_LOG_TO_STDOUT   = "false"
+    SITE_ROOT               = "/"
+    ENABLE_SEADOC           = "false"
+    SEADOC_SERVER_URL       = "https://seafile.example.com/sdoc-server" # Replace with actual URL or variable
+    SEAFILE_SERVER_HOSTNAME = "seafile.example.com"                     # Replace with actual hostname or variable
+    SEAFILE_SERVER_PROTOCOL = "http"                                    # Replace with actual protocol or variable
+
+    # for database - Consider using secrets for credentials
+    SEAFILE_MYSQL_DB_HOST            = "<your MySQL host>" # Replace with actual host or variable/secret
+    SEAFILE_MYSQL_DB_PORT            = "3306"
+    SEAFILE_MYSQL_DB_USER            = "seafile" # Replace with actual user or variable/secret
+    SEAFILE_MYSQL_DB_CCNET_DB_NAME   = "ccnet_db"
+    SEAFILE_MYSQL_DB_SEAFILE_DB_NAME = "seafile_db"
+    SEAFILE_MYSQL_DB_SEAHUB_DB_NAME  = "seahub_db"
+
+    # Init
+    ## for Seafile admin - Consider using secrets
+    INIT_SEAFILE_ADMIN_EMAIL = "<Seafile admin's email>" # Replace with actual email or variable/secret
+
+    ## For S3 storage backend (only valid in INIT_S3_STORAGE_BACKEND_CONFIG = true) - Consider using secrets
+    INIT_S3_STORAGE_BACKEND_CONFIG = "false"
+    INIT_S3_COMMIT_BUCKET          = ""
+    INIT_S3_FS_BUCKET              = ""
+    INIT_S3_BLOCK_BUCKET           = ""
+    INIT_S3_KEY_ID                 = ""
+    INIT_S3_USE_V4_SIGNATURE       = "true"
+    INIT_S3_AWS_REGION             = "us-east-1"
+    INIT_S3_HOST                   = "s3.us-east-1.amazonaws.com"
+    INIT_S3_USE_HTTPS              = "true"
+  }
+}
+
+#
+# Service for Seafile
+#
+resource "kubernetes_service" "seafile" {
+  metadata {
+    name      = "seafile"
+    namespace = kubernetes_namespace.seafile.metadata[0].name
+  }
+  spec {
+    selector = {
+      app = "seafile" # Ensure your Seafile deployment/pod has this label
+    }
+    port {
+      protocol    = "TCP"
+      port        = 80
+      target_port = 80
+      node_port   = 30000 # NodePort might not be ideal for production, consider Ingress or LoadBalancer service type without explicit nodePort
+    }
+    type = "LoadBalancer" # Or ClusterIP/NodePort depending on your needs
+  }
+}

terraform/modules/seafile/provider.tf

@@ -0,0 +1,13 @@
+terraform {
+  required_version = "~>1.8"
+  required_providers {
+    kubernetes = {
+      source  = "hashicorp/kubernetes"
+      version = "~>2.18"
+    }
+    scaleway = {
+      source  = "scaleway/scaleway"
+      version = "~>2.13"
+    }
+  }
+}

terraform/modules/seafile/resources/nginx/conf.d/default.conf

@@ -0,0 +1,35 @@
+server {
+    listen 8080;
+    server_name localhost;
+
+    gzip on;
+    gzip_comp_level 9;
+    gzip_types
+    text/html
+    text/plain
+    text/css
+    text/js
+    text/xml
+    text/javascript
+    application/javascript
+    application/json
+    application/xml
+    application/rss+xml
+    image/svg+xml;
+
+    root /tmp/site;
+
+    location / {
+        index index.html index.htm;
+    }
+
+    location ~* ^/([^/]+) {
+        index index.html index.htm;
+        error_page 404 = @error;
+    }
+
+    error_page 404 /404.html;
+    location @error {
+        try_files /$1/404.html /404.html =404;
+    }
+}

terraform/modules/seafile/resources/nginx/nginx.conf

@@ -0,0 +1,34 @@
+worker_processes  auto;
+
+error_log  /var/log/nginx/error.log notice;
+pid        /tmp/nginx.pid;
+
+
+events {
+    worker_connections  1024;
+}
+
+
+http {
+    proxy_temp_path /tmp/proxy_temp;
+    client_body_temp_path /tmp/client_temp;
+    fastcgi_temp_path /tmp/fastcgi_temp;
+    uwsgi_temp_path /tmp/uwsgi_temp;
+    scgi_temp_path /tmp/scgi_temp;
+
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile        on;
+
+    keepalive_timeout  65;
+
+
+    include /etc/nginx/conf.d/*.conf;
+}

terraform/modules/seafile/variables.tf

@@ -0,0 +1,23 @@
+variable "persistent_folder" {
+  description = "The path to the persistent folder"
+  type        = string
+}
+
+variable "primary_domain" {
+  description = "The primary domain for the websites"
+  type        = string
+}
+
+variable "tag" {
+  description = "The version of the websites to install"
+  type        = string
+  default     = "stable-alpine"
+}
+
+variable "websites" {
+  description = "A list of websites to be deployed"
+  type = map(object({
+    domain_name = string
+    fqdn        = list(string)
+  }))
+}