Added Terraform/Ansible configuration to include RustDesk deployment

terraform/iac/alexpires.me.tf

@@ -46,6 +46,14 @@ resource "cloudns_dns_record" "alexpires_me_www" {
   ttl   = "3600"
 }
 
+resource "cloudns_dns_record" "alexpires_me_rustdesk" {
+  name  = "rustdesk"
+  zone  = local.alexpires_me_zone
+  type  = "CNAME"
+  value = "${cloudns_dns_record.alexpires_me_microk8s.name}.${local.alexpires_me_zone}"
+  ttl   = "3600"
+}
+
 resource "cloudns_dns_record" "alexpires_me_prod_01" {
   name  = "prod-01"
   zone  = local.alexpires_me_zone

terraform/k8sapps/config.tf

@@ -37,6 +37,9 @@ locals {
     "GeoLite2-ASN"
   ]
 
+  # rustdesk
+  rustdesk_version = "latest"
+
   # backup
   local_backup_retention_days = 2
   cloud_backup_retention_days = 3

terraform/k8sapps/gitea.tf

@@ -143,24 +143,6 @@ resource "kubernetes_service" "gitea_http" {
   }
 }
 
-resource "kubernetes_service" "gitea_ssh" {
-  metadata {
-    name      = "ssh"
-    namespace = kubernetes_namespace.gitea.metadata[0].name
-  }
-  spec {
-    port {
-      port        = 22
-      target_port = "ssh"
-      node_port   = 30036
-    }
-    selector = {
-      app = "gitea"
-    }
-    type = "NodePort"
-  }
-}
-
 resource "kubernetes_ingress_v1" "gitea_ingress" {
   metadata {
     name      = "gitea-ingress"

terraform/k8sapps/rustdesk.tf

@@ -0,0 +1,183 @@
+locals {
+  rustdesk_path = "${local.persistent_folder}/rustdesk"
+}
+
+resource "kubernetes_namespace" "rustdesk" {
+  metadata {
+    name = "rustdesk"
+  }
+}
+
+resource "kubernetes_config_map" "rustdesk_config" {
+  metadata {
+    name      = "rustdesk-config"
+    namespace = kubernetes_namespace.rustdesk.metadata[0].name
+  }
+
+  data = {
+    RELAY          = "rustdesk.alexpires.me"
+    ENCRYPTED_ONLY = "1"
+  }
+}
+
+resource "kubernetes_secret" "rustdesk_keys" {
+  metadata {
+    name      = "rustdesk-keys"
+    namespace = kubernetes_namespace.rustdesk.metadata[0].name
+  }
+
+  data = {
+    KEY_PRIV = var.rustdesk_private_key
+    KEY_PUB  = var.rustdesk_public_key
+  }
+}
+
+resource "kubernetes_deployment" "rustdesk_deploy" {
+  metadata {
+    name      = "rustdesk-deploy"
+    namespace = kubernetes_namespace.rustdesk.metadata[0].name
+    labels = {
+      app = "rustdesk-app"
+    }
+  }
+
+  spec {
+    replicas = 1
+
+    selector {
+      match_labels = {
+        app = "rustdesk-app"
+      }
+    }
+
+    template {
+      metadata {
+        labels = {
+          app = "rustdesk-app"
+        }
+      }
+
+      spec {
+        container {
+          name  = "rustdesk-container"
+          image = "rustdesk/rustdesk-server-s6:${local.rustdesk_version}"
+
+          env_from {
+            config_map_ref {
+              name = kubernetes_config_map.rustdesk_config.metadata[0].name
+            }
+          }
+
+          env {
+            name  = "KEY_PRIV"
+            value = kubernetes_secret.rustdesk_keys.data["KEY_PRIV"]
+          }
+
+          env {
+            name  = "KEY_PUB"
+            value = kubernetes_secret.rustdesk_keys.data["KEY_PUB"]
+          }
+
+          security_context {
+            allow_privilege_escalation = false
+          }
+
+          port {
+            name           = "tcp-port-1"
+            container_port = 21115
+            host_port      = 21115
+            protocol       = "TCP"
+          }
+
+          port {
+            name           = "tcp-port-2"
+            container_port = 21116
+            host_port      = 21116
+            protocol       = "TCP"
+          }
+
+          port {
+            name           = "udp-port-1"
+            container_port = 21116
+            host_port      = 21116
+            protocol       = "UDP"
+          }
+
+          port {
+            name           = "tcp-port-3"
+            container_port = 21117
+            host_port      = 21117
+            protocol       = "TCP"
+          }
+
+          volume_mount {
+            name       = "rustdesk-data"
+            mount_path = "/data"
+          }
+        }
+
+        volume {
+          name = "rustdesk-data"
+          host_path {
+            path = local.rustdesk_path
+          }
+        }
+      }
+    }
+  }
+}
+
+resource "kubernetes_service" "rustdesk_tcp_ports" {
+  metadata {
+    name      = "rustdesk-tcp-ports"
+    namespace = kubernetes_namespace.rustdesk.metadata[0].name
+  }
+
+  spec {
+    selector = {
+      app = "rustdesk-app"
+    }
+
+    port {
+      name        = "tcp-port-1"
+      port        = 21115
+      target_port = 21115
+    }
+
+    port {
+      name        = "tcp-port-2"
+      port        = 21116
+      target_port = 21116
+    }
+
+    port {
+      name        = "tcp-port-3"
+      port        = 21117
+      target_port = 21117
+    }
+
+    type = "LoadBalancer"
+  }
+}
+
+resource "kubernetes_service" "rustdesk_udp_ports" {
+  metadata {
+    name      = "rustdesk-udp-ports"
+    namespace = kubernetes_namespace.rustdesk.metadata[0].name
+  }
+
+  spec {
+    selector = {
+      app = "rustdesk-app"
+    }
+
+    port {
+      name        = "udp-port-1"
+      port        = 21116
+      target_port = 21116
+      protocol    = "UDP"
+    }
+
+    type = "LoadBalancer"
+  }
+}

terraform/k8sapps/sectool.env

@@ -17,3 +17,5 @@ TF_VAR_m3uproxy_admin_password=$M3UPROXY_ADMIN_PASSWORD
 TF_VAR_m3uproxy_secret=$M3UPROXY_SECRET
 TF_VAR_maxmind_account_id=$MAXMIND_ACCOUNT_ID
 TF_VAR_maxmind_license_key=$MAXMIND_LICENSE_KEY
+TF_VAR_rustdesk_private_key=$RUSTDESK_PRIVATE_KEY
+TF_VAR_rustdesk_public_key=$RUSTDESK_PUBLIC_KEY

terraform/k8sapps/variables.tf

@@ -79,3 +79,13 @@ variable "maxmind_license_key" {
   description = "Maxmind license key"
   type        = string
 }
+
+variable "rustdesk_private_key" {
+  description = "Rustdesk private key"
+  type        = string
+}
+
+variable "rustdesk_public_key" {
+  description = "Rustdesk public key"
+  type        = string
+}