alexandre.pires
826959c903
- Introduced Nextcloud module with Kubernetes resources including deployment, service, ingress, and cron job. - Configured Apache settings for Nextcloud with SSL support and compression. - Created secrets for mail and admin credentials. - Added necessary environment variables for Nextcloud configuration. - Removed unused Scaleway access and secret keys from secrets and variables. - Updated CoreDNS module to support custom host overrides. - Implemented backup bucket policies and lifecycle rules for Scaleway object storage. - Enhanced IAM policies and applications for backup and email services. - Added outputs for backup bucket and API keys.
60 lines
1.8 KiB
Terraform
60 lines
1.8 KiB
Terraform
variable "tag" {
|
|
description = "The version of the nginx server to install"
|
|
type = string
|
|
default = "stable-alpine"
|
|
}
|
|
|
|
variable "wireguard_config" {
|
|
description = "The Wireguard configuration file"
|
|
type = object({
|
|
private_key = string
|
|
public_key = string
|
|
pre_shared_key = string
|
|
endpoint = string
|
|
endpoint_port = number
|
|
address = string
|
|
dns = string
|
|
allowed_ips = list(string)
|
|
})
|
|
default = null
|
|
sensitive = true
|
|
}
|
|
|
|
variable "issuer_name" {
|
|
description = "The name of the issuer to use for TLS certificates, internal certificates"
|
|
type = string
|
|
default = "internal-ca"
|
|
}
|
|
|
|
variable "services" {
|
|
description = "A list of services to be deployed"
|
|
type = map(object({
|
|
fqdn = list(string)
|
|
custom_ingress_annotations = optional(map(string), {})
|
|
annotations = optional(map(string), {})
|
|
upstream = optional(string, "")
|
|
resolver = optional(string, "")
|
|
default_headers = optional(map(string), {}),
|
|
http_port = optional(number, 80)
|
|
https_port = optional(number, 443)
|
|
tls = optional(bool, false)
|
|
locations = optional(list(object({
|
|
path = string,
|
|
headers = optional(map(string), {}),
|
|
private = optional(bool, false),
|
|
upstream = optional(string, ""),
|
|
resolver = optional(string, "")
|
|
rewrite = optional(string, "")
|
|
})), [])
|
|
custom_snippet = optional(string, "")
|
|
config = optional(string, "")
|
|
}))
|
|
}
|
|
|
|
variable "auth_token" {
|
|
description = "The authentication token to use for the reverse proxy"
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
}
|