alexandre.pires
829ab48919
- Introduced a new SearXNG module with configuration for Kubernetes deployment, service, and ingress. - Updated existing Terraform app modules to include SearXNG in both dev-01 and prod-01 environments. - Added necessary variables and secrets for SearXNG in the respective Terraform files. - Updated Dockerfiles for llama.cpp and ollama to use latest versions. - Enhanced security and hardening defaults in Kubernetes deployments. - Improved documentation for Copilot instructions and Terraform workflows.
57 lines
1.4 KiB
Terraform
57 lines
1.4 KiB
Terraform
variable "persistent_folder" {
|
|
description = "The path to the persistent folder"
|
|
type = string
|
|
}
|
|
|
|
variable "fqdn" {
|
|
description = "The fully qualified domain name for the app server"
|
|
type = string
|
|
}
|
|
|
|
variable "tag" {
|
|
description = "The version of app to install"
|
|
type = string
|
|
default = "v0.8.12"
|
|
}
|
|
|
|
variable "issuer" {
|
|
description = "The issuer for the certificate"
|
|
type = string
|
|
default = "internal-ca"
|
|
}
|
|
|
|
variable "ollama_proxy" {
|
|
description = "Configuration for the Ollama proxy"
|
|
type = object({
|
|
enabled = bool
|
|
mac = optional(string, "")
|
|
ip = optional(string, "")
|
|
port = optional(string, "11434")
|
|
scheme = optional(string, "http")
|
|
})
|
|
default = {
|
|
enabled = false
|
|
}
|
|
}
|
|
|
|
variable "secret_key" {
|
|
description = "The secret key for WEBUI"
|
|
type = string
|
|
}
|
|
|
|
variable "jwt_expires_in" {
|
|
description = "Always set a reasonable expiration time in production environments (e.g., 3600s, 1h, 7d etc.) to limit the lifespan of authentication tokens."
|
|
default = "1h"
|
|
type = string
|
|
}
|
|
|
|
variable "log_level" {
|
|
description = "The global log level for the application"
|
|
type = string
|
|
default = "INFO"
|
|
validation {
|
|
condition = contains(["DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"], var.log_level)
|
|
error_message = "log_level must be one of: DEBUG, INFO, WARNING, ERROR, CRITICAL"
|
|
}
|
|
}
|