aee57a8b89
- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand. - Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters. - Removed unused gitea-auth script from playbook_gitea.yml. - Updated systools_version in playbook_systools.yml to 0.4.5. - Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS. - Added a new script test_imaps for IMAP testing. - Updated Terraform configurations for various applications, including: - Added a backup script for MariaDB with retention policy. - Changed Gitea version to 1.24-rootless and adjusted SSH settings. - Updated Nginx configurations to log errors and access to stderr/stdout. - Refactored services to use ClusterIP type and adjusted security contexts for deployments. - Added temporary storage for applications using empty_dir. - Enhanced backup.sh scripts for better error handling and logging.
89 lines
2.8 KiB
Terraform
89 lines
2.8 KiB
Terraform
variable "persistent_folder" {
|
|
description = "The path to the persistent folder"
|
|
type = string
|
|
}
|
|
|
|
variable "database_folder" {
|
|
description = "The path to the database folder"
|
|
type = string
|
|
}
|
|
|
|
variable "backup_folder" {
|
|
description = "The path to the backup folder"
|
|
type = string
|
|
}
|
|
|
|
variable "backup_retention_days" {
|
|
description = "The number of days to retain backups"
|
|
type = number
|
|
}
|
|
|
|
variable "backup_cron_schedule" {
|
|
description = "The cron schedule for backups"
|
|
type = string
|
|
}
|
|
|
|
variable "db_root_password" {
|
|
description = "The root password for the MySQL database"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "tag" {
|
|
description = "The version of the websites to install"
|
|
type = string
|
|
default = "latest-rootless"
|
|
}
|
|
|
|
variable "fqdn" {
|
|
description = "The fully qualified domain name for the Rustdesk server"
|
|
type = string
|
|
}
|
|
|
|
|
|
variable "tls_enabled" {
|
|
description = "Enable TLS for the SFTPGo server"
|
|
type = bool
|
|
default = true
|
|
}
|
|
|
|
variable "issuer" {
|
|
description = "The issuer for the certificate"
|
|
type = string
|
|
default = "internal-ca"
|
|
}
|
|
|
|
variable "app_config" {
|
|
description = "The configuration for the SFTPGo server"
|
|
type = object({
|
|
app_name = string
|
|
domain = string
|
|
lfs_jwt_secret = string
|
|
db_passwd = string
|
|
jwt_secret = string
|
|
mail_from = string
|
|
no_reply_address = string
|
|
smtp_user = string
|
|
smtp_passwd = string
|
|
smtp_host = string
|
|
secret_key = string
|
|
internal_token = string
|
|
disable_registration = optional(bool, true)
|
|
require_signin_view = optional(bool, false)
|
|
register_email_confirm = optional(bool, false)
|
|
enable_notify_mail = optional(bool, true)
|
|
allow_only_external_registration = optional(bool, false)
|
|
enable_captcha = optional(bool, true)
|
|
run_mode = optional(string, "prod")
|
|
http_port = optional(string, "3000")
|
|
disable_ssh = optional(bool, false)
|
|
ssh_port = optional(number, 2222)
|
|
db_host = optional(string, "mariadb")
|
|
db_port = optional(string, "3306")
|
|
db_name = optional(string, "gitea")
|
|
db_user = optional(string, "gitea")
|
|
smtp_protocol = optional(string, "SMTPS")
|
|
smtp_port = optional(string, "587")
|
|
})
|
|
}
|