kubernetes-deployments/modules/bootstrap-default.nix

{ config, lib, nixhelm, system, globals, machines, ... }: {
  options.bootstrap-default.enable = lib.mkEnableOption "bootstrap-default";

  config = lib.mkIf config.bootstrap-default.enable {
    kubernetes = {
      helm.releases = {
        metallb = {
          chart = nixhelm.chartsDerivations.${system}.metallb.metallb;
          includeCRDs = true;
        };

        # argo-workflows = {
        #   chart = nixhelm.chartsDerivations.${system}.argoproj.argo-workflows;
        #   includeCRDs = true;
        # };

        longhorn = {
          chart = nixhelm.chartsDerivations.${system}.longhorn.longhorn;
          includeCRDs = true;

          values = {
            persistence.defaultClassReplicaCount = 2;
            service.ui.type = "LoadBalancer";

            defaultSettings = {
              defaultDataPath = "/mnt/longhorn";
              storageMinimalAvailablePercentage = 0;
              allowRecurringJobWhileVolumeDetached = true;
              backupTarget = "nfs://lewis.dmz:/mnt/longhorn/persistent/longhorn-backup";
            };
          };
        };
      };

      resources = {
        services.longhorn-frontend.spec.loadBalancerIP = globals.longhornIPv4;

        namespaces = {
          static-websites = { };
          freshrss = { };
          radicale = { };
          kms = { };
          atuin = { };
          nextcloud = { };
          hedgedoc = { };
          kitchenowl = { };
          forgejo = { };
          paperless = { };
          syncthing = { };
          immich = { };
          attic = { };
          inbucket = { };
          dns = { };
          media = { };
          minecraft = { };
          tailscale = { };
          ntfy = { };
        };

        nodes =
          let
            machinesWithKubernetesLabels = lib.filterAttrs (name: machine: machine.kubernetesNodeLabels != null) machines;
          in
          builtins.mapAttrs
            (name: machine: {
              metadata.labels = machine.kubernetesNodeLabels;
            })
            machinesWithKubernetesLabels;

        recurringJobs.backup-nfs.spec = {
          cron = "0 1 * * *"; # One o'clock at night
          task = "backup";
          retain = 2; # We don't need many, as we also make Borg backups.
          concurrency = 1;
        };

        ipAddressPools.main.spec.addresses = [ "192.168.30.128-192.168.30.200" "2a0d:6e00:1a77:30::2-2a0d:6e00:1a77:30:ffff:ffff:ffff:fffe" ];
        l2Advertisements.main.metadata = { };

        persistentVolumes = {
          music-syncthing.spec = {
            capacity.storage = "1Gi";
            accessModes = [ "ReadWriteMany" ];

            nfs = {
              server = "lewis.dmz";
              path = "/mnt/longhorn/persistent/media/music";
            };
          };

          media-media.spec = {
            capacity.storage = "1Gi";
            accessModes = [ "ReadWriteMany" ];

            nfs = {
              server = "lewis.dmz";
              path = "/mnt/longhorn/persistent/media";
            };
          };
        };
      };
    };

    lab = {
      longhorn.persistentVolume = {
        freshrss.storage = "1Gi";
        radicale.storage = "200Mi";
        atuin.storage = "300Mi";
        atuin-db.storage = "300Mi";
        nextcloud.storage = "50Gi";
        nextcloud-db.storage = "400Mi";
        hedgedoc-uploads.storage = "50Mi";
        hedgedoc-db.storage = "100Mi";
        kitchenowl.storage = "100Mi";
        forgejo.storage = "20Gi";
        paperless-data.storage = "10Gi";
        paperless-redisdata.storage = "20Mi";
        paperless-db.storage = "150Mi";
        syncthing.storage = "400Mi";
        pihole-data.storage = "750Mi";
        pihole-dnsmasq.storage = "16Mi";
        immich.storage = "50Gi";
        immich-db.storage = "5Gi";
        attic.storage = "15Gi";
        attic-db.storage = "150Mi";
        jellyfin.storage = "5Gi";
        transmission.storage = "25Mi";
        jellyseerr.storage = "75Mi";
        radarr.storage = "300Mi";
        prowlarr.storage = "150Mi";
        sonarr.storage = "150Mi";
        bazarr.storage = "25Mi";
        minecraft.storage = "1Gi";
        ntfy.storage = "300Mi";
        deluge.storage = "500Mi";
      };

      tailscaleIngresses.tailscale-longhorn = {
        host = "longhorn";

        service = {
          name = "longhorn-frontend";
          portName = "http";
        };
      };
    };
  };
}