Init

2024-09-07 12:35:02 +02:00 · 2024-09-07 12:35:02 +02:00 · cdec5a64aa
commit cdec5a64aa
44 changed files with 9802 additions and 0 deletions
--- a/modules/bootstrap-default.nix
+++ b/modules/bootstrap-default.nix
@ -0,0 +1,148 @@
+{ config, lib, nixhelm, system, globals, machines, ... }: {
+  options.bootstrap-default.enable = lib.mkEnableOption "bootstrap-default";
+
+  config = lib.mkIf config.bootstrap-default.enable {
+    kubernetes = {
+      helm.releases = {
+        metallb = {
+          chart = nixhelm.chartsDerivations.${system}.metallb.metallb;
+          includeCRDs = true;
+        };
+
+        # argo-workflows = {
+        #   chart = nixhelm.chartsDerivations.${system}.argoproj.argo-workflows;
+        #   includeCRDs = true;
+        # };
+
+        longhorn = {
+          chart = nixhelm.chartsDerivations.${system}.longhorn.longhorn;
+          includeCRDs = true;
+
+          values = {
+            persistence.defaultClassReplicaCount = 2;
+            service.ui.type = "LoadBalancer";
+
+            defaultSettings = {
+              defaultDataPath = "/mnt/longhorn";
+              storageMinimalAvailablePercentage = 0;
+              allowRecurringJobWhileVolumeDetached = true;
+              backupTarget = "nfs://lewis.dmz:/mnt/longhorn/persistent/longhorn-backup";
+            };
+          };
+        };
+      };
+
+      resources = {
+        services.longhorn-frontend.spec.loadBalancerIP = globals.longhornIPv4;
+
+        namespaces = {
+          static-websites = { };
+          freshrss = { };
+          radicale = { };
+          kms = { };
+          atuin = { };
+          nextcloud = { };
+          hedgedoc = { };
+          kitchenowl = { };
+          forgejo = { };
+          paperless = { };
+          syncthing = { };
+          immich = { };
+          attic = { };
+          inbucket = { };
+          dns = { };
+          media = { };
+          minecraft = { };
+          tailscale = { };
+          ntfy = { };
+        };
+
+        nodes =
+          let
+            machinesWithKubernetesLabels = lib.filterAttrs (name: machine: machine.kubernetesNodeLabels != null) machines;
+          in
+          builtins.mapAttrs
+            (name: machine: {
+              metadata.labels = machine.kubernetesNodeLabels;
+            })
+            machinesWithKubernetesLabels;
+
+        recurringJobs.backup-nfs.spec = {
+          cron = "0 1 * * *"; # One o'clock at night
+          task = "backup";
+          retain = 2; # We don't need many, as we also make Borg backups.
+          concurrency = 1;
+        };
+
+        ipAddressPools.main.spec.addresses = [ "192.168.30.128-192.168.30.200" "2a0d:6e00:1a77:30::2-2a0d:6e00:1a77:30:ffff:ffff:ffff:fffe" ];
+        l2Advertisements.main.metadata = { };
+
+        persistentVolumes = {
+          music-syncthing.spec = {
+            capacity.storage = "1Gi";
+            accessModes = [ "ReadWriteMany" ];
+
+            nfs = {
+              server = "lewis.dmz";
+              path = "/mnt/longhorn/persistent/media/music";
+            };
+          };
+
+          media-media.spec = {
+            capacity.storage = "1Gi";
+            accessModes = [ "ReadWriteMany" ];
+
+            nfs = {
+              server = "lewis.dmz";
+              path = "/mnt/longhorn/persistent/media";
+            };
+          };
+        };
+      };
+    };
+
+    lab = {
+      longhorn.persistentVolume = {
+        freshrss.storage = "1Gi";
+        radicale.storage = "200Mi";
+        atuin.storage = "300Mi";
+        atuin-db.storage = "300Mi";
+        nextcloud.storage = "50Gi";
+        nextcloud-db.storage = "400Mi";
+        hedgedoc-uploads.storage = "50Mi";
+        hedgedoc-db.storage = "100Mi";
+        kitchenowl.storage = "100Mi";
+        forgejo.storage = "20Gi";
+        paperless-data.storage = "10Gi";
+        paperless-redisdata.storage = "20Mi";
+        paperless-db.storage = "150Mi";
+        syncthing.storage = "400Mi";
+        pihole-data.storage = "750Mi";
+        pihole-dnsmasq.storage = "16Mi";
+        immich.storage = "50Gi";
+        immich-db.storage = "5Gi";
+        attic.storage = "15Gi";
+        attic-db.storage = "150Mi";
+        jellyfin.storage = "5Gi";
+        transmission.storage = "25Mi";
+        jellyseerr.storage = "75Mi";
+        radarr.storage = "300Mi";
+        prowlarr.storage = "150Mi";
+        sonarr.storage = "150Mi";
+        bazarr.storage = "25Mi";
+        minecraft.storage = "1Gi";
+        ntfy.storage = "300Mi";
+        deluge.storage = "500Mi";
+      };
+
+      tailscaleIngresses.tailscale-longhorn = {
+        host = "longhorn";
+
+        service = {
+          name = "longhorn-frontend";
+          portName = "http";
+        };
+      };
+    };
+  };
+}