nixos-servers/nix/flake/kubenix/paperless-ngx.nix

{
  kubernetes.resources = {
    configMaps.paperless-ngx.data = {
      PAPERLESS_REDIS = "redis://localhost:6379";
      PAPERLESS_DBENGINE = "postgresql";
      PAPERLESS_DBHOST = "lewis.dmz";
      PAPERLESS_DBNAME = "paperless";
      PAPERLESS_DBUSER = "paperless";
      # PAPERLESS_DBPASS = "{{ paperless_db_password }}";
      # PAPERLESS_CONSUMPTION_DIR = "/nextcloud/data/pim/files/paperless-ngx/consumption/";
      PAPERLESS_DATA_DIR = "/data/";
      PAPERLESS_MEDIA_ROOT = "/data/";
      # PAPERLESS_CONSUMER_POLLING = "10";
      PAPERLESS_OCR_LANGUAGES = "nld eng";
      PAPERLESS_URL = "https://paperless.kun.is";
      PAPERLESS_TIME_ZONE = "Europe/Amsterdam";
      PAPERLESS_OCR_LANGUAGE = "nld";
      # PAPERLESS_SECRET_KEY = "{{ paperless_secret_key }}";
      USERMAP_UID = "33";
      USERMAP_GID = "33";
    };

    secrets.paperless-ngx.stringData = {
      databasePassword = "ref+file:///home/pim/.config/home/vals.yaml#/paperless-ngx/databasePassword";
      secretKey = "ref+file:///home/pim/.config/home/vals.yaml#/paperless-ngx/secretKey";
    };

    deployments.paperless-ngx = {
      metadata.labels.app = "paperless-ngx";

      spec = {
        selector.matchLabels.app = "paperless-ngx";

        template = {
          metadata.labels.app = "paperless-ngx";

          spec = {
            containers = {
              redis = {
                image = "docker.io/library/redis:7";

                volumeMounts = [{
                  name = "redisdata";
                  mountPath = "/data";
                }];
              };

              paperless-ngx = {
                image = "ghcr.io/paperless-ngx/paperless-ngx:2.3";
                envFrom = [{ configMapRef.name = "paperless-ngx"; }];

                ports = [{
                  containerPort = 8000;
                  protocol = "TCP";
                }];

                env = [
                  {
                    name = "PAPERLESS_DBPASS";

                    valueFrom.secretKeyRef = {
                      name = "paperless-ngx";
                      key = "databasePassword";
                    };
                  }
                  {
                    name = "PAPERLESS_SECRET_KEY";

                    valueFrom.secretKeyRef = {
                      name = "paperless-ngx";
                      key = "secretKey";
                    };
                  }
                ];
              };
            };

            volumes = [{
              name = "redisdata";
              persistentVolumeClaim.claimName = "paperless-ngx-redisdata";
            }];
          };
        };
      };
    };

    persistentVolumes = {
      paperless-ngx-redisdata.spec = {
        capacity.storage = "1Mi";
        accessModes = [ "ReadWriteMany" ];

        nfs = {
          server = "lewis.hyp";
          path = "/mnt/data/nfs/paperless-ngx/redisdata";
        };
      };

      paperless-ngx-data.spec = {
        capacity.storage = "1Mi";
        accessModes = [ "ReadWriteMany" ];

        nfs = {
          server = "lewis.hyp";
          path = "/mnt/data/nfs/paperless-ngx/data";
        };
      };
    };

    persistentVolumeClaims = {
      paperless-ngx-redisdata.spec = {
        accessModes = [ "ReadWriteMany" ];
        storageClassName = "";
        resources.requests.storage = "1Mi";
        volumeName = "paperless-ngx-redisdata";
      };

      paperless-data.spec = {
        accessModes = [ "ReadWriteMany" ];
        storageClassName = "";
        resources.requests.storage = "1Mi";
        volumeName = "paperless-ngx-data";
      };
    };

    services.paperless-ngx.spec = {
      selector.app = "paperless-ngx";

      ports = [{
        protocol = "TCP";
        port = 80;
        targetPort = 8000;
      }];
    };

    ingresses.paperless-ngx.spec = {
      ingressClassName = "traefik";

      rules = [{
        host = "paperless.kun.is";

        http.paths = [{
          path = "/";
          pathType = "Prefix";

          backend.service = {
            name = "paperless-ngx";
            port.number = 80;
          };
        }];
      }];
    };
  };
}