nixos-servers/nix/flake/kubenix/syncthing.nix

113 lines
2.5 KiB
Nix
Raw Normal View History

2024-03-28 20:44:21 +00:00
{
kubernetes.resources = {
configMaps.syncthing.data = {
PUID = "33";
PGID = "33";
TZ = "Europe/Amsterdam";
};
deployments.syncthing = {
metadata.labels.app = "syncthing";
spec = {
selector.matchLabels.app = "syncthing";
template = {
metadata.labels.app = "syncthing";
spec = {
containers.syncthing = {
image = "lscr.io/linuxserver/syncthing:1.23.6";
envFrom = [{ configMapRef.name = "syncthing"; }];
ports = [{
containerPort = 8384;
protocol = "TCP";
}];
volumeMounts = [
{
name = "config";
mountPath = "/config";
}
{
name = "nextcloud-data";
mountPath = "/data";
}
];
};
volumes = [
{
name = "config";
persistentVolumeClaim.claimName = "syncthing";
}
{
name = "nextcloud-data";
persistentVolumeClaim.claimName = "nextcloud";
}
];
};
};
};
};
persistentVolumes.syncthing.spec = {
capacity.storage = "1Mi";
accessModes = [ "ReadWriteMany" ];
nfs = {
2024-04-12 21:31:10 +00:00
server = "lewis.dmz";
2024-03-28 20:44:21 +00:00
path = "/mnt/data/nfs/syncthing/config";
};
};
persistentVolumeClaims.syncthing.spec = {
accessModes = [ "ReadWriteMany" ];
storageClassName = "";
resources.requests.storage = "1Mi";
volumeName = "syncthing";
};
services.syncthing.spec = {
selector.app = "syncthing";
ports = [{
protocol = "TCP";
port = 80;
targetPort = 8384;
}];
};
ingresses.syncthing = {
metadata.annotations = {
"cert-manager.io/cluster-issuer" = "letsencrypt";
"traefik.ingress.kubernetes.io/router.entrypoints" = "localsecure";
};
spec = {
ingressClassName = "traefik";
rules = [{
host = "sync.kun.is";
http.paths = [{
path = "/";
pathType = "Prefix";
backend.service = {
name = "syncthing";
port.number = 80;
};
}];
}];
tls = [{
secretName = "syncthing-tls";
hosts = [ "sync.kun.is" ];
}];
};
};
2024-03-28 20:44:21 +00:00
};
}