home/nixos-servers
home/nixos-servers
2
0
Fork 0
Code Issues 8 Pull requests Projects Releases Packages Wiki Activity Actions

migrate paperless-ngx to kubernetes

Browse source
This commit is contained in:
Pim Kunis 2024-03-29 13:50:51 +01:00
parent 903a5f4cec
commit 35280d34b4
4 changed files with 160 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
docker_swarm/playbooks/stacks.yml
View file

@ -6,5 +6,4 @@
- {role: forgejo, tags: forgejo}
- {role: swarm_dashboard, tags: swarm_dashboard}
- {role: kitchenowl, tags: kitchenowl}
- {role: paperless-ngx, tags: paperless-ngx}
- {role: media, tags: media}

6
docker_swarm/roles/traefik/docker-stack.yml.j2
View file

@ -102,6 +102,12 @@ services:
- traefik.http.routers.nextcloud.rule=Host(`cloud.kun.is`)
- traefik.http.routers.nextcloud.tls=true
- traefik.http.routers.nextcloud.tls.certresolver=letsencrypt
- traefik.http.routers.paperless-ngx.entrypoints=websecure
- traefik.http.routers.paperless-ngx.service=k3s@file
- traefik.http.routers.paperless-ngx.rule=Host(`paperless.kun.is`)
- traefik.http.routers.paperless-ngx.tls=true
- traefik.http.routers.paperless-ngx.tls.certresolver=letsencrypt
volumes:
- type: bind
source: /var/run/docker.sock

1
nix/flake/kubenix/default.nix
View file

@ -16,6 +16,7 @@
./nextcloud.nix
./pihole.nix
# ./hedgedoc.nix
./paperless-ngx.nix
];
kubernetes.kubeconfig = "~/.kube/config";
kubenix.project = "home";

153
nix/flake/kubenix/paperless-ngx.nix Normal file
View file

@ -0,0 +1,153 @@
{
kubernetes.resources = {
configMaps.paperless-ngx.data = {
PAPERLESS_REDIS = "redis://localhost:6379";
PAPERLESS_DBENGINE = "postgresql";
PAPERLESS_DBHOST = "lewis.dmz";
PAPERLESS_DBNAME = "paperless";
PAPERLESS_DBUSER = "paperless";
# PAPERLESS_DBPASS = "{{ paperless_db_password }}";
# PAPERLESS_CONSUMPTION_DIR = "/nextcloud/data/pim/files/paperless-ngx/consumption/";
PAPERLESS_DATA_DIR = "/data/";
PAPERLESS_MEDIA_ROOT = "/data/";
# PAPERLESS_CONSUMER_POLLING = "10";
PAPERLESS_OCR_LANGUAGES = "nld eng";
PAPERLESS_URL = "https://paperless.kun.is";
PAPERLESS_TIME_ZONE = "Europe/Amsterdam";
PAPERLESS_OCR_LANGUAGE = "nld";
# PAPERLESS_SECRET_KEY = "{{ paperless_secret_key }}";
USERMAP_UID = "33";
USERMAP_GID = "33";
};
secrets.paperless-ngx.stringData = {
databasePassword = "ref+file:///home/pim/.config/home/vals.yaml#/paperless-ngx/databasePassword";
secretKey = "ref+file:///home/pim/.config/home/vals.yaml#/paperless-ngx/secretKey";
};
deployments.paperless-ngx = {
metadata.labels.app = "paperless-ngx";
spec = {
selector.matchLabels.app = "paperless-ngx";
template = {
metadata.labels.app = "paperless-ngx";
spec = {
containers = {
redis = {
image = "docker.io/library/redis:7";
volumeMounts = [{
name = "redisdata";
mountPath = "/data";
}];
};
paperless-ngx = {
image = "ghcr.io/paperless-ngx/paperless-ngx:2.3";
envFrom = [{ configMapRef.name = "paperless-ngx"; }];
ports = [{
containerPort = 8000;
protocol = "TCP";
}];
env = [
{
name = "PAPERLESS_DBPASS";
valueFrom.secretKeyRef = {
name = "paperless-ngx";
key = "databasePassword";
};
}
{
name = "PAPERLESS_SECRET_KEY";
valueFrom.secretKeyRef = {
name = "paperless-ngx";
key = "secretKey";
};
}
];
};
};
volumes = [{
name = "redisdata";
persistentVolumeClaim.claimName = "paperless-ngx-redisdata";
}];
};
};
};
};
persistentVolumes = {
paperless-ngx-redisdata.spec = {
capacity.storage = "1Mi";
accessModes = [ "ReadWriteMany" ];
nfs = {
server = "lewis.hyp";
path = "/mnt/data/nfs/paperless-ngx/redisdata";
};
};
paperless-ngx-data.spec = {
capacity.storage = "1Mi";
accessModes = [ "ReadWriteMany" ];
nfs = {
server = "lewis.hyp";
path = "/mnt/data/nfs/paperless-ngx/data";
};
};
};
persistentVolumeClaims = {
paperless-ngx-redisdata.spec = {
accessModes = [ "ReadWriteMany" ];
storageClassName = "";
resources.requests.storage = "1Mi";
volumeName = "paperless-ngx-redisdata";
};
paperless-data.spec = {
accessModes = [ "ReadWriteMany" ];
storageClassName = "";
resources.requests.storage = "1Mi";
volumeName = "paperless-ngx-data";
};
};
services.paperless-ngx.spec = {
selector.app = "paperless-ngx";
ports = [{
protocol = "TCP";
port = 80;
targetPort = 8000;
}];
};
ingresses.paperless-ngx.spec = {
ingressClassName = "traefik";
rules = [{
host = "paperless.kun.is";
http.paths = [{
path = "/";
pathType = "Prefix";
backend.service = {
name = "paperless-ngx";
port.number = 80;
};
}];
}];
};
};
}