feat: Put nextcloud and immich behind tailscale

kubenix-modules/immich.nix

@@ -1,4 +1,4 @@
-{
+{ myLib, ... }: {
   kubernetes.resources = {
     deployments = {
       immich.spec = {
@@ -165,6 +165,9 @@
 
     services = {
       server.spec = {
+        type = "LoadBalancer";
+        loadBalancerIP = myLib.globals.immichIPv4;
+
         selector = {
           app = "immich";
           component = "server";
@@ -220,13 +223,9 @@
   };
 
   lab = {
-    ingresses.immich = {
-      host = "immich.kun.is";
-
-      service = {
-        name = "server";
-        portName = "web";
-      };
+    tailscaleIngresses.tailscale = {
+      host = "immich";
+      service.name = "server";
     };
 
     longhorn.persistentVolumeClaim = {

kubenix-modules/nextcloud.nix

@@ -1,4 +1,4 @@
-{
+{ myLib, ... }: {
   kubernetes.resources = {
     secrets.database.stringData.databasePassword = "ref+sops://secrets/kubernetes.yaml#/nextcloud/databasePassword";
 
@@ -108,6 +108,9 @@
 
     services = {
       server.spec = {
+        type = "LoadBalancer";
+        loadBalancerIP = myLib.globals.nextcloudIPv4;
+
         selector = {
           app = "nextcloud";
           component = "server";
@@ -134,13 +137,9 @@
   };
 
   lab = {
-    ingresses.web = {
-      host = "cloud.kun.is";
-
-      service = {
-        name = "server";
-        portName = "web";
-      };
+    tailscaleIngresses.tailscale = {
+      host = "nextcloud";
+      service.name = "server";
     };
 
     longhorn.persistentVolumeClaim = {

kubenix-modules/syncthing.nix

@@ -82,7 +82,7 @@
     };
 
     tailscaleIngresses.tailscale = {
-      host = "sync";
+      host = "syncthing";
       service.name = "syncthing";
     };
   };

my-lib/globals.nix

@@ -23,4 +23,6 @@
   paperlessIPv4 = "192.168.30.144";
   radicaleIPv4 = "192.168.30.145";
   freshrssIPv4 = "192.168.30.146";
+  immichIPv4 = "192.168.30.147";
+  nextcloudIPv4 = "192.168.30.148";
 }