Install longhorn on k3s

Introduce new storage standard with LVM

kubenix-modules/all.nix

@@ -15,7 +15,7 @@ let
     ./media.nix
     ./bind9
     ./dnsmasq.nix
-    ./minecraft.nix
+    # ./minecraft.nix
     ./blog.nix
     ./atticd.nix
     ./argo.nix
@@ -25,6 +25,7 @@ in
   imports = [
     ./base.nix
     ./custom-types.nix
+    ./longhorn.nix
     ./esrom.nix
     ./metallb.nix
     ./cert-manager.nix

kubenix-modules/atticd.nix

@@ -93,6 +93,7 @@
   lab = {
     ingresses.atticd = {
       host = "attic.kun.is";
+      entrypoint = "localsecure";
 
       service = {
         name = "atticd";

kubenix-modules/inbucket.nix

@@ -17,7 +17,14 @@
                 web.containerPort = 9000;
                 smtp.containerPort = 2500;
               };
+
+              volumeMounts = [{
+                name = "storage";
+                mountPath = "/storage";
+              }];
             };
+
+            volumes.storage.persistentVolumeClaim.claimName = "inbucket";
           };
         };
       };
@@ -44,6 +51,12 @@
         }];
       };
     };
+
+    persistentVolumeClaims.inbucket.spec = {
+      accessModes = [ "ReadWriteOnce" ];
+      storageClassName = "longhorn";
+      resources.requests.storage = "30Mi";
+    };
   };
 
   lab.ingresses.inbucket = {

kubenix-modules/longhorn.nix

@@ -0,0 +1,52 @@
+{ nixhelm, system, ... }: {
+  config = {
+    kubernetes = {
+      helm.releases.longhorn = {
+        chart = nixhelm.chartsDerivations.${system}.longhorn.longhorn;
+        includeCRDs = true;
+        values = {
+          defaultSettings = {
+            defaultDataPath = "/mnt/longhorn";
+            storageMinimalAvailablePercentage = 0;
+          };
+
+          persistence = {
+            defaultClassReplicaCount = 2;
+          };
+        };
+      };
+
+      resources = {
+        ingresses.longhorn = {
+          metadata.annotations = {
+            "cert-manager.io/cluster-issuer" = "letsencrypt";
+            "traefik.ingress.kubernetes.io/router.entrypoints" = "localsecure";
+          };
+
+          spec = {
+            ingressClassName = "traefik";
+
+            rules = [{
+              host = "longhorn.kun.is";
+
+              http.paths = [{
+                path = "/";
+                pathType = "Prefix";
+
+                backend.service = {
+                  name = "longhorn-frontend";
+                  port.number = 80;
+                };
+              }];
+            }];
+
+            tls = [{
+              secretName = "longhorn-tls";
+              hosts = [ "longhorn.kun.is" ];
+            }];
+          };
+        };
+      };
+    };
+  };
+}