diff --git a/inventory/host_vars/actinium/vars.yml b/inventory/host_vars/actinium/vars.yml index d1e954b..902ac88 100644 --- a/inventory/host_vars/actinium/vars.yml +++ b/inventory/host_vars/actinium/vars.yml @@ -15,7 +15,7 @@ mariadb_server_run_custom_sql: true mariadb_server_custom_sql: "{{ vault_mariadb_server_custom_sql }}" mariadb_server_bind_addresses: "{{ vault_mariadb_server_bind_addresses }}" -postgresql_server_run_custom_sql: false +postgresql_server_run_custom_sql: true postgresql_nft_allowed_ingress_list: ['127.0.0.1/32', '10.42.0.0/16'] postgresql_server_custom_sql: "{{ vault_postgresql_server_custom_sql }}" postgresql_server_bind_addresses: "{{ vault_postgresql_server_bind_addresses }}" @@ -34,6 +34,33 @@ postgresql_server_hba_conf_list: users: - invidious +k3s_cluster_helm_customizations: + - name: routing-invidious + content: |- + --- + apiVersion: "traefik.io/v1alpha1" + kind: "IngressRoute" + metadata: + name: "invidious" + namespace: "default" + annotations: [] + labels: + "app.kubernetes.io/component": "server" + "app.kubernetes.io/name": "invidious" + "app.kubernetes.io/version": "latest" + "app.kubernetes.io/part-of": "invidious" + "app.kubernetes.io/managed-by": "ansible" + "app.kubernetes.io/instance": "invidious" + spec: + entryPoints: + - websecure + routes: + - match: Host(`invidious.nullified.fr`) + kind: Rule + services: + - name: "invidious" + port: 3000 + k3s_cluster_additional_helm_charts: - release_name: redis release_namespace: default @@ -42,6 +69,45 @@ k3s_cluster_additional_helm_charts: values: replica: replicaCount: 1 + - release_name: invidious + release_namespace: default + chart_ref: 'invidious' + chart_repo_url: 'https://charts-helm.invidious.io' + chart_version: '^2.0' + update_repo_cache: true + values: + postgresql: + enabled: false + ingress: + enabled: false + config: + db: + user: '{{ vault_invidious_pg_user }}' + password: '{{ vault_invidious_pg_password }}' + host: '10.42.0.1' + dbname: '{{ vault_invidious_pg_dbname }}' + domain: "invidious.nullified.fr" + https_only: true + external_port: 443 + channel_threads: 1 + full_refresh: true + feed_threads: 1 + hmac_key: '{{ vault_invidious_hmac_key }}' + popular_enabled: false + captcha_enabled: false + default_user_preferences: + region: FR + captions: ["French", "English", "English (auto-generated)"] + dark_mode: "dark" + feed_menu: ["Subscriptions", "Playlists"] + default_home: "Subscriptions" + autoplay: true + continue: true + continue_autoplay: true + quality: dash + quality_dash: best + volume: 75 + save_player_pos: true k3s_cluster_additional_tf_resources: - name: Invoice Ninja