81 lines
2.1 KiB
TypeScript
81 lines
2.1 KiB
TypeScript
import * as dotenv from "dotenv";
|
|
import { cleanEnv, str } from "envalid";
|
|
import { Construct } from "constructs";
|
|
import { App, TerraformStack, S3Backend } from "cdktf";
|
|
import { HelmProvider } from "@cdktf/provider-helm/lib/provider";
|
|
import { KubernetesProvider } from "@cdktf/provider-kubernetes/lib/provider";
|
|
|
|
import { GiteaServer } from "./gitea/server";
|
|
import { OnePassword } from "./1password/1password";
|
|
import { PostgresCluster } from "./postgres/postgres";
|
|
|
|
dotenv.config();
|
|
|
|
const env = cleanEnv(process.env, {
|
|
R2_ACCESS_KEY_ID: str(),
|
|
R2_SECRET_ACCESS_KEY: str(),
|
|
ACCOUNT_ID: str({ desc: "Cloudflare account id." }),
|
|
BUCKET: str({ desc: "The name of the R2 bucket." }),
|
|
});
|
|
|
|
class Homelab extends TerraformStack {
|
|
constructor(scope: Construct, id: string) {
|
|
super(scope, id);
|
|
|
|
const kubernetes = new KubernetesProvider(this, "kubernetes", {
|
|
configPath: "~/.kube/config",
|
|
});
|
|
|
|
const helm = new HelmProvider(this, "helm", {
|
|
kubernetes: {
|
|
configPath: "~/.kube/config",
|
|
},
|
|
});
|
|
|
|
new PostgresCluster(this, "postgres-cluster", {
|
|
name: "postgres-cluster",
|
|
namespace: "postgres-system",
|
|
providers: {
|
|
kubernetes,
|
|
helm,
|
|
},
|
|
storageClass: "longhorn-crypto",
|
|
users: ["shahab"],
|
|
primaryUser: "shahab",
|
|
initSecretName: "postgres-password",
|
|
});
|
|
|
|
new GiteaServer(this, "gitea-server", {
|
|
name: "gitea",
|
|
namespace: "gitea-system",
|
|
provider: helm,
|
|
version: "10.4.0",
|
|
});
|
|
|
|
new OnePassword(this, "one-password", {
|
|
provider: kubernetes,
|
|
});
|
|
}
|
|
}
|
|
|
|
const app = new App();
|
|
const stack = new Homelab(app, "homelab");
|
|
|
|
new S3Backend(stack, {
|
|
bucket: env.BUCKET,
|
|
key: "terraform.tfstate",
|
|
region: "auto",
|
|
skipCredentialsValidation: true,
|
|
skipMetadataApiCheck: true,
|
|
skipRegionValidation: true,
|
|
skipRequestingAccountId: true,
|
|
skipS3Checksum: true,
|
|
accessKey: env.R2_ACCESS_KEY_ID,
|
|
secretKey: env.R2_SECRET_ACCESS_KEY,
|
|
endpoints: {
|
|
s3: `https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com/homelab-terraform-state`,
|
|
},
|
|
});
|
|
|
|
app.synth();
|