add vaultwarden to k3s
This commit is contained in:
parent
ee0e2c0737
commit
3961ca707a
3 changed files with 85 additions and 9 deletions
75
modules/k3s/deployments/vaultwarden.nix
Normal file
75
modules/k3s/deployments/vaultwarden.nix
Normal file
|
|
@ -0,0 +1,75 @@
|
|||
{ ... }:
|
||||
{
|
||||
vaultwarden.content = [
|
||||
{
|
||||
apiVersion = "apps/v1";
|
||||
kind = "Deployment";
|
||||
metadata = {
|
||||
name = "vaultwarden";
|
||||
labels.app = "vaultwarden";
|
||||
};
|
||||
spec = {
|
||||
selector.matchLabels.app = "vaultwarden";
|
||||
template = {
|
||||
metadata = {
|
||||
labels.app = "vaultwarden";
|
||||
};
|
||||
spec = {
|
||||
securityContext = {
|
||||
runAsUser = 1000;
|
||||
runAsGroup = 1000;
|
||||
};
|
||||
containers = [
|
||||
{
|
||||
name = "vaultwarden";
|
||||
image = "vaultwarden/server:latest";
|
||||
ports = [
|
||||
{
|
||||
name = "vaultwarden-http";
|
||||
containerPort = 80;
|
||||
}
|
||||
];
|
||||
volumeMounts = [
|
||||
{
|
||||
mountPath = "/data";
|
||||
name = "iscsi";
|
||||
subPath = "vaultwarden";
|
||||
}
|
||||
];
|
||||
}
|
||||
];
|
||||
volumes = [
|
||||
{
|
||||
name = "iscsi";
|
||||
iscsi = {
|
||||
targetPortal = "10.5.0.2:3260";
|
||||
iqn = "iqn.2026-01.dev.nyxerinys:poseidon.vaultwarden";
|
||||
lun = 0;
|
||||
fsType = "xfs";
|
||||
readOnly = false;
|
||||
};
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
{
|
||||
apiVersion = "v1";
|
||||
kind = "Service";
|
||||
metadata.name = "vaultwarden";
|
||||
spec = {
|
||||
type = "NodePort";
|
||||
selector.app = "vaultwarden";
|
||||
ports = [
|
||||
{
|
||||
name = "vaultwarden-http";
|
||||
portocol = "TCP";
|
||||
port = 80;
|
||||
nodePort = 30000;
|
||||
}
|
||||
];
|
||||
};
|
||||
}
|
||||
];
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue