homeserver initial commit

- ansible - docker-compose - Kubernetes_deployments
2025-02-12 20:10:56 +02:00
commit e5e8aa6b87
70 changed files with 2860 additions and 0 deletions
--- a/Kubernetes_deployments/qbittorrent-helm-chart/templates/_helpers.tpl
+++ b/Kubernetes_deployments/qbittorrent-helm-chart/templates/_helpers.tpl
@ -0,0 +1,19 @@
+{{/*
+Expand the helper functions for the qBittorrent Helm chart
+*/}}
+
+{{- define "qbittorrent.fullname" -}}
+{{- printf "%s-%s" .Release.Name .Chart.Name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{- define "qbittorrent.serviceName" -}}
+{{- printf "%s-service" (include "qbittorrent.fullname" .) -}}
+{{- end -}}
+
+{{- define "qbittorrent.deploymentName" -}}
+{{- printf "%s-deployment" (include "qbittorrent.fullname" .) -}}
+{{- end -}}
+
+{{- define "qbittorrent.configMapName" -}}
+{{- printf "%s-config" (include "qbittorrent.fullname" .) -}}
+{{- end -}}
--- a/Kubernetes_deployments/qbittorrent-helm-chart/templates/configmap.yaml
+++ b/Kubernetes_deployments/qbittorrent-helm-chart/templates/configmap.yaml
@ -0,0 +1,20 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .Values.persistence.configMap.name }}
+  namespace: {{ .Values.namespace }}
+data:
+  wg0.conf: |
+    [Interface]
+    Address = {{ .Values.wireguard.address }}
+    PrivateKey = {{ .Values.wireguard.privateKey }}
+    MTU = {{ .Values.wireguard.mtu }}
+    DNS = {{ .Values.wireguard.dns }}
+    ListenPort = {{ .Values.wireguard.listenPort }}
+
+    [Peer]
+    PublicKey = {{ .Values.wireguard.peerPublicKey }}
+    PresharedKey = {{ .Values.wireguard.presharedKey }}
+    AllowedIPs = {{ .Values.wireguard.allowedIPs }}
+    Endpoint = {{ .Values.wireguard.endpoint }}
+    PersistentKeepalive = {{  .Values.wireguard.persistentKeepalive }}
--- a/Kubernetes_deployments/qbittorrent-helm-chart/templates/deployment.yaml
+++ b/Kubernetes_deployments/qbittorrent-helm-chart/templates/deployment.yaml
@ -0,0 +1,125 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .Release.Name }}
+  namespace: {{ .Values.namespace }}
+spec:
+  replicas: {{ .Values.replicaCount }}
+  selector:
+    matchLabels:
+      app: {{ .Release.Name }}
+  template:
+    metadata:
+      labels:
+        app: {{ .Release.Name }}
+    spec:
+      initContainers:
+        - name: wireguard-init
+          image: {{ .Values.wireguardImage.repository }}:{{ .Values.wireguardImage.tag }}
+          imagePullPolicy: {{ .Values.wireguardImage.pullPolicy }}
+          securityContext:
+            privileged: true
+            capabilities:
+              add:
+                - NET_ADMIN
+                - SYS_MODULE
+          command:
+            - /bin/sh
+            - -c
+            - |
+              set -x
+              echo "Starting WireGuard initialization..."
+              mkdir -p /etc/wireguard
+              cp /config/wg_confs/wg0.conf /etc/wireguard/wg0.conf
+              chmod 600 /etc/wireguard/wg0.conf
+
+              if ! lsmod | grep -q wireguard; then
+                  modprobe wireguard || echo "Failed to load wireguard module"
+              fi
+
+              wg-quick up wg0 || echo "Failed to bring up WireGuard interface"
+
+              ip link show wg0
+              wg show
+          volumeMounts:
+            - name: wireguard-config
+              mountPath: /config/wg_confs
+            - name: modules
+              mountPath: /lib/modules
+      containers:
+        - name: wireguard
+          image: {{ .Values.wireguardImage.repository }}:{{ .Values.wireguardImage.tag }}
+          imagePullPolicy: {{ .Values.wireguardImage.pullPolicy }}
+          securityContext:
+            privileged: true
+            capabilities:
+              add:
+                - NET_ADMIN
+                - SYS_MODULE
+          env:
+            - name: PUID
+              value: "{{ .Values.config.puid }}"
+            - name: PGID
+              value: "{{ .Values.config.pgid }}"
+            - name: UMASK_SET
+              value: "{{ .Values.config.umask }}"
+            - name: TZ
+              value: "{{ .Values.config.timezone }}"
+          volumeMounts:
+            - name: wireguard-config
+              mountPath: /config/wg_confs
+            - name: modules
+              mountPath: /lib/modules
+          command:
+            - /bin/sh
+            - -c
+            - |
+              while true; do
+                if ! ip link show wg0 > /dev/null 2>&1; then
+                  wg-quick up wg0
+                fi
+                sleep 30
+              done
+          ports:
+            - containerPort: {{ .Values.service.wireguardPort }}
+              protocol: UDP
+        - name: qbittorrent
+          image: {{ .Values.qbittorrentImage.repository }}:{{ .Values.qbittorrentImage.tag }}
+          imagePullPolicy: {{ .Values.qbittorrentImage.pullPolicy }}
+          env:
+            - name: PUID
+              value: "{{ .Values.config.puid }}"
+            - name: PGID
+              value: "{{ .Values.config.pgid }}"
+            - name: TZ
+              value: "{{ .Values.config.timezone }}"
+            - name: WEBUI_PORT
+              value: "{{ .Values.config.webuiPort }}"
+          volumeMounts:
+            - name: qbittorrent-config
+              mountPath: /config
+            - name: downloads
+              mountPath: /downloads
+          ports:
+            - containerPort: {{ .Values.deployment.containerPort }}
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              path: /
+              port: {{ .Values.deployment.containerPort }}
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            failureThreshold: 3
+      volumes:
+        - name: qbittorrent-config
+          persistentVolumeClaim:
+            claimName: {{ .Values.persistence.config.name }}
+        - name: wireguard-config
+          configMap:
+            name: {{ .Values.persistence.configMap.name }}
+        - name: downloads
+          persistentVolumeClaim:
+            claimName: {{ .Values.persistence.downloads.existingClaim }}
+        - name: modules
+          hostPath:
+            path: /lib/modules
--- a/Kubernetes_deployments/qbittorrent-helm-chart/templates/pvc.yaml
+++ b/Kubernetes_deployments/qbittorrent-helm-chart/templates/pvc.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ .Values.persistence.config.name }}
+  namespace: {{ .Values.namespace }}
+spec:
+  accessModes:
+    - {{ .Values.persistence.config.accessMode }}
+  resources:
+    requests:
+      storage: {{ .Values.persistence.config.size }}
+  storageClassName: {{ .Values.persistence.config.storageClass }}
--- a/Kubernetes_deployments/qbittorrent-helm-chart/templates/service.yaml
+++ b/Kubernetes_deployments/qbittorrent-helm-chart/templates/service.yaml
@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Values.service.name }}
+  namespace: {{ .Values.namespace }}
+spec:
+  selector:
+    app: {{ .Release.Name }}
+  ports:
+    - protocol: TCP
+      name: qbittorrent
+      port: {{ .Values.service.port }}
+      targetPort: {{ .Values.deployment.containerPort }}
+    - protocol: UDP
+      name: wireguard
+      port: {{ .Values.service.wireguardPort }}
+      targetPort: {{ .Values.service.wireguardPort }}
+  type: {{ .Values.service.type }}