v1.0.4

2024-11-23 17:23:12 -05:00
parent 81b3f9b324
commit e004e99884
10 changed files with 485 additions and 151 deletions
@@ -0,0 +1,80 @@
+---
+# tasks file for mastodon
+- name: Add bitnami repository
+  kubernetes.core.helm_repository:
+    name: bitnami
+    repo_url: https://charts.bitnami.com/bitnami
+
+- name: Update Helm repos
+  command: helm repo update
+
+- name: Deploy Mastodon
+  kubernetes.core.helm:
+    name: mastodon
+    chart_ref: bitnami/mastodon
+    release_namespace: mastodon
+    create_namespace: true
+    timeout: 300s
+    values:
+      adminUser: "mastodon"
+      adminEmail: "mastodon@mail.eom.dev"
+      adminPassword: "{{ mastodon_admin_password }}"
+      otpSecret: ""
+      secretKeyBase: ""
+      vapidPrivateKey: ""
+      vapidPublicKey: ""
+      activeRecordEncryptionDeterministicKey: ""
+      activeRecordEncryptionKeyDerivationSalt: ""
+      activeRecordEncryptionPrimaryKey: ""
+      extraConfig:
+        LDAP_ENABLED: "true"
+        LDAP_HOST: openldap.auth.svc.cluster.local
+        LDAP_PORT: "387"
+        LDAP_METHOD: plain
+        LDAP_BASE: dc=eom,dc=dev
+        LDAP_BIND_DN: cn=readonly,dc=eom,dc=dev
+        LDAP_PASSWORD: "{{ ldap_readonly_password }}"
+        LDAP_UID: uid
+        LDAP_SEARCH_FILTER: "(&(objectClass=posixAccount)(uid=%{uid}))"
+        LDAP_MAIL: mail
+      enableS3: false
+      localDomain: "mastodon.eom.dev"
+      smtp:
+        server: "mail.eom.dev"
+        port: 587
+        from_address: "mastodon@mail.eom.dev"
+        domain: "mail.eom.dev"
+        reply_to: "mastodon@mail.eom.dev"
+        delivery_method: smtp
+        ca_file: /etc/ssl/certs/ca-certificates.crt
+        openssl_verify_mode: none
+        enable_starttls_auto: true
+        tls: true
+        auth_method: starttls
+        login: "mastodon"
+        password: "{{ mastodon_mail_password }}"
+      persistence:
+        enabled: true
+        size: 64Gi
+      redis:
+        auth:
+          password: "{{ mastodon_redis_password }}"
+      postgresql:
+        auth:
+          password: "{{ mastodon_postgres_password }}"
+      minio:
+        enabled: false
+      apache:
+        service:
+          type: ClusterIP 
+          ports:
+            http: 80
+        ingress:
+          enabled: true
+          hostname: "mastodon.eom.dev"
+          annotations:
+            cert-manager.io/cluster-issuer: ca-issuer
+          tls:
+            - hosts:
+              - mastodon.eom.dev
+              secretName: mastodon-tls