ansible-role-peertube/tasks/main.yml

#SPDX-License-Identifier: MIT-0
---
# tasks file for ansible-role-peertube
- name: add peertube repo
  kubernetes.core.helm_repository:
    name: ananace-charts
    repo_url: https://ananace.gitlab.io/charts
  register: repo_update

- name: update repos
  command: helm repo update
  when: repo_update.changed

- name: deploy peertube
  kubernetes.core.helm:
    name: peertube
    chart_ref: ananace-charts/peertube
    release_namespace: peertube
    create_namespace: true
    values:
      image:
        repository: chocobozzz/peertube
        pullPolicy: IfNotPresent
      config:
        serverName: peertube.eom.dev
        webadminConfig: true
        secret: "{{ peertube_secret }}"
        admin:
          email: eric@eom.dev
        mail:
          transport: smtp
          # sendmail:
          hostname: postfix.eom.dev
          port: 587
          username: peertube
          fromAddress: peertube@eom.dev
          password: "{{ peertube_admin_password }}"
        ## Data storage on S3 - will still require persistence even if enabled.
        objectStorage:
          enabled: false
          endpoint: minio.eom.dev
          region: us-east-1
          # uploadACL: public-read
          # uploadACLPrivate: private
          # maxUploadPart: 2GB
          accessKey: "{{ peertube_minio_access_key }}"
          secretKey: "{{ peertube_minio_secret_key }}"

          streaming:
            bucket_name: peertube
            prefix: streaming/
            # base_url:

          videos:
            bucket_name: peertube
            prefix: videos/
            # base_url:

          exports:
            bucket_name: peertube
            prefix: exports/
            # base_url:

          originals:
            bucket_name: peertube
            prefix: originals/
            # base_url:

          captions:
            bucket_name: peertube
            prefix: captions/
            # base_url:

        ## Main persistent storage, will be used for uploads, processing, plugins, etc
        persistence:
          enabled: true

          size: 2Ti
          storageClass: "nfs-client"
      extraConfig:
        ## It's recommended to limit this to only your internal cluster network
        trust_proxy:
          - 10.0.0.0/8
          - 172.16.0.0/12
          - 192.168.1.0/24
          - fc00::/7
          # - loopback

        instance:
          description: "PeerTube on eom.dev"

      ## Extra environment variables to set on Peertube
      ##
      extraEnv:
        - name: PT_INITIAL_ROOT_PASSWORD
          value: "{{ peertube_admin_password }}"
        - name: AWS_ACCESS_KEY_ID
          value: "{{ peertube_minio_access_key }}"
        - name: AWS_SECRET_ACCESS_KEY
          value: "{{ peertube_minio_secret_key }}"
        # - name: TZ
        #   value: Europe/Stockholm
      extraSecret: {}
        # PEERTUBE_INSTANCE_TERMS: "These are some very secret terms-of-service"

      ## Extra values to set on the pod spec.
      ## Can be used for setting things like host aliases, overhead, custom schedulers, etc
      ##
      extraPodSpec: {}

      # Additional volumes of the peertube pod.
      extraVolumes: []
        # - name: my-config
        #   configMap:
        #     name: my-config

      # Additional volume mounts of the peertube container.
      extraVolumeMounts: []
        # - name: my-config
        #   mountPath: /my-path/
        #   subPath: my-file

      ## Self-deployed PostgreSQL database
      ## See: https://github.com/bitnami/charts/tree/master/bitnami/postgresql
      ##
      postgresql:
        enabled: true
        ssl: false
        image:
          repository: bitnamilegacy/postgresql

        auth:
          database: peertube
          username: peertube
          password: "{{ peertube_postgresql_password }}"

          # existingSecret:
          # secretKeys:
          #   userPasswordKey: password

        persistence:
          enabled: true

      ## Externally managed PostgreSQL, required if postgresql.enabled=false
      ##
      externalPostgresql:
        host:
        # port: 5432

        database: peertube
        username: peertube
        # password:
        ssl: false

        # existingSecret:
        # existingSecretKey: postgres-password

      ## Self-deployed Redis database
      ## See: https://github.com/bitnami/charts/tree/master/bitnami/redis
      ##
      redis:
        enabled: true
        architecture: standalone
        image:
          repository: bitnamilegacy/redis


        auth:
          enabled: true
          # password: peertube

          # existingSecret: redis-secret
          # existingSecretPasswordKey: redis-password

        master:
          kind: Deployment
          persistence:
            enabled: true

      ## Externally managed Redis, required if redis.enabled=false
      ##
      externalRedis:
        host:
        # port: 6379
        # db: 0

        # password:

        # existingSecret:
        # existingSecretKey: redis-password

      ## Default probes, using ping API to avoid excessive echo
      ##
      livenessProbe:
        httpGet:
          path: /api/v1/ping
          port: http
      readinessProbe:
        httpGet:
          path: /api/v1/ping
          port: http
      startupProbe:
        httpGet:
          path: /api/v1/ping
          port: http

      serviceAccount:
        ## Specifies whether a service account should be created
        create: true
        ## Annotations to add to the service account
        annotations: {}
        ## The name of the service account to use.
        ## If not set and create is true, a name is generated using the fullname template
        # name:

      podAnnotations: {}

      podSecurityContext:
        fsGroup: 999

      securityContext:
        readOnlyRootFilesystem: true
        runAsNonRoot: true
        runAsUser: 999
        # capabilities:
        #   drop:
        #   - ALL

      service:
        type: ClusterIP
        port: 80
        rtmpPort: 1935

      ingress:
        enabled: true
        className: "nginx"
        annotations:
          cert-manager.io/cluster-issuer: ca-issuer
          nginx.ingress.kubernetes.io/proxy-set-header: "X-Forwarded-For"
          nginx.ingress.kubernetes.io/proxy-body-size: 4G
        paths:
          - path: /
            pathType: ImplementationSpecific
        tls:
         - secretName: peertube-tls
           hosts:
             - peertube.eom.dev

      resources: {}
        # limits:
        #   cpu: 100m
        #   memory: 128Mi
        # requests:
        #   cpu: 100m
        #   memory: 128Mi

      autoscaling:
        enabled: false
        minReplicas: 1
        maxReplicas: 3
        targetCPUUtilizationPercentage: 80
        # targetMemoryUtilizationPercentage: 80

      nodeSelector: {}

      tolerations: []

      affinity: {}