rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: terraform fmt — normalize formatting across all files

Browse Source
This commit is contained in:
Story Crater Bot
2026-07-15 21:01:55 -07:00
parent 7114fc8fc9
commit 72ab6b6973
5 changed files with 43 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/argocd-bootstrap.tf
+3 -3
View File
@@ -53,7 +53,7 @@ resource "helm_release" "argocd" {
}
generate = {
command = ["sh", "-c"]
args = ["sops -d \"$ARGOCD_ENV_FILE_PATH\""]
args = ["sops -d \"$ARGOCD_ENV_FILE_PATH\""]
}
lockRepo = false
}
@@ -112,7 +112,7 @@ resource "helm_release" "argocd" {
{
name = "sops-age"
secret = {
secretName = "sops-age"
secretName = "sops-age"
defaultMode = 384
}
}
@@ -134,7 +134,7 @@ resource "helm_release" "argocd" {
{
name = "server-tls"
secret = {
secretName = "homelab-tls"
secretName = "homelab-tls"
defaultMode = 420
}
}
terraform/bootstrap-namespaces.tf
+17 -17
View File
@@ -1,22 +1,22 @@
locals {
namespaces = {
"cert-manager" = { pod_security = "baseline" }
"reloader" = { pod_security = "baseline" }
"ingress-nginx" = { pod_security = "privileged" }
"ddb" = { pod_security = "baseline" }
"iam" = { pod_security = "baseline" }
"storage" = { pod_security = "baseline" }
"logging" = { pod_security = "baseline" }
"monitoring" = { pod_security = "baseline" }
"cicd" = { pod_security = "baseline" }
"dashboard" = { pod_security = "baseline" }
"sqs" = { pod_security = "baseline" }
"temporal" = { pod_security = "baseline" }
"story-crater-backend" = { pod_security = "baseline" }
"llm" = { pod_security = "baseline" }
"dev-tools" = { pod_security = "baseline" }
"longhorn-system" = { pod_security = "baseline" }
"cilium-secrets" = { pod_security = "baseline" }
"cert-manager" = { pod_security = "baseline" }
"reloader" = { pod_security = "baseline" }
"ingress-nginx" = { pod_security = "privileged" }
"ddb" = { pod_security = "baseline" }
"iam" = { pod_security = "baseline" }
"storage" = { pod_security = "baseline" }
"logging" = { pod_security = "baseline" }
"monitoring" = { pod_security = "baseline" }
"cicd" = { pod_security = "baseline" }
"dashboard" = { pod_security = "baseline" }
"sqs" = { pod_security = "baseline" }
"temporal" = { pod_security = "baseline" }
"story-crater-backend" = { pod_security = "baseline" }
"llm" = { pod_security = "baseline" }
"dev-tools" = { pod_security = "baseline" }
"longhorn-system" = { pod_security = "baseline" }
"cilium-secrets" = { pod_security = "baseline" }
}
}
terraform/forgejo-runner.tf
+3 -3
View File
@@ -57,7 +57,7 @@ resource "kubernetes_network_policy" "forgejo_runner_egress" {
}
ports {
protocol = "TCP"
port = "9000" # MinIO S3 API
port = "9000" # MinIO S3 API
}
}
@@ -69,8 +69,8 @@ resource "kubernetes_network_policy" "forgejo_runner_egress" {
ip_block {
cidr = "0.0.0.0/0"
except = [
"192.168.1.0/24", # LAN (baremetal nodes, physical infra)
"10.244.0.0/16" # Pod network (cluster internal)
"192.168.1.0/24", # LAN (baremetal nodes, physical infra)
"10.244.0.0/16" # Pod network (cluster internal)
]
}
}
terraform/minio.tf
+3 -3
View File
@@ -14,10 +14,10 @@ resource "kubernetes_storage_class" "longhorn_xfs" {
volume_binding_mode = "Immediate"
parameters = {
numberOfReplicas = "2"
numberOfReplicas = "2"
staleReplicaTimeout = "60"
fsType = "xfs"
dataLocality = "disabled"
fsType = "xfs"
dataLocality = "disabled"
}
}
terraform/terraform.tfvars
+17 -17
View File
@@ -1,21 +1,21 @@
kubeconfig_path = "/Users/rockliang/workplace/homelab/cluster-config/kubeconfig"
cluster_domain = "riotpiao.homelab.com"
authentik_secret_key = "v9TTdMxpP9XtrwH2HFUjHC8MKwfeW+fYOpa5RTyP6EniqFclFSDXWbRp6crhrkLJkFeCfIcAMN/JODyy"
authentik_bootstrap_password = "8+7MFMCtAHiOxSaiBJwDiR85nnrhLyX2"
authentik_bootstrap_token = "5a534cb785aecddac23647e11ff4d824b50b03f70c173faee7ba46f12db55dc3"
authentik_pg_password = "vueM/7N6bUR/j/hUUPsWTM2pRm8lCewq"
postgres_password = "a071b1f7b721a216b57d396b8d906fa10f6db1597d68a0f2e9f95e2872e7cb0f"
minio_root_user = "minioadmin"
minio_root_password = "nhKRAxwIjDBCzwFDvsAa7dNLouCXXh13LvMoxMVkUtY="
minio_oidc_client_secret = "9d2867fe08c3bf7fedd7e32bbaf4456fce3b0aaf788966d7559e1955947b0219"
grafana_admin_password = "your-secure-password"
grafana_oidc_client_secret = "966bad4fa43812100e7775b3c73fed2ce1d07217fa5a23fbb0f190e46d2f0fa4"
forgejo_admin_password = "stRe4cawnQH/agM0QsPaWPdKNaQ0rp4p"
authentik_forgejo_client_secret = "e417c1a3b3ee79b44c9d8d3490a735aae7b2c19a81afe1ba6a262775d5ae9edc"
authentik_argocd_client_id = "argocd"
authentik_argocd_client_secret = "acc51c1ab043530b84b17dc5e8128b2a656b17558ea3f93e723618ea5c6d9774"
authentik_temporal_client_id = "temporal"
authentik_secret_key = "v9TTdMxpP9XtrwH2HFUjHC8MKwfeW+fYOpa5RTyP6EniqFclFSDXWbRp6crhrkLJkFeCfIcAMN/JODyy"
authentik_bootstrap_password = "8+7MFMCtAHiOxSaiBJwDiR85nnrhLyX2"
authentik_bootstrap_token = "5a534cb785aecddac23647e11ff4d824b50b03f70c173faee7ba46f12db55dc3"
authentik_pg_password = "vueM/7N6bUR/j/hUUPsWTM2pRm8lCewq"
postgres_password = "a071b1f7b721a216b57d396b8d906fa10f6db1597d68a0f2e9f95e2872e7cb0f"
minio_root_user = "minioadmin"
minio_root_password = "nhKRAxwIjDBCzwFDvsAa7dNLouCXXh13LvMoxMVkUtY="
minio_oidc_client_secret = "9d2867fe08c3bf7fedd7e32bbaf4456fce3b0aaf788966d7559e1955947b0219"
grafana_admin_password = "your-secure-password"
grafana_oidc_client_secret = "966bad4fa43812100e7775b3c73fed2ce1d07217fa5a23fbb0f190e46d2f0fa4"
forgejo_admin_password = "stRe4cawnQH/agM0QsPaWPdKNaQ0rp4p"
authentik_forgejo_client_secret = "e417c1a3b3ee79b44c9d8d3490a735aae7b2c19a81afe1ba6a262775d5ae9edc"
authentik_argocd_client_id = "argocd"
authentik_argocd_client_secret = "acc51c1ab043530b84b17dc5e8128b2a656b17558ea3f93e723618ea5c6d9774"
authentik_temporal_client_id = "temporal"
authentik_temporal_client_secret = "6UAuC651l21fajBZQwjV+bbkD1k6uCoV6PnQxaFlPaQ="
argocd_admin_password = "placeholder"
argocd_oidc_client_secret = "placeholder"
argocd_admin_password = "placeholder"
argocd_oidc_client_secret = "placeholder"