feat: add meili

k8s/argo-apps/elastic.yaml

@@ -24,6 +24,12 @@ spec:
               accessModes:
                 - ReadWriteMany
               size: 50Gi
+          ingress:
+            enabled: true
+            hostname: elastic.fuku
+            tls: true
+            selfSigned: true
+            ingressClassName: traefik
           data:
             persistence:
               enabled: true

k8s/argo-apps/meili.yaml

@@ -0,0 +1,41 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: meili
+  namespace: argocd
+spec:
+  destination:
+    name: ''
+    namespace: apps-fuku
+    server: https://kubernetes.default.svc
+  project: fuku
+  syncPolicy:
+    automated: {}
+  sources:
+    - repoURL: https://git.roboces.dev/catalin/fukuops.git
+      path: k8s/services/meili
+      targetRevision: main
+    - chart: meilisearch
+      repoURL: https://meilisearch.github.io/meilisearch-kubernetes
+      targetRevision: 0.12.*
+      helm:
+        valuesObject:
+          environment:
+            MEILI_ENV: production
+          auth:
+            existingMasterKeySecret: meilisearch-master-key
+          service:
+            type: NodePort
+            port: 7700
+          ingress:
+            enabled: true
+            className: traefik
+            hosts:
+              - meili.fuku
+            tls: {}
+          persistence:
+            enabled: true
+            accessMode: ReadWriteMany
+            storageClass: truenas-nfs-csi
+            size: 50Gi

k8s/services/argo/project-fuku.yaml

@@ -26,4 +26,4 @@ spec:
         - https://portainer.github.io/k8s/
         - https://docs.renovatebot.com/helm-charts
         - registry-1.docker.io/bitnamicharts
-        - https://zabbix-community.github.io/helm-zabbix
+        - https://meilisearch.github.io/meilisearch-kubernetes

k8s/services/meili/sealedsecrets.yaml

@@ -0,0 +1,16 @@
+# yamllint disable rule:line-length
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: meilisearch-master-key
+  namespace: apps-fuku
+spec:
+  encryptedData:
+    MEILI_MASTER_KEY: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: meilisearch-master-key
+      namespace: apps-fuku

tofu/adguard/main.tf

@@ -92,25 +92,6 @@ resource "adguard_rewrite" "authentik" {
   answer = "192.168.1.12"
 }
 
-resource "adguard_rewrite" "ci_local_1" {
-  domain = "ci.fuku"
-  answer = "192.168.1.31"
-}
-
-resource "adguard_rewrite" "ci_local_2" {
-  domain = "ci.fuku"
-  answer = "192.168.1.32"
-}
-
-resource "adguard_rewrite" "ci_local_3" {
-  domain = "ci.fuku"
-  answer = "192.168.1.33"
-}
-
-resource "adguard_rewrite" "ace" {
-  domain = "ace.fuku"
-  answer = "192.168.1.14"
-}
 
 resource "adguard_rewrite" "dd02" {
   domain = "dd02.fuku"
@@ -121,3 +102,18 @@ resource "adguard_rewrite" "dd01" {
   domain = "dd01.fuku"
   answer = "192.168.1.11"
 }
+
+resource "adguard_rewrite" "elastic_1" {
+  domain = "elastic.fuku"
+  answer = "192.168.1.31"
+}
+
+resource "adguard_rewrite" "elastic_2" {
+  domain = "elastic.fuku"
+  answer = "192.168.1.32"
+}
+
+resource "adguard_rewrite" "elastic_3" {
+  domain = "elastic.fuku"
+  answer = "192.168.1.33"
+}