homelab-v/remodel/tofu/kubernetes/main.tf

module "talos" {
  source = "./talos"

  providers = {
    proxmox = proxmox
  }

  talos_image = {
    version = "v1.7.5"
    schematic = file("${path.module}/config/talos-image-schematic.yaml")
  }

  cilium = {
    values = file("${path.module}/../../k8s/infra/network/cilium/values.yaml")
    install = file("${path.module}/bootstrap/cilium/install.yaml")
  }

  cluster_config = {
    cluster_name    = "talos"
    proxmox_cluster = "homelab"
    endpoint        = "https://192.168.1.100:6443"
    talos_version   = "v1.7"
    nodes = {
      "ctrl-00" = {
        machine_type  = "controlplane"
        ip            = "192.168.1.100"
        mac_address   = "BC:24:11:2E:C8:00"
        host_node     = "abel"
        vm_id         = 8000
        cpu           = 8
        ram_dedicated = 20480
        igpu          = true
      }
      "ctrl-01" = {
        host_node     = "euclid"
        machine_type  = "controlplane"
        ip            = "192.168.1.101"
        mac_address   = "BC:24:11:2E:C8:01"
        vm_id         = 8001
        cpu           = 4
        ram_dedicated = 20480
        igpu          = true
      }
      "ctrl-02" = {
        host_node     = "cantor"
        machine_type  = "controlplane"
        ip            = "192.168.1.102"
        mac_address   = "BC:24:11:2E:C8:02"
        vm_id         = 8002
        cpu           = 4
        ram_dedicated = 4096
      }
      //"work-00" = {
      //  host_node     = "abel"
      //  machine_type  = "worker"
      //  ip            = "192.168.1.110"
      //  mac_address   = "BC:24:11:2E:08:00"
      //  vm_id         = 8100
      //  cpu           = 8
      //  ram_dedicated = 4096
      //}
    }
  }

}

module "proxmox_csi_plugin" {
  depends_on = [module.talos]
  source = "./bootstrap/proxmox-csi-plugin"

  providers = {
    proxmox    = proxmox
    kubernetes = kubernetes
  }

  proxmox = var.proxmox
}

module "sealed_secrets" {
  depends_on = [module.talos]
  source = "./bootstrap/sealed-secrets"

  providers = {
    kubernetes = kubernetes
  }

  // openssl req -x509 -days 365 -nodes -newkey rsa:4096 -keyout sealed-secrets.key -out sealed-secrets.cert -subj "/CN=sealed-secret/O=sealed-secret"
  sealed_secrets_cert = {
    cert = file("${path.module}/config/sealed-secrets.cert")
    key = file("${path.module}/config/sealed-secrets.key")
  }
}

module "volumes" {
  depends_on = [module.proxmox_csi_plugin]
  source = "./bootstrap/volumes"

  providers = {
    restapi    = restapi
    kubernetes = kubernetes
  }
  proxmox_api = var.proxmox
  volumes = {
    pv-sonarr-config = {
      node = "cantor"
      size = "4G"
    }
    pv-radarr-config = {
      node = "cantor"
      size = "4G"
    }
    pv-lidarr-config = {
      node = "cantor"
      size = "4G"
    }
    pv-prowlarr-config = {
      node = "euclid"
      size = "1G"
    }
    pv-torrent-config = {
      node = "euclid"
      size = "1G"
    }
    pv-remark42 = {
      node = "euclid"
      size = "1G"
    }
    pv-jellyfin-config = {
      node = "euclid"
      size = "12G"
    }
    pv-plex-config = {
      node = "abel"
      size = "12G"
    }
    pv-prometheus = {
      node = "abel"
      size = "10G"
    }
  }
}