2022-02-16 15:26:46 +00:00
|
|
|
# K3s cluster
|
|
|
|
|
|
2022-07-12 21:15:45 +00:00
|
|
|
| Name | Usage | Accessibility | Host | DB type | Additional data | Backup configuration | Log management | Status |
|
|
|
|
|
|-------------------------|--------------------------------------|---------------|--------------|------------|----------------------|----------------------|----------------|--------------------------------|
|
|
|
|
|
| therbron.com | Personal website | Public | Socrates | - | - | - | Not configured | Awaiting configuration |
|
|
|
|
|
| Traefik | Reverse proxy and load balancer | Public* | Socrates | - | - | - | Not configured | Yes |
|
|
|
|
|
| Adguard | DNS ad blocker and custom DNS server | Private | Socrates | - | - | - | Not configured | Yes |
|
|
|
|
|
| Owncloud Infinity Scale | File hosting webUI | Public | Plato | PostgreSQL | Drive files | None | Not configured | Awaiting configuration |
|
|
|
|
|
| Home assistant | Home automation and monitoring | Private | Pythagoras-a | PostgreSQL | - | None | Not configured | Awaiting configuration |
|
|
|
|
|
| Vikunja | To-do and Kanban boards | Public | Pythagoras-b | - | - | - | Not configured | Migrate to Gitlab |
|
|
|
|
|
| Gitlab | Version control system | Public | Pythagoras-b | PostgreSQL | User created content | None | Not configured | Awaiting configuration |
|
|
|
|
|
| Wiki | Documentation manager | Public | Pythagoras-b | - | - | - | Not configured | Migrate to VuePress and Gitlab |
|
2022-09-10 01:45:58 +00:00
|
|
|
| Vaultwarden | Password manager | Public | Pythagoras-b | PostgreSQL | - | 4AM K8s CronJob | Not configured | Awaiting configuration |
|
2022-07-12 21:15:45 +00:00
|
|
|
| Synapse | Matrix server - Message centralizer | Public | Pythagoras-b | PostgreSQL | User medias | None | Not configured | Awaiting configuration |
|
|
|
|
|
| PaperlessNG | PDF viewer and organiser | Public | Pythagoras-b | PostgreSQL | - | - | Not configured | Research migration into OCIS |
|
|
|
|
|
| Raspsnir | Bachelor memorial website | Public | Pythagoras-b | PostgreSQL | - | None | Not configured | Awaiting configuration |
|
|
|
|
|
| Jellyfin | Media streaming | Public | Archimedes | - | - | - | Not configured | Awaiting configuration |
|
|
|
|
|
| Sonarr | TV shows collection manager | Private | Plato | SQLite** | Internal backups | None | Not configured | Awaiting configuration |
|
|
|
|
|
| Radarr | Movie collection manager | Private | Plato | SQLite** | Internal backups | None | Not configured | Awaiting configuration |
|
|
|
|
|
| Jackett | Torrent indexer | Private | Plato | - | <center> ? </center> | None | Not configured | Awaiting configuration |
|
|
|
|
|
| Deluge | Torrent client | Private | Plato | - | <center> ? </center> | - | Not configured | Awaiting configuration |
|
|
|
|
|
| Minecraft | Vanilla minecraft server for friends | Public | Archimedes | - | Game map | None | Not configured | Yes |
|
|
|
|
|
| Satisfactory | Satisfactory server for friends | Public | Archimedes | - | Game map | None | Not configured | Awaiting configuration |
|
|
|
|
|
| Space engineers | Space engineers server for friends | Public | Archimedes | - | Game map | None | Not configured | Awaiting configuration |
|
2022-06-06 22:31:49 +00:00
|
|
|
|
2022-06-07 22:07:40 +00:00
|
|
|
\* Configuration panel only available internally<br>
|
2022-06-06 22:31:49 +00:00
|
|
|
** Current implementation only support SQLite, making manual backups a necessity
|
2022-06-06 16:59:28 +00:00
|
|
|
|
2022-07-12 21:15:45 +00:00
|
|
|
## Backup management
|
|
|
|
|
### Databases
|
|
|
|
|
All services needing a database to function come with a sidecar pod running a crontab to automate individual database backups.
|
|
|
|
|
These backups are saved into a longhorn volume, to benefit from general snapshots later one.
|
|
|
|
|
Each sidecar pod can only mount the backup folder it has been linked with, and cannot see other services' backups.
|
|
|
|
|
|
|
|
|
|
### Additional data
|
|
|
|
|
All additional data needing to be backed up is mounted to a longhorn volume, to also benefit from scheduled backups.
|
|
|
|
|
|
|
|
|
|
Example :
|
|
|
|
|
```
|
|
|
|
|
longhorn
|
|
|
|
|
└───backups
|
|
|
|
|
└───vaultwarden
|
|
|
|
|
│ └───<backup_date>.sql
|
|
|
|
|
│ │ ...
|
|
|
|
|
└───gitlab
|
|
|
|
|
└───<backup_date>.sql
|
|
|
|
|
│ ...
|
|
|
|
|
```
|
2022-06-20 15:34:37 +00:00
|
|
|
## Completed
|
|
|
|
|
- Add TLS certificates for every http applications
|
|
|
|
|
|
2022-06-06 16:59:28 +00:00
|
|
|
## TODO
|
|
|
|
|
- Change host/deployment specific variables to use environment variables
|
|
|
|
|
- Write CI/CD pipeline to create environment loaded files
|
|
|
|
|
- Write CI/CD pipeline to deploy cluster
|
2022-06-20 23:30:00 +00:00
|
|
|
- Setup internal traefik with nodeport as reverse proxy for internal only services
|
|
|
|
|
- Setup DB container sidecars for automated backups to Longhorn volume
|
2022-09-10 01:44:07 +00:00
|
|
|
- Setup secrets configuration through CI/CD variable injection
|
2022-06-20 23:30:00 +00:00
|
|
|
- ~~Look into CockroachDB for redundant database~~ Judged too complicated, moving to a 1 to 1 relationship between services and databases
|
2022-06-20 15:34:37 +00:00
|
|
|
- ~~Configure IP range accessibility through Traefik (Internal vs external services)~~ Impossible because of flannel ip-masq
|
2022-03-30 17:11:15 +00:00
|
|
|
|
|
|
|
|
## Notes
|
2022-09-10 01:44:07 +00:00
|
|
|
# Cluster base setup
|
2022-03-30 17:11:15 +00:00
|
|
|
Add node to the list of available load balancer
|
|
|
|
|
`kubectl label node <node-name> svccontroller.k3s.cattle.io/enablelb=true`
|
2022-06-06 16:59:28 +00:00
|
|
|
|
2022-09-10 01:44:07 +00:00
|
|
|
|
|
|
|
|
Setup OVH configuration
|
|
|
|
|
`kubectl apply -f ovh-config.yaml`
|
|
|
|
|
|
|
|
|
|
|
2022-06-06 16:59:28 +00:00
|
|
|
Install traefik through helm
|
|
|
|
|
```
|
|
|
|
|
helm repo add traefik https://helm.traefik.io/traefik
|
|
|
|
|
helm repo update
|
|
|
|
|
helm install -f helm/traefik/values.yaml traefik traefik/traefik
|
|
|
|
|
```
|
|
|
|
|
|
2022-09-10 01:44:07 +00:00
|
|
|
Setup SSL certificates
|
|
|
|
|
```
|
|
|
|
|
kubectl apply -f ovh-config.yaml
|
|
|
|
|
```
|
|
|
|
|
|
2022-06-06 16:59:28 +00:00
|
|
|
Install longhorn
|
|
|
|
|
```
|
|
|
|
|
kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/master/deploy/longhorn.yaml
|
|
|
|
|
```
|
2022-06-20 23:30:00 +00:00
|
|
|
|
2022-09-10 01:44:07 +00:00
|
|
|
|
|
|
|
|
Add longhorn storage classes
|
|
|
|
|
`kubectl apply -f res`
|
|
|
|
|
|
