feat: add AFFiNE
This commit is contained in:
Yuris Cakranegara
198
modules/20-services-apps/affine/main.tf
Normal file
198
modules/20-services-apps/affine/main.tf
Normal file
@@ -0,0 +1,198 @@
|
||||
terraform {
|
||||
required_providers {
|
||||
dotenv = {
|
||||
source = "germanbrew/dotenv"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
variable "image_tag" {
|
||||
description = "The tag for the affine container image"
|
||||
type = string
|
||||
default = "stable"
|
||||
}
|
||||
|
||||
variable "volume_path" {
|
||||
description = "Base directory for volumes"
|
||||
type = string
|
||||
}
|
||||
|
||||
variable "networks" {
|
||||
description = "List of networks to which the container should be attached"
|
||||
type = list(string)
|
||||
default = []
|
||||
}
|
||||
|
||||
module "smtp" {
|
||||
source = "../../00-globals/smtp"
|
||||
}
|
||||
|
||||
locals {
|
||||
container_name = "affine-server"
|
||||
migration_name = "affine-migration-job"
|
||||
redis_name = "affine-redis"
|
||||
postgres_name = "affine-postgres"
|
||||
affine_image = "ghcr.io/yurisasc/affine-graphql"
|
||||
postgres_image = "pgvector/pgvector"
|
||||
redis_image = "redis"
|
||||
affine_tag = provider::dotenv::get_by_key("AFFINE_REVISION", local.env_file)
|
||||
postgres_tag = "pg16"
|
||||
redis_tag = "latest"
|
||||
monitoring = true
|
||||
env_file = "${path.module}/.env"
|
||||
affine_internal_port = 3010
|
||||
|
||||
# Define volumes
|
||||
affine_volumes = [
|
||||
{
|
||||
host_path = "${var.volume_path}/self-host/storage"
|
||||
container_path = "/root/.affine/storage"
|
||||
read_only = false
|
||||
},
|
||||
{
|
||||
host_path = "${var.volume_path}/self-host/config"
|
||||
container_path = "/root/.affine/config"
|
||||
read_only = false
|
||||
}
|
||||
]
|
||||
|
||||
migration_volumes = [
|
||||
{
|
||||
host_path = "${var.volume_path}/self-host/storage"
|
||||
container_path = "/root/.affine/storage"
|
||||
read_only = false
|
||||
},
|
||||
{
|
||||
host_path = "${var.volume_path}/self-host/config"
|
||||
container_path = "/root/.affine/config"
|
||||
read_only = false
|
||||
}
|
||||
]
|
||||
|
||||
postgres_volumes = [
|
||||
{
|
||||
host_path = "${var.volume_path}/self-host/postgres/pgdata"
|
||||
container_path = "/var/lib/postgresql/data"
|
||||
read_only = false
|
||||
}
|
||||
]
|
||||
|
||||
# Environment variables for postgres
|
||||
postgres_env_vars = {
|
||||
POSTGRES_USER = provider::dotenv::get_by_key("DB_USERNAME", local.env_file)
|
||||
POSTGRES_PASSWORD = provider::dotenv::get_by_key("DB_PASSWORD", local.env_file)
|
||||
POSTGRES_DB = provider::dotenv::get_by_key("DB_DATABASE", local.env_file)
|
||||
POSTGRES_INITDB_ARGS = "--data-checksums"
|
||||
POSTGRES_HOST_AUTH_METHOD = "trust"
|
||||
}
|
||||
|
||||
# Environment variables for AFFiNE
|
||||
affine_env_vars = {
|
||||
REDIS_SERVER_HOST = local.redis_name
|
||||
DATABASE_URL = "postgresql://${provider::dotenv::get_by_key("DB_USERNAME", local.env_file)}:${provider::dotenv::get_by_key("DB_PASSWORD", local.env_file)}@${local.postgres_name}:5432/${provider::dotenv::get_by_key("DB_DATABASE", local.env_file)}"
|
||||
AFFINE_INDEXER_ENABLED = "false"
|
||||
AFFINE_SERVER_HTTPS = provider::dotenv::get_by_key("AFFINE_SERVER_HTTPS", local.env_file)
|
||||
AFFINE_SERVER_HOST = provider::dotenv::get_by_key("AFFINE_SERVER_HOST", local.env_file)
|
||||
AFFINE_SERVER_NAME = provider::dotenv::get_by_key("AFFINE_SERVER_NAME", local.env_file)
|
||||
PORT = provider::dotenv::get_by_key("PORT", local.env_file)
|
||||
DB_USERNAME = provider::dotenv::get_by_key("DB_USERNAME", local.env_file)
|
||||
DB_PASSWORD = provider::dotenv::get_by_key("DB_PASSWORD", local.env_file)
|
||||
DB_DATABASE = provider::dotenv::get_by_key("DB_DATABASE", local.env_file)
|
||||
MAILER_HOST = module.smtp.mail_host
|
||||
MAILER_PORT = module.smtp.mail_port
|
||||
MAILER_USER = module.smtp.mail_username
|
||||
MAILER_PASSWORD = module.smtp.mail_password
|
||||
R2_OBJECT_STORAGE_ACCOUNT_ID = provider::dotenv::get_by_key("R2_OBJECT_STORAGE_ACCOUNT_ID", local.env_file)
|
||||
R2_OBJECT_STORAGE_ACCESS_KEY_ID = provider::dotenv::get_by_key("R2_OBJECT_STORAGE_ACCESS_KEY_ID", local.env_file)
|
||||
R2_OBJECT_STORAGE_SECRET_ACCESS_KEY = provider::dotenv::get_by_key("R2_OBJECT_STORAGE_SECRET_ACCESS_KEY", local.env_file)
|
||||
}
|
||||
|
||||
# Healthcheck configuration for Redis
|
||||
redis_healthcheck = {
|
||||
test = ["CMD", "redis-cli", "--raw", "incr", "ping"]
|
||||
interval = "10s"
|
||||
timeout = "5s"
|
||||
retries = 5
|
||||
start_period = "5s"
|
||||
}
|
||||
|
||||
# Healthcheck configuration for Postgres
|
||||
postgres_healthcheck = {
|
||||
test = ["CMD", "pg_isready", "-U", provider::dotenv::get_by_key("DB_USERNAME", local.env_file), "-d", provider::dotenv::get_by_key("DB_DATABASE", local.env_file)]
|
||||
interval = "10s"
|
||||
timeout = "5s"
|
||||
retries = 5
|
||||
start_period = "5s"
|
||||
}
|
||||
}
|
||||
|
||||
module "affine_network" {
|
||||
source = "../../01-networking/docker-network"
|
||||
name = "affine-network"
|
||||
subnet = "11.100.0.0/16"
|
||||
driver = "bridge"
|
||||
}
|
||||
|
||||
# Create the Redis container
|
||||
module "redis" {
|
||||
source = "../../10-services-generic/docker-service"
|
||||
container_name = local.redis_name
|
||||
image = local.redis_image
|
||||
tag = local.redis_tag
|
||||
networks = [module.affine_network.name]
|
||||
monitoring = local.monitoring
|
||||
healthcheck = local.redis_healthcheck
|
||||
}
|
||||
|
||||
# Create the PostgreSQL container
|
||||
module "postgres" {
|
||||
source = "../../10-services-generic/docker-service"
|
||||
container_name = local.postgres_name
|
||||
image = local.postgres_image
|
||||
tag = local.postgres_tag
|
||||
volumes = local.postgres_volumes
|
||||
env_vars = local.postgres_env_vars
|
||||
networks = [module.affine_network.name]
|
||||
monitoring = local.monitoring
|
||||
healthcheck = local.postgres_healthcheck
|
||||
}
|
||||
|
||||
# Create the migration job container
|
||||
module "migration" {
|
||||
source = "../../10-services-generic/docker-service"
|
||||
container_name = local.migration_name
|
||||
image = local.affine_image
|
||||
tag = local.affine_tag
|
||||
volumes = local.migration_volumes
|
||||
env_vars = local.affine_env_vars
|
||||
command = ["sh", "-c", "node ./scripts/self-host-predeploy.js"]
|
||||
networks = [module.affine_network.name]
|
||||
monitoring = local.monitoring
|
||||
depends_on = [module.postgres, module.redis]
|
||||
restart_policy = "no"
|
||||
}
|
||||
|
||||
# Create the affine container
|
||||
module "affine" {
|
||||
source = "../../10-services-generic/docker-service"
|
||||
container_name = local.container_name
|
||||
image = local.affine_image
|
||||
tag = local.affine_tag
|
||||
volumes = local.affine_volumes
|
||||
env_vars = local.affine_env_vars
|
||||
networks = concat([module.affine_network.name], var.networks)
|
||||
monitoring = local.monitoring
|
||||
depends_on = [module.postgres, module.redis, module.migration]
|
||||
}
|
||||
|
||||
output "service_definition" {
|
||||
description = "General service definition with optional ingress configuration"
|
||||
value = {
|
||||
name = local.container_name
|
||||
primary_port = local.affine_internal_port
|
||||
endpoint = "http://${local.container_name}:${local.affine_internal_port}"
|
||||
subdomains = ["notes"]
|
||||
publish_via = "reverse_proxy"
|
||||
proxied = false
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user