minecraft user nfs

README.md

@@ -13,6 +13,6 @@ flaresolverr comes from https://github.com/FlareSolverr/FlareSolverr
 jellyseer comes from https://hub.docker.com/r/fallenbagel/jellyseerr
                 and https://docs.seerr.dev/extending-jellyseerr/database-config
 decluttarr comes from https://github.com/ManiMatter/decluttarr
-
+minecraft comes from https://www.civo.com/learn/deploying-minecraft-server-kubernetes
 
 ![logo](fenix-iac.png)

playbook.yml

@@ -42,3 +42,4 @@
     - mangareader
     - bookshelf
     - shelfarr
+    - minecraft

roles/jellyfin/files/jellyfin-deployment.yaml

@@ -47,6 +47,8 @@ spec:
           mountPath: /config
         - name: videos
           mountPath: /videos
+        - name: books
+          mountPath: /books
       volumes:
       - name: config
         persistentVolumeClaim:
@@ -54,6 +56,9 @@ spec:
       - name: videos
         persistentVolumeClaim:
           claimName: jellyfin-videos-pvc
+      - name: books
+        persistentVolumeClaim:
+          claimName: jellyfin-books-pvc
 
 
 

roles/jellyfin/files/jellyfin-pvcs.yaml

@@ -61,3 +61,33 @@ spec:
     requests:
       storage: 150Gi
 ---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: jellyfin-books-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 150Gi
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jellyfin-books-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: jellyfin-books-pv
+  resources:
+    requests:
+      storage: 150Gi
+---

roles/mangareader/files/mangareader-deployment.yaml

@@ -13,11 +13,13 @@ spec:
       labels:
         app: mangareader
     spec:
+      securityContext:
+        fsGroup: 1013
       imagePullSecrets:
       - name: regcred
       containers:
       - name: mangareader
-        image: ghcr.io/suwayomi/tachidesk:v2.1.2060
+        image: ghcr.io/suwayomi/tachidesk:v2.1.2061
         securityContext:
           capabilities:
             add:
@@ -68,7 +70,7 @@ spec:
               key: password
         volumeMounts:
         - name: config
-          mountPath: /config
+          mountPath: /home/suwayomi/.local/share/Tachidesk
         - name: books
           mountPath: /books
         - name: downloads

roles/minecraft/files/minecraft-configmap.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: minecraft-configmap
+  namespace: minecraft
+data:
+  SERVER_NAME: "Example Minecraft Server"
+  EULA: "true"
+  VERSION: "1.21.1"
+  MAX_PLAYERS: "10"
+  OPS: |
+    tomas
+  ENABLE_WHITELIST: "true"
+  WHITELIST: |
+    tomas

roles/minecraft/files/minecraft-namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: minecraft

roles/minecraft/files/minecraft-nfs-csi.yaml

@@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: minecraft-nfs-csi
+  namespace: minecraft
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/Minecraft/TI0
+allowVolumeExpansion: true
+reclaimPolicy: Retain

roles/minecraft/files/minecraft-pvcs.yaml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: minecraft-config-pv
+  namespace: minecraft
+spec:
+  capacity:
+    storage: 30Gi
+  storageClassName: minecraft-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Minecraft/TI0
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: minecraft-config-pvc
+  namespace: minecraft
+spec:
+  storageClassName: minecraft-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: minecraft-config-pv
+  resources:
+    requests:
+      storage: 30Gi

roles/minecraft/files/minecraft-service.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: minecraft-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 19132
+      protocol: UDP
+  selector:
+    app: minecraft
+  type: ClusterIP

roles/minecraft/files/minecraft-statefulset.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: minecraft
+  namespace: minecraft
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: minecraft
+  template:
+    metadata:
+      labels:
+        app: minecraft
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1013
+        fsGroup: 1013
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: minecraft
+        image: itzg/minecraft-server
+        stdin: true
+        tty: true
+        resources:
+          requests:
+            cpu: 2
+            memory: 5Gi
+        envFrom:
+          - configMapRef:
+              name: minecraft-configmap
+        ports:
+          - containerPort: 19132 
+            name: serverport
+        volumeMounts:
+        - name: data
+          mountPath: /data
+      volumes:
+      - name: data
+        persistentVolumeClaim:
+          claimName: minecraft-config-pvc
+
+
+

roles/minecraft/tasks/main.yml

@@ -0,0 +1,52 @@
+- name: Remover o diretório /tmp/stack-arr/minecraft/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/minecraft/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/minecraft/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/minecraft/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.minecraft.secret", dest: "/tmp/stack-arr/minecraft/kubernetes-files/files/minecraft-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/minecraft/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/minecraft/kubernetes-files/files/minecraft-namespace.yaml
+    kubectl apply -f /tmp/stack-arr/minecraft/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config

roles/minecraft/vars/main.yml

@@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/vaultwarden/tasks/main.yml

@@ -36,7 +36,7 @@
   
 - name: Instalar Bitwarden CLI via npm
   become: true
-  shell: npm install -g @bitwarden/cli
+  shell: npm install -g @bitwarden/cli@2025.11.0
   args:
     executable: /bin/bash