9eb6f2028a
Implement persistent block storage for Nextcloud user data, separating application and data layers: OpenTofu Changes: - tofu/volumes.tf: Create and attach Hetzner Volumes per client - Configurable size per client (default 100 GB for dev) - ext4 formatted, attached but not auto-mounted - tofu/variables.tf: Add nextcloud_volume_size to client config - tofu/terraform.tfvars: Set volume size for dev client (100 GB ~€5.40/mo) Ansible Changes: - ansible/roles/nextcloud/tasks/mount-volume.yml: New mount tasks - Detect volume device automatically - Format if needed, mount at /mnt/nextcloud-data - Add to fstab for persistence - Set correct permissions for www-data - ansible/roles/nextcloud/tasks/main.yml: Include volume mounting - ansible/roles/nextcloud/templates/docker-compose.nextcloud.yml.j2: - Use host mount /mnt/nextcloud-data/data instead of Docker volume - Keep app code in Docker volume (nextcloud-app) - User data now on Hetzner Volume Scripts: - scripts/resize-client-volume.sh: Online volume resizing - Resize via Hetzner API - Expand filesystem automatically - Show cost impact - Verify new size Documentation: - docs/storage-architecture.md: Complete storage guide - Architecture diagrams - Volume specifications - Sizing guidelines - Operations procedures - Performance considerations - Troubleshooting guide - docs/volume-migration.md: Step-by-step migration - Safe migration from Docker volumes - Rollback procedures - Verification checklist - Timeline estimates Benefits: ✅ Data independent from server instance ✅ Resize storage without rebuilding server ✅ Easy data migration between servers ✅ Better separation of concerns (app vs data) ✅ Simplified backup strategy ✅ Cost-optimized (pay for what you use) Volume Pricing: - 50 GB: ~€2.70/month - 100 GB: ~€5.40/month - 250 GB: ~€13.50/month - Resizable online, no downtime Note: Existing clients require manual migration Follow docs/volume-migration.md for safe migration procedure Closes #18 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
43 lines
1.4 KiB
HCL
43 lines
1.4 KiB
HCL
# Hetzner Cloud API Token
|
|
variable "hcloud_token" {
|
|
description = "Hetzner Cloud API Token (Read & Write)"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
# Hetzner DNS API Token (can be same as Cloud token)
|
|
variable "hetznerdns_token" {
|
|
description = "Hetzner DNS API Token"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
# SSH keys are now per-client, stored in keys/ssh/<client>.pub
|
|
# No global ssh_public_key variable needed
|
|
|
|
# Base Domain (optional - only needed if using DNS)
|
|
variable "base_domain" {
|
|
description = "Base domain for client subdomains (e.g., platform.nl) - leave empty if not using DNS"
|
|
type = string
|
|
default = ""
|
|
}
|
|
|
|
# Client Configurations
|
|
variable "clients" {
|
|
description = "Map of client configurations"
|
|
type = map(object({
|
|
server_type = string # e.g., "cx22" (2 vCPU, 4 GB RAM)
|
|
location = string # e.g., "fsn1" (Falkenstein), "nbg1" (Nuremberg), "hel1" (Helsinki)
|
|
subdomain = string # e.g., "alpha" for alpha.platform.nl
|
|
apps = list(string) # e.g., ["zitadel", "nextcloud"]
|
|
nextcloud_volume_size = number # Size in GB for Nextcloud data volume (min 10, max 10000)
|
|
}))
|
|
default = {}
|
|
}
|
|
|
|
# Enable automated snapshots
|
|
variable "enable_snapshots" {
|
|
description = "Enable automated daily snapshots (20% of server cost)"
|
|
type = bool
|
|
default = true
|
|
}
|