From c48fdfe84f24443070b263ec388c25b1c58f192d Mon Sep 17 00:00:00 2001
From: aleidk <ale.navarro.parra@gmail.com>
Date: Mon, 10 Feb 2025 16:09:34 -0300
Subject: [PATCH] feat: add minio machine

---
 .env.agebox               | Bin 462 -> 0 bytes
 .justfile                 |   1 +
 hosts/inventory.yaml      |   9 ++++++++-
 opentofu/vms/s3.tf        |  17 +++++++++++------
 playbooks/storage/s3.yaml |  34 ++++++++++++++++++++++++++++++++++
 5 files changed, 54 insertions(+), 7 deletions(-)
 delete mode 100644 .env.agebox
 create mode 100644 playbooks/storage/s3.yaml

diff --git a/.env.agebox b/.env.agebox
deleted file mode 100644
index ae7ac752cbbcba1333f0bfd9bb5a3fe26dbf7df0..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 462
zcmV;<0WtnzXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$STZ#=F*zVkHZ)5xOg2GUZeek0
zPc>ymSura}OiFJ}Q%X-yFmYN`Z+T>JZFgojQcVg{S9wK4ZF)gyZESNgQfo9ZS3-9+
zQa5E;GHOeBbZc5#R7gU1NK9BWL`e!QEiE8YF+wypQ$<ZhSy?i2Z*yf*FHBHjZ%%Pj
zMmAJqacXx}VpL^KPeNyFP(=zo#~yY~NM8ZzLFCIC;VfvpGy4tL{h-HFmNEFa;-I$O
zj*G!?4#$s-m{gl`%t69^kRabRWmTU5Bq04BW`>=9dxFscG>A|Ti2hR9A+Nm$c~<Z6
z+mramZkB8=yocxgSo{pw=tH~s-9Ya}tV;^Rut}G&4}HyPlwlqE3_a9upCJQ|a15Sz
zGY~j4_!rTAk}#*;CD`AA5fPt?MQW-l_|L;^PYu#dF^|p7ssMt6eZ~sN+`|2(cf<jV
z()5jpfpPqrjYGGqBCl)CWj0WFVtB1Ypok8i9p<#SRbd3?!Yirk#uuR5v$i7Y_Wr;7
z!uJ%5y3Hc6$Ze4GPy-sQYmik7Zh_pDj4CsSh#Ywjr+%y%cSGS{nfr>(ZM1n<^D<Ww
EEG@3g!vFvP

diff --git a/.justfile b/.justfile
index 9b84444..62409ff 100644
--- a/.justfile
+++ b/.justfile
@@ -1,5 +1,6 @@
 # Repo management tasks
 mod repo '.devfiles/justfile'
+set dotenv-load := true
 
 export ANSIBLE_VAULT_PASSWORD_FILE := justfile_directory() + "/.decrypt-pass.txt"
 export ANSIBLE_BECOME_PASSWORD_FILE := justfile_directory() + "/.become-pass.txt"
diff --git a/hosts/inventory.yaml b/hosts/inventory.yaml
index 9c032a8..406ed41 100644
--- a/hosts/inventory.yaml
+++ b/hosts/inventory.yaml
@@ -3,8 +3,15 @@ homelab:
     ansible_become_method: doas
   children:
     docker:
+
+storage:
+  children: s3
+
+s3:
+  vars:
+    ansible_become_method: doas
   hosts:
-    10.0.10.101:
+    10.0.10.160
 
 docker:
   vars:
diff --git a/opentofu/vms/s3.tf b/opentofu/vms/s3.tf
index cebf4c0..bd21365 100644
--- a/opentofu/vms/s3.tf
+++ b/opentofu/vms/s3.tf
@@ -1,9 +1,15 @@
 # docs: https://registry.terraform.io/providers/bpg/proxmox/latest/docs/resources/virtual_environment_container
 
-resource "proxmox_virtual_environment_container" "banana-hoard" {
-  vm_id = 160
+variable "vm_names" {
+  type    = list(string)
+  default = ["donkey-kong"]
+}
+
+resource "proxmox_virtual_environment_container" "vm" {
+  for_each = toset(var.vm_names)
+  vm_id = 160 + index(var.vm_names, each.key)
   node_name = "pve"
-  description = "S3 data storage manager"
+  description = "S3 data storage"
   unprivileged = true
 
   start_on_boot = "true"
@@ -14,17 +20,16 @@ resource "proxmox_virtual_environment_container" "banana-hoard" {
   }
 
   initialization {
-    hostname = "banana-hoard"
+    hostname = each.key
 
     ip_config {
       ipv4 {
-        address = "10.0.10.60/24"
+        address = "10.0.10.${160 + index(var.vm_names, each.key)}/24"
         gateway = "10.0.0.10"
       }
     }
 
     user_account {
-      # keys     = [data.localfile.aleidk_key_pub.filename."/home/aleidk/Repos/Private/homelab/"]
       password = var.root_password
     }
   }
diff --git a/playbooks/storage/s3.yaml b/playbooks/storage/s3.yaml
new file mode 100644
index 0000000..fdcea1d
--- /dev/null
+++ b/playbooks/storage/s3.yaml
@@ -0,0 +1,34 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/ansible/ansible-lint/refs/heads/main/src/ansiblelint/schemas/playbook.json
+
+---
+- name: Setup S3 storage
+  hosts: s3
+  tasks:
+    - name: Install MinIO
+      become: true
+      apk:
+         name: minio
+         update_cache: yes
+
+    - name: Create MinIO directories
+      become: true
+      file:
+        path: /data/minio
+        state: directory
+        owner: minio
+        group: minio
+        mode: '0755'
+
+    - name: Configure MinIO
+      copy:
+        dest: /etc/default/minio
+        content: |
+          MINIO_VOLUMES="/data/minio/"
+          MINIO_OPTS="--address :9000"
+
+    - name: Enable and start MinIO service
+      service:
+        name: minio
+        enabled: yes
+        state: started
+