Add temp volume for penpot

modules/10-generic/docker-service/variables.tf

@@ -49,7 +49,7 @@ variable "networks" {
 }
 
 variable "volumes" {
-  description = "List of volume mappings"
+  description = "List of volume mappings that are hosted on disk"
   type = list(object({
     host_path      = string
     container_path = string

modules/10-generic/docker-volumes/main.tf

@@ -0,0 +1,19 @@
+module "system_globals" {
+  source = "../../00-globals/system"
+}
+
+terraform {
+  required_providers {
+    docker = {
+      source = "kreuzwerker/docker"
+    }
+  }
+}
+
+locals {
+    name = var.temporary_volume
+}
+
+resource "docker_volume" "shared_volume" {
+    name = local.name
+}

modules/10-generic/docker-volumes/outputs.tf

@@ -0,0 +1,4 @@
+output "name" {
+    description = "Name of the temporary volume"
+    value       = docker_volume.shared_volume.name
+}

modules/10-generic/docker-volumes/variables.tf

@@ -0,0 +1,4 @@
+variable "temporary_volume" {
+  description = "Name of temporary volume"
+  type = string
+}

modules/30-services-software/penpot-service/main.tf

@@ -6,6 +6,11 @@ terraform {
   }
 }
 
+module "penpot_temp_volume" {
+  source = "../../10-generic/docker-volumes"
+  temporary_volume = "penpot_temp"
+}
+
 locals {
   container_name          = "penpot"
   penpot_backend_name     = "penpot-backend"
@@ -27,7 +32,7 @@ locals {
 
   penpot_volumes = [
     {
-      host_path      = "${var.volume_path}/${local.container_name}/assets"
+      host_path      = "${module.penpot_temp_volume.name}"
       container_path = "/opt/data/assets"
       read_only      = false
     }
@@ -42,6 +47,7 @@ locals {
   ]
 
   penpot_exporter_env_vars = {
+    PENPOT_SECRET_KEY = provider::dotenv::get_by_key("PENPOT_SECRET_KEY", local.env_file)
     PENPOT_PUBLIC_URI = "http://${local.container_name}:${local.internal_port}"
     PENPOT_REDIS_URI  = "redis://${local.valkey_container_name}/0"
   }