k3s-cluster/cluster/apps/download/deluge/helm-release.yaml

apiVersion: helm.toolkit.fluxcd.io/v2beta2
kind: HelmRelease
metadata:
  name: deluge
  namespace: download
spec:
  interval: 5m
  chart:
    spec:
      chart: app-template
      version: 3.1.0
      sourceRef:
        kind: HelmRepository
        name: bjws-charts
        namespace: flux-system

  values:
#    defaultPodOptions:
#      enableServiceLinks: true
#      securityContext:
#        runAsUser: 10000
#        runAsGroup: 10000
#        fsGroup: 10000
#        fsGroupChangePolicy: "OnRootMismatch"

    controllers:
      deluge:
        containers:
          app:
            image:
              repository: lscr.io/linuxserver/deluge
              tag: 2.1.1
              pullPolicy: IfNotPresent

#            probes:
#              liveness:
#                enabled: true
#              readiness:
#                enabled: true
#              startup:
#                enabled: true
#                spec:
#                  failureThreshold: 30
#                  periodSeconds: 5
          gluetun:
            image:
              repository: qmcgaw/gluetun
              tag: v3.38
              pullPolicy: IfNotPresent

            env:
            - name: FIREWALL_INPUT_PORTS
              value: "8112" # webui
            - name: VPN_PORT_FORWARDING_STATUS_FILE
              value: /tmp/gluetun/forwarded_port
            
            envFrom:
            - secretRef:
                name: qbittorrent-secrets
            
            securityContext:
              capabilities:
                add:
                - NET_ADMIN
#            volumeMounts:
#            - name: gluetun-tmp
#              mountPath: /tmp/gluetun/


    service:
      app:
        controller: deluge
        ports:
          http:
            port: 8112

    ingress:
      app:
        #className: "ingress-nginx"
        hosts:
          - host: &host "deluge.${SECRET_NEW_DOMAIN}"
            paths:
              - path: /
                service:
                  identifier: app
                  port: http
        tls:
        - hosts:
          - *host

    persistence:
      torrents:
        type: hostPath
        hostPath: /mnt/MainPool/Media/Torrents
        globalMounts:
          - path: /storage/Torrents
      
      config:
        type: persistentVolumeClaim
        storageClass: openebs-hostpath
        size: 1Gi
        accessMode: ReadWriteOnce
        advancedMounts:
          deluge:
            app:
              - path: /config

      gluetun-tmp:
        enabled: true
        type: emptyDir
        advancedMounts:
          deluge: # deluge controller
            gluetun: # gluetun container
              - path: /tmp/gluetun/
            app:
              - path: /pia
                readOnly: true