From f2fb9e8fe173fb4d06ee184fcdc51b4b112f6393 Mon Sep 17 00:00:00 2001 From: SeanOMik Date: Sat, 20 Apr 2024 12:35:26 -0400 Subject: [PATCH] wip: add deluge --- .../apps/download/deluge/helm-release.yaml | 102 ++++++++++++++++++ .../apps/download/deluge/kustomization.yaml | 5 + .../deluge/qbittorrent-secrets.sops.yaml | 87 +++++++++++++++ cluster/apps/download/kustomization.yaml | 5 +- 4 files changed, 197 insertions(+), 2 deletions(-) create mode 100644 cluster/apps/download/deluge/helm-release.yaml create mode 100644 cluster/apps/download/deluge/kustomization.yaml create mode 100644 cluster/apps/download/deluge/qbittorrent-secrets.sops.yaml diff --git a/cluster/apps/download/deluge/helm-release.yaml b/cluster/apps/download/deluge/helm-release.yaml new file mode 100644 index 0000000..4b834e7 --- /dev/null +++ b/cluster/apps/download/deluge/helm-release.yaml @@ -0,0 +1,102 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta2 +kind: HelmRelease +metadata: + name: qbittorrent + namespace: download +spec: + interval: 5m + chart: + spec: + chart: app-template + version: 3.1.0 + sourceRef: + kind: HelmRepository + name: bjws-charts + namespace: flux-system + + values: +# defaultPodOptions: +# enableServiceLinks: true +# securityContext: +# runAsUser: 10000 +# runAsGroup: 10000 +# fsGroup: 10000 +# fsGroupChangePolicy: "OnRootMismatch" + + controllers: + deluge: + containers: + app: + image: + repository: lscr.io/linuxserver/deluge + tag: 2.1.1 + pullPolicy: IfNotPresent + +# probes: +# liveness: +# enabled: true +# readiness: +# enabled: true +# startup: +# enabled: true +# spec: +# failureThreshold: 30 +# periodSeconds: 5 + gluetun: + image: + repository: qmcgaw/gluetun + tag: v3.38 + pullPolicy: IfNotPresent + + env: + - name: FIREWALL_INPUT_PORTS + value: "8112" # webui + + envFrom: + - secretRef: + name: qbittorrent-secrets + + securityContext: + capabilities: + add: + - NET_ADMIN +# volumeMounts: +# - name: gluetun-tmp +# mountPath: /tmp/gluetun/ + + + service: + app: + controller: deluge + ports: + http: + port: 8112 + + ingress: + app: + #className: "ingress-nginx" + hosts: + - host: &host "deluge.${SECRET_NEW_DOMAIN}" + paths: + - path: / + service: + identifier: app + port: http + tls: + - hosts: + - *host + + persistence: + media: + type: hostPath + hostPath: /mnt/MainPool/Media/Torrents + globalMounts: + - path: /storage/Torrents + gluetun-tmp: + enabled: true + type: emptyDir + advancedMounts: + deluge: # deluge controller + gluetun: # gluetun container + - path: /tmp/gluetun/ + diff --git a/cluster/apps/download/deluge/kustomization.yaml b/cluster/apps/download/deluge/kustomization.yaml new file mode 100644 index 0000000..9eb44ef --- /dev/null +++ b/cluster/apps/download/deluge/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: +- ./qbittorrent-secrets.sops.yaml +- ./helm-release.yaml diff --git a/cluster/apps/download/deluge/qbittorrent-secrets.sops.yaml b/cluster/apps/download/deluge/qbittorrent-secrets.sops.yaml new file mode 100644 index 0000000..7c233a1 --- /dev/null +++ b/cluster/apps/download/deluge/qbittorrent-secrets.sops.yaml @@ -0,0 +1,87 @@ +apiVersion: v1 +kind: Secret +metadata: + name: qbittorrent-secrets + namespace: download +stringData: + #ENC[AES256_GCM,data:hVUP0NEEjjTAhzZapPc6d3PLvp7huWcz4569GPJRYd6eqH6sF8cPGiK0E10tT0iJt4kP0U7/kPM7qBB7O1/8,iv:rbSlay66clsnC5xp3IdtwgJhFzlxDaUZJc1Q0b7N3+0=,tag:nqigGlMYCYsWsGsZxxS4Hw==,type:comment] + #ENC[AES256_GCM,data:FIiiG1vanmdOLUrWPeUjb5+ekdZsuq1R2bxYcS3xAg==,iv:HUCzR7Dx/KXWzRvdKordFBFBJDfgrBkWEF2qOLGVgfA=,tag:U766fJaNH131ZFJRJji3ag==,type:comment] + #ENC[AES256_GCM,data:ZWwyij95YeT4abl4nusVAtVKAOVZpZ3IQlYAbap8Ui4oM1itnT/+F71aQu2gXw==,iv:/QtzKsXHzWYiMPpDeCbGQCVQQun6oYyRXAxePkcZ9is=,tag:z6xg79aDKwC8QEOtfGD9oQ==,type:comment] + #ENC[AES256_GCM,data:AIdqoKOrhrf5rnugikueqMIKKNKpIsqo6RMa7eJVhNhlIg==,iv:Ya7fOYgUovLcyFNFdHKRUMqx5ktGzRALIQDOGC1YnF4=,tag:lr46wZGUabTwfg3BJWcwSw==,type:comment] + #ENC[AES256_GCM,data:0hNlKrkzjadwxpRTXAIwfojellwKHJg+nhIEuGA+GrxvXL0ugqLLpqMNx8BNfWeFabM=,iv:HXnrLionvffl9JhatiBpxMNLaIH2+u63QCoh7Da8P8Y=,tag:ymk37nn1TM2izNzoTGaUyQ==,type:comment] + #ENC[AES256_GCM,data:8T1/jb66IO0okMOj2xzRm16O+dt2qELM+dEpNCaM4Q==,iv:fQOmpHJbaa6ypMEplwRaSnNTayuVPgwhi5HFz2C+zQ8=,tag:tkN9DprLBQL5U+kDZs4cMw==,type:comment] + #ENC[AES256_GCM,data:vUURELYCT9rnL2M4iBPx2rNxgf0VKdLdOw==,iv:oFvw78CxbMrfbTXjD1vsMSizwXQjWqL60LDnpsKrxpU=,tag:YuoAASoyxTMofzifie4qaw==,type:comment] + #ENC[AES256_GCM,data:G7nmvZ9A9MUgk7B0d/0LgoUSN8qgEX9xTegJY8LeT4AL2LrpnvnJ,iv:ade7/zMMSnKyx9ennhNSt6EOZndVS8YnvazOlcRwgug=,tag:13F0PzeCTf4sq+fLjUQgwg==,type:comment] + VPN_SERVICE_PROVIDER: ENC[AES256_GCM,data:d2bwaygE,iv:/H8eRpF+0uI3TsCtumIDLa3GqQsdpaupKRrO0NKTEAM=,tag:k2/4aHPO/T/WxeHRDAMJfA==,type:str] + VPN_TYPE: ENC[AES256_GCM,data:2Gdi1FoRXKW6,iv:vmaw8ipZnuNWDbIDM7dNXJB/ayzci+eodkoh4KmfQ5w=,tag:l9aNpYxTZpscqWDOCixT7A==,type:str] + VPN_ENDPOINT_IP: ENC[AES256_GCM,data:zSIcxZqiW34HEb8lH48=,iv:6emH7gyPiUC0JmAfH8iMdAb5DX1rLfqWQ6L7QUQBies=,tag:TOu4qMiHc7sr8EN8VLfxtg==,type:str] + VPN_ENDPOINT_PORT: ENC[AES256_GCM,data:lGluLJQ=,iv:f6mOJ5dhdGeft2aiN/RW1Dnt8C0CUTfzyh0q0Tmb/Qc=,tag:pSfgALoyRyWkJ0fZ78L68w==,type:str] + WIREGUARD_PUBLIC_KEY: ENC[AES256_GCM,data:jvpuoU2+Ff3EZIam8PoKkti8pQ4ZFR6xZbtCDXR+r/2duP84/WoPkpzvEMQ=,iv:JE7l83HBXYgAgeAVkYt0UsaTw4FWfZCyf9NRkcvadgw=,tag:gMInhqSiuTwpmioxnSrCpA==,type:str] + WIREGUARD_PRIVATE_KEY: ENC[AES256_GCM,data:ykpzCsvp+5w22IsHyjuRi10qPgE0sL6ygOvuhYChoRFnsgsL1D3XAbnZCUA=,iv:tvwPYaf/4Ggvw13kZp590bLbMsWtoiY/X2DQZ5SSj8w=,tag:48QQWi3rA8a0LpUEmKhu7Q==,type:str] + WIREGUARD_ADDRESSES: ENC[AES256_GCM,data:/bT2RKklhM2gsqA=,iv:8Dhb7S4TxcZyvldAiZIjkFj6sm1xEQ8t6zHgQQVnrfo=,tag:6wept1RssiW4e1gyXXtkeQ==,type:str] + VPN_PORT_FORWARDING: ENC[AES256_GCM,data:e8s=,iv:ioACZoXRKj/SbAIcu1DlNQzUQcAU09rT7MVtn8Uzz78=,tag:OPHLnDCuj3f5l12VCojPqw==,type:str] + VPN_PORT_FORWARDING_PROVIDER: ENC[AES256_GCM,data:M4Szf4sHaeVl,iv:ebrkUX78P2YUM7NOB/7vx6WEIqdoYtc5RDwo4AvqVTU=,tag:MNPfF6KHejYBkVyeQtQW6A==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2024-04-13T16:41:54Z" + mac: ENC[AES256_GCM,data:pOPZPBA1svzBtvCfRLldL682Buhr5L18lYuO2vt/KxZ9ROCHeYTUjlux+HEcCd/cS0fsSZjFjr2oHLS4fKwakZaPE7QuYOqPZF/xvjf3yTXZbIouqWg7ViBeYe88qgdFKNlov1lMYELXRxn/4smlqF6xCPnf5DI3+R13/ludr1E=,iv:h+6mjiEr05V+YRk8e10vOL/4aHXUAogbYEb1aKv2lgw=,tag:XeoMsGo121tCnLp1bArEDg==,type:str] + pgp: + - created_at: "2024-04-13T16:41:54Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMAyqlIeyoxYovAQ//Z+tYZXmf264YmJIE4lzzvDt0vYSUBg4RHh/snDs8CHRM + dBeC+gxtGrJSsDS1pv8Yz+DtgsPkIcg6gM9yfxt+9Qmug4mIDXgKUQoGJmuqXmoG + VtPZYamVErq11suyxFsWqJQYbxGoYMi7uzTP3UauGP2NQlwGlFs1fSyXfBLngJkA + T7hyWxbiC16pJIXp+YE/Fn/x3CKMpOK67ZWn6cpkRBjeI4LOWDddde1vJZOH2RWK + vJF2KP+jiZpTO4NXE1R+lQLYDP5t8Ufu6NXhTseJapoDHw0m1xVN1cntEgpLYwsH + p/Ef1WysCTddxdA93QrZ4NGjZpDqt7OYAQgt5QZgEUFGXbRW2CfkEX2d2VpXf55y + hK9Y8MZAQmf7HRkEPc1LwmUSJd3HBMpdph9ffEH8HRItYKXGnrPNUjhpp8mFy4MZ + eAQYO65e+xLE7AFpyGkdTtBb3b1IvMuPZ8sH2VzIc/Crh0Sej1GizlOcPWDFP6oe + 2950UXkJo3yFnirPJWisejxV2zhymTIY8M7eiKX/Qt7eftcB8tnRZ+7F8Z5VknGr + EYmA4BgAkdPz7UyaVdmQ9tt6gqoFbGAy3ns64gO7HokjRQbGD+AQ0J5Vgpv9K1OB + QjLtwqgCGIAaJBgJ1euaM+Vfk0zKX/0zQsBe8SDs+NoWmqZc/MYygF3NBRbjrJyF + AgwDXjg0p2IN1X8BD/9jq68NwvQg5aQN64BFIL3TsWRonL29O65QyGaQtwdpT4f5 + DS1LSpr6CEUpuaRsosG78xNVV8cvsPVc6VV8TuQWJgG+LJqcGkESzEekb5se8rDl + ijnaMawZ2ngf5EfHOBozoY0ybUjZCkHz+yI+zSaAJiJWQalYDwaiGkCk0ElIiZsk + vI9a38TT/lqOuDfW1EGjtOMY5JQ8p7DYZQhmRgQkEronQOyQySR7z0AjRmhdMjXl + BX08Pf6Ur6xEeownhchpmtiy2wuqQ0b2LyY7BpA/FxZRBSyVsgFu5vE2//YExEnv + WhsX5pbykfmar7OuaCN34M/COlw+lbnCKZERNu7vmux7nXWEMYYc9qKXdCqJZ09e + IfH9OYNb47se5DIrcbRUtxSbS6yWXyhGAJIW3VDmqpFRTC5eEfyo6y4TKcZ3LMFu + oqFGQRS6oHNcr+6nq9m83bIxHoFS3yJ5b6geVqTBi/Slz16mDKCsX0Pbd4CkqwQG + Z1bbMHb/UWUgfBAH2Jz8ShowsfS8waVpc1tcXDdr0d5zz0oVNrhDO9lkyvG4NZHQ + sMJGXSd1LfFO+nsX8wHymBp2B2pf3rFCKXJ1Z10DjVhFTIzK4mgim92QXfJcimN2 + Fwc7P0o8oZNPxcktd47ren4P/jzztum9R3nOG186Eqdk2zMW6nt8LpOtuntab9Rm + AQkCEBoMAe2xtJ5Lqb4TqpdPQH10yUwP1c7loiCzDy2SHhR+y1f4g6oYjuVyFJpZ + j3TQxAz5WWEiCrk2NNEQjpq4LwtHStUTX9KfZVQ17QwRsTm4t8rcXDcb7HXUmDb9 + UWICsLqU + =A1Ty + -----END PGP MESSAGE----- + fp: BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD + - created_at: "2024-04-13T16:41:54Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMAy5t8IMoPu4VARAAhYIi/e9521WdgX56QICahfwt/tQzqpBnBusZeDTdYSGe + RzduUhMyvjs7kSXLVgfgfFBCFfjCIynWib2ja52tOfPuNEbBHv3iYnRfVzfbk4B6 + 3fYDahRjdJXYBWOthup8fSTi5PYuhgdUI3F084GLy6jA4GEf55wqMWlFS/dfUk2R + VJJEAI5h8XfIKqwFWBr8R6q2GA07uk5bwo6gy0220351OZrOtE8TMHfFsaaQbcy7 + kmd1vUGvBP9TjmtNPjvTYXak8VHgui0zlft4K7Bi/Lh1tOspfeqjCjSstJlAxNAQ + pumCvhmWHWYBShY6QeulTNmMtsu8hY/C0HV4rkVpnx5hQtzPLcReeWe7oHn8QYYg + xZsJ7b805YW5OxGWyd5AnOv7yg5jInNA/aCYNgA0lwttVHKt7mBLmIvUOoI+my5+ + V3A53dQ+OCNi/QbCJvf53+fNnJ0fwvQp1o1CurhKRUdPnBT+H9EelbalM1Snr/jQ + 7DpskR5i1mCmatLK9KFuj/GmhDnFkvw9R7LAZjl2V9rP5ZFlhe9EcnRHvLCAH0cf + OQLqeIan3CypQmuoNTTbqCbQD8nFa0FjsG/SLmZS/VYh+HFlOgPk11cnQzr26v++ + imZ4qYv6r6+XSrvZPAzNQoDaxyx4u2s6xc2LWLyZTSUC/5XeNXDQsPNKtGlGwjbU + ZgEJAhCM/GH3HPYRTityO8oAEDX3lPcLSa/BR5+ePQ3tPwTkV+tZa8HQMV5tOPIs + 5KA18Evmc0ZJdkBcsWWozrSrYSx9cu0tcWSgZnTv1OJDP4A3CKvBIyYomRlFiFZ2 + tnTLX555Sw== + =6Nra + -----END PGP MESSAGE----- + fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D + encrypted_regex: ^(data|stringData)$ + version: 3.8.1 diff --git a/cluster/apps/download/kustomization.yaml b/cluster/apps/download/kustomization.yaml index 40001e0..ccdda48 100644 --- a/cluster/apps/download/kustomization.yaml +++ b/cluster/apps/download/kustomization.yaml @@ -3,8 +3,9 @@ kind: Kustomization resources: - ./namespace.yaml #- ./network_policy.yaml -- ./qbittorrent -- ./qbit-manage +#- ./qbittorrent +#- ./qbit-manage +- ./deluge - ./radarr - ./sonarr - ./prowlarr