Compare commits

..

6 Commits

11 changed files with 123 additions and 173 deletions

File diff suppressed because one or more lines are too long

View File

@ -1,4 +1,4 @@
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
@ -14,10 +14,9 @@ spec:
kind: HelmRepository
name: bjws-charts
namespace: flux-system
values:
controllers:
main:
kapowarr:
pod:
securityContext:
runAsNonRoot: true
@ -25,29 +24,26 @@ spec:
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
containers:
main:
app:
image:
repository: git.seanomik.net/seanomik/kapowarr
tag: rolling-e74ec0e4
tag: v1.0.0
pullPolicy: Always
service:
app:
controller: main
controller: kapowarr
ports:
http:
port: 5656
ingress:
main:
app:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
hosts:
- host: "kapowarr.${SECRET_NEW_DOMAIN}"
paths:
@ -57,14 +53,12 @@ spec:
port: http
persistence:
data:
existingClaim: kapowarr
globalMounts:
- path: /data
storage:
type: hostPath
hostPath: /mnt/MainPool/Media
globalMounts:
- path: /storage
config:
type: hostPath
hostPath: /mnt/MainPool/Kubernetes/kapowarr
globalMounts:
- path: /app/db

View File

@ -0,0 +1,32 @@
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: &app kapowarr
namespace: flux-system
spec:
timeout: 5m
interval: 10m
targetNamespace: download
path: ./kubernetes/main/apps/download/kapowarr/app
prune: true
sourceRef:
kind: GitRepository
name: home-cluster
decryption:
provider: sops
secretRef:
name: sops-gpg
dependsOn:
- name: openebs
- name: openebs-sc
- name: volsync
postBuild:
substituteFrom:
- kind: ConfigMap
name: cluster-settings
- kind: Secret
name: cluster-secrets
substitute:
APP: *app
VOLSYNC_CAPACITY: 5Gi

View File

@ -1,4 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ./helm-release.yaml

View File

@ -14,5 +14,5 @@ resources:
- ./unpackerr
- ./media-dashboard.yaml
- ./flaresolverr
- ./kapowarr
- ./kapowarr/ks.yaml
- ./sabnzbd

View File

@ -1,8 +1,8 @@
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: ampache
name: komga
spec:
interval: 5m
chart:
@ -13,19 +13,16 @@ spec:
kind: HelmRepository
name: bjws-charts
namespace: flux-system
values:
controllers:
ampache:
komga:
containers:
app:
image:
repository: ampache/ampache
tag: nosql7.0.1
repository: gotson/komga
tag: 1.14.1
env:
DISABLE_INOTIFYWAIT_CLEAN: 0
TZ: America/New_York
probes:
liveness: &probes
enabled: true
@ -33,7 +30,7 @@ spec:
spec:
httpGet:
path: /
port: &port 80
port: &port 25600
initialDelaySeconds: 0
periodSeconds: 10
timeoutSeconds: 1
@ -44,23 +41,28 @@ spec:
spec:
failureThreshold: 30
periodSeconds: 10
resources:
requests:
cpu: 2m
memory: 1500Mi
limits:
memory: 3200Mi
# securityContext:
# allowPrivilegeEscalation: false
# readOnlyRootFilesystem: true
# capabilities: { drop: ["ALL"] }
defaultPodOptions:
securityContext:
# runAsNonRoot: true
runAsUser: 10000
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
# defaultPodOptions:
# securityContext:
# runAsUser: 10000
# runAsGroup: 10000
# fsGroup: 10000
# fsGroupChangePolicy: OnRootMismatch
service:
app:
controller: ampache
controller: komga
ports:
http:
port: *port
@ -70,9 +72,8 @@ spec:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
#className: external
hosts:
- host: "ampache.${SECRET_NEW_DOMAIN}"
- host: "comics.${SECRET_NEW_DOMAIN}"
paths:
- path: /
service:
@ -80,19 +81,13 @@ spec:
port: http
persistence:
config:
existingClaim: ampache
data:
existingClaim: komga
globalMounts:
- path: /var/www/config
logs:
type: emptyDir
globalMounts:
- path: /var/log/ampache
music:
- path: /config
storage:
type: hostPath
hostPath: /mnt/MainPool/Media/Media
globalMounts:
- path: /media
readOnly: true
- path: /storage
#readOnly: true

View File

@ -1,4 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../../../common/templates/volsync
- ./helm-release.yaml

View File

@ -1,67 +0,0 @@
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: komga
namespace: media
spec:
interval: 5m
chart:
spec:
chart: app-template
version: 3.5.x
sourceRef:
kind: HelmRepository
name: bjws-charts
namespace: flux-system
values:
image:
repository: gotson/komga
tag: "1.14.1"
env:
TZ: America/New_York
service:
main:
ports:
http:
port: 25600
probes:
liveness:
enabled: false
ingress:
main:
enabled: true
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
hosts:
- host: &host "comics.${SECRET_NEW_DOMAIN}"
paths:
- path: /
pathType: Prefix
tls:
- hosts:
- *host
persistence:
config:
enabled: true
type: hostPath
hostPath: /mnt/MainPool/Kubernetes/komga
mountPath: /config
storage:
enabled: true
type: hostPath
hostPath: /mnt/MainPool/Media/Media
mountPath: /storage
resources:
requests:
cpu: 2m
memory: 1500Mi
limits:
memory: 3200Mi

View File

@ -2,13 +2,13 @@
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: &app ampache
name: &app komga
namespace: flux-system
spec:
timeout: 5m
interval: 10m
targetNamespace: media
path: ./kubernetes/main/apps/media/ampache/app
path: ./kubernetes/main/apps/media/komga/app
prune: true
sourceRef:
kind: GitRepository
@ -28,4 +28,4 @@ spec:
name: cluster-secrets
substitute:
APP: *app
VOLSYNC_CAPACITY: 15Gi
VOLSYNC_CAPACITY: 5Gi

View File

@ -3,7 +3,7 @@ kind: Kustomization
resources:
- ./namespace.yaml
#- ./network_policy.yaml
- ./komga
- ./komga/ks.yaml
- ./kavita
- ./jellyfin
- ./jellyseerr
@ -13,4 +13,3 @@ resources:
- ./ombi
- ./freshrss
- ./navidrome/ks.yaml
- ./ampache/ks.yaml