wip(deluge): change env format, specify qbittorrent uid and gid

cluster/apps/download/deluge/helm-release.yaml

@@ -0,0 +1,110 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+  name: deluge
+  namespace: download
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.1.0
+      sourceRef:
+        kind: HelmRepository
+        name: bjws-charts
+        namespace: flux-system
+
+  values:
+#    defaultPodOptions:
+#      enableServiceLinks: true
+#      securityContext:
+#        runAsUser: 10000
+#        runAsGroup: 10000
+#        fsGroup: 10000
+#        fsGroupChangePolicy: "OnRootMismatch"
+
+    controllers:
+      deluge:
+        containers:
+          app:
+            image:
+              repository: lscr.io/linuxserver/deluge
+              tag: 2.1.1
+              pullPolicy: IfNotPresent
+
+            env:
+              PUID: 10000
+              PGID: 10000
+              
+          gluetun:
+            image:
+              repository: qmcgaw/gluetun
+              tag: v3.38
+              pullPolicy: IfNotPresent
+
+            env:
+              FIREWALL_INPUT_PORTS: "8112" # webui
+              VPN_PORT_FORWARDING_STATUS_FILE: /tmp/gluetun/forwarded_port
+              
+            envFrom:
+            - secretRef:
+                name: qbittorrent-secrets
+            
+            securityContext:
+              capabilities:
+                add:
+                - NET_ADMIN
+#            volumeMounts:
+#            - name: gluetun-tmp
+#              mountPath: /tmp/gluetun/
+
+
+    service:
+      app:
+        controller: deluge
+        ports:
+          http:
+            port: 8112
+
+    ingress:
+      app:
+        #className: "ingress-nginx"
+        hosts:
+          - host: &host "deluge.${SECRET_NEW_DOMAIN}"
+            paths:
+              - path: /
+                service:
+                  identifier: app
+                  port: http
+        tls:
+        - hosts:
+          - *host
+
+    persistence:
+      torrents:
+        type: hostPath
+        hostPath: /mnt/MainPool/Media/Torrents
+        globalMounts:
+          - path: /storage/Torrents
+      
+      config:
+        type: persistentVolumeClaim
+        storageClass: openebs-hostpath
+        size: 1Gi
+        accessMode: ReadWriteOnce
+        advancedMounts:
+          deluge:
+            app:
+              - path: /config
+
+      gluetun-tmp:
+        enabled: true
+        type: emptyDir
+        advancedMounts:
+          deluge: # deluge controller
+            gluetun: # gluetun container
+              - path: /tmp/gluetun/
+            app:
+              - path: /pia
+                readOnly: true
+

cluster/apps/download/deluge/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ./qbittorrent-secrets.sops.yaml
+- ./helm-release.yaml

cluster/apps/download/deluge/qbittorrent-secrets.sops.yaml

@@ -0,0 +1,87 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: qbittorrent-secrets
+    namespace: download
+stringData:
+    #ENC[AES256_GCM,data:hVUP0NEEjjTAhzZapPc6d3PLvp7huWcz4569GPJRYd6eqH6sF8cPGiK0E10tT0iJt4kP0U7/kPM7qBB7O1/8,iv:rbSlay66clsnC5xp3IdtwgJhFzlxDaUZJc1Q0b7N3+0=,tag:nqigGlMYCYsWsGsZxxS4Hw==,type:comment]
+    #ENC[AES256_GCM,data:FIiiG1vanmdOLUrWPeUjb5+ekdZsuq1R2bxYcS3xAg==,iv:HUCzR7Dx/KXWzRvdKordFBFBJDfgrBkWEF2qOLGVgfA=,tag:U766fJaNH131ZFJRJji3ag==,type:comment]
+    #ENC[AES256_GCM,data:ZWwyij95YeT4abl4nusVAtVKAOVZpZ3IQlYAbap8Ui4oM1itnT/+F71aQu2gXw==,iv:/QtzKsXHzWYiMPpDeCbGQCVQQun6oYyRXAxePkcZ9is=,tag:z6xg79aDKwC8QEOtfGD9oQ==,type:comment]
+    #ENC[AES256_GCM,data:AIdqoKOrhrf5rnugikueqMIKKNKpIsqo6RMa7eJVhNhlIg==,iv:Ya7fOYgUovLcyFNFdHKRUMqx5ktGzRALIQDOGC1YnF4=,tag:lr46wZGUabTwfg3BJWcwSw==,type:comment]
+    #ENC[AES256_GCM,data:0hNlKrkzjadwxpRTXAIwfojellwKHJg+nhIEuGA+GrxvXL0ugqLLpqMNx8BNfWeFabM=,iv:HXnrLionvffl9JhatiBpxMNLaIH2+u63QCoh7Da8P8Y=,tag:ymk37nn1TM2izNzoTGaUyQ==,type:comment]
+    #ENC[AES256_GCM,data:8T1/jb66IO0okMOj2xzRm16O+dt2qELM+dEpNCaM4Q==,iv:fQOmpHJbaa6ypMEplwRaSnNTayuVPgwhi5HFz2C+zQ8=,tag:tkN9DprLBQL5U+kDZs4cMw==,type:comment]
+    #ENC[AES256_GCM,data:vUURELYCT9rnL2M4iBPx2rNxgf0VKdLdOw==,iv:oFvw78CxbMrfbTXjD1vsMSizwXQjWqL60LDnpsKrxpU=,tag:YuoAASoyxTMofzifie4qaw==,type:comment]
+    #ENC[AES256_GCM,data:G7nmvZ9A9MUgk7B0d/0LgoUSN8qgEX9xTegJY8LeT4AL2LrpnvnJ,iv:ade7/zMMSnKyx9ennhNSt6EOZndVS8YnvazOlcRwgug=,tag:13F0PzeCTf4sq+fLjUQgwg==,type:comment]
+    VPN_SERVICE_PROVIDER: ENC[AES256_GCM,data:d2bwaygE,iv:/H8eRpF+0uI3TsCtumIDLa3GqQsdpaupKRrO0NKTEAM=,tag:k2/4aHPO/T/WxeHRDAMJfA==,type:str]
+    VPN_TYPE: ENC[AES256_GCM,data:2Gdi1FoRXKW6,iv:vmaw8ipZnuNWDbIDM7dNXJB/ayzci+eodkoh4KmfQ5w=,tag:l9aNpYxTZpscqWDOCixT7A==,type:str]
+    VPN_ENDPOINT_IP: ENC[AES256_GCM,data:zSIcxZqiW34HEb8lH48=,iv:6emH7gyPiUC0JmAfH8iMdAb5DX1rLfqWQ6L7QUQBies=,tag:TOu4qMiHc7sr8EN8VLfxtg==,type:str]
+    VPN_ENDPOINT_PORT: ENC[AES256_GCM,data:lGluLJQ=,iv:f6mOJ5dhdGeft2aiN/RW1Dnt8C0CUTfzyh0q0Tmb/Qc=,tag:pSfgALoyRyWkJ0fZ78L68w==,type:str]
+    WIREGUARD_PUBLIC_KEY: ENC[AES256_GCM,data:jvpuoU2+Ff3EZIam8PoKkti8pQ4ZFR6xZbtCDXR+r/2duP84/WoPkpzvEMQ=,iv:JE7l83HBXYgAgeAVkYt0UsaTw4FWfZCyf9NRkcvadgw=,tag:gMInhqSiuTwpmioxnSrCpA==,type:str]
+    WIREGUARD_PRIVATE_KEY: ENC[AES256_GCM,data:ykpzCsvp+5w22IsHyjuRi10qPgE0sL6ygOvuhYChoRFnsgsL1D3XAbnZCUA=,iv:tvwPYaf/4Ggvw13kZp590bLbMsWtoiY/X2DQZ5SSj8w=,tag:48QQWi3rA8a0LpUEmKhu7Q==,type:str]
+    WIREGUARD_ADDRESSES: ENC[AES256_GCM,data:/bT2RKklhM2gsqA=,iv:8Dhb7S4TxcZyvldAiZIjkFj6sm1xEQ8t6zHgQQVnrfo=,tag:6wept1RssiW4e1gyXXtkeQ==,type:str]
+    VPN_PORT_FORWARDING: ENC[AES256_GCM,data:e8s=,iv:ioACZoXRKj/SbAIcu1DlNQzUQcAU09rT7MVtn8Uzz78=,tag:OPHLnDCuj3f5l12VCojPqw==,type:str]
+    VPN_PORT_FORWARDING_PROVIDER: ENC[AES256_GCM,data:M4Szf4sHaeVl,iv:ebrkUX78P2YUM7NOB/7vx6WEIqdoYtc5RDwo4AvqVTU=,tag:MNPfF6KHejYBkVyeQtQW6A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-04-13T16:41:54Z"
+    mac: ENC[AES256_GCM,data:pOPZPBA1svzBtvCfRLldL682Buhr5L18lYuO2vt/KxZ9ROCHeYTUjlux+HEcCd/cS0fsSZjFjr2oHLS4fKwakZaPE7QuYOqPZF/xvjf3yTXZbIouqWg7ViBeYe88qgdFKNlov1lMYELXRxn/4smlqF6xCPnf5DI3+R13/ludr1E=,iv:h+6mjiEr05V+YRk8e10vOL/4aHXUAogbYEb1aKv2lgw=,tag:XeoMsGo121tCnLp1bArEDg==,type:str]
+    pgp:
+        - created_at: "2024-04-13T16:41:54Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAyqlIeyoxYovAQ//Z+tYZXmf264YmJIE4lzzvDt0vYSUBg4RHh/snDs8CHRM
+            dBeC+gxtGrJSsDS1pv8Yz+DtgsPkIcg6gM9yfxt+9Qmug4mIDXgKUQoGJmuqXmoG
+            VtPZYamVErq11suyxFsWqJQYbxGoYMi7uzTP3UauGP2NQlwGlFs1fSyXfBLngJkA
+            T7hyWxbiC16pJIXp+YE/Fn/x3CKMpOK67ZWn6cpkRBjeI4LOWDddde1vJZOH2RWK
+            vJF2KP+jiZpTO4NXE1R+lQLYDP5t8Ufu6NXhTseJapoDHw0m1xVN1cntEgpLYwsH
+            p/Ef1WysCTddxdA93QrZ4NGjZpDqt7OYAQgt5QZgEUFGXbRW2CfkEX2d2VpXf55y
+            hK9Y8MZAQmf7HRkEPc1LwmUSJd3HBMpdph9ffEH8HRItYKXGnrPNUjhpp8mFy4MZ
+            eAQYO65e+xLE7AFpyGkdTtBb3b1IvMuPZ8sH2VzIc/Crh0Sej1GizlOcPWDFP6oe
+            2950UXkJo3yFnirPJWisejxV2zhymTIY8M7eiKX/Qt7eftcB8tnRZ+7F8Z5VknGr
+            EYmA4BgAkdPz7UyaVdmQ9tt6gqoFbGAy3ns64gO7HokjRQbGD+AQ0J5Vgpv9K1OB
+            QjLtwqgCGIAaJBgJ1euaM+Vfk0zKX/0zQsBe8SDs+NoWmqZc/MYygF3NBRbjrJyF
+            AgwDXjg0p2IN1X8BD/9jq68NwvQg5aQN64BFIL3TsWRonL29O65QyGaQtwdpT4f5
+            DS1LSpr6CEUpuaRsosG78xNVV8cvsPVc6VV8TuQWJgG+LJqcGkESzEekb5se8rDl
+            ijnaMawZ2ngf5EfHOBozoY0ybUjZCkHz+yI+zSaAJiJWQalYDwaiGkCk0ElIiZsk
+            vI9a38TT/lqOuDfW1EGjtOMY5JQ8p7DYZQhmRgQkEronQOyQySR7z0AjRmhdMjXl
+            BX08Pf6Ur6xEeownhchpmtiy2wuqQ0b2LyY7BpA/FxZRBSyVsgFu5vE2//YExEnv
+            WhsX5pbykfmar7OuaCN34M/COlw+lbnCKZERNu7vmux7nXWEMYYc9qKXdCqJZ09e
+            IfH9OYNb47se5DIrcbRUtxSbS6yWXyhGAJIW3VDmqpFRTC5eEfyo6y4TKcZ3LMFu
+            oqFGQRS6oHNcr+6nq9m83bIxHoFS3yJ5b6geVqTBi/Slz16mDKCsX0Pbd4CkqwQG
+            Z1bbMHb/UWUgfBAH2Jz8ShowsfS8waVpc1tcXDdr0d5zz0oVNrhDO9lkyvG4NZHQ
+            sMJGXSd1LfFO+nsX8wHymBp2B2pf3rFCKXJ1Z10DjVhFTIzK4mgim92QXfJcimN2
+            Fwc7P0o8oZNPxcktd47ren4P/jzztum9R3nOG186Eqdk2zMW6nt8LpOtuntab9Rm
+            AQkCEBoMAe2xtJ5Lqb4TqpdPQH10yUwP1c7loiCzDy2SHhR+y1f4g6oYjuVyFJpZ
+            j3TQxAz5WWEiCrk2NNEQjpq4LwtHStUTX9KfZVQ17QwRsTm4t8rcXDcb7HXUmDb9
+            UWICsLqU
+            =A1Ty
+            -----END PGP MESSAGE-----
+          fp: BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD
+        - created_at: "2024-04-13T16:41:54Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAy5t8IMoPu4VARAAhYIi/e9521WdgX56QICahfwt/tQzqpBnBusZeDTdYSGe
+            RzduUhMyvjs7kSXLVgfgfFBCFfjCIynWib2ja52tOfPuNEbBHv3iYnRfVzfbk4B6
+            3fYDahRjdJXYBWOthup8fSTi5PYuhgdUI3F084GLy6jA4GEf55wqMWlFS/dfUk2R
+            VJJEAI5h8XfIKqwFWBr8R6q2GA07uk5bwo6gy0220351OZrOtE8TMHfFsaaQbcy7
+            kmd1vUGvBP9TjmtNPjvTYXak8VHgui0zlft4K7Bi/Lh1tOspfeqjCjSstJlAxNAQ
+            pumCvhmWHWYBShY6QeulTNmMtsu8hY/C0HV4rkVpnx5hQtzPLcReeWe7oHn8QYYg
+            xZsJ7b805YW5OxGWyd5AnOv7yg5jInNA/aCYNgA0lwttVHKt7mBLmIvUOoI+my5+
+            V3A53dQ+OCNi/QbCJvf53+fNnJ0fwvQp1o1CurhKRUdPnBT+H9EelbalM1Snr/jQ
+            7DpskR5i1mCmatLK9KFuj/GmhDnFkvw9R7LAZjl2V9rP5ZFlhe9EcnRHvLCAH0cf
+            OQLqeIan3CypQmuoNTTbqCbQD8nFa0FjsG/SLmZS/VYh+HFlOgPk11cnQzr26v++
+            imZ4qYv6r6+XSrvZPAzNQoDaxyx4u2s6xc2LWLyZTSUC/5XeNXDQsPNKtGlGwjbU
+            ZgEJAhCM/GH3HPYRTityO8oAEDX3lPcLSa/BR5+ePQ3tPwTkV+tZa8HQMV5tOPIs
+            5KA18Evmc0ZJdkBcsWWozrSrYSx9cu0tcWSgZnTv1OJDP4A3CKvBIyYomRlFiFZ2
+            tnTLX555Sw==
+            =6Nra
+            -----END PGP MESSAGE-----
+          fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

cluster/apps/download/kustomization.yaml

@@ -3,8 +3,9 @@ kind: Kustomization
 resources:
 - ./namespace.yaml
 #- ./network_policy.yaml
-- ./qbittorrent
-- ./qbit-manage
+#- ./qbittorrent
+#- ./qbit-manage
+- ./deluge
 - ./radarr
 - ./sonarr
 - ./prowlarr