diff --git a/clusters/cl01tl/applications/homepage/values.yaml b/clusters/cl01tl/applications/homepage/values.yaml index 79b2a71f9..1bc9bc4cd 100644 --- a/clusters/cl01tl/applications/homepage/values.yaml +++ b/clusters/cl01tl/applications/homepage/values.yaml @@ -512,6 +512,12 @@ homepage: key: {{ "{{HOMEPAGE_VAR_READARR_BOOKS_KEY}}" }} fields: ["wanted", "queued", "books"] enableQueue: false + - Readarr Audiobooks: + icon: readarr.png + description: Audiobooks + href: https://readarr-audiobooks.alexlebens.net + siteMonitor: http://readarr-audiobooks.readarr-audiobooks:80 + statusStyle: dot - Lazy Librarian: icon: lazylibrarian.png description: Books diff --git a/clusters/cl01tl/applications/readarr-audiobooks/Chart.yaml b/clusters/cl01tl/applications/readarr-audiobooks/Chart.yaml new file mode 100644 index 000000000..111a1abae --- /dev/null +++ b/clusters/cl01tl/applications/readarr-audiobooks/Chart.yaml @@ -0,0 +1,30 @@ +apiVersion: v2 +name: readarr-audiobooks +version: 1.0.0 +description: Readarr Audioooks +keywords: + - readarr-audiobooks + - servarr + - audiobooks + - metrics +home: https://wiki.alexlebens.dev/doc/readarr-5P2VHPUOLx +sources: + - https://github.com/Readarr/Readarr + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/onedr0p/containers/pkgs/container/readarr-develop + - https://github.com/onedr0p/exportarr/pkgs/container/exportarr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebensv +dependencies: + - name: app-template + alias: readarr-audiobooks + repository: https://bjw-s.github.io/helm-charts/ + version: 3.2.1 + - name: postgres-cluster + alias: postgres-16-cluster + version: 3.8.4 + repository: http://alexlebens.github.io/helm-charts +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/readarr.png +appVersion: 0.3.28.2554 diff --git a/clusters/cl01tl/applications/readarr-audiobooks/templates/external-secret.yaml b/clusters/cl01tl/applications/readarr-audiobooks/templates/external-secret.yaml new file mode 100644 index 000000000..c5750c179 --- /dev/null +++ b/clusters/cl01tl/applications/readarr-audiobooks/templates/external-secret.yaml @@ -0,0 +1,89 @@ +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: readarr-audiobooks-config-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: readarr-audiobooks-config-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: backup + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/readarr-audiobooks/readarr-audiobooks-config" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/volsync/restic/config + metadataPolicy: None + property: S3_BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/volsync/restic/config + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/volsync/restic/config + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /aws/keys/cl01tl-volsync-backups + metadataPolicy: None + property: access_key + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /aws/keys/cl01tl-volsync-backups + metadataPolicy: None + property: secret_key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: readarr-audiobooks-postgresql-16-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: readarr-audiobooks-postgresql-16-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /aws/keys/cl01tl-readarr-postgresql + metadataPolicy: None + property: access_key + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /aws/keys/cl01tl-readarr-postgresql + metadataPolicy: None + property: secret_key diff --git a/clusters/cl01tl/applications/readarr-audiobooks/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/readarr-audiobooks/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..7b33c05f8 --- /dev/null +++ b/clusters/cl01tl/applications/readarr-audiobooks/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: readarr-audiobooks-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: readarr-audiobooks-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: readarr-audiobooks-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/readarr-audiobooks/templates/persistent-volume.yaml b/clusters/cl01tl/applications/readarr-audiobooks/templates/persistent-volume.yaml new file mode 100644 index 000000000..4c738451f --- /dev/null +++ b/clusters/cl01tl/applications/readarr-audiobooks/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: readarr-audiobooks-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: readarr-audiobooks-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/readarr-audiobooks/templates/replication-source.yaml b/clusters/cl01tl/applications/readarr-audiobooks/templates/replication-source.yaml new file mode 100644 index 000000000..d1b030162 --- /dev/null +++ b/clusters/cl01tl/applications/readarr-audiobooks/templates/replication-source.yaml @@ -0,0 +1,37 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: readarr-audiobooks-config-backup-source + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: readarr-audiobooks-config-backup-source + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: backup + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + sourcePVC: readarr-audiobooks-config + trigger: + schedule: 0 */6 * * * + restic: + pruneIntervalDays: 7 + repository: readarr-audiobooks-config-backup-secret + retain: + hourly: 1 + daily: 1 + weekly: 3 + monthly: 2 + yearly: 4 + moverSecurityContext: + runAsUser: 568 + runAsGroup: 568 + fsGroup: 568 + fsGroupChangePolicy: OnRootMismatch + supplementalGroups: + - 44 + - 100 + - 109 + - 65539 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/readarr-audiobooks/templates/service-monitor.yaml b/clusters/cl01tl/applications/readarr-audiobooks/templates/service-monitor.yaml new file mode 100644 index 000000000..ee04a02fc --- /dev/null +++ b/clusters/cl01tl/applications/readarr-audiobooks/templates/service-monitor.yaml @@ -0,0 +1,21 @@ +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: readarr-audiobooks + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: readarr-audiobooks + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: readarr-audiobooks + app.kubernetes.io/instance: {{ .Release.Name }} + endpoints: + - port: metrics + interval: 3m + scrapeTimeout: 1m + path: /metrics diff --git a/clusters/cl01tl/applications/readarr-audiobooks/values.yaml b/clusters/cl01tl/applications/readarr-audiobooks/values.yaml new file mode 100644 index 000000000..e12c6c4c8 --- /dev/null +++ b/clusters/cl01tl/applications/readarr-audiobooks/values.yaml @@ -0,0 +1,175 @@ +readarr-audiobooks: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + pod: + securityContext: + runAsUser: 568 + runAsGroup: 568 + fsGroup: 568 + fsGroupChangePolicy: OnRootMismatch + supplementalGroups: + - 44 + - 100 + - 109 + - 65539 + containers: + main: + image: + repository: ghcr.io/onedr0p/readarr-develop + tag: 0.3.30.2576 + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: READARR__POSTGRES_MAIN_DB + value: readarr-main + - name: READARR__POSTGRES_LOG_DB + value: readarr-log + - name: READARR__POSTGRES_CACHE_DB + value: readarr-cache + - name: READARR__POSTGRES_HOST + valueFrom: + secretKeyRef: + name: readarr-audiobooks-postgresql-16-cluster-app + key: host + - name: READARR__POSTGRES_PORT + valueFrom: + secretKeyRef: + name: readarr-audiobooks-postgresql-16-cluster-app + key: port + - name: READARR__POSTGRES_USER + valueFrom: + secretKeyRef: + name: readarr-audiobooks-postgresql-16-cluster-app + key: username + - name: READARR__POSTGRES_PASSWORD + valueFrom: + secretKeyRef: + name: readarr-audiobooks-postgresql-16-cluster-app + key: password + probes: + liveness: + enabled: false + custom: true + spec: + exec: + command: + - /usr/bin/env + - bash + - -c + - curl --fail localhost:8787/api/v1/system/status?apiKey=`IFS=\> && while + read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml` + failureThreshold: 5 + initialDelaySeconds: 60 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 10 + resources: + requests: + cpu: 100m + memory: 256Mi + metrics: + image: + repository: ghcr.io/onedr0p/exportarr + tag: v2.0.1 + pullPolicy: IfNotPresent + args: ["readarr"] + env: + - name: URL + value: http://localhost + - name: CONFIG + value: /config/config.xml + - name: PORT + value: 9796 + - name: ENABLE_ADDITIONAL_METRICS + value: false + - name: ENABLE_UNKNOWN_QUEUE_ITEMS + value: false + resources: + requests: + cpu: 100m + memory: 256Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 8787 + protocol: HTTP + metrics: + port: 9796 + targetPort: 9796 + protocol: TCP + ingress: + main: + enabled: true + className: traefik + annotations: + traefik.ingress.kubernetes.io/router.entrypoints: websecure + traefik.ingress.kubernetes.io/router.tls: "true" + cert-manager.io/cluster-issuer: letsencrypt-issuer + hosts: + - host: readarr-audiobooks.alexlebens.net + paths: + - path: / + pathType: Prefix + service: + name: readarr-audiobooks + port: 80 + tls: + - secretName: readarr-audiobooks-secret-tls + hosts: + - readarr-audiobooks.alexlebens.net + persistence: + config: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 20Gi + retain: true + advancedMounts: + main: + main: + - path: /config + readOnly: false + metrics: + - path: /config + readOnly: true + media: + existingClaim: readarr-audiobooks-nfs-storage + advancedMounts: + main: + main: + - path: /mnt/store + readOnly: false +postgres-16-cluster: + mode: standalone + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + prometheusRule: + enabled: false + initdb: + database: app + owner: app + postInitSQL: + - CREATE DATABASE "readarr-main" OWNER "app"; + - CREATE DATABASE "readarr-log" OWNER "app"; + - CREATE DATABASE "readarr-cache" OWNER app; + backup: + enabled: true + endpointURL: https://s3.us-east-2.amazonaws.com + destinationPath: s3://cl01tl-postgresql-backups/readarr-audiobooks + endpointCredentials: readarr-audiobooks-postgresql-16-cluster-backup-secret + backupIndex: 1 + retentionPolicy: 14d