From abe99a4b404262abe008ecbdebadd157a2f29a79 Mon Sep 17 00:00:00 2001 From: Alex Lebens Date: Tue, 13 May 2025 19:42:34 -0500 Subject: [PATCH] add yamtrack --- .../cl01tl/applications/homepage/values.yaml | 6 + .../cl01tl/applications/yamtrack/Chart.yaml | 30 +++++ .../yamtrack/templates/external-secret.yaml | 87 +++++++++++++++ .../yamtrack/templates/http-route.yaml | 30 +++++ .../cl01tl/applications/yamtrack/values.yaml | 103 ++++++++++++++++++ clusters/cl01tl/services/blocky/values.yaml | 1 + hosts/ps08rp/blocky/config.yml | 1 + hosts/ps09rp/blocky/config.yml | 1 + 8 files changed, 259 insertions(+) create mode 100644 clusters/cl01tl/applications/yamtrack/Chart.yaml create mode 100644 clusters/cl01tl/applications/yamtrack/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/yamtrack/templates/http-route.yaml create mode 100644 clusters/cl01tl/applications/yamtrack/values.yaml diff --git a/clusters/cl01tl/applications/homepage/values.yaml b/clusters/cl01tl/applications/homepage/values.yaml index b6b8e2519..76c5b81ad 100644 --- a/clusters/cl01tl/applications/homepage/values.yaml +++ b/clusters/cl01tl/applications/homepage/values.yaml @@ -136,6 +136,12 @@ homepage: href: https://jellyfin.alexlebens.net siteMonitor: http://jellyfin.jellyfin:80 statusStyle: dot + - Yamtrack: + icon: sh-yamtrack.webp + description: Watched Media Tracking + href: https://yamtrack.alexlebens.net + siteMonitor: http://yamtrack.yamtrack:80 + statusStyle: dot - Youtube Archive: icon: sh-tube-archivist-light.webp description: TubeAchivist diff --git a/clusters/cl01tl/applications/yamtrack/Chart.yaml b/clusters/cl01tl/applications/yamtrack/Chart.yaml new file mode 100644 index 000000000..b75bcde83 --- /dev/null +++ b/clusters/cl01tl/applications/yamtrack/Chart.yaml @@ -0,0 +1,30 @@ +apiVersion: v2 +name: yamtrack +version: 1.0.0 +description: Yamtrack +keywords: + - yamtrack + - media + - jellyfin +home: https://wiki.alexlebens.dev/s/74f31779-734e-42d0-852e-efd57ebdc797 +sources: + - https://github.com/FuzzyGrim/Yamtrack/ + - https://github.com/valkey-io/valkey + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/FuzzyGrim/Yamtrack/pkgs/container/yamtrack + - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template + - https://github.com/bitnami/charts/tree/main/bitnami/valkey + - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: yamtrack + repository: https://bjw-s-labs.github.io/helm-charts/ + version: 3.7.3 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.2.1 + repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm +icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png +appVersion: 0.22.7 diff --git a/clusters/cl01tl/applications/yamtrack/templates/external-secret.yaml b/clusters/cl01tl/applications/yamtrack/templates/external-secret.yaml new file mode 100644 index 000000000..3a91a9d4d --- /dev/null +++ b/clusters/cl01tl/applications/yamtrack/templates/external-secret.yaml @@ -0,0 +1,87 @@ +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: yamtrack-config-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: yamtrack-config-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: SECRET + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/yamtrack/config + metadataPolicy: None + property: SECRET + - secretKey: REDIS_URL + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/yamtrack/config + metadataPolicy: None + property: REDIS_URL + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: yamtrack-oidc-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: yamtrack-oidc-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: SOCIALACCOUNT_PROVIDERS + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /authentik/oidc/yamtrack + metadataPolicy: None + property: SOCIALACCOUNT_PROVIDERS + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: yamtrack-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: yamtrack-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/yamtrack/templates/http-route.yaml b/clusters/cl01tl/applications/yamtrack/templates/http-route.yaml new file mode 100644 index 000000000..1e27ff1d5 --- /dev/null +++ b/clusters/cl01tl/applications/yamtrack/templates/http-route.yaml @@ -0,0 +1,30 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: HTTPRoute +metadata: + name: http-route-yamtrack + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: http-route-yamtrack + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + parentRefs: + - group: gateway.networking.k8s.io + kind: Gateway + name: traefik-gateway + namespace: traefik + hostnames: + - yamtrack.alexlebens.net + rules: + - matches: + - path: + type: PathPrefix + value: / + backendRefs: + - group: '' + kind: Service + name: yamtrack + port: 80 + weight: 100 diff --git a/clusters/cl01tl/applications/yamtrack/values.yaml b/clusters/cl01tl/applications/yamtrack/values.yaml new file mode 100644 index 000000000..9afaad446 --- /dev/null +++ b/clusters/cl01tl/applications/yamtrack/values.yaml @@ -0,0 +1,103 @@ +yamtrack: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: ghcr.io/fuzzygrim/yamtrack + tag: 0.22.7 + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: URLS + value: https://yamtrack.alexlebens.net + - name: REGISTRATION + value: true + - name: SOCIAL_PROVIDERS + value: allauth.socialaccount.providers.openid_connect + - name: SOCIALACCOUNT_PROVIDERS + valueFrom: + secretKeyRef: + name: yamtrack-oidc-secret + key: SOCIALACCOUNT_PROVIDERS + - name: SECRET + valueFrom: + secretKeyRef: + name: yamtrack-config-secret + key: SECRET + - name: REDIS_URL + valueFrom: + secretKeyRef: + name: yamtrack-config-secret + key: REDIS_URL + - name: DB_USER + valueFrom: + secretKeyRef: + name: yamtrack-postgresql-17-cluster-app + key: username + - name: DB_PASSWORD + valueFrom: + secretKeyRef: + name: yamtrack-postgresql-17-cluster-app + key: password + - name: DB_NAME + valueFrom: + secretKeyRef: + name: yamtrack-postgresql-17-cluster-app + key: dbname + - name: DB_HOST + valueFrom: + secretKeyRef: + name: yamtrack-postgresql-17-cluster-app + key: host + - name: DB_PORT + valueFrom: + secretKeyRef: + name: yamtrack-postgresql-17-cluster-app + key: port + resources: + requests: + cpu: 10m + memory: 256Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 8000 + protocol: HTTP +valkey: + architecture: standalone + auth: + enabled: false + usePasswordFiles: false + primary: + persistence: + enabled: true + size: 1Gi + replica: + persistence: + enabled: false +postgres-17-cluster: + mode: standalone + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + backup: + enabled: true + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/yamtrack/yamtrack-postgresql-17-cluster + endpointCredentials: yamtrack-postgresql-17-cluster-backup-secret + backupIndex: 1 diff --git a/clusters/cl01tl/services/blocky/values.yaml b/clusters/cl01tl/services/blocky/values.yaml index 11bb54ea9..55dd54c7b 100644 --- a/clusters/cl01tl/services/blocky/values.yaml +++ b/clusters/cl01tl/services/blocky/values.yaml @@ -155,6 +155,7 @@ blocky: tdarr IN CNAME traefik-cl01tl tubearchivist IN CNAME traefik-cl01tl vault IN CNAME traefik-cl01tl + yamtrack IN CNAME traefik-cl01tl blocking: denylists: diff --git a/hosts/ps08rp/blocky/config.yml b/hosts/ps08rp/blocky/config.yml index 21465e1b1..951cc6ea0 100644 --- a/hosts/ps08rp/blocky/config.yml +++ b/hosts/ps08rp/blocky/config.yml @@ -128,6 +128,7 @@ customDNS: tdarr IN CNAME traefik-cl01tl tubearchivist IN CNAME traefik-cl01tl vault IN CNAME traefik-cl01tl + yamtrack IN CNAME traefik-cl01tl blocking: denylists: diff --git a/hosts/ps09rp/blocky/config.yml b/hosts/ps09rp/blocky/config.yml index 21465e1b1..951cc6ea0 100644 --- a/hosts/ps09rp/blocky/config.yml +++ b/hosts/ps09rp/blocky/config.yml @@ -128,6 +128,7 @@ customDNS: tdarr IN CNAME traefik-cl01tl tubearchivist IN CNAME traefik-cl01tl vault IN CNAME traefik-cl01tl + yamtrack IN CNAME traefik-cl01tl blocking: denylists: