migrate

2025-12-01 20:50:19 -06:00
parent 6da426af29
commit b52d76cc58
207 changed files with 294 additions and 0 deletions
--- a/clusters/cl01tl/helm/qbittorrent/templates/config-map.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/templates/config-map.yaml
@@ -0,0 +1,186 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: glutun-update-script
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: glutun-update-script
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+data:
+  update.sh: |
+    if ! command -v curl 2>&1 >/dev/null
+    then
+        echo "curl could not be found, installing";
+        apk add curl;
+    fi;
+    echo "updating port with $1";
+    curl -i -X POST -d "json={\"listen_port\": \"${1}\"}" "http://localhost:8080/api/v2/app/setPreferences";
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: qbit-manage-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbit-manage-config
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+data:
+  config.yml: |
+    # Please refer to the link below for more details on how to set up the configuration file
+    # https://github.com/StuffAnThings/qbit_manage/wiki/Config-Setup
+
+    commands:
+      dry_run: false
+      recheck: true
+      cat_update: true
+      tag_update: true
+      rem_unregistered: true
+      tag_tracker_error: true
+      rem_orphaned: true
+      tag_nohardlinks: false
+      share_limits: true
+      skip_qb_version_check: true
+      skip_cleanup: false
+
+    qbt:
+      host: qbittorrent.qbittorrent:8080
+      user:
+      pass:
+
+    settings:
+      force_auto_tmm: true
+      tracker_error_tag: tracker-error
+      share_limits_tag: share-limit
+      share_limits_min_seeding_time_tag: seed-time-not-reached
+      cat_filter_completed: false
+      share_limits_filter_completed: false
+      rem_unregistered_filter_completed: false
+      cat_update_all: true
+      disable_qbt_default_share_limits: true
+      tag_stalled_torrents: true
+      nohardlinks_tag: no-hardlinks
+      stalled_tag: stalled
+      share_limits_min_num_seeds_tag: min-seeds-not-reached
+      share_limits_last_active_tag: last-active-not-reached
+      tag_nohardlinks_filter_completed: true
+      force_auto_tmm_ignore_tags: []
+      rem_unregistered_ignore_list: []
+
+    directory:
+      root_dir: /mnt/store/Torrent/
+      recycle_bin: /qbittorrent/Trash
+      torrents_dir: /qbittorrent/qBittorrent/BT_backup
+      orphaned_dir: /qbittorrent/Orphaned
+
+    cat:
+      lidarr: /mnt/store/Torrent/FINISHED/LIDARR
+      prowlarr: /mnt/store/Torrent/FINISHED/SAVE
+      radarr: /mnt/store/Torrent/FINISHED/RADARR
+      radarr-4k: /mnt/store/Torrent/FINISHED/RADARR4K
+      radarr-anime: /mnt/store/Torrent/FINISHED/RADARRANIME
+      radarr-standup: /mnt/store/Torrent/FINISHED/RADARRSTANDUP
+      sonarr: /mnt/store/Torrent/FINISHED/SONARR
+      sonarr-4k: /mnt/store/Torrent/FINISHED/SONARR4K
+      sonarr-anime: /mnt/store/Torrent/FINISHED/SONARRANIME
+      -< ZIM: /mnt/store/Kiwix
+      -< SAVE: /mnt/store/Torrent/FINISHED/SAVE
+      -< IMPORT: /mnt/store/Torrent/FINISHED/IMPORT
+      -< COMPLETED: /mnt/store/Torrent/FINISHED/COMPLETED
+
+    tracker:
+      alpharatio.cc:
+        tag: AlphaRatio
+      avistaz:
+        tag: Avistaz
+      cathode-ray.tube:
+        tag: CathodeRayTube
+      mvgroup.org:
+        tag: MVGroup
+      torrentleech|tleechreload:
+        tag: TorrentLeech
+      archive.org:
+        tag: InternetArchive
+      openzim.org:
+        tag: Zim
+      coppersurfer.tk|arenabg.com|explodie.org|tfile.co|1337x.org|zer0day.to|i2p.rocks|ccc.de|nwps.ws|opentrackr.org:
+        tag: Other
+
+    share_limits:
+      private:
+        priority: 1
+        include_any_tags:
+        - AlphaRatio
+        - TorrentLeech
+        categories:
+        - -< COMPLETED
+        max_ratio: 2.0
+        min_seeding_time: 14d
+        max_seeding_time: 30d
+        min_num_seeds: 2
+        last_active: 3d
+        cleanup: true
+      # save:
+      #   priority: 2
+      #   categories:
+      #   - -< SAVE
+      #   max_ratio: 2.0
+      #   min_seeding_time: 14d
+      #   max_seeding_time: 30d
+      #   min_num_seeds: 2
+      #   last_active: 30d
+      #   cleanup: false
+      # zim:
+      #   priority: 3
+      #   categories:
+      #   - -< ZIM
+      #   max_ratio: 2.0
+      #   min_seeding_time: 14d
+      #   max_seeding_time: 30d
+      #   min_num_seeds: 2
+      #   last_active: 30d
+      #   cleanup: false
+      default:
+        priority: 999
+        include_any_tags:
+        - Other
+        categories:
+        - -< COMPLETED
+        max_seeding_time: 3d
+        limit_upload_speed: 100
+        cleanup: true
+
+    recyclebin:
+      enabled: true
+      empty_after_x_days: 7
+      save_torrents: true
+      split_by_category: true
+
+    orphaned:
+      empty_after_x_days: 30
+      exclude_patterns:
+      - /mnt/store/Torrent/QBITTORRENT/*
+      - /mnt/store/Torrent/TORRENT/*
+      - /mnt/store/Torrent/DOWNLOADING/*
+      - '**/.DS_Store'
+      - '**/Thumbs.db'
+      - '**/@eaDir'
+      - '**/*.!qB'
+      - '**/*_unpackerred'
+      max_orphaned_files_to_delete: 50
+
+    # apprise:
+    #   api_url: http://localhost:8000/notify
+    #   notify_url: ""
+    #
+    # webhooks:
+    #   error: apprise
+    #   run_start: apprise
+    #   run_end: apprise
+    #   function:
+    #     rem_orphaned: apprise
+    #     cleanup_dirs: apprise
+    #     tag_tracker_error:
+    #     share_limits:
--- a/clusters/cl01tl/helm/qbittorrent/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/templates/external-secret.yaml
@@ -0,0 +1,74 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: qbittorrent-wireguard-conf
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent-wireguard-conf
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: private-key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: private-key
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: qbittorrent-qbit-manage-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent-qbit-manage-config
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ntfy-url
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/qbittorrent/qbit-manage
+        metadataPolicy: None
+        property: ntfy-url
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: qui-oidc-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qui-oidc-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: secret
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /authentik/oidc/qui
+        metadataPolicy: None
+        property: secret
+    - secretKey: client
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /authentik/oidc/qui
+        metadataPolicy: None
+        property: client
--- a/clusters/cl01tl/helm/qbittorrent/templates/http-route.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/templates/http-route.yaml
@@ -0,0 +1,58 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: http-route-qbittorrent
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: http-route-qbittorrent
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - qbittorrent.alexlebens.net
+  rules:
+    - matches:
+      - path:
+          type: PathPrefix
+          value: /
+      backendRefs:
+        - group: ''
+          kind: Service
+          name: qbittorrent
+          port: 8080
+          weight: 100
+
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: http-route-qui
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: http-route-qui
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - qui.alexlebens.net
+  rules:
+    - matches:
+      - path:
+          type: PathPrefix
+          value: /
+      backendRefs:
+        - group: ''
+          kind: Service
+          name: qbittorrent-qui
+          port: 80
+          weight: 100
--- a/clusters/cl01tl/helm/qbittorrent/templates/namespace.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/templates/namespace.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: qbittorrent
+  labels:
+    app.kubernetes.io/name: qbittorrent
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/warn: privileged
--- a/clusters/cl01tl/helm/qbittorrent/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/templates/persistent-volume-claim.yaml
@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: qbittorrent-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent-config
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: qbittorrent-config
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: qbittorrent-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: qbittorrent-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
--- a/clusters/cl01tl/helm/qbittorrent/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/templates/persistent-volume.yaml
@@ -0,0 +1,48 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: qbittorrent-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent-config
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Torrent/QBITTORRENT
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: qbittorrent-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
--- a/clusters/cl01tl/helm/qbittorrent/templates/service-monitor.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/templates/service-monitor.yaml
@@ -0,0 +1,64 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: qbittorrent
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  endpoints:
+    - port: metrics
+      interval: 30s
+      scrapeTimeout: 15s
+      path: /metrics
+  selector:
+    matchLabels:
+      app.kubernetes.io/service: qbittorrent
+      app.kubernetes.io/name: {{ .Release.Name }}
+      app.kubernetes.io/instance: {{ .Release.Name }}
+
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: qbittorrent-apprise
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent-apprise
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  endpoints:
+    - port: apprise
+      interval: 30s
+      scrapeTimeout: 15s
+      path: /metrics
+  selector:
+    matchLabels:
+      app.kubernetes.io/service: qbittorrent-qbit-manage
+      app.kubernetes.io/name: {{ .Release.Name }}
+      app.kubernetes.io/instance: {{ .Release.Name }}
+
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: qbittorrent-qui
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: qbittorrent-qui
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  endpoints:
+    - port: metrics
+      interval: 30s
+      scrapeTimeout: 15s
+      path: /metrics
+  selector:
+    matchLabels:
+      app.kubernetes.io/service: qbittorrent-qui
+      app.kubernetes.io/name: {{ .Release.Name }}
+      app.kubernetes.io/instance: {{ .Release.Name }}