migrate

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -0,0 +1,349 @@
+qbittorrent:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      initContainers:
+        init-sysctl:
+          image:
+            repository: busybox
+            tag: 1.37.0
+            pullPolicy: IfNotPresent
+          securityContext:
+            privileged: True
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+          command:
+            - /bin/sh
+          args:
+            - -ec
+            - |
+              sysctl -w net.ipv4.ip_forward=1;
+              sysctl -w net.ipv6.conf.all.disable_ipv6=1
+      containers:
+        qbittorrent:
+          image:
+            repository: ghcr.io/linuxserver/qbittorrent
+            tag: 5.1.4@sha256:a2eedc99b4876916943bd33e7c415efc448f6b514aa39b4f98c1e6472a717301
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: US/Central
+            - name: PUID
+              value: "1000"
+            - name: PGID
+              value: "1000"
+            - name: UMASK_SET
+              value: "002"
+            - name: WEBUI_PORT
+              value: 8080
+            - name: DOCKER_MODS
+              value: ghcr.io/themepark-dev/theme.park:qbittorrent
+            - name: TP_COMMUNITY_THEME
+              value: true
+            - name: TP_THEME
+              value: catppuccin-mocha
+          resources:
+            requests:
+              cpu: 500m
+              memory: 1Gi
+        gluetun:
+          image:
+            repository: ghcr.io/qdm12/gluetun
+            tag: v3.40.3@sha256:ef4a44819a60469682c7b5e69183e6401171891feaa60186652d292c59e41b30
+            pullPolicy: IfNotPresent
+          env:
+            - name: VPN_SERVICE_PROVIDER
+              value: protonvpn
+            - name: VPN_TYPE
+              value: wireguard
+            - name: WIREGUARD_PRIVATE_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: qbittorrent-wireguard-conf
+                  key: private-key
+            - name: VPN_PORT_FORWARDING
+              value: "on"
+            - name: VPN_PORT_FORWARDING_UP_COMMAND
+              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORTS}}" }}"'
+            - name: PORT_FORWARD_ONLY
+              value: "on"
+            - name: FIREWALL_OUTBOUND_SUBNETS
+              value: 192.168.1.0/24,10.244.0.0/16
+            - name: FIREWALL_INPUT_PORTS
+              value: 8080,9022
+            - name: DOT
+              value: "off"
+          securityContext:
+            privileged: True
+            capabilities:
+              add:
+                - NET_ADMIN
+                - SYS_MODULE
+          resources:
+            limits:
+              devic.es/tun: "1"
+            requests:
+              devic.es/tun: "1"
+              cpu: 10m
+              memory: 64Mi
+        exporter:
+          image:
+            repository: esanchezm/prometheus-qbittorrent-exporter
+            tag: v1.6.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: QBITTORRENT_HOST
+              value: localhost
+            - name: QBITTORRENT_PORT
+              value: "8080"
+            - name: EXPORTER_PORT
+              value: "9022"
+            - name: EXPORTER_LOG_LEVEL
+              value: INFO
+          resources:
+            requests:
+              cpu: 10m
+              memory: 64Mi
+    qbit-manage:
+      type: deployment
+      annotations:
+        reloader.stakater.com/auto: "true"
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      initContainers:
+        init-copy-config:
+          image:
+            repository: busybox
+            tag: 1.37.0
+            pullPolicy: IfNotPresent
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+          command:
+            - /bin/sh
+            - -ec
+            - |
+              cp /config/config.yml /app/config/config.yml
+      containers:
+        qbit-manage:
+          image:
+            repository: ghcr.io/stuffanthings/qbit_manage
+            tag: v4.6.4
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: US/Central
+            - name: QBT_SCHEDULE
+              value: 0 * * * *
+            - name: QBT_STARTUP_DELAY
+              value: 360
+            - name: QBT_CONFIG_DIR
+              value: /app/config/
+            - name: QBT_LOGFILE
+              value: /app/var/activity.log
+            - name: QBT_LOG_LEVEL
+              value: INFO
+          resources:
+            requests:
+              cpu: 10m
+              memory: 64Mi
+        apprise-api:
+          image:
+            repository: caronc/apprise
+            tag: 1.2.6
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: US/Central
+            - name: PGID
+              value: "1000"
+            - name: PUID
+              value: "1000"
+            - name: APPRISE_STORAGE_MODE
+              value: memory
+            - name: APPRISE_STATEFUL_MODE
+              value: disabled
+            - name: APPRISE_WORKER_COUNT
+              value: 1
+            - name: APPRISE_STATELESS_URLS
+              valueFrom:
+                secretKeyRef:
+                  name: qbittorrent-qbit-manage-config
+                  key: ntfy-url
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+    qui:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        qui:
+          image:
+            repository: ghcr.io/autobrr/qui
+            tag: v1.7.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: QUI__METRICS_ENABLED
+              value: true
+            - name: QUI__METRICS_HOST
+              value: 0.0.0.0
+            - name: QUI__METRICS_PORT
+              value: 9074
+            - name: QUI__OIDC_ENABLED
+              value: true
+            - name: QUI__OIDC_ISSUER
+              value: https://auth.alexlebens.dev/application/o/qui/
+            - name: QUI__OIDC_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: qui-oidc-secret
+                  key: client
+            - name: QUI__OIDC_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: qui-oidc-secret
+                  key: secret
+            - name: QUI__OIDC_REDIRECT_URL
+              value: https://qui.alexlebens.net/api/auth/oidc/callback
+            - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
+              value: false
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      forceRename: qbittorrent
+      ports:
+        http:
+          port: 8080
+          targetPort: 8080
+          protocol: HTTP
+        health:
+          port: 9999
+          targetPort: 9999
+          protocol: HTTP
+        metrics:
+          port: 9022
+          targetPort: 9022
+          protocol: HTTP
+    qbit-manage:
+      controller: qbit-manage
+      ports:
+        apprise:
+          port: 8000
+          targetPort: 8000
+          protocol: HTTP
+    qui:
+      controller: qui
+      ports:
+        http:
+          port: 80
+          targetPort: 7476
+          protocol: HTTP
+        metrics:
+          port: 9074
+          targetPort: 9074
+          protocol: HTTP
+  persistence:
+    config:
+      type: persistentVolumeClaim
+      existingClaim: qbittorrent-config
+      advancedMounts:
+        main:
+          qbittorrent:
+            - path: /config
+              readOnly: false
+        qbit-manage:
+          qbit-manage:
+            - path: /qbittorrent
+              readOnly: false
+    theme-data:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        main:
+          qbittorrent:
+            - path: /themepark
+              readOnly: false
+    update-script:
+      enabled: true
+      type: configMap
+      name: glutun-update-script
+      defaultMode: 0755
+      advancedMounts:
+        main:
+          gluetun:
+            - path: /gluetun/update.sh
+              subPath: update.sh
+    qbit-manage-config-data:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        qbit-manage:
+          init-copy-config:
+            - path: /app/config
+              readOnly: false
+          qbit-manage:
+            - path: /app/config
+              readOnly: false
+    qbit-manage-config:
+      enabled: true
+      type: configMap
+      name: qbit-manage-config
+      advancedMounts:
+        qbit-manage:
+          init-copy-config:
+            - path: /config/config.yml
+              readOnly: true
+              mountPropagation: None
+              subPath: config.yml
+          qbit-manage:
+            - path: /config/config.yml
+              readOnly: true
+              mountPropagation: None
+              subPath: config.yml
+    qbit-manage-config-var:
+      type: emptyDir
+      advancedMounts:
+        qbit-manage:
+          qbit-manage:
+            - path: /app/var
+              readOnly: false
+    qui-config-data:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        qui:
+          qui:
+            - path: /config
+              readOnly: false
+    storage:
+      type: persistentVolumeClaim
+      existingClaim: qbittorrent-nfs-storage
+      advancedMounts:
+        main:
+          qbittorrent:
+            - path: /mnt/store
+              readOnly: false
+        qbit-manage:
+          qbit-manage:
+            - path: /mnt/store
+              readOnly: false