diff --git a/clusters/cl01tl/applications/photoview/Chart.yaml b/clusters/cl01tl/applications/photoview/Chart.yaml new file mode 100644 index 000000000..6915ebff1 --- /dev/null +++ b/clusters/cl01tl/applications/photoview/Chart.yaml @@ -0,0 +1,28 @@ +apiVersion: v2 +name: photoview +version: 1.0.0 +description: Photoview +keywords: + - photoview + - pictures +home: https://wiki.alexlebens.dev/doc/photoview-WSRscnhpwv +sources: + - https://github.com/immich-app/immich + - https://github.com/valkey-io/valkey + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/bitnami/charts/tree/main/bitnami/valkey + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: photoview + repository: https://bjw-s.github.io/helm-charts/ + version: 3.7.1 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.2.0 + repository: http://alexlebens.github.io/helm-charts +icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png +appVersion: 2.4.0 diff --git a/clusters/cl01tl/applications/photoview/templates/external-secrets.yaml b/clusters/cl01tl/applications/photoview/templates/external-secrets.yaml new file mode 100644 index 000000000..6fac32ec5 --- /dev/null +++ b/clusters/cl01tl/applications/photoview/templates/external-secrets.yaml @@ -0,0 +1,30 @@ +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: photoview-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: photoview-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/photoview/templates/http-route.yaml b/clusters/cl01tl/applications/photoview/templates/http-route.yaml new file mode 100644 index 000000000..1858b2d13 --- /dev/null +++ b/clusters/cl01tl/applications/photoview/templates/http-route.yaml @@ -0,0 +1,30 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: HTTPRoute +metadata: + name: http-route-photoview + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: http-route-photoview + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + parentRefs: + - group: gateway.networking.k8s.io + kind: Gateway + name: traefik-gateway + namespace: traefik + hostnames: + - photoview.alexlebens.net + rules: + - matches: + - path: + type: PathPrefix + value: / + backendRefs: + - group: '' + kind: Service + name: photoview + port: 80 + weight: 100 diff --git a/clusters/cl01tl/applications/photoview/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/photoview/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..191161483 --- /dev/null +++ b/clusters/cl01tl/applications/photoview/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: photoview-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: photoview-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: photoview-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/photoview/templates/persistent-volume.yaml b/clusters/cl01tl/applications/photoview/templates/persistent-volume.yaml new file mode 100644 index 000000000..bcf22883d --- /dev/null +++ b/clusters/cl01tl/applications/photoview/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: photoview-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: photoview-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage/Pictures + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/photoview/values.yaml b/clusters/cl01tl/applications/photoview/values.yaml new file mode 100644 index 000000000..cbaf437a4 --- /dev/null +++ b/clusters/cl01tl/applications/photoview/values.yaml @@ -0,0 +1,96 @@ +photoview: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + initContainers: + init-chmod-data: + securityContext: + runAsUser: 0 + image: + repository: busybox + tag: 1.37.0 + pullPolicy: IfNotPresent + command: + - /bin/sh + - -ec + - | + /bin/chown -R 999:999 /app/cache + resources: + requests: + cpu: 100m + memory: 128Mi + containers: + main: + image: + repository: photoview/photoview + tag: 2.4.0 + pullPolicy: IfNotPresent + env: + - name: PHOTOVIEW_DATABASE_DRIVER + value: postgres + - name: PHOTOVIEW_POSTGRES_URL + valueFrom: + secretKeyRef: + name: photoview-postgresql-17-cluster-app + key: uri + - name: PHOTOVIEW_MEDIA_CACHE + value: /app/cache + resources: + requests: + cpu: 10m + memory: 512Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 80 + protocol: HTTP + persistence: + media: + existingClaim: photoview-nfs-storage + advancedMounts: + main: + main: + - path: /photos + readOnly: true + cache: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 10Gi + retain: false + advancedMounts: + main: + init-chmod-data: + - path: /app/cache + readOnly: false + main: + - path: /app/cache + readOnly: false +postgres-17-cluster: + mode: recovery + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + recovery: + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster + endpointCredentials: photoview-postgresql-17-cluster-backup-secret + recoveryIndex: 2 + backup: + enabled: false + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster + endpointCredentials: photoview-postgresql-17-cluster-backup-secret + backupIndex: 3 + retentionPolicy: "7d"