chore: Update manifests after change

2025-12-24 20:12:31 +00:00
parent 6b1d6423e1
commit da3296954f
22 changed files with 630 additions and 24 deletions
--- a/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
@@ -102,6 +102,7 @@ data:
        ceph                            IN      CNAME   traefik-cl01tl
        code-server                     IN      CNAME   traefik-cl01tl
        ephemera                        IN      CNAME   traefik-cl01tl
+        feishin                         IN      CNAME   traefik-cl01tl
        garage-s3                       IN      CNAME   traefik-cl01tl
        garage-webui                    IN      CNAME   traefik-cl01tl
        gatus                           IN      CNAME   traefik-cl01tl
@@ -124,6 +125,7 @@ data:
        listenarr                       IN      CNAME   traefik-cl01tl
        mail                            IN      CNAME   traefik-cl01tl
        n8n                             IN      CNAME   traefik-cl01tl
+        navidrome                       IN      CNAME   traefik-cl01tl
        ntfy                            IN      CNAME   traefik-cl01tl
        objects                         IN      CNAME   traefik-cl01tl
        ollama                          IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
@@ -22,7 +22,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/configMaps: ca1ae3096857637a277dd8fc4536a8a2e830f60b13a7737ce35e587dd1c0f162
+        checksum/configMaps: 0d72ae2a8abbffc7aa6b92f8004bb9909c3dfd10167c2056df64e4d5c614dea2
      labels:
        app.kubernetes.io/controller: main
        app.kubernetes.io/instance: blocky
--- a/clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml
+++ b/clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml
@@ -87,6 +87,33 @@ data:
      interval: 30s
      name: tubearchivist
      url: https://tubearchivist.alexlebens.net
+    - alerts:
+      - type: ntfy
+      conditions:
+      - '[STATUS] == 200'
+      - '[CERTIFICATE_EXPIRATION] > 240h'
+      group: core
+      interval: 30s
+      name: navidrome
+      url: https://navidrome.alexlebens.net
+    - alerts:
+      - type: ntfy
+      conditions:
+      - '[STATUS] == 200'
+      - '[CERTIFICATE_EXPIRATION] > 240h'
+      group: core
+      interval: 30s
+      name: feishin
+      url: https://feishin.alexlebens.net
+    - alerts:
+      - type: ntfy
+      conditions:
+      - '[STATUS] == 200'
+      - '[CERTIFICATE_EXPIRATION] > 240h'
+      group: core
+      interval: 30s
+      name: audiobookshelf
+      url: https://audiobookshelf.alexlebens.net
    - alerts:
      - type: ntfy
      conditions:
@@ -105,15 +132,6 @@ data:
      interval: 30s
      name: photoview
      url: https://photoview.alexlebens.net
-    - alerts:
-      - type: ntfy
-      conditions:
-      - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
-      group: core
-      interval: 30s
-      name: audiobookshelf
-      url: https://audiobookshelf.alexlebens.net
    - alerts:
      - type: ntfy
      conditions:
--- a/clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml
+++ b/clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml
@@ -26,7 +26,7 @@ spec:
        app.kubernetes.io/name: gatus
        app.kubernetes.io/instance: gatus
      annotations:
-        checksum/config: a6c43532a3267641707429bcbfbafd95fd086e2ed99ca84c90cac752dd882074
+        checksum/config: e60422d26b228fd76e8325e351f264759f1491f593f751f33793dd2c178df3ec
    spec:
      serviceAccountName: default
      automountServiceAccountToken: false
--- a/clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
+++ b/clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
@@ -62,12 +62,6 @@ data:
    mode: cluster
  services.yaml: |
    - Media:
-        - Plex:
-            icon: sh-plex.webp
-            description: Media server
-            href: https://plex.alexlebens.net
-            siteMonitor: http://plex.plex:32400
-            statusStyle: dot
        - Jellyfin:
            icon: sh-jellyfin.webp
            description: Media server
@@ -98,6 +92,18 @@ data:
            href: https://tubearchivist.alexlebens.net/login
            siteMonitor: http://tubearchivist.tubearchivist:80
            statusStyle: dot
+        - Music:
+            icon: sh-feishin.webp
+            description: Feishin
+            href: https://feishin.alexlebens.net
+            siteMonitor: http://navidrome-feishin.navidrome:80
+            statusStyle: dot
+        - Podcasts and Audiobooks:
+            icon: sh-audiobookshelf.webp
+            description: Audiobookshelf
+            href: https://audiobookshelf.alexlebens.net
+            siteMonitor: http://audiobookshelf.audiobookshelf:80
+            statusStyle: dot
        - Photos:
            icon: sh-immich.webp
            description: Immich
@@ -110,12 +116,6 @@ data:
            href: https://photoview.alexlebens.net
            siteMonitor: http://photoview.photoview:80
            statusStyle: dot
-        - Podcasts and Audiobooks:
-            icon: sh-audiobookshelf.webp
-            description: Audiobookshelf
-            href: https://audiobookshelf.alexlebens.net
-            siteMonitor: http://audiobookshelf.audiobookshelf:80
-            statusStyle: dot
        - Books:
            icon: sh-booklore.webp
            description: Booklore
--- a/clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
+++ b/clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
@@ -24,7 +24,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/configMaps: c16ee2840048690a8d35c3758e398da07fd7be50b7e003b5eae19bddc1b39a52
+        checksum/configMaps: b1e2b03622fb55bc6de050a2d7717df58866011e3ae1c77bbd4a96a93e0a2285
        checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
      labels:
        app.kubernetes.io/controller: main
--- a/clusters/cl01tl/manifests/navidrome/Deployment-navidrome-feishin.yaml
+++ b/clusters/cl01tl/manifests/navidrome/Deployment-navidrome-feishin.yaml
@@ -0,0 +1,48 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: navidrome-feishin
+  labels:
+    app.kubernetes.io/controller: feishin
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome
+    helm.sh/chart: navidrome-4.5.0
+  namespace: navidrome
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: feishin
+      app.kubernetes.io/name: navidrome
+      app.kubernetes.io/instance: navidrome
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/controller: feishin
+        app.kubernetes.io/instance: navidrome
+        app.kubernetes.io/name: navidrome
+    spec:
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers:
+        - env:
+            - name: SERVER_NAME
+              value: talos
+            - name: SERVER_LOCK
+              value: "true"
+            - name: SERVER_TYPE
+              value: navidrome
+            - name: SERVER_URL
+              value: http://navidrome-main.navidrome:80
+          image: ghcr.io/jeffvli/feishin:1.0.1-beta.1@sha256:61239641f23a33f99c2858419b14afb66683f3cd82010363fba92be3993fd894
+          imagePullPolicy: IfNotPresent
+          name: main
--- a/clusters/cl01tl/manifests/navidrome/Deployment-navidrome-main.yaml
+++ b/clusters/cl01tl/manifests/navidrome/Deployment-navidrome-main.yaml
@@ -0,0 +1,76 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: navidrome-main
+  labels:
+    app.kubernetes.io/controller: main
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome
+    helm.sh/chart: navidrome-4.5.0
+  namespace: navidrome
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: main
+      app.kubernetes.io/name: navidrome
+      app.kubernetes.io/instance: navidrome
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/controller: main
+        app.kubernetes.io/instance: navidrome
+        app.kubernetes.io/name: navidrome
+    spec:
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers:
+        - env:
+            - name: ND_MUSICFOLDER
+              value: /music
+            - name: ND_DATAFOLDER
+              value: /data
+            - name: ND_CACHEFOLDER
+              value: /cache
+            - name: ND_BASEURL
+              value: docker
+            - name: ND_ENABLEINSIGHTSCOLLECTOR
+              value: "false"
+            - name: ND_PROMETHEUS_ENABLED
+              value: "true"
+          image: deluan/navidrome:0.59.0@sha256:4edc8a1de3e042f30b78a478325839f4395177eb8201c27543dccc0eba674f23
+          imagePullPolicy: IfNotPresent
+          name: main
+          resources:
+            limits:
+              gpu.intel.com/i915: 1
+            requests:
+              cpu: 10m
+              gpu.intel.com/i915: 1
+              memory: 128Mi
+          volumeMounts:
+            - mountPath: /cache
+              name: cache
+            - mountPath: /data
+              name: data
+            - mountPath: /mnt/store/Music
+              name: music
+              readOnly: true
+      volumes:
+        - emptyDir: {}
+          name: cache
+        - name: data
+          persistentVolumeClaim:
+            claimName: navidrome-data
+        - name: music
+          persistentVolumeClaim:
+            claimName: navidrome-music-nfs-storage
--- a/clusters/cl01tl/manifests/navidrome/ExternalSecret-navidrome-data-backup-secret-external.yaml
+++ b/clusters/cl01tl/manifests/navidrome/ExternalSecret-navidrome-data-backup-secret-external.yaml
@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: navidrome-data-backup-secret-external
+  namespace: navidrome
+  labels:
+    helm.sh/chart: volsync-target-data-0.6.0
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/part-of: navidrome
+    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome-data-backup-secret-external
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/navidrome/navidrome-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/digital-ocean
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/digital-ocean
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_DEFAULT_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_SECRET_ACCESS_KEY
--- a/clusters/cl01tl/manifests/navidrome/ExternalSecret-navidrome-data-backup-secret-local.yaml
+++ b/clusters/cl01tl/manifests/navidrome/ExternalSecret-navidrome-data-backup-secret-local.yaml
@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: navidrome-data-backup-secret-local
+  namespace: navidrome
+  labels:
+    helm.sh/chart: volsync-target-data-0.6.0
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/part-of: navidrome
+    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome-data-backup-secret-local
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/navidrome/navidrome-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-local
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-local
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/manifests/navidrome/ExternalSecret-navidrome-data-backup-secret-remote.yaml
+++ b/clusters/cl01tl/manifests/navidrome/ExternalSecret-navidrome-data-backup-secret-remote.yaml
@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: navidrome-data-backup-secret-remote
+  namespace: navidrome
+  labels:
+    helm.sh/chart: volsync-target-data-0.6.0
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/part-of: navidrome
+    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome-data-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/navidrome/navidrome-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/manifests/navidrome/HTTPRoute-navidrome-feishin.yaml
+++ b/clusters/cl01tl/manifests/navidrome/HTTPRoute-navidrome-feishin.yaml
@@ -0,0 +1,30 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: navidrome-feishin
+  labels:
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome
+    helm.sh/chart: navidrome-4.5.0
+  namespace: navidrome
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - "feishin.alexlebens.net"
+  rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: feishin
+          namespace: navidrome
+          port: 80
+          weight: 100
+      matches:
+        - path:
+            type: PathPrefix
+            value: /
--- a/clusters/cl01tl/manifests/navidrome/HTTPRoute-navidrome-main.yaml
+++ b/clusters/cl01tl/manifests/navidrome/HTTPRoute-navidrome-main.yaml
@@ -0,0 +1,30 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: navidrome-main
+  labels:
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome
+    helm.sh/chart: navidrome-4.5.0
+  namespace: navidrome
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - "navidrome.alexlebens.net"
+  rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: navidrome
+          namespace: navidrome
+          port: 80
+          weight: 100
+      matches:
+        - path:
+            type: PathPrefix
+            value: /
--- a/clusters/cl01tl/manifests/navidrome/PersistentVolume-navidrome-music-nfs-storage.yaml
+++ b/clusters/cl01tl/manifests/navidrome/PersistentVolume-navidrome-music-nfs-storage.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: navidrome-music-nfs-storage
+  namespace: navidrome
+  labels:
+    app.kubernetes.io/name: navidrome-music-nfs-storage
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/part-of: navidrome
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Music
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
--- a/clusters/cl01tl/manifests/navidrome/PersistentVolumeClaim-navidrome-data.yaml
+++ b/clusters/cl01tl/manifests/navidrome/PersistentVolumeClaim-navidrome-data.yaml
@@ -0,0 +1,17 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: navidrome-data
+  labels:
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome
+    helm.sh/chart: navidrome-4.5.0
+  namespace: navidrome
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "10Gi"
+  storageClassName: "ceph-block"
--- a/clusters/cl01tl/manifests/navidrome/PersistentVolumeClaim-navidrome-music-nfs-storage.yaml
+++ b/clusters/cl01tl/manifests/navidrome/PersistentVolumeClaim-navidrome-music-nfs-storage.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: navidrome-music-nfs-storage
+  namespace: navidrome
+  labels:
+    app.kubernetes.io/name: navidrome-music-nfs-storage
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/part-of: navidrome
+spec:
+  volumeName: navidrome-music-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
--- a/clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-external.yaml
+++ b/clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-external.yaml
@@ -0,0 +1,34 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: navidrome-data-backup-source-external
+  namespace: navidrome
+  labels:
+    helm.sh/chart: volsync-target-data-0.6.0
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/part-of: navidrome
+    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome-data-backup
+spec:
+  sourcePVC: navidrome-data
+  trigger:
+    schedule: 0 9 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: navidrome-data-backup-secret-external
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 1000
+      runAsUser: 1000
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi
--- a/clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-local.yaml
+++ b/clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-local.yaml
@@ -0,0 +1,34 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: navidrome-data-backup-source-local
+  namespace: navidrome
+  labels:
+    helm.sh/chart: volsync-target-data-0.6.0
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/part-of: navidrome
+    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome-data-backup
+spec:
+  sourcePVC: navidrome-data
+  trigger:
+    schedule: 0 8 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: navidrome-data-backup-secret-local
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 1000
+      runAsUser: 1000
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi
--- a/clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-remote.yaml
+++ b/clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-remote.yaml
@@ -0,0 +1,34 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: navidrome-data-backup-source-remote
+  namespace: navidrome
+  labels:
+    helm.sh/chart: volsync-target-data-0.6.0
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/part-of: navidrome
+    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome-data-backup
+spec:
+  sourcePVC: navidrome-data
+  trigger:
+    schedule: 0 10 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: navidrome-data-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 1000
+      runAsUser: 1000
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi
--- a/clusters/cl01tl/manifests/navidrome/Service-navidrome-feishin.yaml
+++ b/clusters/cl01tl/manifests/navidrome/Service-navidrome-feishin.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: navidrome-feishin
+  labels:
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome
+    app.kubernetes.io/service: navidrome-feishin
+    helm.sh/chart: navidrome-4.5.0
+  namespace: navidrome
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 9180
+      protocol: TCP
+      name: http
+  selector:
+    app.kubernetes.io/controller: feishin
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/name: navidrome
--- a/clusters/cl01tl/manifests/navidrome/Service-navidrome-main.yaml
+++ b/clusters/cl01tl/manifests/navidrome/Service-navidrome-main.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: navidrome-main
+  labels:
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome
+    app.kubernetes.io/service: navidrome-main
+    helm.sh/chart: navidrome-4.5.0
+  namespace: navidrome
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 4533
+      protocol: TCP
+      name: http
+  selector:
+    app.kubernetes.io/controller: main
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/name: navidrome
--- a/clusters/cl01tl/manifests/navidrome/ServiceMonitor-navidrome.yaml
+++ b/clusters/cl01tl/manifests/navidrome/ServiceMonitor-navidrome.yaml
@@ -0,0 +1,25 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: navidrome
+  labels:
+    app.kubernetes.io/instance: navidrome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: navidrome
+    helm.sh/chart: navidrome-4.5.0
+  namespace: navidrome
+spec:
+  jobLabel: "navidrome"
+  namespaceSelector:
+    matchNames:
+      - navidrome
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: navidrome
+      app.kubernetes.io/name: navidrome
+  endpoints:
+    - interval: 30s
+      path: /metrics
+      port: http
+      scheme: http
+      scrapeTimeout: 15s