Update ghcr.io/immich-app/immich-server Docker tag to v1.136.0

clusters/cl01tl/applications/tubearchivist/Chart.yaml

@@ -26,5 +26,8 @@ dependencies:
   - name: valkey
     version: 3.0.22
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
+  - name: elasticsearch
+    version: 22.0.14
+    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 appVersion: v0.5.2

clusters/cl01tl/applications/tubearchivist/templates/external-secret.yaml

@@ -42,6 +42,13 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ELASTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/tubearchivist/env
+        metadataPolicy: None
+        property: ELASTIC_PASSWORD
     - secretKey: username
       remoteRef:
         conversionStrategy: Default

clusters/cl01tl/applications/tubearchivist/values.yaml

@@ -127,3 +127,38 @@ valkey:
     persistence:
       enabled: true
       size: 1Gi
+elasticsearch:
+  global:
+    storageClass: ceph-block
+  image:
+    registry: docker.io
+    repository: bitnami/elasticsearch
+    tag: 8.18.0-debian-12-r2
+  extraEnvVars:
+    - name: discovery.type
+      value: single-node
+    - name: xpack.security.enabled
+      value: "true"
+  extraEnvVarsSecret: tubearchivist-elasticsearch-secret
+  extraConfig:
+    path:
+      repo: /usr/share/elasticsearch/data/snapshot
+  extraVolumes:
+    - name: snapshot
+      nfs:
+        path: /volume2/Storage/TubeArchivist
+        server: synologybond.alexlebens.net
+  extraVolumeMounts:
+    - name: snapshot
+      mountPath: /usr/share/elasticsearch/data/snapshot
+  snapshotRepoPath: /usr/share/elasticsearch/data/snapshot
+  master:
+    masterOnly: false
+    replicaCount: 1
+  data:
+    replicaCount: 0
+  coordinating:
+    replicaCount: 0
+  ingest:
+    enabled: false
+    replicaCount: 0