Compare commits
1 Commits
main
...
c3bfc4f554
| Author | SHA1 | Date | |
|---|---|---|---|
|
c3bfc4f554
|
@@ -157,7 +157,6 @@ blocky:
|
|||||||
sonarr IN CNAME traefik-cl01tl
|
sonarr IN CNAME traefik-cl01tl
|
||||||
sonarr-4k IN CNAME traefik-cl01tl
|
sonarr-4k IN CNAME traefik-cl01tl
|
||||||
sonarr-anime IN CNAME traefik-cl01tl
|
sonarr-anime IN CNAME traefik-cl01tl
|
||||||
spotisub IN CNAME traefik-cl01tl
|
|
||||||
stalwart IN CNAME traefik-cl01tl
|
stalwart IN CNAME traefik-cl01tl
|
||||||
tdarr IN CNAME traefik-cl01tl
|
tdarr IN CNAME traefik-cl01tl
|
||||||
tubearchivist IN CNAME traefik-cl01tl
|
tubearchivist IN CNAME traefik-cl01tl
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
dependencies:
|
dependencies:
|
||||||
- name: cilium
|
- name: cilium
|
||||||
repository: https://helm.cilium.io/
|
repository: https://helm.cilium.io/
|
||||||
version: 1.18.6
|
version: 1.19.0
|
||||||
digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
|
digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
|
||||||
generated: "2026-02-05T12:00:20.15778-06:00"
|
generated: "2026-02-06T04:05:13.83511088Z"
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ maintainers:
|
|||||||
- name: alexlebens
|
- name: alexlebens
|
||||||
dependencies:
|
dependencies:
|
||||||
- name: cilium
|
- name: cilium
|
||||||
version: 1.18.6
|
version: 1.19.0
|
||||||
repository: https://helm.cilium.io/
|
repository: https://helm.cilium.io/
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
|
||||||
# renovate: datasource=github-releases depName=cilium/cilium
|
# renovate: datasource=github-releases depName=cilium/cilium
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
dependencies:
|
dependencies:
|
||||||
- name: external-secrets
|
- name: external-secrets
|
||||||
repository: https://charts.external-secrets.io
|
repository: https://charts.external-secrets.io
|
||||||
version: 2.0.0
|
version: 1.3.2
|
||||||
digest: sha256:3833a9f099d80f50e8a7c9874138b9eba42c18fe5f5f5dc605031f7c44bd3971
|
digest: sha256:7b7c6dee59f2ea630f0e7a1124aeeda52cdff23769136300384b28210e03945a
|
||||||
generated: "2026-02-06T15:40:39.917039721Z"
|
generated: "2026-02-03T21:41:32.061135319Z"
|
||||||
|
|||||||
@@ -12,8 +12,8 @@ sources:
|
|||||||
- https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
|
- https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
|
||||||
dependencies:
|
dependencies:
|
||||||
- name: external-secrets
|
- name: external-secrets
|
||||||
version: 2.0.0
|
version: 1.3.2
|
||||||
repository: https://charts.external-secrets.io
|
repository: https://charts.external-secrets.io
|
||||||
icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
|
icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
|
||||||
# renovate: datasource=github-releases depName=external-secrets/external-secrets
|
# renovate: datasource=github-releases depName=external-secrets/external-secrets
|
||||||
appVersion: v2.0.0
|
appVersion: v1.3.2
|
||||||
|
|||||||
@@ -88,7 +88,7 @@ freshrss:
|
|||||||
- name: PUID
|
- name: PUID
|
||||||
value: "568"
|
value: "568"
|
||||||
- name: TZ
|
- name: TZ
|
||||||
value: America/Chicago
|
value: US/Central
|
||||||
- name: FRESHRSS_ENV
|
- name: FRESHRSS_ENV
|
||||||
value: production
|
value: production
|
||||||
- name: CRON_MIN
|
- name: CRON_MIN
|
||||||
|
|||||||
@@ -310,9 +310,6 @@ gatus:
|
|||||||
- name: lidarr
|
- name: lidarr
|
||||||
url: https://lidarr.alexlebens.net
|
url: https://lidarr.alexlebens.net
|
||||||
<<: *defaults
|
<<: *defaults
|
||||||
- name: spotisub
|
|
||||||
url: https://spotisub.alexlebens.net
|
|
||||||
<<: *defaults
|
|
||||||
- name: yubal-playlist
|
- name: yubal-playlist
|
||||||
url: https://yubal-playlist.alexlebens.net
|
url: https://yubal-playlist.alexlebens.net
|
||||||
<<: *defaults
|
<<: *defaults
|
||||||
|
|||||||
@@ -661,12 +661,6 @@ homepage:
|
|||||||
href: https://yubal-playlist.alexlebens.net
|
href: https://yubal-playlist.alexlebens.net
|
||||||
siteMonitor: http://yubal-playlist.yubal-playlist:80
|
siteMonitor: http://yubal-playlist.yubal-playlist:80
|
||||||
statusStyle: dot
|
statusStyle: dot
|
||||||
- Spotisub:
|
|
||||||
icon: sh-spotify.webp
|
|
||||||
description: Replicate Spotify playlist
|
|
||||||
href: https://spotisub.alexlebens.net
|
|
||||||
siteMonitor: http://spotisub.spotisub:80
|
|
||||||
statusStyle: dot
|
|
||||||
- slskd:
|
- slskd:
|
||||||
icon: sh-slskd.webp
|
icon: sh-slskd.webp
|
||||||
description: slskd
|
description: slskd
|
||||||
|
|||||||
@@ -47,33 +47,3 @@ spec:
|
|||||||
key: /authentik/oidc/komodo
|
key: /authentik/oidc/komodo
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
property: secret
|
property: secret
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: komodo-postgresql-17-fdb-cluster-ferret
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster-ferret
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
data:
|
|
||||||
- secretKey: uri
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /cl01tl/komodo/ferret
|
|
||||||
metadataPolicy: None
|
|
||||||
property: uri
|
|
||||||
- secretKey: password
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /cl01tl/komodo/ferret
|
|
||||||
metadataPolicy: None
|
|
||||||
property: password
|
|
||||||
|
|||||||
@@ -2,7 +2,7 @@ komodo:
|
|||||||
controllers:
|
controllers:
|
||||||
main:
|
main:
|
||||||
type: deployment
|
type: deployment
|
||||||
replicas: 1
|
replicas: 0
|
||||||
strategy: Recreate
|
strategy: Recreate
|
||||||
revisionHistoryLimit: 3
|
revisionHistoryLimit: 3
|
||||||
containers:
|
containers:
|
||||||
@@ -53,11 +53,14 @@ komodo:
|
|||||||
- name: PERIPHERY_SSL_ENABLED
|
- name: PERIPHERY_SSL_ENABLED
|
||||||
value: false
|
value: false
|
||||||
- name: DB_USERNAME
|
- name: DB_USERNAME
|
||||||
value: ferret
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: komodo-postgresql-17-fdb-cluster-app
|
||||||
|
key: user
|
||||||
- name: DB_PASSWORD
|
- name: DB_PASSWORD
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: komodo-postgresql-17-fdb-cluster-ferret
|
name: komodo-postgresql-17-fdb-cluster-app
|
||||||
key: password
|
key: password
|
||||||
- name: KOMODO_DATABASE_URI
|
- name: KOMODO_DATABASE_URI
|
||||||
value: mongodb://$(DB_USERNAME):$(DB_PASSWORD)@komodo-ferretdb-2.komodo:27017/komodo
|
value: mongodb://$(DB_USERNAME):$(DB_PASSWORD)@komodo-ferretdb-2.komodo:27017/komodo
|
||||||
@@ -85,7 +88,7 @@ komodo:
|
|||||||
memory: 128Mi
|
memory: 128Mi
|
||||||
ferretdb-2:
|
ferretdb-2:
|
||||||
type: deployment
|
type: deployment
|
||||||
replicas: 1
|
replicas: 0
|
||||||
strategy: Recreate
|
strategy: Recreate
|
||||||
revisionHistoryLimit: 3
|
revisionHistoryLimit: 3
|
||||||
containers:
|
containers:
|
||||||
@@ -95,15 +98,11 @@ komodo:
|
|||||||
tag: 2.7.0
|
tag: 2.7.0
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: DB_USERNAME
|
- name: FERRETDB_POSTGRESQL_URL
|
||||||
value: ferret
|
|
||||||
- name: DB_PASSWORD
|
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: komodo-postgresql-17-fdb-cluster-ferret
|
name: komodo-postgresql-17-fdb-cluster-app
|
||||||
key: password
|
key: uri
|
||||||
- name: FERRETDB_POSTGRESQL_URL
|
|
||||||
value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
|
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
cpu: 10m
|
cpu: 10m
|
||||||
@@ -167,7 +166,7 @@ komodo:
|
|||||||
readOnly: false
|
readOnly: false
|
||||||
postgresql-17-fdb-cluster:
|
postgresql-17-fdb-cluster:
|
||||||
nameOverride: komodo-postgresql-17-fdb
|
nameOverride: komodo-postgresql-17-fdb
|
||||||
mode: recovery
|
mode: standalone
|
||||||
cluster:
|
cluster:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/ferretdb/postgres-documentdb
|
repository: ghcr.io/ferretdb/postgres-documentdb
|
||||||
@@ -176,7 +175,7 @@ postgresql-17-fdb-cluster:
|
|||||||
postgresGID: 999
|
postgresGID: 999
|
||||||
postgresql:
|
postgresql:
|
||||||
parameters:
|
parameters:
|
||||||
cron.database_name: 'ferretDB'
|
cron.database_name: 'app'
|
||||||
documentdb.enableCompact: "true"
|
documentdb.enableCompact: "true"
|
||||||
documentdb.enableLetAndCollationForQueryMatch: "true"
|
documentdb.enableLetAndCollationForQueryMatch: "true"
|
||||||
documentdb.enableNowSystemVariable: "true"
|
documentdb.enableNowSystemVariable: "true"
|
||||||
@@ -189,19 +188,19 @@ postgresql-17-fdb-cluster:
|
|||||||
max_slot_wal_keep_size: 2000MB
|
max_slot_wal_keep_size: 2000MB
|
||||||
hot_standby_feedback: "on"
|
hot_standby_feedback: "on"
|
||||||
pg_hba:
|
pg_hba:
|
||||||
- host ferretDB postgres localhost trust
|
- host app postgres localhost trust
|
||||||
- host ferretDB ferret localhost trust
|
- host app app localhost trust
|
||||||
shared_preload_libraries:
|
shared_preload_libraries:
|
||||||
- pg_cron
|
- pg_cron
|
||||||
- pg_documentdb_core
|
- pg_documentdb_core
|
||||||
- pg_documentdb
|
- pg_documentdb
|
||||||
initdb:
|
initdb:
|
||||||
database: ferretDB
|
database: app
|
||||||
owner: ferret
|
owner: app
|
||||||
postInitApplicationSQL:
|
postInitApplicationSQL:
|
||||||
- CREATE EXTENSION IF NOT EXISTS pg_cron;
|
- create extension if not exists pg_cron;
|
||||||
- CREATE EXTENSION IF NOT EXISTS documentdb CASCADE;
|
- create extension if not exists documentdb cascade;
|
||||||
- GRANT documentdb_admin_role TO ferret;
|
- grant documentdb_admin_role to app;
|
||||||
recovery:
|
recovery:
|
||||||
method: objectStore
|
method: objectStore
|
||||||
objectStore:
|
objectStore:
|
||||||
@@ -228,7 +227,7 @@ postgresql-17-fdb-cluster:
|
|||||||
# isWALArchiver: false
|
# isWALArchiver: false
|
||||||
scheduledBackups:
|
scheduledBackups:
|
||||||
- name: live-backup
|
- name: live-backup
|
||||||
suspend: false
|
suspend: true
|
||||||
immediate: true
|
immediate: true
|
||||||
schedule: "0 0 0 * * *"
|
schedule: "0 0 0 * * *"
|
||||||
backupName: garage-local
|
backupName: garage-local
|
||||||
|
|||||||
@@ -31,4 +31,4 @@ dependencies:
|
|||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
|
||||||
# renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
|
# renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
|
||||||
appVersion: v0.89.0
|
appVersion: v0.88.1
|
||||||
|
|||||||
@@ -31,4 +31,4 @@ dependencies:
|
|||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
|
||||||
# renovate: datasource=github-releases depName=ollama/ollama
|
# renovate: datasource=github-releases depName=ollama/ollama
|
||||||
appVersion: 0.15.5
|
appVersion: 0.15.4
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
dependencies:
|
dependencies:
|
||||||
- name: prometheus-operator-crds
|
- name: prometheus-operator-crds
|
||||||
repository: oci://ghcr.io/prometheus-community/charts
|
repository: oci://ghcr.io/prometheus-community/charts
|
||||||
version: 27.0.0
|
version: 26.0.0
|
||||||
digest: sha256:ab76a45fb53268d4afdad507277c244af11c50344e50a24799182bbd9757258d
|
digest: sha256:fb73bc68bbf8ab128ff7fc641413ce3f004677d351038517ed68f5b39eeafb08
|
||||||
generated: "2026-02-06T14:05:22.069162277Z"
|
generated: "2026-01-09T20:11:58.398634666Z"
|
||||||
|
|||||||
@@ -15,8 +15,8 @@ maintainers:
|
|||||||
- name: alexlebens
|
- name: alexlebens
|
||||||
dependencies:
|
dependencies:
|
||||||
- name: prometheus-operator-crds
|
- name: prometheus-operator-crds
|
||||||
version: 27.0.0
|
version: 26.0.0
|
||||||
repository: oci://ghcr.io/prometheus-community/charts
|
repository: oci://ghcr.io/prometheus-community/charts
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
|
||||||
# renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
|
# renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
|
||||||
appVersion: v0.89.0
|
appVersion: v0.88.1
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ searxng:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: searxng/searxng
|
repository: searxng/searxng
|
||||||
tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
|
tag: latest@sha256:8d77102a0d2c615e88c5184868dc2c32cd361413dbc104abc301f54079fd40a2
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: SEARXNG_BASE_URL
|
- name: SEARXNG_BASE_URL
|
||||||
@@ -39,7 +39,7 @@ searxng:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: searxng/searxng
|
repository: searxng/searxng
|
||||||
tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
|
tag: latest@sha256:8d77102a0d2c615e88c5184868dc2c32cd361413dbc104abc301f54079fd40a2
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: SEARXNG_BASE_URL
|
- name: SEARXNG_BASE_URL
|
||||||
|
|||||||
@@ -23,4 +23,4 @@ dependencies:
|
|||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp
|
||||||
# renovate: datasource=github-releases depName=calibrain/shelfmark
|
# renovate: datasource=github-releases depName=calibrain/shelfmark
|
||||||
appVersion: v1.0.4
|
appVersion: v1.0.3
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ shelfmark:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/calibrain/shelfmark
|
repository: ghcr.io/calibrain/shelfmark
|
||||||
tag: v1.0.4
|
tag: v1.0.3
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: FLASK_PORT
|
- name: FLASK_PORT
|
||||||
|
|||||||
@@ -1,6 +0,0 @@
|
|||||||
dependencies:
|
|
||||||
- name: app-template
|
|
||||||
repository: https://bjw-s-labs.github.io/helm-charts/
|
|
||||||
version: 4.6.2
|
|
||||||
digest: sha256:3b63381e4968f95ce2d99fae620f3d1ae6af295b1bacc4ed0fbe9f1ccb0e9405
|
|
||||||
generated: "2026-02-06T11:04:57.311195-06:00"
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
apiVersion: v2
|
|
||||||
name: spotisub
|
|
||||||
version: 1.0.0
|
|
||||||
description: Spotisub
|
|
||||||
keywords:
|
|
||||||
- spotisub
|
|
||||||
- music
|
|
||||||
- spotify
|
|
||||||
home: https://wiki.alexlebens.dev/s/
|
|
||||||
sources:
|
|
||||||
- https://github.com/blastbeng/spotisub
|
|
||||||
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
|
|
||||||
maintainers:
|
|
||||||
- name: alexlebens
|
|
||||||
dependencies:
|
|
||||||
- name: app-template
|
|
||||||
alias: spotisub
|
|
||||||
repository: https://bjw-s-labs.github.io/helm-charts/
|
|
||||||
version: 4.6.2
|
|
||||||
# renovate: datasource=github-releases depName=blastbeng/spotisub
|
|
||||||
appVersion: v0.3.6
|
|
||||||
@@ -1,93 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: spotisub-config-secret
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: spotisub-config-secret
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
data:
|
|
||||||
- secretKey: spotify-client-id
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /spotify/andrew
|
|
||||||
metadataPolicy: None
|
|
||||||
property: client-id
|
|
||||||
- secretKey: spotify-client-secret
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /spotify/andrew
|
|
||||||
metadataPolicy: None
|
|
||||||
property: client-secret
|
|
||||||
- secretKey: spotify-redirect-uri
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /spotify/andrew
|
|
||||||
metadataPolicy: None
|
|
||||||
property: redirect-uri
|
|
||||||
- secretKey: subsonic-user
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /cl01tl/navidrome/andrew
|
|
||||||
metadataPolicy: None
|
|
||||||
property: user
|
|
||||||
- secretKey: subsonic-password
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /cl01tl/navidrome/andrew
|
|
||||||
metadataPolicy: None
|
|
||||||
property: password
|
|
||||||
- secretKey: lidarr-key
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /cl01tl/lidarr2/key
|
|
||||||
metadataPolicy: None
|
|
||||||
property: key
|
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: spotisub-wireguard-conf
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: spotisub-wireguard-conf
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
data:
|
|
||||||
- secretKey: private-key
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /protonvpn/conf/cl01tl
|
|
||||||
metadataPolicy: None
|
|
||||||
property: private-key
|
|
||||||
- secretKey: proton-email
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /protonvpn/conf/cl01tl
|
|
||||||
metadataPolicy: None
|
|
||||||
property: email
|
|
||||||
- secretKey: proton-password
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /protonvpn/conf/cl01tl
|
|
||||||
metadataPolicy: None
|
|
||||||
property: password
|
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: spotisub
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: spotisub
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
pod-security.kubernetes.io/audit: privileged
|
|
||||||
pod-security.kubernetes.io/enforce: privileged
|
|
||||||
pod-security.kubernetes.io/warn: privileged
|
|
||||||
@@ -1,17 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: spotisub-nfs-storage
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: spotisub-nfs-storage
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
|
||||||
volumeName: spotisub-nfs-storage
|
|
||||||
storageClassName: nfs-client
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 1Gi
|
|
||||||
@@ -1,23 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: spotisub-nfs-storage
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: spotisub-nfs-storage
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
|
||||||
persistentVolumeReclaimPolicy: Retain
|
|
||||||
storageClassName: nfs-client
|
|
||||||
capacity:
|
|
||||||
storage: 1Gi
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
nfs:
|
|
||||||
path: /volume2/Storage/Music Youtube/
|
|
||||||
server: synologybond.alexlebens.net
|
|
||||||
mountOptions:
|
|
||||||
- vers=4
|
|
||||||
- minorversion=1
|
|
||||||
- noac
|
|
||||||
@@ -1,194 +0,0 @@
|
|||||||
spotisub:
|
|
||||||
controllers:
|
|
||||||
main:
|
|
||||||
type: deployment
|
|
||||||
replicas: 0
|
|
||||||
strategy: Recreate
|
|
||||||
revisionHistoryLimit: 3
|
|
||||||
containers:
|
|
||||||
main:
|
|
||||||
image:
|
|
||||||
repository: blastbeng/spotisub
|
|
||||||
tag: v0.3.7
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
env:
|
|
||||||
- name: SPOTIPY_CLIENT_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-config-secret
|
|
||||||
key: spotify-client-id
|
|
||||||
- name: SPOTIPY_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-config-secret
|
|
||||||
key: spotify-client-secret
|
|
||||||
- name: SPOTIPY_REDIRECT_URI
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-config-secret
|
|
||||||
key: spotify-redirect-uri
|
|
||||||
- name: SUBSONIC_API_HOST
|
|
||||||
value: http://navidrome-main.navidrome
|
|
||||||
- name: SUBSONIC_API_PORT
|
|
||||||
value: 80
|
|
||||||
- name: SUBSONIC_API_USER
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-config-secret
|
|
||||||
key: subsonic-user
|
|
||||||
- name: SUBSONIC_API_PASS
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-config-secret
|
|
||||||
key: subsonic-password
|
|
||||||
- name: PLAYLIST_PREFIX
|
|
||||||
value: "Spotify - "
|
|
||||||
- name: NUM_USER_PLAYLISTS
|
|
||||||
value: 0
|
|
||||||
- name: ARTIST_GEN_SCHED
|
|
||||||
value: 0
|
|
||||||
- name: RECOMEND_GEN_SCHED
|
|
||||||
value: 0
|
|
||||||
- name: SPOTDL_ENABLED
|
|
||||||
value: 1
|
|
||||||
- name: SPOTDL_OUT_FORMAT
|
|
||||||
value: "/mnt/store/Music Youtube/Andrew Lebens/{artist}/{album} ({year})/{artists} - {album} - {track-number} - {title}.{output-ext}"
|
|
||||||
- name: LIDARR_ENABLED
|
|
||||||
value: 1
|
|
||||||
- name: LIDARR_IP
|
|
||||||
value: http://lidarr.lidarr
|
|
||||||
- name: LIDARR_PORT
|
|
||||||
value: 80
|
|
||||||
- name: LIDARR_TOKEN
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-config-secret
|
|
||||||
key: lidarr-key
|
|
||||||
probes:
|
|
||||||
liveness:
|
|
||||||
enabled: true
|
|
||||||
custom: true
|
|
||||||
spec:
|
|
||||||
exec:
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
- -c
|
|
||||||
- "curl -s http://127.0.0.1:5183/api/v1/utils/healthcheck | grep -q 'Ok!'"
|
|
||||||
failureThreshold: 5
|
|
||||||
initialDelaySeconds: 30
|
|
||||||
periodSeconds: 30
|
|
||||||
successThreshold: 1
|
|
||||||
timeoutSeconds: 15
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 10m
|
|
||||||
memory: 128Mi
|
|
||||||
gluetun:
|
|
||||||
image:
|
|
||||||
repository: ghcr.io/qdm12/gluetun
|
|
||||||
tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
lifecycle:
|
|
||||||
postStart:
|
|
||||||
exec:
|
|
||||||
command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
|
|
||||||
env:
|
|
||||||
- name: VPN_SERVICE_PROVIDER
|
|
||||||
value: protonvpn
|
|
||||||
- name: VPN_TYPE
|
|
||||||
value: wireguard
|
|
||||||
- name: WIREGUARD_PRIVATE_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-wireguard-conf
|
|
||||||
key: private-key
|
|
||||||
- name: UPDATER_PROTONVPN_EMAIL
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-wireguard-conf
|
|
||||||
key: proton-email
|
|
||||||
- name: UPDATER_PROTONVPN_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: spotisub-wireguard-conf
|
|
||||||
key: proton-password
|
|
||||||
- name: FIREWALL_OUTBOUND_SUBNETS
|
|
||||||
value: 10.0.0.0/8
|
|
||||||
- name: FIREWALL_INPUT_PORTS
|
|
||||||
value: 5183
|
|
||||||
- name: DNS_UPSTREAM_RESOLVER_TYPE
|
|
||||||
value: dot
|
|
||||||
securityContext:
|
|
||||||
privileged: True
|
|
||||||
capabilities:
|
|
||||||
add:
|
|
||||||
- NET_ADMIN
|
|
||||||
- SYS_MODULE
|
|
||||||
probes:
|
|
||||||
liveness:
|
|
||||||
enabled: true
|
|
||||||
custom: true
|
|
||||||
spec:
|
|
||||||
exec:
|
|
||||||
command:
|
|
||||||
- /gluetun-entrypoint
|
|
||||||
- healthcheck
|
|
||||||
failureThreshold: 5
|
|
||||||
initialDelaySeconds: 30
|
|
||||||
periodSeconds: 30
|
|
||||||
successThreshold: 1
|
|
||||||
timeoutSeconds: 15
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
devic.es/tun: "1"
|
|
||||||
requests:
|
|
||||||
devic.es/tun: "1"
|
|
||||||
cpu: 10m
|
|
||||||
memory: 128Mi
|
|
||||||
service:
|
|
||||||
main:
|
|
||||||
controller: main
|
|
||||||
ports:
|
|
||||||
http:
|
|
||||||
port: 80
|
|
||||||
targetPort: 5183
|
|
||||||
protocol: HTTP
|
|
||||||
route:
|
|
||||||
main:
|
|
||||||
kind: HTTPRoute
|
|
||||||
parentRefs:
|
|
||||||
- group: gateway.networking.k8s.io
|
|
||||||
kind: Gateway
|
|
||||||
name: traefik-gateway
|
|
||||||
namespace: traefik
|
|
||||||
hostnames:
|
|
||||||
- spotisub.alexlebens.net
|
|
||||||
rules:
|
|
||||||
- backendRefs:
|
|
||||||
- group: ''
|
|
||||||
kind: Service
|
|
||||||
name: spotisub
|
|
||||||
port: 80
|
|
||||||
weight: 100
|
|
||||||
matches:
|
|
||||||
- path:
|
|
||||||
type: PathPrefix
|
|
||||||
value: /
|
|
||||||
persistence:
|
|
||||||
cache:
|
|
||||||
storageClass: ceph-block
|
|
||||||
accessMode: ReadWriteOnce
|
|
||||||
size: 1Gi
|
|
||||||
retain: true
|
|
||||||
advancedMounts:
|
|
||||||
main:
|
|
||||||
main:
|
|
||||||
- path: /home/user/spotisub/cache
|
|
||||||
readOnly: false
|
|
||||||
music:
|
|
||||||
existingClaim: spotisub-nfs-storage
|
|
||||||
advancedMounts:
|
|
||||||
main:
|
|
||||||
main:
|
|
||||||
- path: /mnt/store/Music Youtube/
|
|
||||||
readOnly: false
|
|
||||||
@@ -132,7 +132,6 @@ customDNS:
|
|||||||
sonarr IN CNAME traefik-cl01tl
|
sonarr IN CNAME traefik-cl01tl
|
||||||
sonarr-4k IN CNAME traefik-cl01tl
|
sonarr-4k IN CNAME traefik-cl01tl
|
||||||
sonarr-anime IN CNAME traefik-cl01tl
|
sonarr-anime IN CNAME traefik-cl01tl
|
||||||
spotisub IN CNAME traefik-cl01tl
|
|
||||||
stalwart IN CNAME traefik-cl01tl
|
stalwart IN CNAME traefik-cl01tl
|
||||||
tdarr IN CNAME traefik-cl01tl
|
tdarr IN CNAME traefik-cl01tl
|
||||||
tubearchivist IN CNAME traefik-cl01tl
|
tubearchivist IN CNAME traefik-cl01tl
|
||||||
|
|||||||
@@ -153,7 +153,6 @@ customDNS:
|
|||||||
sonarr IN CNAME traefik-cl01tl
|
sonarr IN CNAME traefik-cl01tl
|
||||||
sonarr-4k IN CNAME traefik-cl01tl
|
sonarr-4k IN CNAME traefik-cl01tl
|
||||||
sonarr-anime IN CNAME traefik-cl01tl
|
sonarr-anime IN CNAME traefik-cl01tl
|
||||||
spotisub IN CNAME traefik-cl01tl
|
|
||||||
stalwart IN CNAME traefik-cl01tl
|
stalwart IN CNAME traefik-cl01tl
|
||||||
tdarr IN CNAME traefik-cl01tl
|
tdarr IN CNAME traefik-cl01tl
|
||||||
tubearchivist IN CNAME traefik-cl01tl
|
tubearchivist IN CNAME traefik-cl01tl
|
||||||
|
|||||||
Reference in New Issue
Block a user