From a838e942ebbee1afc7493f8f41857412f14aa6fa Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Fri, 12 Dec 2025 04:53:35 +0000 Subject: [PATCH] chore: Update manifests after change --- .../manifests/immich/Deployment-immich.yaml | 5 -- ...et-immich-data-backup-secret-external.yaml | 55 +++++++++++++++++++ ...ecret-immich-data-backup-secret-local.yaml | 55 +++++++++++++++++++ ...cret-immich-data-backup-secret-remote.yaml | 55 +++++++++++++++++++ .../PersistentVolume-immich-nfs-storage.yaml | 23 -------- ...sistentVolumeClaim-immich-nfs-storage.yaml | 17 ------ ...ce-immich-data-backup-source-external.yaml | 26 +++++++++ ...ource-immich-data-backup-source-local.yaml | 26 +++++++++ ...urce-immich-data-backup-source-remote.yaml | 26 +++++++++ 9 files changed, 243 insertions(+), 45 deletions(-) create mode 100644 clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-external.yaml create mode 100644 clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-remote.yaml delete mode 100644 clusters/cl01tl/manifests/immich/PersistentVolume-immich-nfs-storage.yaml delete mode 100644 clusters/cl01tl/manifests/immich/PersistentVolumeClaim-immich-nfs-storage.yaml create mode 100644 clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-external.yaml create mode 100644 clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-remote.yaml diff --git a/clusters/cl01tl/manifests/immich/Deployment-immich.yaml b/clusters/cl01tl/manifests/immich/Deployment-immich.yaml index 932464442..1c4a4a98d 100644 --- a/clusters/cl01tl/manifests/immich/Deployment-immich.yaml +++ b/clusters/cl01tl/manifests/immich/Deployment-immich.yaml @@ -112,8 +112,6 @@ spec: subPath: immich.json - mountPath: /usr/src/app/upload name: data - - mountPath: /usr/src/app/upload-old - name: media volumes: - name: config secret: @@ -121,6 +119,3 @@ spec: - name: data persistentVolumeClaim: claimName: immich - - name: media - persistentVolumeClaim: - claimName: immich-nfs-storage diff --git a/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-external.yaml b/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-external.yaml new file mode 100644 index 000000000..0e5a86041 --- /dev/null +++ b/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-external.yaml @@ -0,0 +1,55 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: immich-data-backup-secret-external + namespace: immich + labels: + app.kubernetes.io/name: immich-data-backup-secret-external + app.kubernetes.io/instance: immich + app.kubernetes.io/part-of: immich +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/immich/immich" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-local.yaml b/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-local.yaml new file mode 100644 index 000000000..90d7337ad --- /dev/null +++ b/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-local.yaml @@ -0,0 +1,55 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: immich-data-backup-secret-local + namespace: immich + labels: + app.kubernetes.io/name: immich-data-backup-secret-local + app.kubernetes.io/instance: immich + app.kubernetes.io/part-of: immich +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/immich/immich" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-remote.yaml b/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-remote.yaml new file mode 100644 index 000000000..4095e22aa --- /dev/null +++ b/clusters/cl01tl/manifests/immich/ExternalSecret-immich-data-backup-secret-remote.yaml @@ -0,0 +1,55 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: immich-data-backup-secret-remote + namespace: immich + labels: + app.kubernetes.io/name: immich-data-backup-secret-remote + app.kubernetes.io/instance: immich + app.kubernetes.io/part-of: immich +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/immich/immich" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/immich/PersistentVolume-immich-nfs-storage.yaml b/clusters/cl01tl/manifests/immich/PersistentVolume-immich-nfs-storage.yaml deleted file mode 100644 index 5ab9d4b22..000000000 --- a/clusters/cl01tl/manifests/immich/PersistentVolume-immich-nfs-storage.yaml +++ /dev/null @@ -1,23 +0,0 @@ -apiVersion: v1 -kind: PersistentVolume -metadata: - name: immich-nfs-storage - namespace: immich - labels: - app.kubernetes.io/name: immich-nfs-storage - app.kubernetes.io/instance: immich - app.kubernetes.io/part-of: immich -spec: - persistentVolumeReclaimPolicy: Retain - storageClassName: nfs-client - capacity: - storage: 1Gi - accessModes: - - ReadWriteMany - nfs: - path: /volume2/Storage/Immich - server: synologybond.alexlebens.net - mountOptions: - - vers=4 - - minorversion=1 - - noac diff --git a/clusters/cl01tl/manifests/immich/PersistentVolumeClaim-immich-nfs-storage.yaml b/clusters/cl01tl/manifests/immich/PersistentVolumeClaim-immich-nfs-storage.yaml deleted file mode 100644 index 822f946c6..000000000 --- a/clusters/cl01tl/manifests/immich/PersistentVolumeClaim-immich-nfs-storage.yaml +++ /dev/null @@ -1,17 +0,0 @@ -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: immich-nfs-storage - namespace: immich - labels: - app.kubernetes.io/name: immich-nfs-storage - app.kubernetes.io/instance: immich - app.kubernetes.io/part-of: immich -spec: - volumeName: immich-nfs-storage - storageClassName: nfs-client - accessModes: - - ReadWriteMany - resources: - requests: - storage: 1Gi diff --git a/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-external.yaml b/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-external.yaml new file mode 100644 index 000000000..90abee7ed --- /dev/null +++ b/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-external.yaml @@ -0,0 +1,26 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: immich-data-backup-source-external + namespace: immich + labels: + app.kubernetes.io/name: immich-data-backup-source-external + app.kubernetes.io/instance: immich + app.kubernetes.io/part-of: immich +spec: + sourcePVC: immich + trigger: + schedule: 0 4 * * * + restic: + pruneIntervalDays: 7 + repository: immich-data-backup-secret-external + retain: + hourly: 1 + daily: 3 + weekly: 2 + monthly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 50Gi diff --git a/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-local.yaml b/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-local.yaml new file mode 100644 index 000000000..690864f88 --- /dev/null +++ b/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-local.yaml @@ -0,0 +1,26 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: immich-data-backup-source-local + namespace: immich + labels: + app.kubernetes.io/name: immich-data-backup-source-local + app.kubernetes.io/instance: immich + app.kubernetes.io/part-of: immich +spec: + sourcePVC: immich + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: immich-data-backup-secret-local + retain: + hourly: 1 + daily: 3 + weekly: 2 + monthly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 50Gi diff --git a/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-remote.yaml b/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-remote.yaml new file mode 100644 index 000000000..0a6d8e54e --- /dev/null +++ b/clusters/cl01tl/manifests/immich/ReplicationSource-immich-data-backup-source-remote.yaml @@ -0,0 +1,26 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: immich-data-backup-source-remote + namespace: immich + labels: + app.kubernetes.io/name: immich-data-backup-source-remote + app.kubernetes.io/instance: immich + app.kubernetes.io/part-of: immich +spec: + sourcePVC: immich + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: immich-data-backup-secret-remote + retain: + hourly: 1 + daily: 3 + weekly: 2 + monthly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 50Gi -- 2.49.1