lidarr:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      pod:
        securityContext:
          runAsUser: 1000
          runAsGroup: 1000
          fsGroup: 1000
          fsGroupChangePolicy: OnRootMismatch
      containers:
        main:
          image:
            repository: ghcr.io/linuxserver/lidarr
            tag: 3.1.2-nightly@sha256:034055feee43b11eb2f7a8438a9af1c99ab564dd2b43e5df2fe5b3c9b3b8b1ac
          env:
            - name: TZ
              value: America/Chicago
            - name: PUID
              value: 1000
            - name: PGID
              value: 1000
          resources:
            requests:
              cpu: 100m
              memory: 300Mi
        metrics:
          image:
            repository: ghcr.io/onedr0p/exportarr
            tag: v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520
          args: ["lidarr"]
          env:
            - name: URL
              value: http://localhost
            - name: CONFIG
              value: /config/config.xml
            - name: PORT
              value: 9792
            - name: ENABLE_ADDITIONAL_METRICS
              value: false
            - name: ENABLE_UNKNOWN_QUEUE_ITEMS
              value: false
  service:
    main:
      controller: main
      ports:
        http:
          port: 80
          targetPort: 8686
        metrics:
          port: 9792
          targetPort: 9792
  serviceMonitor:
    main:
      selector:
        matchLabels:
          app.kubernetes.io/name: lidarr
          app.kubernetes.io/instance: lidarr
      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
      endpoints:
        - port: metrics
          interval: 3m
          scrapeTimeout: 1m
          path: /metrics
  route:
    main:
      kind: HTTPRoute
      parentRefs:
        - group: gateway.networking.k8s.io
          kind: Gateway
          name: traefik-gateway
          namespace: traefik
      hostnames:
        - lidarr.alexlebens.net
      rules:
        - backendRefs:
            - name: ak-outpost-traefik-proxy-auth
              namespace: authentik
              port: 9000
              weight: 100
          filters: []
          matches:
            - path:
                type: PathPrefix
                value: /outpost.goauthentik.io
        - backendRefs:
            - name: lidarr
              port: 80
          filters:
            - type: ExtensionRef
              extensionRef:
                group: traefik.io
                kind: Middleware
                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix
                value: /
  persistence:
    config:
      forceRename: lidarr-config
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 10Gi
      advancedMounts:
        main:
          main:
            - path: /config
              readOnly: false
          metrics:
            - path: /config
              readOnly: true
    media:
      existingClaim: lidarr-nfs-storage
      advancedMounts:
        main:
          main:
            - path: /mnt/store
              readOnly: false
postgres-18-cluster:
  mode: recovery
  cluster:
    initdb:
      postInitSQL:
        - CREATE DATABASE IF NOT EXISTS "lidarr-main" OWNER "app";
        - CREATE DATABASE IF NOT EXISTS "lidarr-log" OWNER "app";
  recovery:
    method: objectStore
    objectStore:
      index: 1
  backup:
    objectStore:
      - name: garage-local
        index: 1
        destinationBucket: postgres-backups
        externalSecretCredentialPath: /garage/home-infra/postgres-backups
        isWALArchiver: true
    scheduledBackups:
      - name: live-backup
        suspend: false
        immediate: true
        schedule: "0 55 14 * * *"
        backupName: garage-local
volsync-target-config:
  pvcTarget: lidarr-config
  moverSecurityContext:
    runAsUser: 1000
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
    schedule: 34 8 * * *
  remote:
    enabled: true
    schedule: 34 9 * * *
  external:
    enabled: true
    schedule: 34 10 * * *