prowlarr:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      pod:
        securityContext:
          runAsUser: 568
          runAsGroup: 568
          fsGroup: 568
          fsGroupChangePolicy: OnRootMismatch
          supplementalGroups:
            - 44
            - 100
            - 109
            - 65539
      containers:
        main:
          image:
            repository: ghcr.io/onedr0p/prowlarr
            tag: 1.21.2.4649
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
          probes:
            liveness:
              enabled: false
              custom: true
              spec:
                exec:
                  command:
                  - /usr/bin/env
                  - bash
                  - -c
                  - curl --fail localhost:8686/api/v1/system/status?apiKey=`IFS=\> && while
                    read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml`
                failureThreshold: 5
                initialDelaySeconds: 60
                periodSeconds: 10
                successThreshold: 1
                timeoutSeconds: 10
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
  serviceAccount:
    create: true
  service:
    main:
      controller: main
      ports:
        http:
          port: 80
          targetPort: 9696
          protocol: HTTP
  ingress:
    # main:
    #   enabled: true
    #   className: traefik
    #   annotations:
    #     traefik.ingress.kubernetes.io/router.entrypoints: websecure
    #     traefik.ingress.kubernetes.io/router.tls: "true"
    #     cert-manager.io/cluster-issuer: letsencrypt-issuer
    #   hosts:
    #     - host: prowlarr.alexlebens.net
    #       paths:
    #         - path: /
    #           pathType: Prefix
    #           service:
    #             name: prowlarr
    #             port: 80
    #   tls:
    #     - secretName: prowlarr-secret-tls
    #       hosts:
    #         - prowlarr.alexlebens.net
    tailscale:
      enabled: true
      className: tailscale
      hosts:
        - host: prowlarr-cl01tl
          paths:
            - path: /
              pathType: Prefix
              service:
                name: prowlarr
                port: 80
      tls:
        - hosts:
            - prowlarr-cl01tl
  persistence:
    config:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
      retain: true
      advancedMounts:
        main:
          main:
            - path: /config
              readOnly: false