plex:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: ghcr.io/linuxserver/plex
            tag: 1.41.4@sha256:3f8bae7222401c135eb38056f35d77100b5b3db764f9fde21db92405366dc05c
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: VERSION
              value: docker
          resources:
            requests:
              gpu.intel.com/i915: 1
              cpu: 10m
              memory: 512Mi
            limits:
              gpu.intel.com/i915: 1
              cpu: 4
  serviceAccount:
    create: true
  service:
    main:
      controller: main
      ports:
        http:
          port: 32400
          targetPort: 32400
          protocol: HTTP
  ingress:
    tailscale:
      enabled: true
      className: tailscale
      hosts:
        - host: plex-cl01tl
          paths:
            - path: /
              pathType: Prefix
              service:
                name: plex
                port: 32400
      tls:
        - hosts:
            - plex-cl01tl
    traefik:
      enabled: true
      className: traefik
      annotations:
        traefik.ingress.kubernetes.io/router.entrypoints: websecure
        traefik.ingress.kubernetes.io/router.tls: "true"
        cert-manager.io/cluster-issuer: letsencrypt-issuer
      hosts:
        - host: plex.alexlebens.net
          paths:
            - path: /
              pathType: Prefix
              service:
                name: plex
                port: 32400
      tls:
        - hosts:
            - plex.alexlebens.net
          secretName: plex-tls-secret
  persistence:
    config:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 60Gi
      advancedMounts:
        main:
          main:
            - path: /config
              readOnly: false
    transcode:
      type: emptyDir
      advancedMounts:
        main:
          main:
            - path: /transcode
              readOnly: false
    media:
      existingClaim: plex-nfs-storage
      advancedMounts:
        main:
          main:
            - path: /mnt/store
              readOnly: true