Alex Lebens
488d90fd35
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 40s
lint-test-helm / validate-kubeconform (pull_request) Successful in 45s
lint-test-docker / lint-docker-compose (pull_request) Successful in 1m33s
render-manifests / render-manifests (pull_request) Successful in 1m7s
218 lines
6.0 KiB
YAML
218 lines
6.0 KiB
YAML
kyoo:
|
|
global:
|
|
securityContext:
|
|
fsGroup: 1000
|
|
fsGroupChangePolicy: OnRootMismatch
|
|
postgres:
|
|
shared:
|
|
host: kyoo-postgresql-18-cluster-rw
|
|
port: 5432
|
|
existingSecret: kyoo-postgresql-18-cluster-app
|
|
userKey: user
|
|
passwordKey: password
|
|
kyoo_api:
|
|
database: kyoo_api
|
|
sslmode: disable
|
|
kyoo_auth:
|
|
database: kyoo_auth
|
|
sslmode: disable
|
|
kyoo_scanner:
|
|
database: kyoo_scanner
|
|
sslmode: disable
|
|
kyoo_transcoder:
|
|
database: kyoo_transcoder
|
|
sslmode: disable
|
|
kyoo:
|
|
address: https://kyoo.alexlebens.net
|
|
auth:
|
|
privatekey:
|
|
existingSecret: kyoo-key-secret
|
|
privatekeyKey: rsa-private
|
|
apikeys:
|
|
scanner:
|
|
existingSecret: kyoo-key-secret
|
|
apikeyKey: scanner-apikey
|
|
transcoderAcceleration: qsv
|
|
transcoderPreset: fast
|
|
oidc_providers:
|
|
- name: Authentik
|
|
existingSecret: kyoo-oidc-secret
|
|
clientIdKey: client
|
|
clientSecretKey: secret
|
|
logo: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/authentik.webp
|
|
authorizationAddress: https://authentik.alexlebens.net/application/o/authorize/
|
|
tokenAddress: https://authentik.alexlebens.net/application/o/token/
|
|
profileAddress: https://authentik.alexlebens.net/application/o/userinfo/
|
|
scope: "email openid profile"
|
|
authMethod: ClientSecretBasic
|
|
media:
|
|
volumes:
|
|
- name: kyoo-media-anime-nfs-storage
|
|
persistentVolumeClaim:
|
|
claimName: kyoo-media-anime-nfs-storage
|
|
- name: kyoo-media-anime-movies-nfs-storage
|
|
persistentVolumeClaim:
|
|
claimName: kyoo-media-anime-movies-nfs-storage
|
|
- name: kyoo-media-movies-nfs-storage
|
|
persistentVolumeClaim:
|
|
claimName: kyoo-media-movies-nfs-storage
|
|
- name: kyoo-media-movies-4k-nfs-storage
|
|
persistentVolumeClaim:
|
|
claimName: kyoo-media-movies-4k-nfs-storage
|
|
- name: kyoo-media-standup-nfs-storage
|
|
persistentVolumeClaim:
|
|
claimName: kyoo-media-standup-nfs-storage
|
|
- name: kyoo-media-tvshows-nfs-storage
|
|
persistentVolumeClaim:
|
|
claimName: kyoo-media-tvshows-nfs-storage
|
|
- name: kyoo-media-tvshows-4k-nfs-storage
|
|
persistentVolumeClaim:
|
|
claimName: kyoo-media-tvshows-4k-nfs-storage
|
|
volumeMounts:
|
|
- mountPath: /media/anime
|
|
name: kyoo-media-anime-nfs-storage
|
|
readOnly: true
|
|
- mountPath: /media/anime-movies
|
|
name: kyoo-media-anime-movies-nfs-storage
|
|
readOnly: true
|
|
- mountPath: /media/movies
|
|
name: kyoo-media-movies-nfs-storage
|
|
readOnly: true
|
|
- mountPath: /media/movies-4k
|
|
name: kyoo-media-movies-4k-nfs-storage
|
|
readOnly: true
|
|
- mountPath: /media/standup
|
|
name: kyoo-media-standup-nfs-storage
|
|
readOnly: true
|
|
- mountPath: /media/tvshows
|
|
name: kyoo-media-tvshows-nfs-storage
|
|
readOnly: true
|
|
- mountPath: /media/tvshows-4k
|
|
name: kyoo-media-tvshows-4k-nfs-storage
|
|
readOnly: true
|
|
baseMountPath: /media
|
|
contentdatabase:
|
|
tmdb:
|
|
apikeyKey: tmdb-apikey
|
|
existingSecret: kyoo-key-secret
|
|
tvdb:
|
|
apikeyKey: tvdb-apikey
|
|
pinKey: tvdb-apikey
|
|
existingSecret: kyoo-key-secret
|
|
api:
|
|
kyoo_api:
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 100Mi
|
|
image:
|
|
repository: ghcr.io/zoriya/kyoo_api
|
|
tag: 5.0.0@sha256:dc0210f235e23ae616b0f5952af7867dcbc52e0354c2683ec3c4190fdcd17744
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
storageClass: ceph-block
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
auth:
|
|
kyoo_auth:
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 100Mi
|
|
image:
|
|
repository: ghcr.io/zoriya/kyoo_auth
|
|
tag: 5.0.0
|
|
persistence:
|
|
enabled: true
|
|
size: 500Mi
|
|
storageClass: ceph-block
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
front:
|
|
kyoo_front:
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 100Mi
|
|
image:
|
|
repository: ghcr.io/zoriya/kyoo_front
|
|
tag: 5.0.0@sha256:985f892470b304f13ef1950fb5f7e9ef33ee39b71705c627cb045773e6dfb7b4
|
|
scanner:
|
|
kyoo_scanner:
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 100Mi
|
|
image:
|
|
repository: ghcr.io/zoriya/kyoo_scanner
|
|
tag: 5.0.0@sha256:fa972f3f1e534264f4de153e30fe9481839754a3e724cc2663524a2b30e82b46
|
|
transcoder:
|
|
kyoo_transcoder:
|
|
resources:
|
|
limits:
|
|
gpu.intel.com/i915: 1
|
|
requests:
|
|
gpu.intel.com/i915: 1
|
|
cpu: 1
|
|
memory: 1Gi
|
|
image:
|
|
repository: ghcr.io/zoriya/kyoo_transcoder
|
|
tag: 5.0.0@sha256:59974794f8a638175408fa20f023ba9598108b54ad8ed9a22ec87a1a211dfc43
|
|
replicaCount: 1
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
storageClass: ceph-block
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
ingress:
|
|
enabled: false
|
|
traefikproxy:
|
|
enabled: false
|
|
postgres:
|
|
enabled: false
|
|
postgres-18-cluster:
|
|
mode: standalone
|
|
recovery:
|
|
method: objectStore
|
|
objectStore:
|
|
index: 1
|
|
backup:
|
|
objectStore:
|
|
- name: garage-local
|
|
index: 1
|
|
destinationBucket: postgres-backups
|
|
externalSecretCredentialPath: /garage/home-infra/postgres-backups
|
|
isWALArchiver: true
|
|
scheduledBackups:
|
|
- name: live-backup
|
|
suspend: false
|
|
immediate: true
|
|
schedule: "0 5 14 * * *"
|
|
backupName: garage-local
|
|
databases:
|
|
- name: kyoo_api
|
|
ensure: present
|
|
owner: app
|
|
- name: kyoo_auth
|
|
ensure: present
|
|
owner: app
|
|
- name: kyoo_scanner
|
|
ensure: present
|
|
owner: app
|
|
- name: kyoo_transcoder
|
|
ensure: present
|
|
owner: app
|
|
volsync-target-config:
|
|
pvcTarget: kyoo-config
|
|
local:
|
|
enabled: true
|
|
schedule: 26 8 * * *
|
|
remote:
|
|
enabled: true
|
|
schedule: 26 9 * * *
|
|
external:
|
|
enabled: true
|
|
schedule: 26 10 * * *
|