infrastructure/clusters/cl01tl/helm/qbittorrent/values.yaml

qbittorrent:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      initContainers:
        init-sysctl:
          image:
            repository: busybox
            tag: 1.37.0
            pullPolicy: IfNotPresent
          securityContext:
            privileged: True
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
          command:
            - /bin/sh
          args:
            - -ec
            - |
              sysctl -w net.ipv4.ip_forward=1;
              sysctl -w net.ipv6.conf.all.disable_ipv6=1
      containers:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
            tag: 5.1.4@sha256:c4e1276d9eec06f2520b4cdffcff49aea4215e5ac2d51bf0de81cce9f8aa85d4
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: PUID
              value: "1000"
            - name: PGID
              value: "1000"
            - name: UMASK_SET
              value: "002"
            - name: WEBUI_PORT
              value: 8080
          resources:
            requests:
              cpu: 500m
              memory: 1Gi
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
            tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
            pullPolicy: IfNotPresent
          lifecycle:
            postStart:
              exec:
                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
          env:
            - name: VPN_SERVICE_PROVIDER
              value: protonvpn
            - name: VPN_TYPE
              value: wireguard
            - name: WIREGUARD_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: qbittorrent-wireguard-conf
                  key: private-key
            - name: UPDATER_PROTONVPN_EMAIL
              valueFrom:
                secretKeyRef:
                  name: qbittorrent-wireguard-conf
                  key: proton-email
            - name: UPDATER_PROTONVPN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: qbittorrent-wireguard-conf
                  key: proton-password
            - name: VPN_PORT_FORWARDING
              value: "on"
            - name: VPN_PORT_FORWARDING_UP_COMMAND
              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORTS}}" }}"'
            - name: PORT_FORWARD_ONLY
              value: "on"
            - name: FIREWALL_OUTBOUND_SUBNETS
              value: 192.168.1.0/24,10.244.0.0/16
            - name: FIREWALL_INPUT_PORTS
              value: 8080,9022
            - name: DNS_UPSTREAM_RESOLVER_TYPE
              value: dot
          securityContext:
            privileged: True
            capabilities:
              add:
                - NET_ADMIN
                - SYS_MODULE
          probes:
            liveness:
              enabled: true
              custom: true
              spec:
                exec:
                  command:
                    - /gluetun-entrypoint
                    - healthcheck
                failureThreshold: 5
                initialDelaySeconds: 30
                periodSeconds: 30
                successThreshold: 1
                timeoutSeconds: 15
          resources:
            limits:
              devic.es/tun: "1"
            requests:
              devic.es/tun: "1"
              cpu: 10m
              memory: 64Mi
        exporter:
          image:
            repository: esanchezm/prometheus-qbittorrent-exporter
            tag: v1.6.0
            pullPolicy: IfNotPresent
          env:
            - name: QBITTORRENT_HOST
              value: localhost
            - name: QBITTORRENT_PORT
              value: "8080"
            - name: EXPORTER_PORT
              value: "9022"
            - name: EXPORTER_LOG_LEVEL
              value: INFO
          resources:
            requests:
              cpu: 10m
              memory: 64Mi
    qbit-manage:
      type: deployment
      annotations:
        reloader.stakater.com/auto: "true"
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      initContainers:
        init-copy-config:
          image:
            repository: busybox
            tag: 1.37.0
            pullPolicy: IfNotPresent
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
          command:
            - /bin/sh
            - -ec
            - |
              cp /config/config.yml /app/config/config.yml
      containers:
        qbit-manage:
          image:
            repository: ghcr.io/stuffanthings/qbit_manage
            tag: v4.6.5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: QBT_SCHEDULE
              value: 0 * * * *
            - name: QBT_STARTUP_DELAY
              value: 360
            - name: QBT_CONFIG_DIR
              value: /app/config/
            - name: QBT_LOGFILE
              value: /app/var/activity.log
            - name: QBT_LOG_LEVEL
              value: INFO
          resources:
            requests:
              cpu: 10m
              memory: 64Mi
        apprise-api:
          image:
            repository: caronc/apprise
            tag: 1.3.0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: PGID
              value: "1000"
            - name: PUID
              value: "1000"
            - name: APPRISE_STORAGE_MODE
              value: memory
            - name: APPRISE_STATEFUL_MODE
              value: disabled
            - name: APPRISE_WORKER_COUNT
              value: 1
            - name: APPRISE_STATELESS_URLS
              valueFrom:
                secretKeyRef:
                  name: qbittorrent-qbit-manage-config
                  key: ntfy-url
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
    qui:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        qui:
          image:
            repository: ghcr.io/autobrr/qui
            tag: v1.12.0
            pullPolicy: IfNotPresent
          env:
            - name: QUI__METRICS_ENABLED
              value: true
            - name: QUI__METRICS_HOST
              value: 0.0.0.0
            - name: QUI__METRICS_PORT
              value: 9074
            - name: QUI__OIDC_ENABLED
              value: true
            - name: QUI__OIDC_ISSUER
              value: https://auth.alexlebens.dev/application/o/qui/
            - name: QUI__OIDC_CLIENT_ID
              valueFrom:
                secretKeyRef:
                  name: qui-oidc-secret
                  key: client
            - name: QUI__OIDC_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: qui-oidc-secret
                  key: secret
            - name: QUI__OIDC_REDIRECT_URL
              value: https://qui.alexlebens.net/api/auth/oidc/callback
            - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
              value: false
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
  service:
    main:
      controller: main
      forceRename: qbittorrent
      ports:
        http:
          port: 8080
          targetPort: 8080
          protocol: HTTP
        health:
          port: 9999
          targetPort: 9999
          protocol: HTTP
        metrics:
          port: 9022
          targetPort: 9022
          protocol: HTTP
    qbit-manage:
      controller: qbit-manage
      ports:
        apprise:
          port: 8000
          targetPort: 8000
          protocol: HTTP
    qui:
      controller: qui
      ports:
        http:
          port: 80
          targetPort: 7476
          protocol: HTTP
        metrics:
          port: 9074
          targetPort: 9074
          protocol: HTTP
  serviceMonitor:
    main:
      selector:
        matchLabels:
          app.kubernetes.io/name: qbittorrent
          app.kubernetes.io/instance: qbittorrent
      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
      endpoints:
        - port: metrics
          interval: 30s
          scrapeTimeout: 15s
          path: /metrics
    apprise:
      selector:
        matchLabels:
          app.kubernetes.io/name: qbittorrent-apprise
          app.kubernetes.io/instance: qbittorrent-apprise
      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
      endpoints:
        - port: apprise
          interval: 30s
          scrapeTimeout: 15s
          path: /metrics
    qui:
      selector:
        matchLabels:
          app.kubernetes.io/name: qbittorrent-qui
          app.kubernetes.io/instance: qbittorrent-qui
      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
      endpoints:
        - port: metrics
          interval: 30s
          scrapeTimeout: 15s
          path: /metrics
  route:
    main:
      kind: HTTPRoute
      parentRefs:
        - group: gateway.networking.k8s.io
          kind: Gateway
          name: traefik-gateway
          namespace: traefik
      hostnames:
        - qbittorrent.alexlebens.net
      rules:
        - backendRefs:
            - group: ''
              kind: Service
              name: qbittorrent
              port: 8080
              weight: 100
          matches:
            - path:
                type: PathPrefix
                value: /
    qui:
      kind: HTTPRoute
      parentRefs:
        - group: gateway.networking.k8s.io
          kind: Gateway
          name: traefik-gateway
          namespace: traefik
      hostnames:
        - qui.alexlebens.net
      rules:
        - backendRefs:
            - group: ''
              kind: Service
              name: qbittorrent-qui
              port: 80
              weight: 100
          matches:
            - path:
                type: PathPrefix
                value: /
  persistence:
    update-script:
      enabled: true
      type: configMap
      name: glutun-update-script
      defaultMode: 0755
      advancedMounts:
        main:
          gluetun:
            - path: /gluetun/update.sh
              subPath: update.sh
    qbit-manage-config:
      enabled: true
      type: configMap
      name: qbit-manage-config
      advancedMounts:
        qbit-manage:
          init-copy-config:
            - path: /config/config.yml
              readOnly: true
              mountPropagation: None
              subPath: config.yml
          qbit-manage:
            - path: /config/config.yml
              readOnly: true
              mountPropagation: None
              subPath: config.yml
    config-data:
      forceRename: qbittorrent-config-data
      storageClass: ceph-filesystem
      accessMode: ReadWriteMany
      size: 1Gi
      retain: true
      advancedMounts:
        main:
          qbittorrent:
            - path: /config/qBittorrent
              readOnly: false
        qbit-manage:
          qbit-manage:
            - path: /qbittorrent/qBittorrent
              readOnly: false
    qbit-manage-config-data:
      forceRename: qbittorrent-qbit-manage-config-data
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
      retain: true
      advancedMounts:
        qbit-manage:
          init-copy-config:
            - path: /app/config
              readOnly: false
          qbit-manage:
            - path: /app/config
              readOnly: false
    qui-config-data:
      forceRename: qbittorrent-qui-config-data
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
      retain: true
      advancedMounts:
        qui:
          qui:
            - path: /config
              readOnly: false
    qbit-manage-config-var:
      type: emptyDir
      advancedMounts:
        qbit-manage:
          qbit-manage:
            - path: /app/var
              readOnly: false
    storage:
      type: persistentVolumeClaim
      existingClaim: qbittorrent-nfs-storage
      advancedMounts:
        main:
          qbittorrent:
            - path: /mnt/store
              readOnly: false
        qbit-manage:
          qbit-manage:
            - path: /mnt/store
              readOnly: false
volsync-target-config:
  pvcTarget: qbittorrent-config-data
  moverSecurityContext:
    runAsUser: 1000
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
    schedule: 2 11 * * *
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
      volumeSnapshotClassName: ceph-filesystem-snapshot
  remote:
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
      volumeSnapshotClassName: ceph-filesystem-snapshot
  external:
    enabled: true
    schedule: 2 12 * * *
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
      volumeSnapshotClassName: ceph-filesystem-snapshot
volsync-target-qbit-manage-config:
  pvcTarget: qbittorrent-qbit-manage-config-data
  local:
    enabled: true
    schedule: 4 11 * * *
  remote:
    enabled: false
  external:
    enabled: true
    schedule: 4 12 * * *
volsync-target-qui-config:
  pvcTarget: qbittorrent-qui-config-data
  local:
    enabled: true
    schedule: 6 11 * * *
  remote:
    enabled: false
  external:
    enabled: true
    schedule: 6 12 * * *