infrastructure/clusters/cl01tl/platform/qbittorrent/values.yaml

qbittorrent:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      initContainers:
        init-sysctl:
          image:
            repository: busybox
            tag: 1.37.0
            pullPolicy: IfNotPresent
          securityContext:
            privileged: True
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
          command:
            - /bin/sh
          args:
            - -ec
            - |
              sysctl -w net.ipv4.ip_forward=1;
              sysctl -w net.ipv6.conf.all.disable_ipv6=1
      containers:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
            tag: 5.1.2@sha256:098d4340c0709a9ddbc7010ca21900238388454e20182d52b9723b40a2a44293
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: PUID
              value: "1000"
            - name: PGID
              value: "1000"
            - name: UMASK_SET
              value: "002"
            - name: WEBUI_PORT
              value: 8080
            - name: DOCKER_MODS
              value: ghcr.io/themepark-dev/theme.park:qbittorrent
            - name: TP_COMMUNITY_THEME
              value: true
            - name: TP_THEME
              value: catppuccin-mocha
          resources:
            requests:
              cpu: 500m
              memory: 1Gi
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
            tag: v3.40.0@sha256:2b42bfa046757145a5155acece417b65b4443c8033fb88661a8e9dcf7fda5a00
            pullPolicy: IfNotPresent
          env:
            - name: VPN_SERVICE_PROVIDER
              value: protonvpn
            - name: VPN_TYPE
              value: wireguard
            - name: WIREGUARD_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: qbittorrent-wireguard-conf
                  key: private-key
            - name: VPN_PORT_FORWARDING
              value: "on"
            - name: VPN_PORT_FORWARDING_UP_COMMAND
              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORTS}}" }}"'
            - name: PORT_FORWARD_ONLY
              value: "on"
            - name: FIREWALL_OUTBOUND_SUBNETS
              value: 192.168.1.0/24,10.244.0.0/16
            - name: FIREWALL_INPUT_PORTS
              value: 8080,9022
            - name: DOT
              value: "off"
          securityContext:
            privileged: True
            capabilities:
              add:
                - NET_ADMIN
                - SYS_MODULE
          resources:
            limits:
              devic.es/tun: "1"
            requests:
              devic.es/tun: "1"
              cpu: 10m
              memory: 64Mi
        exporter:
          image:
            repository: esanchezm/prometheus-qbittorrent-exporter
            tag: v1.6.0
            pullPolicy: IfNotPresent
          env:
            - name: QBITTORRENT_HOST
              value: localhost
            - name: QBITTORRENT_PORT
              value: "8080"
            - name: EXPORTER_PORT
              value: "9022"
            - name: EXPORTER_LOG_LEVEL
              value: INFO
          resources:
            requests:
              cpu: 10m
              memory: 64Mi
    qbit-manage:
      type: deployment
      annotations:
        reloader.stakater.com/auto: "true"
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      initContainers:
        init-copy-config:
          image:
            repository: busybox
            tag: 1.37.0
            pullPolicy: IfNotPresent
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
          command:
            - /bin/sh
            - -ec
            - |
              cp /config/config.yml /app/config/config.yml
      containers:
        qbit-manage:
          image:
            repository: ghcr.io/stuffanthings/qbit_manage
            tag: v4.6.3
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: QBT_SCHEDULE
              value: 0 * * * *
            - name: QBT_STARTUP_DELAY
              value: 360
            - name: QBT_CONFIG_DIR
              value: /app/config/
            - name: QBT_LOGFILE
              value: /app/var/activity.log
            - name: QBT_LOG_LEVEL
              value: INFO
          resources:
            requests:
              cpu: 10m
              memory: 64Mi
        apprise-api:
          image:
            repository: caronc/apprise
            tag: 1.2.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: APPRISE_STORAGE_MODE
              value: memory
            - name: APPRISE_STATEFUL_MODE
              value: disabled
            - name: APPRISE_WORKER_COUNT
              value: 1
            - name: APPRISE_STATELESS_URLS
              valueFrom:
                secretKeyRef:
                  name: qbittorrent-qbit-manage-config
                  key: ntfy-url
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
    qui:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        qui:
          image:
            repository: ghcr.io/autobrr/qui
            tag: v1.6.0
            pullPolicy: IfNotPresent
          env:
            - name: QUI__METRICS_ENABLED
              value: true
            - name: QUI__METRICS_HOST
              value: 0.0.0.0
            - name: QUI__METRICS_PORT
              value: 9074
            - name: QUI__OIDC_ENABLED
              value: true
            - name: QUI__OIDC_ISSUER
              value: https://auth.alexlebens.dev/application/o/qui/
            - name: QUI__OIDC_CLIENT_ID
              valueFrom:
                secretKeyRef:
                  name: qui-oidc-secret
                  key: client
            - name: QUI__OIDC_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: qui-oidc-secret
                  key: secret
            - name: QUI__OIDC_REDIRECT_URL
              value: https://qui.alexlebens.net/api/auth/oidc/callback
            - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
              value: false
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
  service:
    main:
      controller: main
      forceRename: qbittorrent
      ports:
        http:
          port: 8080
          targetPort: 8080
          protocol: HTTP
        health:
          port: 9999
          targetPort: 9999
          protocol: HTTP
        metrics:
          port: 9022
          targetPort: 9022
          protocol: HTTP
    qbit-manage:
      controller: qbit-manage
      ports:
        apprise:
          port: 8000
          targetPort: 8000
          protocol: HTTP
    qui:
      controller: qui
      ports:
        http:
          port: 80
          targetPort: 7476
          protocol: HTTP
        metrics:
          port: 9074
          targetPort: 9074
          protocol: HTTP
  persistence:
    config:
      type: persistentVolumeClaim
      existingClaim: qbittorrent-config
      advancedMounts:
        main:
          qbittorrent:
            - path: /config
              readOnly: false
        qbit-manage:
          qbit-manage:
            - path: /qbittorrent
              readOnly: false
    theme-data:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
      retain: true
      advancedMounts:
        main:
          qbittorrent:
            - path: /themepark
              readOnly: false
    update-script:
      enabled: true
      type: configMap
      name: glutun-update-script
      defaultMode: 0755
      advancedMounts:
        main:
          gluetun:
            - path: /gluetun/update.sh
              subPath: update.sh
    qbit-manage-config-data:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
      retain: true
      advancedMounts:
        qbit-manage:
          init-copy-config:
            - path: /app/config
              readOnly: false
          qbit-manage:
            - path: /app/config
              readOnly: false
    qbit-manage-config:
      enabled: true
      type: configMap
      name: qbit-manage-config
      advancedMounts:
        qbit-manage:
          init-copy-config:
            - path: /config/config.yml
              readOnly: true
              mountPropagation: None
              subPath: config.yml
          qbit-manage:
            - path: /config/config.yml
              readOnly: true
              mountPropagation: None
              subPath: config.yml
    qbit-manage-config-var:
      type: emptyDir
      advancedMounts:
        qbit-manage:
          qbit-manage:
            - path: /app/var
              readOnly: false
    qui-config-data:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
      retain: true
      advancedMounts:
        qui:
          qui:
            - path: /config
              readOnly: false
    storage:
      type: persistentVolumeClaim
      existingClaim: qbittorrent-nfs-storage
      advancedMounts:
        main:
          qbittorrent:
            - path: /mnt/store
              readOnly: false
        qbit-manage:
          qbit-manage:
            - path: /mnt/store
              readOnly: false