infrastructure/clusters/cl01tl/helm/qbittorrent/values.yaml

qbittorrent:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      initContainers:
        init-sysctl:
          image:
            repository: busybox
            tag: 1.37.0
            pullPolicy: IfNotPresent
          securityContext:
            privileged: True
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
          command:
            - /bin/sh
          args:
            - -ec
            - |
              sysctl -w net.ipv4.ip_forward=1;
              sysctl -w net.ipv6.conf.all.disable_ipv6=1
      containers:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
            tag: 5.1.4@sha256:043498de39c3dd63eec94360c5ad966a51271d1581070f42cb73ab0cf4776f29
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: PUID
              value: "1000"
            - name: PGID
              value: "1000"
            - name: UMASK_SET
              value: "002"
            - name: WEBUI_PORT
              value: 8080
          resources:
            requests:
              cpu: 500m
              memory: 1Gi
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
            tag: v3.40.3@sha256:ef4a44819a60469682c7b5e69183e6401171891feaa60186652d292c59e41b30
            pullPolicy: IfNotPresent
          env:
            - name: VPN_SERVICE_PROVIDER
              value: protonvpn
            - name: VPN_TYPE
              value: wireguard
            - name: WIREGUARD_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: qbittorrent-wireguard-conf
                  key: private-key
            - name: VPN_PORT_FORWARDING
              value: "on"
            - name: VPN_PORT_FORWARDING_UP_COMMAND
              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORTS}}" }}"'
            - name: PORT_FORWARD_ONLY
              value: "on"
            - name: FIREWALL_OUTBOUND_SUBNETS
              value: 192.168.1.0/24,10.244.0.0/16
            - name: FIREWALL_INPUT_PORTS
              value: 8080,9022
            - name: DOT
              value: "off"
          securityContext:
            privileged: True
            capabilities:
              add:
                - NET_ADMIN
                - SYS_MODULE
          probes:
            liveness:
              enabled: true
              custom: true
              spec:
                exec:
                  command:
                    - /gluetun-entrypoint
                    - healthcheck
                failureThreshold: 5
                initialDelaySeconds: 30
                periodSeconds: 30
                successThreshold: 1
                timeoutSeconds: 15
          resources:
            limits:
              devic.es/tun: "1"
            requests:
              devic.es/tun: "1"
              cpu: 10m
              memory: 64Mi
        exporter:
          image:
            repository: esanchezm/prometheus-qbittorrent-exporter
            tag: v1.6.0
            pullPolicy: IfNotPresent
          env:
            - name: QBITTORRENT_HOST
              value: localhost
            - name: QBITTORRENT_PORT
              value: "8080"
            - name: EXPORTER_PORT
              value: "9022"
            - name: EXPORTER_LOG_LEVEL
              value: INFO
          resources:
            requests:
              cpu: 10m
              memory: 64Mi
    qbit-manage:
      type: deployment
      annotations:
        reloader.stakater.com/auto: "true"
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      initContainers:
        init-copy-config:
          image:
            repository: busybox
            tag: 1.37.0
            pullPolicy: IfNotPresent
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
          command:
            - /bin/sh
            - -ec
            - |
              cp /config/config.yml /app/config/config.yml
      containers:
        qbit-manage:
          image:
            repository: ghcr.io/stuffanthings/qbit_manage
            tag: v4.6.5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: QBT_SCHEDULE
              value: 0 * * * *
            - name: QBT_STARTUP_DELAY
              value: 360
            - name: QBT_CONFIG_DIR
              value: /app/config/
            - name: QBT_LOGFILE
              value: /app/var/activity.log
            - name: QBT_LOG_LEVEL
              value: INFO
          resources:
            requests:
              cpu: 10m
              memory: 64Mi
        apprise-api:
          image:
            repository: caronc/apprise
            tag: 1.3.0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: PGID
              value: "1000"
            - name: PUID
              value: "1000"
            - name: APPRISE_STORAGE_MODE
              value: memory
            - name: APPRISE_STATEFUL_MODE
              value: disabled
            - name: APPRISE_WORKER_COUNT
              value: 1
            - name: APPRISE_STATELESS_URLS
              valueFrom:
                secretKeyRef:
                  name: qbittorrent-qbit-manage-config
                  key: ntfy-url
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
    qui:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        qui:
          image:
            repository: ghcr.io/autobrr/qui
            tag: v1.11.0
            pullPolicy: IfNotPresent
          env:
            - name: QUI__METRICS_ENABLED
              value: true
            - name: QUI__METRICS_HOST
              value: 0.0.0.0
            - name: QUI__METRICS_PORT
              value: 9074
            - name: QUI__OIDC_ENABLED
              value: true
            - name: QUI__OIDC_ISSUER
              value: https://auth.alexlebens.dev/application/o/qui/
            - name: QUI__OIDC_CLIENT_ID
              valueFrom:
                secretKeyRef:
                  name: qui-oidc-secret
                  key: client
            - name: QUI__OIDC_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: qui-oidc-secret
                  key: secret
            - name: QUI__OIDC_REDIRECT_URL
              value: https://qui.alexlebens.net/api/auth/oidc/callback
            - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
              value: false
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
  service:
    main:
      controller: main
      forceRename: qbittorrent
      ports:
        http:
          port: 8080
          targetPort: 8080
          protocol: HTTP
        health:
          port: 9999
          targetPort: 9999
          protocol: HTTP
        metrics:
          port: 9022
          targetPort: 9022
          protocol: HTTP
    qbit-manage:
      controller: qbit-manage
      ports:
        apprise:
          port: 8000
          targetPort: 8000
          protocol: HTTP
    qui:
      controller: qui
      ports:
        http:
          port: 80
          targetPort: 7476
          protocol: HTTP
        metrics:
          port: 9074
          targetPort: 9074
          protocol: HTTP
  persistence:
    update-script:
      enabled: true
      type: configMap
      name: glutun-update-script
      defaultMode: 0755
      advancedMounts:
        main:
          gluetun:
            - path: /gluetun/update.sh
              subPath: update.sh
    qbit-manage-config:
      enabled: true
      type: configMap
      name: qbit-manage-config
      advancedMounts:
        qbit-manage:
          init-copy-config:
            - path: /config/config.yml
              readOnly: true
              mountPropagation: None
              subPath: config.yml
          qbit-manage:
            - path: /config/config.yml
              readOnly: true
              mountPropagation: None
              subPath: config.yml
    config-data:
      forceRename: qbittorrent-config-data
      storageClass: ceph-filesystem
      accessMode: ReadWriteMany
      size: 1Gi
      retain: true
      advancedMounts:
        main:
          qbittorrent:
            - path: /config/qBittorrent
              readOnly: false
        qbit-manage:
          qbit-manage:
            - path: /qbittorrent/qBittorrent
              readOnly: false
    qbit-manage-config-data:
      forceRename: qbittorrent-qbit-manage-config-data
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
      retain: true
      advancedMounts:
        qbit-manage:
          init-copy-config:
            - path: /app/config
              readOnly: false
          qbit-manage:
            - path: /app/config
              readOnly: false
    qui-config-data:
      forceRename: qbittorrent-qui-config-data
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
      retain: true
      advancedMounts:
        qui:
          qui:
            - path: /config
              readOnly: false
    qbit-manage-config-var:
      type: emptyDir
      advancedMounts:
        qbit-manage:
          qbit-manage:
            - path: /app/var
              readOnly: false
    storage:
      type: persistentVolumeClaim
      existingClaim: qbittorrent-nfs-storage
      advancedMounts:
        main:
          qbittorrent:
            - path: /mnt/store
              readOnly: false
        qbit-manage:
          qbit-manage:
            - path: /mnt/store
              readOnly: false
volsync-target-config:
  pvcTarget: qbittorrent-config-data
  moverSecurityContext:
    runAsUser: 1000
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
      volumeSnapshotClassName: ceph-filesystem-snapshot
  remote:
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
      volumeSnapshotClassName: ceph-filesystem-snapshot
  external:
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
      volumeSnapshotClassName: ceph-filesystem-snapshot
volsync-target-qbit-manage-config:
  pvcTarget: qbittorrent-qbit-manage-config-data
volsync-target-qui-config:
  pvcTarget: qbittorrent-qui-config-data