Skip to content

Commit 32f645f

Browse files
MafyuhMafyuh
committedFeb 19, 2025
update qbitty, sonarr,sab
1 parent 928e597 commit 32f645f

File tree

12 files changed

+293
-235
lines changed

12 files changed

+293
-235
lines changed
 

‎kubernetes/apps/production/arr/prowlarr/deployment.yaml

Lines changed: 0 additions & 53 deletions
This file was deleted.

‎kubernetes/apps/production/arr/prowlarr/helmrelease.yaml

Lines changed: 123 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,123 @@
1+
apiVersion: helm.toolkit.fluxcd.io/v2
2+
kind: HelmRelease
3+
metadata:
4+
name: &app prowlarr
5+
namespace: arr
6+
spec:
7+
interval: 15m
8+
chart:
9+
spec:
10+
chart: app-template
11+
version: 3.7.1
12+
interval: 30m
13+
sourceRef:
14+
kind: HelmRepository
15+
name: bjw-s
16+
namespace: flux-system
17+
18+
install:
19+
remediation:
20+
retries: 3
21+
upgrade:
22+
remediation:
23+
retries: 3
24+
25+
values:
26+
global:
27+
fullnameOverride: *app
28+
namespace: arr
29+
30+
controllers:
31+
prowlarr:
32+
enabled: true
33+
type: statefulset
34+
annotations:
35+
reloader.stakater.com/auto: "true"
36+
37+
replicas: 1
38+
39+
statefulset:
40+
volumeClaimTemplates:
41+
- name: prowlarr-config
42+
accessMode: ReadWriteOnce
43+
size: 3Gi
44+
storageClass: longhorn
45+
globalMounts:
46+
- path: /config
47+
48+
pod:
49+
securityContext:
50+
runAsUser: 1000
51+
runAsGroup: &group 1000
52+
fsGroup: *group
53+
fsGroupChangePolicy: "OnRootMismatch"
54+
dnsPolicy: None
55+
dnsConfig:
56+
nameservers:
57+
- 1.1.1.1
58+
- 8.8.8.8
59+
60+
containers:
61+
app:
62+
image:
63+
repository: ghcr.io/onedr0p/prowlarr
64+
tag: 1.30.2.4939
65+
pullPolicy: IfNotPresent
66+
env:
67+
TZ: "${TZ}"
68+
PROWLARR__INSTANCE_NAME: *app
69+
PROWLARR__PORT: &port 7878
70+
PROWLARR__APPLICATION_URL: "https://prowlarr.${LOCAL_DOMAIN}"
71+
PROWLARR__THEME: dark
72+
PROWLARR__LOG_LEVEL: info
73+
74+
probes:
75+
liveness:
76+
enabled: false
77+
78+
securityContext:
79+
allowPrivilegeEscalation: false
80+
capabilities:
81+
drop:
82+
- ALL
83+
84+
resources:
85+
requests:
86+
cpu: 50m
87+
memory: 150Mi
88+
limits:
89+
memory: 512Mi
90+
91+
service:
92+
app:
93+
primary: true
94+
controller: prowlarr
95+
ports:
96+
http:
97+
port: *port
98+
99+
ingress:
100+
internal:
101+
enabled: true
102+
className: nginx
103+
hosts:
104+
- host: "prowlarr.${LOCAL_DOMAIN}"
105+
paths:
106+
- path: /
107+
pathType: Prefix
108+
service:
109+
identifier: app
110+
port: http
111+
tls:
112+
- hosts:
113+
- "prowlarr.${LOCAL_DOMAIN}"
114+
secretName: local-mafyuh-dev-production-tls
115+
116+
persistence:
117+
data:
118+
enabled: true
119+
type: nfs
120+
server: "${NAS_IP}"
121+
path: /mnt/thePool/thePoolShare
122+
globalMounts:
123+
- path: /data

‎kubernetes/apps/production/arr/prowlarr/ingress.yaml

Lines changed: 0 additions & 22 deletions
This file was deleted.

‎kubernetes/apps/production/arr/prowlarr/kustomization.yaml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,4 @@
11
apiVersion: kustomize.config.k8s.io/v1beta1
22
kind: Kustomization
33
resources:
4-
- deployment.yaml
5-
- service.yaml
6-
- ingress.yaml
4+
- helmrelease.yaml

‎kubernetes/apps/production/arr/prowlarr/service.yaml

Lines changed: 0 additions & 13 deletions
This file was deleted.

‎kubernetes/apps/production/arr/qbitty/deployment.yaml

Lines changed: 0 additions & 99 deletions
This file was deleted.

‎kubernetes/apps/production/arr/qbitty/helmrelease.yaml

Lines changed: 143 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,143 @@
1+
apiVersion: helm.toolkit.fluxcd.io/v2
2+
kind: HelmRelease
3+
metadata:
4+
name: &app qbitty
5+
namespace: arr
6+
spec:
7+
interval: 15m
8+
chart:
9+
spec:
10+
chart: app-template
11+
version: 3.7.1
12+
interval: 30m
13+
sourceRef:
14+
kind: HelmRepository
15+
name: bjw-s
16+
namespace: flux-system
17+
18+
install:
19+
remediation:
20+
retries: 3
21+
upgrade:
22+
remediation:
23+
retries: 3
24+
25+
values:
26+
global:
27+
fullnameOverride: *app
28+
namespace: arr
29+
30+
controllers:
31+
qbitty:
32+
enabled: true
33+
type: statefulset
34+
annotations:
35+
reloader.stakater.com/auto: "true"
36+
37+
replicas: 1
38+
39+
statefulset:
40+
volumeClaimTemplates:
41+
- name: qbitty-config
42+
accessMode: ReadWriteOnce
43+
size: 500Mi
44+
storageClass: longhorn
45+
globalMounts:
46+
- path: /config
47+
48+
pod:
49+
securityContext:
50+
runAsUser: 1000
51+
runAsGroup: &group 1000
52+
fsGroup: *group
53+
fsGroupChangePolicy: "OnRootMismatch"
54+
55+
containers:
56+
app:
57+
image:
58+
repository: ghcr.io/hotio/qbittorrent
59+
digest: "sha256:d97080a8a978d7705297dc44bcd6c599b3b47631fec8dcfc0cb7039279d05b02"
60+
pullPolicy: IfNotPresent
61+
env:
62+
TZ: "${TZ}"
63+
WEBUI_PORT: &port 8080
64+
VPN_ENABLED: "true"
65+
VPN_CONF: "wg0"
66+
VPN_PROVIDER: "proton"
67+
VPN_KEEP_LOCAL_DNS: "false"
68+
VPN_AUTO_PORT_FORWARD: "true"
69+
VPN_LAN_NETWORK:
70+
valueFrom:
71+
secretKeyRef:
72+
name: lan-network
73+
key: lan-network
74+
VPN_LAN_LEAK_ENABLED: "false"
75+
VPN_FIREWALL_TYPE: "auto"
76+
PRIVOXY_ENABLED: "false"
77+
VPN_HEALTHCHECK_ENABLED: "false"
78+
UNBOUND_ENABLED: "false"
79+
80+
probes:
81+
liveness:
82+
enabled: false
83+
84+
securityContext:
85+
capabilities:
86+
add:
87+
- NET_ADMIN
88+
89+
resources:
90+
requests:
91+
cpu: 20m
92+
memory: 200Mi
93+
limits:
94+
memory: 4000Mi
95+
96+
service:
97+
app:
98+
primary: true
99+
controller: qbitty
100+
ports:
101+
http:
102+
port: *port
103+
104+
ingress:
105+
internal:
106+
enabled: true
107+
className: nginx
108+
hosts:
109+
- host: "qbitty.${LOCAL_DOMAIN}"
110+
paths:
111+
- path: /
112+
pathType: Prefix
113+
service:
114+
identifier: app
115+
port: http
116+
tls:
117+
- hosts:
118+
- "qbitty.${LOCAL_DOMAIN}"
119+
secretName: local-mafyuh-dev-production-tls
120+
121+
persistence:
122+
data:
123+
enabled: true
124+
type: nfs
125+
server: "${NAS_IP}"
126+
path: /mnt/thePool/thePoolShare
127+
globalMounts:
128+
- path: /data
129+
130+
incomplete:
131+
enabled: true
132+
type: emptyDir
133+
sizeLimit: 100Gi
134+
globalMounts:
135+
- path: /incomplete
136+
137+
wireguard-config:
138+
enabled: true
139+
type: secret
140+
name: qbitty-wireguard
141+
defaultMode: 0400
142+
globalMounts:
143+
- path: /config/wireguard/

‎kubernetes/apps/production/arr/qbitty/ingress.yaml

Lines changed: 0 additions & 22 deletions
This file was deleted.

‎kubernetes/apps/production/arr/qbitty/kustomization.yaml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,4 @@
11
apiVersion: kustomize.config.k8s.io/v1beta1
22
kind: Kustomization
33
resources:
4-
- deployment.yaml
5-
- service.yaml
6-
- ingress.yaml
4+
- helmrelease.yaml

‎kubernetes/apps/production/arr/qbitty/service.yaml

Lines changed: 0 additions & 13 deletions
This file was deleted.

‎kubernetes/apps/production/arr/sabnzbd/helmrelease.yaml

Lines changed: 20 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -38,17 +38,17 @@ spec:
3838

3939
statefulset:
4040
volumeClaimTemplates:
41-
- name: config
42-
accessMode: ReadWriteMany
41+
- name: sabnzbd-config
42+
accessMode: ReadWriteOnce
4343
size: 500Mi
4444
storageClass: longhorn
4545
globalMounts:
4646
- path: /config
4747

4848
pod:
4949
securityContext:
50-
runAsUser: 65534
51-
runAsGroup: &group 65534
50+
runAsUser: 1000
51+
runAsGroup: &group 1000
5252
fsGroup: *group
5353
fsGroupChangePolicy: "OnRootMismatch"
5454

@@ -61,6 +61,12 @@ spec:
6161
env:
6262
TZ: "${TZ}"
6363
SABNZBD__PORT: &port 8080
64+
SABNZBD__HOST_WHITELIST_ENTRIES: >-
65+
{{ .Release.Name }},
66+
{{ .Release.Name }}.arr,
67+
{{ .Release.Name }}.arr.svc,
68+
{{ .Release.Name }}.arr.svc.cluster.local,
69+
sab.${LOCAL_DOMAIN}
6470
6571
probes:
6672
liveness:
@@ -92,7 +98,7 @@ spec:
9298
enabled: true
9399
className: nginx
94100
hosts:
95-
- host: "sabnzbd.${LOCAL_DOMAIN}"
101+
- host: "sab.${LOCAL_DOMAIN}"
96102
paths:
97103
- path: /
98104
pathType: Prefix
@@ -101,7 +107,7 @@ spec:
101107
port: http
102108
tls:
103109
- hosts:
104-
- "sabnzbd.${LOCAL_DOMAIN}"
110+
- "sab.${LOCAL_DOMAIN}"
105111
secretName: local-mafyuh-dev-production-tls
106112

107113
persistence:
@@ -111,4 +117,11 @@ spec:
111117
server: "${NAS_IP}"
112118
path: /mnt/thePool/thePoolShare
113119
globalMounts:
114-
- path: /data
120+
- path: /data
121+
122+
incomplete:
123+
enabled: true
124+
type: emptyDir
125+
sizeLimit: 100Gi
126+
globalMounts:
127+
- path: /incomplete

‎kubernetes/apps/production/arr/sonarr/helmrelease.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,11 @@ spec:
5151
runAsGroup: &group 1000
5252
fsGroup: *group
5353
fsGroupChangePolicy: "OnRootMismatch"
54+
dnsPolicy: None
55+
dnsConfig:
56+
nameservers:
57+
- 1.1.1.1
58+
- 8.8.8.8
5459

5560
containers:
5661
app:

0 commit comments

Comments
 (0)
Please sign in to comment.