⬆️ Update ghcr.io/linuxserver/sonarr Docker digest to a9f25c5

Reviewed-on: #8

cluster/apps/production/authentik/authentik/values.yaml

@@ -1,3 +1,4 @@
+# all invalid values, pushed to git for testing with flux.
 apiVersion: v1
 kind: ConfigMap
 metadata:

cluster/apps/production/bazarr/bazarr.yaml

@@ -74,26 +74,30 @@ spec:
       protocol: TCP
   type: ClusterIP
 ---
-apiVersion: traefik.io/v1alpha1
+apiVersion: networking.k8s.io/v1
-kind: IngressRoute
+kind: Ingress
 metadata:
   name: bazarr
   namespace: default
   annotations: 
     kubernetes.io/ingress.class: traefik-external
 spec:
-  entryPoints:
+  rules:
-    - websecure
+    - host: "bazarr.mafyuh.com"
-  routes:
+      http:
-    - match: Host(`bazarr.${LOCAL_DOMAIN}`)
+        paths:
-      kind: Rule
+          - path: /
-      services:
+            pathType: Prefix
-        - name: headless-bazarr
+            backend:
-          port: 6767
+              service:
-      middlewares:
+                name: headless-bazarr
-        - name: default-headers
+                port:
+                  number: 6767
   tls:
+    - hosts:
+        - "bazarr.local.mafyuh.com"
       secretName: local-mafyuh-com-production-tls
+
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute

cluster/apps/production/flux/configmap.yaml

@@ -6,3 +6,4 @@ metadata:
 data:
   LOCAL_DOMAIN: "local.mafyuh.com"
   PUBLIC_DOMAIN: "mafyuh.com"
+  NAS_IP: "10.0.0.10"

cluster/apps/production/radarr/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - radarr.yaml

cluster/apps/production/radarr/radarr.yaml

@@ -42,7 +42,7 @@ spec:
         - name: nas
           nfs:
             path: /mnt/thePool/thePoolShare
-            server: 10.0.0.10
+            server: ${NAS_IP}
         - name: radarr-config
           persistentVolumeClaim:
             claimName: radarr-config

cluster/apps/production/sonarr/sonarr.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: sonarr
-          image: ghcr.io/linuxserver/sonarr@sha256:8414846e440ca34c1cbed96daf7d5b3bcde20aab79761aaaaef496f24cec8d20
+          image: ghcr.io/linuxserver/sonarr@sha256:a9f25c54b7eb8ecf11e506e90ee7eab9e9786143e08eeb76d5bfc3e82531eeab
           imagePullPolicy: IfNotPresent
           env:
             - name: PUID

cluster/infra/flux-secret-map.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: apps
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./cluster/apps/production
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: kub-repo
+  postBuild:
+    substitute:
+      NAS_IP: 10.0.0.10
+    substituteFrom:
+      - kind: ConfigMap
+        name: global-vars

cluster/infra/git-repo.yaml

@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: kub-repo
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  url: https://git.mafyuh.dev/mafyuh/kub
+  ref:
+    branch: main