refactor: Move slskd to own namespace
This commit is contained in:
parent
537840bc3c
commit
4dc41f994a
14 changed files with 343 additions and 124 deletions
|
|
@ -12,7 +12,7 @@ data:
|
|||
VPN_PORT_FORWARDING_UP_COMMAND: "/scripts/port-up.sh"
|
||||
VPN_PORT_FORWARDING_DOWN_COMMAND: "/scripts/port-down.sh"
|
||||
FIREWALL_OUTBOUND_SUBNETS: 10.244.0.0/16,10.96.0.0/12
|
||||
FIREWALL_INPUT_PORTS: "8112,5030"
|
||||
FIREWALL_INPUT_PORTS: "8112"
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
|
|
@ -43,22 +43,6 @@ data:
|
|||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: slskd-envs
|
||||
data:
|
||||
TZ: Europe/Amsterdam
|
||||
PUID: "1000"
|
||||
PGID: "1000"
|
||||
SLSKD_DOWNLOADS_DIR: /shared/media/downloads/_slsk-downloads
|
||||
SLSKD_INCOMPLETE_DIR: /shared/media/downloads/_slsk-incomplete
|
||||
SLSKD_SHARED_DIR: "[Music]/shared/media/downloads/_slsk-downloads"
|
||||
SLSKD_REMOTE_CONFIGURATION: "true"
|
||||
SLSKD_VPN: "true"
|
||||
SLSKD_VPN_PORT_FORWARDING: "true"
|
||||
SLSKD_VPN_GLUETUN_URL: http://localhost:8000
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: unpackerr-envs
|
||||
data:
|
||||
|
|
|
|||
|
|
@ -24,9 +24,6 @@ spec:
|
|||
- name: qbit-http
|
||||
containerPort: 8112
|
||||
protocol: TCP
|
||||
- name: slskd-http
|
||||
containerPort: 5030
|
||||
protocol: TCP
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: gluetun-envs
|
||||
|
|
@ -124,30 +121,6 @@ spec:
|
|||
capabilities:
|
||||
drop:
|
||||
- "ALL"
|
||||
- name: slskd
|
||||
image: docker.io/slskd/slskd
|
||||
imagePullPolicy: IfNotPresent
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: slskd-envs
|
||||
- secretRef:
|
||||
name: slskd-env-secrets
|
||||
volumeMounts:
|
||||
- mountPath: /config
|
||||
name: slskd-config
|
||||
- mountPath: /shared/media/downloads
|
||||
name: nfs-media-downloads
|
||||
securityContext:
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- "ALL"
|
||||
add:
|
||||
- "CHOWN"
|
||||
- "SETUID"
|
||||
- "SETGID"
|
||||
volumes:
|
||||
- name: dev-tun
|
||||
hostPath:
|
||||
|
|
@ -156,9 +129,6 @@ spec:
|
|||
- name: qbittorrent-config
|
||||
persistentVolumeClaim:
|
||||
claimName: qbittorrent-storage
|
||||
- name: slskd-config
|
||||
persistentVolumeClaim:
|
||||
claimName: slskd-storage
|
||||
- name: gluetun-wgconfig
|
||||
secret:
|
||||
secretName: gluetun-wgconfig
|
||||
|
|
|
|||
|
|
@ -15,23 +15,6 @@ spec:
|
|||
- name: qbittorrent
|
||||
port: 80
|
||||
|
||||
---
|
||||
apiVersion: gateway.networking.k8s.io/v1
|
||||
kind: HTTPRoute
|
||||
metadata:
|
||||
name: slskd-route
|
||||
spec:
|
||||
parentRefs:
|
||||
- name: internal
|
||||
namespace: kube-system
|
||||
sectionName: https
|
||||
hostnames:
|
||||
- "slskd.wheatley.in"
|
||||
rules:
|
||||
- backendRefs:
|
||||
- name: slskd
|
||||
port: 80
|
||||
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
|
|
@ -44,16 +27,3 @@ spec:
|
|||
- port: 80
|
||||
protocol: TCP
|
||||
targetPort: 8112
|
||||
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: slskd
|
||||
spec:
|
||||
selector:
|
||||
app: qbittorrent
|
||||
ports:
|
||||
- port: 80
|
||||
protocol: TCP
|
||||
targetPort: 5030
|
||||
|
|
|
|||
|
|
@ -35,5 +35,3 @@ images:
|
|||
newTag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
|
||||
- name: docker.io/qbittorrentofficial/qbittorrent-nox
|
||||
newTag: 5.1.4-2@sha256:85fe2690f418dabffc4907276b3cdffcb7880c7114157b32f932d3b97bac45af
|
||||
- name: docker.io/slskd/slskd
|
||||
newTag: 0.25.1
|
||||
|
|
|
|||
|
|
@ -10,15 +10,3 @@ spec:
|
|||
resources:
|
||||
requests:
|
||||
storage: 5Gi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: slskd-storage
|
||||
spec:
|
||||
storageClassName: piraeus-lvmthin
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
|
|
|
|||
|
|
@ -18,39 +18,6 @@ spec:
|
|||
key: secrets/managed/qbittorrent/protonvpn-wgconfig
|
||||
property: config
|
||||
|
||||
---
|
||||
apiVersion: external-secrets.io/v1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: slskd-env-secrets
|
||||
spec:
|
||||
secretStoreRef:
|
||||
name: vault-wheatley
|
||||
kind: ClusterSecretStore
|
||||
target:
|
||||
name: slskd-env-secrets
|
||||
data:
|
||||
- secretKey: SLSKD_VPN_GLUETUN_API_KEY
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
||||
property: GLUETUN_API_KEY
|
||||
- secretKey: SLSKD_SLSK_USERNAME
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
||||
property: SLSK_USERNAME
|
||||
- secretKey: SLSKD_SLSK_PASSWORD
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
||||
property: SLSK_PASSWORD
|
||||
- secretKey: SLSKD_PASSWORD
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
||||
property: SLSKD_PASSWORD
|
||||
- secretKey: SLSKD_API_KEY
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
||||
property: API_KEY
|
||||
|
||||
---
|
||||
apiVersion: external-secrets.io/v1
|
||||
kind: ExternalSecret
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue