From ea84f908d2b14bc14b72f137091b9d7e8466541f Mon Sep 17 00:00:00 2001
From: pgijsbertsen <117165507+pgijsbertsen@users.noreply.github.com>
Date: Sat, 9 May 2026 21:00:11 +0200
Subject: [PATCH] feat: Enable Gluetun API

---
 k8s-wheatley/qbittorrent/configmap.yaml   |  3 ++
 k8s-wheatley/qbittorrent/deployments.yaml | 22 ++------------
 k8s-wheatley/qbittorrent/secrets.yaml     | 35 +++++++++++++++++++++++
 3 files changed, 40 insertions(+), 20 deletions(-)

diff --git a/k8s-wheatley/qbittorrent/configmap.yaml b/k8s-wheatley/qbittorrent/configmap.yaml
index 847eb11..68e2270 100644
--- a/k8s-wheatley/qbittorrent/configmap.yaml
+++ b/k8s-wheatley/qbittorrent/configmap.yaml
@@ -51,6 +51,9 @@ data:
   PGID: "1000"
   SLSKD_HEADLESS: "true"
   SLSKD_REMOTE_CONFIGURATION: "true"
+  SLSKD_VPN: "true"
+  SLSKD_VPN_PORT_FORWARDING: "true"
+  SLSKD_VPN_GLUETUN_URL: http://localhost:8000
 ---
 apiVersion: v1
 kind: ConfigMap
diff --git a/k8s-wheatley/qbittorrent/deployments.yaml b/k8s-wheatley/qbittorrent/deployments.yaml
index 01f61ff..df3b2e7 100644
--- a/k8s-wheatley/qbittorrent/deployments.yaml
+++ b/k8s-wheatley/qbittorrent/deployments.yaml
@@ -30,6 +30,8 @@ spec:
           envFrom:
             - configMapRef:
                 name: gluetun-envs
+            - secretRef:
+                name: gluetun-env-secrets
           volumeMounts:
             - mountPath: /dev/net/tun
               name: dev-tun
@@ -144,26 +146,6 @@ spec:
                 - "CHOWN"
                 - "SETUID"
                 - "SETGID"
-        - name: unpackerr
-          image: golift/unpackerr
-          imagePullPolicy: IfNotPresent
-          envFrom:
-            - configMapRef:
-                name: unpackerr-envs
-            - secretRef:
-                name: unpackerr-env-secrets
-          volumeMounts:
-            - mountPath: /shared/media/downloads
-              name: nfs-media
-          securityContext:
-            seccompProfile:
-              type: RuntimeDefault
-            runAsUser: 1000
-            runAsGroup: 1000
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - "ALL"
       volumes:
         - name: dev-tun
           hostPath:
diff --git a/k8s-wheatley/qbittorrent/secrets.yaml b/k8s-wheatley/qbittorrent/secrets.yaml
index 5e7e3bc..4a5078a 100644
--- a/k8s-wheatley/qbittorrent/secrets.yaml
+++ b/k8s-wheatley/qbittorrent/secrets.yaml
@@ -17,6 +17,41 @@ spec:
       remoteRef:
         key: secrets/managed/qbittorrent/protonvpn-wgconfig
         property: config
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: gluetun-env-secrets
+spec:
+  secretStoreRef:
+    name: vault-wheatley
+    kind: ClusterSecretStore
+  target:
+    name: slskd-env-secrets
+  data:
+    - secretKey: SLSKD_VPN_GLUETUN_API_KEY
+      remoteRef:
+        key: secrets/managed/qbittorrent/slskd-env-secrets
+        property: GLUETUN_API_KEY
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: gluetun-env-secrets
+spec:
+  secretStoreRef:
+    name: vault-wheatley
+    kind: ClusterSecretStore
+  target:
+    name: gluetun-env-secrets
+  data:
+    - secretKey: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
+      remoteRef:
+        key: secrets/managed/qbittorrent/gluetun-env-secrets
+        property: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret