feat: Enable Gluetun API

k8s-wheatley/qbittorrent/configmap.yaml

@@ -51,6 +51,9 @@ data:
   PGID: "1000"
   SLSKD_HEADLESS: "true"
   SLSKD_REMOTE_CONFIGURATION: "true"
+  SLSKD_VPN: "true"
+  SLSKD_VPN_PORT_FORWARDING: "true"
+  SLSKD_VPN_GLUETUN_URL: http://localhost:8000
 ---
 apiVersion: v1
 kind: ConfigMap

k8s-wheatley/qbittorrent/deployments.yaml

@@ -30,6 +30,8 @@ spec:
           envFrom:
             - configMapRef:
                 name: gluetun-envs
+            - secretRef:
+                name: gluetun-env-secrets
           volumeMounts:
             - mountPath: /dev/net/tun
               name: dev-tun
@@ -144,26 +146,6 @@ spec:
                 - "CHOWN"
                 - "SETUID"
                 - "SETGID"
-        - name: unpackerr
-          image: golift/unpackerr
-          imagePullPolicy: IfNotPresent
-          envFrom:
-            - configMapRef:
-                name: unpackerr-envs
-            - secretRef:
-                name: unpackerr-env-secrets
-          volumeMounts:
-            - mountPath: /shared/media/downloads
-              name: nfs-media
-          securityContext:
-            seccompProfile:
-              type: RuntimeDefault
-            runAsUser: 1000
-            runAsGroup: 1000
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - "ALL"
       volumes:
         - name: dev-tun
           hostPath:

k8s-wheatley/qbittorrent/secrets.yaml

@@ -17,6 +17,41 @@ spec:
       remoteRef:
         key: secrets/managed/qbittorrent/protonvpn-wgconfig
         property: config
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: gluetun-env-secrets
+spec:
+  secretStoreRef:
+    name: vault-wheatley
+    kind: ClusterSecretStore
+  target:
+    name: slskd-env-secrets
+  data:
+    - secretKey: SLSKD_VPN_GLUETUN_API_KEY
+      remoteRef:
+        key: secrets/managed/qbittorrent/slskd-env-secrets
+        property: GLUETUN_API_KEY
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: gluetun-env-secrets
+spec:
+  secretStoreRef:
+    name: vault-wheatley
+    kind: ClusterSecretStore
+  target:
+    name: gluetun-env-secrets
+  data:
+    - secretKey: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
+      remoteRef:
+        key: secrets/managed/qbittorrent/gluetun-env-secrets
+        property: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret