Compare commits
1 commit
bb05870615
...
edd7aaf18c
| Author | SHA1 | Date | |
|---|---|---|---|
| edd7aaf18c |
8 changed files with 17 additions and 152 deletions
|
|
@ -16,4 +16,4 @@ images:
|
||||||
- name: flaresolverr/flaresolverr
|
- name: flaresolverr/flaresolverr
|
||||||
newTag: v3.4.6@sha256:7962759d99d7e125e108e0f5e7f3cdbcd36161776d058d1d9b7153b92ef1af9e
|
newTag: v3.4.6@sha256:7962759d99d7e125e108e0f5e7f3cdbcd36161776d058d1d9b7153b92ef1af9e
|
||||||
- name: linuxserver/prowlarr
|
- name: linuxserver/prowlarr
|
||||||
newTag: 2.3.5@sha256:a89f252d6a22bd25af14a5380aec0adcc3c3af2e3282164f981680e6844070f3
|
newTag: 2.3.5@sha256:4b52038b7b6452a20c145239fa07d8218d1541d736a96c43aa0a5f60141cab28
|
||||||
|
|
|
||||||
|
|
@ -12,7 +12,7 @@ data:
|
||||||
VPN_PORT_FORWARDING_UP_COMMAND: "/scripts/port-up.sh"
|
VPN_PORT_FORWARDING_UP_COMMAND: "/scripts/port-up.sh"
|
||||||
VPN_PORT_FORWARDING_DOWN_COMMAND: "/scripts/port-down.sh"
|
VPN_PORT_FORWARDING_DOWN_COMMAND: "/scripts/port-down.sh"
|
||||||
FIREWALL_OUTBOUND_SUBNETS: 10.244.0.0/16,10.96.0.0/12
|
FIREWALL_OUTBOUND_SUBNETS: 10.244.0.0/16,10.96.0.0/12
|
||||||
FIREWALL_INPUT_PORTS: "8112,5030"
|
FIREWALL_INPUT_PORTS: "8112"
|
||||||
---
|
---
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
|
|
@ -43,22 +43,6 @@ data:
|
||||||
---
|
---
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
|
||||||
name: slskd-envs
|
|
||||||
data:
|
|
||||||
TZ: Europe/Amsterdam
|
|
||||||
PUID: "1000"
|
|
||||||
PGID: "1000"
|
|
||||||
SLSKD_DOWNLOADS_DIR: /shared/media/downloads/_slsk-downloads
|
|
||||||
SLSKD_INCOMPLETE_DIR: /shared/media/downloads/_slsk-incomplete
|
|
||||||
SLSKD_SHARED_DIR: "[Music]/shared/media/downloads/_slsk-downloads"
|
|
||||||
SLSKD_REMOTE_CONFIGURATION: "true"
|
|
||||||
SLSKD_VPN: "true"
|
|
||||||
SLSKD_VPN_PORT_FORWARDING: "true"
|
|
||||||
SLSKD_VPN_GLUETUN_URL: http://localhost:8000
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: ConfigMap
|
|
||||||
metadata:
|
metadata:
|
||||||
name: unpackerr-envs
|
name: unpackerr-envs
|
||||||
data:
|
data:
|
||||||
|
|
|
||||||
|
|
@ -21,21 +21,16 @@ spec:
|
||||||
- name: gluetun
|
- name: gluetun
|
||||||
image: ghcr.io/qdm12/gluetun
|
image: ghcr.io/qdm12/gluetun
|
||||||
ports:
|
ports:
|
||||||
- name: qbit-http
|
- name: http
|
||||||
containerPort: 8112
|
containerPort: 8112
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: slskd-http
|
|
||||||
containerPort: 5030
|
|
||||||
protocol: TCP
|
|
||||||
envFrom:
|
envFrom:
|
||||||
- configMapRef:
|
- configMapRef:
|
||||||
name: gluetun-envs
|
name: gluetun-envs
|
||||||
- secretRef:
|
|
||||||
name: gluetun-env-secrets
|
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- mountPath: /dev/net/tun
|
- mountPath: /dev/net/tun
|
||||||
name: dev-tun
|
name: dev-tun
|
||||||
- mountPath: /gluetun/wireguard
|
- mountPath: "/gluetun/wireguard"
|
||||||
name: gluetun-wgconfig
|
name: gluetun-wgconfig
|
||||||
readOnly: true
|
readOnly: true
|
||||||
- name: gluetun-scripts
|
- name: gluetun-scripts
|
||||||
|
|
@ -124,30 +119,6 @@ spec:
|
||||||
capabilities:
|
capabilities:
|
||||||
drop:
|
drop:
|
||||||
- "ALL"
|
- "ALL"
|
||||||
- name: slskd
|
|
||||||
image: docker.io/slskd/slskd
|
|
||||||
imagePullPolicy: IfNotPresent
|
|
||||||
envFrom:
|
|
||||||
- configMapRef:
|
|
||||||
name: slskd-envs
|
|
||||||
- secretRef:
|
|
||||||
name: slskd-env-secrets
|
|
||||||
volumeMounts:
|
|
||||||
- mountPath: /config
|
|
||||||
name: slskd-config
|
|
||||||
- mountPath: /shared/media/downloads
|
|
||||||
name: nfs-media
|
|
||||||
securityContext:
|
|
||||||
seccompProfile:
|
|
||||||
type: RuntimeDefault
|
|
||||||
allowPrivilegeEscalation: false
|
|
||||||
capabilities:
|
|
||||||
drop:
|
|
||||||
- "ALL"
|
|
||||||
add:
|
|
||||||
- "CHOWN"
|
|
||||||
- "SETUID"
|
|
||||||
- "SETGID"
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: dev-tun
|
- name: dev-tun
|
||||||
hostPath:
|
hostPath:
|
||||||
|
|
@ -156,9 +127,6 @@ spec:
|
||||||
- name: qbittorrent-config
|
- name: qbittorrent-config
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: qbittorrent-storage
|
claimName: qbittorrent-storage
|
||||||
- name: slskd-config
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: slskd-storage
|
|
||||||
- name: gluetun-wgconfig
|
- name: gluetun-wgconfig
|
||||||
secret:
|
secret:
|
||||||
secretName: gluetun-wgconfig
|
secretName: gluetun-wgconfig
|
||||||
|
|
|
||||||
|
|
@ -14,46 +14,3 @@ spec:
|
||||||
- backendRefs:
|
- backendRefs:
|
||||||
- name: qbittorrent
|
- name: qbittorrent
|
||||||
port: 80
|
port: 80
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: gateway.networking.k8s.io/v1
|
|
||||||
kind: HTTPRoute
|
|
||||||
metadata:
|
|
||||||
name: slskd-route
|
|
||||||
spec:
|
|
||||||
parentRefs:
|
|
||||||
- name: internal
|
|
||||||
namespace: kube-system
|
|
||||||
sectionName: https
|
|
||||||
hostnames:
|
|
||||||
- "slskd.wheatley.in"
|
|
||||||
rules:
|
|
||||||
- backendRefs:
|
|
||||||
- name: slskd
|
|
||||||
port: 80
|
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: qbittorrent
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: qbittorrent
|
|
||||||
ports:
|
|
||||||
- port: 80
|
|
||||||
protocol: TCP
|
|
||||||
targetPort: 8112
|
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: slskd
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: qbittorrent
|
|
||||||
ports:
|
|
||||||
- port: 80
|
|
||||||
protocol: TCP
|
|
||||||
targetPort: 5030
|
|
||||||
|
|
|
||||||
|
|
@ -10,6 +10,7 @@ resources:
|
||||||
- ingress.yaml
|
- ingress.yaml
|
||||||
- pvc.yaml
|
- pvc.yaml
|
||||||
- secrets.yaml
|
- secrets.yaml
|
||||||
|
- services.yaml
|
||||||
- namespace.yaml
|
- namespace.yaml
|
||||||
|
|
||||||
patches:
|
patches:
|
||||||
|
|
@ -36,5 +37,3 @@ images:
|
||||||
newTag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
|
newTag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
|
||||||
- name: docker.io/qbittorrentofficial/qbittorrent-nox
|
- name: docker.io/qbittorrentofficial/qbittorrent-nox
|
||||||
newTag: 5.1.4-2@sha256:85fe2690f418dabffc4907276b3cdffcb7880c7114157b32f932d3b97bac45af
|
newTag: 5.1.4-2@sha256:85fe2690f418dabffc4907276b3cdffcb7880c7114157b32f932d3b97bac45af
|
||||||
- name: docker.io/slskd/slskd
|
|
||||||
newTag: 0.25.1
|
|
||||||
|
|
|
||||||
|
|
@ -10,15 +10,3 @@ spec:
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: 5Gi
|
storage: 5Gi
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: slskd-storage
|
|
||||||
spec:
|
|
||||||
storageClassName: piraeus-lvmthin
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 1Gi
|
|
||||||
|
|
|
||||||
|
|
@ -17,49 +17,6 @@ spec:
|
||||||
remoteRef:
|
remoteRef:
|
||||||
key: secrets/managed/qbittorrent/protonvpn-wgconfig
|
key: secrets/managed/qbittorrent/protonvpn-wgconfig
|
||||||
property: config
|
property: config
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: slskd-env-secrets
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
name: vault-wheatley
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
target:
|
|
||||||
name: slskd-env-secrets
|
|
||||||
data:
|
|
||||||
- secretKey: SLSKD_VPN_GLUETUN_API_KEY
|
|
||||||
remoteRef:
|
|
||||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
|
||||||
property: GLUETUN_API_KEY
|
|
||||||
- secretKey: SLSKD_SLSK_USERNAME
|
|
||||||
remoteRef:
|
|
||||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
|
||||||
property: SLSK_USERNAME
|
|
||||||
- secretKey: SLSKD_SLSK_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
|
||||||
property: SLSK_PASSWORD
|
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: gluetun-env-secrets
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
name: vault-wheatley
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
target:
|
|
||||||
name: gluetun-env-secrets
|
|
||||||
data:
|
|
||||||
- secretKey: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
|
|
||||||
remoteRef:
|
|
||||||
key: secrets/managed/qbittorrent/gluetun-env-secrets
|
|
||||||
property: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
|
|
||||||
|
|
||||||
---
|
---
|
||||||
apiVersion: external-secrets.io/v1
|
apiVersion: external-secrets.io/v1
|
||||||
kind: ExternalSecret
|
kind: ExternalSecret
|
||||||
|
|
|
||||||
12
k8s-wheatley/qbittorrent/services.yaml
Normal file
12
k8s-wheatley/qbittorrent/services.yaml
Normal file
|
|
@ -0,0 +1,12 @@
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: qbittorrent
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: qbittorrent
|
||||||
|
ports:
|
||||||
|
- port: 80
|
||||||
|
protocol: TCP
|
||||||
|
targetPort: 8112
|
||||||
Loading…
Add table
Add a link
Reference in a new issue