Compare commits
1 commit
bb05870615
...
edd7aaf18c
| Author | SHA1 | Date | |
|---|---|---|---|
| edd7aaf18c |
8 changed files with 17 additions and 152 deletions
|
|
@ -16,4 +16,4 @@ images:
|
|||
- name: flaresolverr/flaresolverr
|
||||
newTag: v3.4.6@sha256:7962759d99d7e125e108e0f5e7f3cdbcd36161776d058d1d9b7153b92ef1af9e
|
||||
- name: linuxserver/prowlarr
|
||||
newTag: 2.3.5@sha256:a89f252d6a22bd25af14a5380aec0adcc3c3af2e3282164f981680e6844070f3
|
||||
newTag: 2.3.5@sha256:4b52038b7b6452a20c145239fa07d8218d1541d736a96c43aa0a5f60141cab28
|
||||
|
|
|
|||
|
|
@ -12,7 +12,7 @@ data:
|
|||
VPN_PORT_FORWARDING_UP_COMMAND: "/scripts/port-up.sh"
|
||||
VPN_PORT_FORWARDING_DOWN_COMMAND: "/scripts/port-down.sh"
|
||||
FIREWALL_OUTBOUND_SUBNETS: 10.244.0.0/16,10.96.0.0/12
|
||||
FIREWALL_INPUT_PORTS: "8112,5030"
|
||||
FIREWALL_INPUT_PORTS: "8112"
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
|
|
@ -43,22 +43,6 @@ data:
|
|||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: slskd-envs
|
||||
data:
|
||||
TZ: Europe/Amsterdam
|
||||
PUID: "1000"
|
||||
PGID: "1000"
|
||||
SLSKD_DOWNLOADS_DIR: /shared/media/downloads/_slsk-downloads
|
||||
SLSKD_INCOMPLETE_DIR: /shared/media/downloads/_slsk-incomplete
|
||||
SLSKD_SHARED_DIR: "[Music]/shared/media/downloads/_slsk-downloads"
|
||||
SLSKD_REMOTE_CONFIGURATION: "true"
|
||||
SLSKD_VPN: "true"
|
||||
SLSKD_VPN_PORT_FORWARDING: "true"
|
||||
SLSKD_VPN_GLUETUN_URL: http://localhost:8000
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: unpackerr-envs
|
||||
data:
|
||||
|
|
|
|||
|
|
@ -21,21 +21,16 @@ spec:
|
|||
- name: gluetun
|
||||
image: ghcr.io/qdm12/gluetun
|
||||
ports:
|
||||
- name: qbit-http
|
||||
- name: http
|
||||
containerPort: 8112
|
||||
protocol: TCP
|
||||
- name: slskd-http
|
||||
containerPort: 5030
|
||||
protocol: TCP
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: gluetun-envs
|
||||
- secretRef:
|
||||
name: gluetun-env-secrets
|
||||
volumeMounts:
|
||||
- mountPath: /dev/net/tun
|
||||
name: dev-tun
|
||||
- mountPath: /gluetun/wireguard
|
||||
- mountPath: "/gluetun/wireguard"
|
||||
name: gluetun-wgconfig
|
||||
readOnly: true
|
||||
- name: gluetun-scripts
|
||||
|
|
@ -124,30 +119,6 @@ spec:
|
|||
capabilities:
|
||||
drop:
|
||||
- "ALL"
|
||||
- name: slskd
|
||||
image: docker.io/slskd/slskd
|
||||
imagePullPolicy: IfNotPresent
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: slskd-envs
|
||||
- secretRef:
|
||||
name: slskd-env-secrets
|
||||
volumeMounts:
|
||||
- mountPath: /config
|
||||
name: slskd-config
|
||||
- mountPath: /shared/media/downloads
|
||||
name: nfs-media
|
||||
securityContext:
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- "ALL"
|
||||
add:
|
||||
- "CHOWN"
|
||||
- "SETUID"
|
||||
- "SETGID"
|
||||
volumes:
|
||||
- name: dev-tun
|
||||
hostPath:
|
||||
|
|
@ -156,9 +127,6 @@ spec:
|
|||
- name: qbittorrent-config
|
||||
persistentVolumeClaim:
|
||||
claimName: qbittorrent-storage
|
||||
- name: slskd-config
|
||||
persistentVolumeClaim:
|
||||
claimName: slskd-storage
|
||||
- name: gluetun-wgconfig
|
||||
secret:
|
||||
secretName: gluetun-wgconfig
|
||||
|
|
|
|||
|
|
@ -14,46 +14,3 @@ spec:
|
|||
- backendRefs:
|
||||
- name: qbittorrent
|
||||
port: 80
|
||||
|
||||
---
|
||||
apiVersion: gateway.networking.k8s.io/v1
|
||||
kind: HTTPRoute
|
||||
metadata:
|
||||
name: slskd-route
|
||||
spec:
|
||||
parentRefs:
|
||||
- name: internal
|
||||
namespace: kube-system
|
||||
sectionName: https
|
||||
hostnames:
|
||||
- "slskd.wheatley.in"
|
||||
rules:
|
||||
- backendRefs:
|
||||
- name: slskd
|
||||
port: 80
|
||||
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: qbittorrent
|
||||
spec:
|
||||
selector:
|
||||
app: qbittorrent
|
||||
ports:
|
||||
- port: 80
|
||||
protocol: TCP
|
||||
targetPort: 8112
|
||||
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: slskd
|
||||
spec:
|
||||
selector:
|
||||
app: qbittorrent
|
||||
ports:
|
||||
- port: 80
|
||||
protocol: TCP
|
||||
targetPort: 5030
|
||||
|
|
|
|||
|
|
@ -10,6 +10,7 @@ resources:
|
|||
- ingress.yaml
|
||||
- pvc.yaml
|
||||
- secrets.yaml
|
||||
- services.yaml
|
||||
- namespace.yaml
|
||||
|
||||
patches:
|
||||
|
|
@ -36,5 +37,3 @@ images:
|
|||
newTag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
|
||||
- name: docker.io/qbittorrentofficial/qbittorrent-nox
|
||||
newTag: 5.1.4-2@sha256:85fe2690f418dabffc4907276b3cdffcb7880c7114157b32f932d3b97bac45af
|
||||
- name: docker.io/slskd/slskd
|
||||
newTag: 0.25.1
|
||||
|
|
|
|||
|
|
@ -10,15 +10,3 @@ spec:
|
|||
resources:
|
||||
requests:
|
||||
storage: 5Gi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: slskd-storage
|
||||
spec:
|
||||
storageClassName: piraeus-lvmthin
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
|
|
|
|||
|
|
@ -17,49 +17,6 @@ spec:
|
|||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/protonvpn-wgconfig
|
||||
property: config
|
||||
|
||||
---
|
||||
apiVersion: external-secrets.io/v1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: slskd-env-secrets
|
||||
spec:
|
||||
secretStoreRef:
|
||||
name: vault-wheatley
|
||||
kind: ClusterSecretStore
|
||||
target:
|
||||
name: slskd-env-secrets
|
||||
data:
|
||||
- secretKey: SLSKD_VPN_GLUETUN_API_KEY
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
||||
property: GLUETUN_API_KEY
|
||||
- secretKey: SLSKD_SLSK_USERNAME
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
||||
property: SLSK_USERNAME
|
||||
- secretKey: SLSKD_SLSK_PASSWORD
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/slskd-env-secrets
|
||||
property: SLSK_PASSWORD
|
||||
|
||||
---
|
||||
apiVersion: external-secrets.io/v1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: gluetun-env-secrets
|
||||
spec:
|
||||
secretStoreRef:
|
||||
name: vault-wheatley
|
||||
kind: ClusterSecretStore
|
||||
target:
|
||||
name: gluetun-env-secrets
|
||||
data:
|
||||
- secretKey: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
|
||||
remoteRef:
|
||||
key: secrets/managed/qbittorrent/gluetun-env-secrets
|
||||
property: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
|
||||
|
||||
---
|
||||
apiVersion: external-secrets.io/v1
|
||||
kind: ExternalSecret
|
||||
|
|
|
|||
12
k8s-wheatley/qbittorrent/services.yaml
Normal file
12
k8s-wheatley/qbittorrent/services.yaml
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: qbittorrent
|
||||
spec:
|
||||
selector:
|
||||
app: qbittorrent
|
||||
ports:
|
||||
- port: 80
|
||||
protocol: TCP
|
||||
targetPort: 8112
|
||||
Loading…
Add table
Add a link
Reference in a new issue