changes

tuxpeople · Jul 7, 2024 · bc0c9e7 · bc0c9e7
1 parent a58dd48
commit bc0c9e7
Show file tree

Hide file tree

Showing 2 changed files with 61 additions and 6 deletions.
diff --git a/kubernetes/apps/media/calibre-web/app/helmrelease.yaml b/kubernetes/apps/media/calibre-web/app/helmrelease.yaml
@@ -96,7 +96,7 @@ spec:
         enabled: true
         type: nfs
         server: 10.20.30.40
-        path: /volume2/data/calibre
+        path: /volume2/data/media/books
         globalMounts:
           - path: /data/calibre
       cache:

diff --git a/kubernetes/apps/media/readarr/app/helmrelease.yaml b/kubernetes/apps/media/readarr/app/helmrelease.yaml
@@ -28,14 +28,69 @@ spec:
         containers:
           app:
             image:
-              repository: tdeutsch/debugcontainer
-              tag: latest
+              repository: ghcr.io/onedr0p/readarr-develop
+              tag: 0.3.29
+            env:
+              READARR__AUTHENTICATION_METHOD: External
+              READARR__AUTHENTICATION_REQUIRED: DisabledForLocalAddresses
+              READARR__INSTANCE_NAME: Readarr
+              READARR__APPLICATION_URL: "https://{{ .Release.Name }}.${SECRET_DOMAIN}"
+              READARR__LOG_LEVEL: info
+              READARR__PORT: &port 8787
+              READARR__THEME: dark
+              TZ: ${TIMEZONE}
+              UMASK: 002
+            envFrom: &envFrom
+              - secretRef:
+                  name: readarr-secret
+            probes:
+              liveness: &probes
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /ping
+                    port: *port
+                  initialDelaySeconds: 600
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
+              readiness: *probes
             resources:
               requests:
-                cpu: 5m
-                memory: 101M
+                cpu: 10m
               limits:
-                memory: 2048M
+                memory: 1Gi
+            # securityContext:
+            #   allowPrivilegeEscalation: false
+            #   readOnlyRootFilesystem: true
+            #   capabilities:
+            #     drop:
+            #       - ALL
+            #   runAsNonRoot: true
+            #   runAsUser: 1024
+            #   runAsGroup: 100
+            #   fsGroup: 100
+            #   fsGroupChangePolicy: OnRootMismatch
+            #   supplementalGroups:
+            #     - 65539
+        initContainers:
+          update-volume-permission:
+            image:
+              repository: busybox
+              tag: 1.36.1
+            command: [sh, -c, chown -R 1024:100 /config]
+            securityContext:
+              runAsUser: 0
+    # defaultPodOptions:
+    #   securityContext:
+    #     runAsNonRoot: true
+    #     runAsUser: 1024
+    #     runAsGroup: 100
+    #     fsGroup: 100
+    #     fsGroupChangePolicy: OnRootMismatch
+    #     supplementalGroups:
+    #       - 65539
     ingress:
       app:
         className: internal