fixup! 🔧 immich

kubernetes/apps/default/immich/app/kustomization.yaml

@@ -8,6 +8,7 @@ resources:
   - ./externalsecret.yaml
   - ./gatus.yaml
   - ./microservices
+  - ./proxy
   - ./machine-learning
   - ./server
   - ./typesense

kubernetes/apps/default/immich/app/proxy/helmrelease.yaml

@@ -0,0 +1,63 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: immich-proxy
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: app-template
+      version: 1.5.1
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+      interval: 15m
+  install:
+    createNamespace: true
+    remediation:
+      retries: 5
+  upgrade:
+    remediation:
+      retries: 5
+  dependsOn:
+    - name: immich-server
+  values:
+    controller:
+      strategy: RollingUpdate
+      annotations:
+        configmap.reloader.stakater.com/reload: &configMap immich-configmap
+    image:
+      repository: ghcr.io/immich-app/immich-proxy
+      tag: v1.81.1
+    service:
+      main:
+        ports:
+          http:
+            port: 8080
+    ingress:
+      main:
+        enabled: true
+        ingressClassName: nginx
+        annotations:
+          external-dns.home.arpa/enabled: "true"
+          hajimari.io/appName: Immich
+          hajimari.io/icon: mdi:image-album
+          nginx.ingress.kubernetes.io/proxy-body-size: "0"
+        hosts:
+          - host: &host photos.${SECRET_CLUSTER_DOMAIN}
+            paths:
+              - path: /
+                pathType: Prefix
+        tls:
+          - hosts:
+              - *host
+    resources:
+      requests:
+        cpu: 100m
+        memory: 250Mi
+    envFrom:
+      - configMapRef:
+          name: *configMap

kubernetes/apps/default/immich/app/proxy/kustomization.yaml

@@ -0,0 +1,6 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./helmrelease.yaml

kubernetes/apps/default/immich/app/web/helmrelease.yaml

@@ -48,31 +48,6 @@ spec:
         ports:
           http:
             port: 3000
-    ingress:
-      main:
-        enabled: true
-        ingressClassName: nginx
-        annotations:
-          external-dns.home.arpa/enabled: "true"
-          hajimari.io/appName: Immich
-          hajimari.io/icon: mdi:image-album
-          nginx.ingress.kubernetes.io/configuration-snippet: |
-            rewrite /api/(.*) /$1 break;
-          nignx.ingress.kubernetes.io/force-ssl-redirect: "true"
-          nginx.ingress.kubernetes.io/proxy-body-size: "0"
-        hosts:
-          - host: &host photos.${SECRET_CLUSTER_DOMAIN}
-            paths:
-              - path: /
-                pathType: Prefix
-              - path: /api
-                pathType: Prefix
-                service:
-                  name: immich-server
-                  port: 3001
-        tls:
-          - hosts:
-              - *host
     podSecurityContext:
       runAsUser: 568
       runAsGroup: 568