add lychee

cluster/media/lychee.yaml

@@ -0,0 +1,97 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: lychee
+  namespace: media
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://k8s-at-home.com/charts/
+      chart: lychee
+      version: 1.0.1
+      sourceRef:
+        kind: HelmRepository
+        name: k8s-at-home-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    image:
+      repository: lycheeorg/lychee-laravel
+      pullPolicy: IfNotPresent
+      tag: v4.0.8
+    strategy:
+      type: Recreate
+    service:
+      port:
+        port: 80
+      annotations:
+        prometheus.io/probe: "true"
+        prometheus.io/protocol: http
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+    env:
+      PHP_TZ: Europe/Paris
+      DB_CONNECTION: pgsql
+    persistence:
+      config:
+        enabled: true
+        mountPath: /conf
+        existingClaim: lychee-config
+      uploads:
+        enabled: true
+        mountPath: /uploads
+        existingClaim: lychee-uploads
+      sym:
+        enabled: true
+        mountPath: /sym
+        existingClaim: lychee-sym
+      photo:
+        enabled: true
+        mountPath: /mnt/storage/photo
+        existingClaim: nfs-photo
+  valuesFrom:
+  - kind: ConfigMap
+    name: helmrelease-media-lychee
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: lychee-config
+  namespace: media
+spec:
+  accessModes:
+  - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: lychee-uploads
+  namespace: media
+spec:
+  accessModes:
+  - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 50Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: lychee-sym
+  namespace: media
+spec:
+  accessModes:
+  - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 1Gi

secrets/helmrelease-media-lychee.yaml

@@ -0,0 +1,36 @@
+apiVersion: v1
+data:
+    values.yaml: ENC[AES256_GCM,data:jYEnlkWlka5ECNgv4wVsCSfrhDsGgM8Xl90zPMitOoa1kEkF2X+445gQXu+5c86Ebjvjo22Xau/Vko+fvzS4u/LHubpiHdr95uYpoVrzMCgCDrRab/Ifv5+A8ugz0RcFNJQQW4bWERhpkSUhKL6NbVO7KJsm8cOhdOSRGBFDrFWiBed+y1+rQzmXd8pywcWUbwtMU5+1++V8CkFjdAgS3w13p+iu+cBwjGOnbToU2N8tjfkoamrn7gV8uyDehUjkR6qfIuehbsMD11aoomvt7t850TYr1bAAIBOzOGGzXDAbp7H8Vaf367TkVWKAh5uytxsBrutEATIcIpRcIt+Ex6A7m1I8YIzmqeadWQuCL3zCJ7o4UQ==,iv:RUQQVJZZY8xaE1GmZ+Ivz93X+ClHveJ8DE2umG5hi14=,tag:CBNm1rPDLtJ22RYU0jz55g==,type:str]
+kind: ConfigMap
+metadata:
+    creationTimestamp: null
+    name: helmrelease-media-lychee
+    namespace: media
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    lastmodified: '2020-12-12T00:51:09Z'
+    mac: ENC[AES256_GCM,data:Paeqi/A4jdnv6QHcNWCmnd1r6CbmYYUmuUelBoLiniQrfPDJ3CflCftm4cdi0tBoEsC8Sd89VjbSZ40Xb0yXv5kZXAumFC4XBsxq0dk0u4gKOKItiWGAZsDvuKD8KZ9nEq81tEypOvtuRQ5HttBKsm/vcE7NklhF4SE+dt4dVMk=,iv:ep9T9k8Rf2AAqa+51Yn7aTLbbfraDFP/K0yKM96iOKw=,tag:558w+QynZdxKEbQZcVMWlQ==,type:str]
+    pgp:
+    -   created_at: '2020-12-12T00:51:09Z'
+        enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQGMA/JorPHm1g9XAQwAhKWhacwyPnH7aLBcPSD53oGq6yF7oD6FE8qsKlFROB+n
+            e7soSIbsX5K6frIhu41iY0UzyCFVLZKzfDuyIebbfI5h9ABudCHBxCTY4kF6OnGN
+            C9SkX6qRqZ3I5h+4EP1SfU4jQ1WwU3Z1xeB9R1e6dku8Cc/i0su9+otI9m2VYd9g
+            6Ph1Wuyyuf1U18sWu9EBICuMh7qVQK1SL3J4b7e8BA59XdDV7QMiv3iB+Aag5x/+
+            lRlNI3R0tDvti/UEczIrxX4PTweS7x+2RAS6uYc4OGcK2Nd8Nivf/jLQUj+AZE/5
+            giGi+9b1oZyaz5c3hF4mNEuZt4pT3SM3gU/idxpkHdxfnJ2xMzcEaWhtb0seJvqb
+            wVvGqn4vCmdH7W0xwKQa6fKJfg6hjmcz1po8GvWQFSAhguEdVBiGULX0l+ikjPQw
+            Zi4zA5pZKxyq5K0ZWSYNlSyHrlRPM6pd51TfBoqGT0qQBwqXKZLz9KTStMP1ujk4
+            zWk6cz7YfbCG1J5U9GIp0lwBPkVAdf/U3EIvna6HQ3dYXPb9rk1lUcuXWrncnhPW
+            qh2njhXtQjkkbgl4gEIeAYiPTC5sAi1Q2XHu88yCqXDrwek107a1XBS1YtevkNX2
+            mAvO7MhLqeNuKDlNLg==
+            =rBRm
+            -----END PGP MESSAGE-----
+        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+    encrypted_regex: ^(data|stringData)$
+    version: 3.6.1