feat: add frigate

cluster/apps/home/frigate/helm-release.yaml

@@ -0,0 +1,111 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: frigate
+  namespace: home
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://blakeblackshear.github.io/blakeshome-charts/
+      chart: frigate
+      version: 5.0.1
+      sourceRef:
+        kind: HelmRepository
+        name: blakeshome-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    image:
+      repository: blakeblackshear/frigate
+      tag: 0.8.4-amd64
+    coral:
+      enabled: true
+    shmSize: 2Gi
+    timezone: "Europe/Paris"
+    config: |
+      mqtt:
+        host: vernemq
+        topic_prefix: frigate
+
+      database:
+        path: /data/frigate.db
+
+      detectors:
+        coral:
+          type: edgetpu
+          device: usb
+
+      objects:
+        track:
+        - person
+        - dog
+        - cat
+        filters:
+          person:
+            min_area: 2500
+            max_area: 100000
+            threshold: 0.7
+          dog:
+            min_area: 1000
+            max_area: 10000
+            threshold: 0.7
+          cat:
+            min_area: 1000
+            max_area: 10000
+            threshold: 0.7
+
+      ffmpeg:
+        hwaccel_args:
+        - -hwaccel
+        - vaapi
+        - -hwaccel_device
+        - /dev/dri/renderD128
+        - -hwaccel_output_format
+        - yuv420p
+
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}/"
+      hosts:
+        - "frigate.${SECRET_CLUSTER_DOMAIN}"
+      tls:
+        - hosts:
+            - "frigate.${SECRET_CLUSTER_DOMAIN}"
+    persistence:
+      data:
+        enabled: true
+        existingClaim: frigate-config
+        mountPath: /data
+    extraVolumes:
+      - name: cache
+        emptyDir:
+          medium: Memory
+    extraVolumeMounts:
+      - name: cache
+        mountPath: /tmp/cache
+    affinity:
+      nodeAffinity:
+        requiredDuringSchedulingIgnoredDuringExecution:
+          nodeSelectorTerms:
+            - matchExpressions:
+                - key: feature.node.kubernetes.io/custom-coral-tpu
+                  operator: In
+                  values:
+                    - "true"
+                - key: feature.node.kubernetes.io/custom-intel-gpu
+                  operator: In
+                  values:
+                    - "true"
+    resources:
+      requests:
+        gpu.intel.com/i915: 1
+        memory: 100Mi
+        cpu: 500m
+      limits:
+        gpu.intel.com/i915: 1
+        memory: 2000Mi

cluster/apps/home/frigate/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
+  - volume.yaml

cluster/apps/home/frigate/volume.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: frigate-config
+  namespace: home
+  labels:
+    kasten-io-snapshots: "enable"
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: rook-ceph-block
+  resources:
+    requests:
+      storage: 1Gi

cluster/apps/home/kustomization.yaml

@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - esphome
+  - frigate
   - home-assistant
   - node-red
   - vernemq