feat: calibre

This commit is contained in:
auricom
2025-09-14 14:05:36 +02:00
parent 348f03e194
commit e78dd3a4f3
7 changed files with 290 additions and 1 deletions

View File

@@ -0,0 +1,107 @@
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: &app calibre-downloader
namespace: default
spec:
interval: 1h
chartRef:
kind: OCIRepository
name: app-template
install:
remediation:
retries: 3
upgrade:
cleanupOnFail: true
remediation:
strategy: rollback
retries: 3
values:
defaultPodOptions:
securityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsNonRoot: false
seccompProfile: { type: RuntimeDefault }
controllers:
${APP}:
containers:
app:
image:
repository: ghcr.io/calibrain/calibre-web-automated-book-downloader-extbp
tag: v0.2.1@sha256:ad85f74b495e8736d4081052236866f5a6587ffd60638f448cce80c1d35c5b03
env:
FLASK_PORT: &port 8084
INGEST_DIR: &ingest /cwa-book-ingest
BOOK_LANGUAGE: en
DEFAULT_SLEEP: 15
USE_BOOK_TITLE: true
LOG_LEVEL: debug
# Use flaresolverr instead of integrated chromium
EXT_BYPASSER_URL: http://flaresolverr:8191
command:
- /bin/sh
- -c
- |
gunicorn -t 300 -b 0.0.0.0:8084 app:app
probes:
liveness: &probes
enabled: true
custom: true
spec:
httpGet:
path: /request/api/status
port: *port
readiness: *probes
resources:
requests:
cpu: 10m
memory: 150Mi
limits:
memory: 500Mi
securityContext:
readOnlyRootFilesystem: true
capabilities:
drop:
- ALL
allowPrivilegeEscalation: false
service:
app:
controller: *app
ports:
http:
port: *port
route:
app:
hostnames: ["books.${SECRET_EXTERNAL_DOMAIN}"]
parentRefs:
- name: internal
namespace: network
sectionName: https
rules:
- backendRefs:
- name: *app
port: *port
timeouts:
request: 0s
persistence:
tmpfs:
type: emptyDir
globalMounts:
- path: /tmp
subPath: tmp
- path: /app/downloaded_files
subPath: downloads
- path: /var/log/cwa-book-downloader/
subPath: logs
ingest:
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/apps/calibre/ingest
globalMounts:
- path: *ingest

View File

@@ -0,0 +1,7 @@
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: default
resources:
- ./helmrelease.yaml

View File

@@ -0,0 +1,112 @@
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: &app calibre-web-automated
namespace: default
spec:
interval: 1h
chartRef:
kind: OCIRepository
name: app-template
install:
remediation:
retries: 3
upgrade:
cleanupOnFail: true
remediation:
strategy: rollback
retries: 3
values:
defaultPodOptions:
securityContext:
runAsUser: 0
runAsGroup: 0
runAsNonRoot: false
seccompProfile: { type: RuntimeDefault }
controllers:
${APP}:
containers:
app:
image:
repository: ghcr.io/crocodilestick/calibre-web-automated
tag: V3.1.4@sha256:577e846f104fd21453ef306eefb4a95dd95b3b9ddd2463a150944494284da0fd
env:
CACHE_DIR: /cache
# Skips/soft fail on privileged actions that shouldn't exist anyways
NETWORK_SHARE_MODE: true
S6_YES_I_WANT_A_WORLD_WRITABLE_RUN_BECAUSE_KUBERNETES: 1
S6_READ_ONLY_ROOT: 1
securityContext:
allowPrivilegeEscalation: true
readOnlyRootFilesystem: false
capabilities:
drop:
- ALL
add:
# S6
- CHOWN
- SETUID
- SETGID
- FOWNER
- DAC_OVERRIDE
probes:
liveness: &probes
enabled: true
custom: true
spec:
httpGet:
port: &port 8083
path: /login
readiness: *probes
resources:
requests:
cpu: 50m
memory: 200Mi
limits:
memory: 600Mi
service:
app:
controller: *app
ports:
http:
port: *port
route:
app:
hostnames: ["calibre.${SECRET_EXTERNAL_DOMAIN}"]
parentRefs:
- name: internal
namespace: network
sectionName: https
rules:
- backendRefs:
- name: *app
port: *port
persistence:
config:
enabled: true
existingClaim: *app
globalMounts:
- path: /config
tmpfs:
type: emptyDir
globalMounts:
- path: /cache
subPath: cache
- path: /tmp
subPath: tmp
- path: /run
subPath: run
ingest:
type: nfs
server: &nas 192.168.9.10
path: /var/mnt/vol1/apps/calibre/ingest
globalMounts:
- path: /cwa-book-ingest
library:
type: nfs
server: *nas
path: /var/mnt/vol1/apps/calibre/library
globalMounts:
- path: /calibre-library

View File

@@ -0,0 +1,7 @@
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: default
resources:
- ./helmrelease.yaml

View File

@@ -0,0 +1,55 @@
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: &app calibre-web-automated
namespace: &namespace default
spec:
targetNamespace: *namespace
dependsOn:
- name: volsync
namespace: volsync
commonMetadata:
labels:
app.kubernetes.io/name: *app
path: ./kubernetes/apps/default/calibre/calibre-web-automated
components:
- ../../../../components/gatus/guarded
- ../../../../components/volsync
prune: true
sourceRef:
kind: GitRepository
name: flux-system
namespace: flux-system
wait: true
interval: 30m
timeout: 3m
postBuild:
substitute:
APP: *app
VOLSYNC_CAPACITY: 10Gi
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: &app calibre-downloader
namespace: &namespace default
spec:
targetNamespace: *namespace
commonMetadata:
labels:
app.kubernetes.io/name: *app
path: ./kubernetes/apps/default/calibre/calibre-downloader
prune: true
sourceRef:
kind: GitRepository
name: flux-system
namespace: flux-system
wait: true
interval: 30m
timeout: 3m
postBuild:
substitute:
APP: *app

View File

@@ -9,6 +9,7 @@ resources:
- ./atuin/ks.yaml
- ./authelia/ks.yaml
- ./bazarr/ks.yaml
- ./calibre/ks.yaml
- ./exercisediary/ks.yaml
- ./flaresolverr/ks.yaml
- ./flood/ks.yaml