--- # yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json apiVersion: helm.toolkit.fluxcd.io/v2 kind: HelmRelease metadata: name: &app sonarr namespace: default spec: interval: 30m chart: spec: chart: app-template version: 3.2.1 sourceRef: kind: HelmRepository name: bjw-s namespace: flux-system maxHistory: 2 install: createNamespace: true remediation: retries: 3 upgrade: cleanupOnFail: true remediation: strategy: rollback retries: 3 uninstall: keepHistory: false values: defaultPodOptions: securityContext: runAsUser: 568 runAsGroup: 568 fsGroup: 568 fsGroupChangePolicy: OnRootMismatch controllers: sonarr: annotations: reloader.stakater.com/auto: "true" configmap.reloader.stakater.com/reload: sonarr-pushover initContainers: init-db: image: repository: ghcr.io/onedr0p/postgres-init tag: 16 envFrom: &envFrom - secretRef: name: sonarr-secret containers: app: image: repository: ghcr.io/onedr0p/sonarr-develop tag: 4.0.5.1719@sha256:602af44d766a8c7c494d01fb79f6e7624aed58f0b86ffe10e1ecad280160a3df env: TZ: "${TIMEZONE}" PUSHOVER_APP_URL: &host "{{ .Release.Name }}.${SECRET_EXTERNAL_DOMAIN}" PUSHOVER_DEBUG: "false" PUSHOVER_PRIORITY: "0" SONARR__AUTHENTICATION_METHOD: External SONARR__AUTHENTICATION_REQUIRED: DisabledForLocalAddresses SONARR__INSTANCE_NAME: Sonarr SONARR__PORT: &port 8080 SONARR__APPLICATION_URL: "https://{{ .Release.Name }}.${SECRET_EXTERNAL_DOMAIN}" SONARR__LOG_LEVEL: info SONARR__THEME: dark envFrom: *envFrom probes: liveness: &probes enabled: true custom: true spec: httpGet: path: /ping port: *port initialDelaySeconds: 0 periodSeconds: 10 timeoutSeconds: 1 failureThreshold: 3 readiness: *probes startup: enabled: false resources: requests: cpu: 10m memory: 256M limits: memory: 4Gi service: app: controller: *app ports: http: port: *port ingress: app: enabled: true className: nginx annotations: # nginx.ingress.kubernetes.io/auth-method: GET # nginx.ingress.kubernetes.io/auth-url: http://authelia.default.svc.cluster.local.:8888/api/verify # nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method # nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email # nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method; hajimari.io/icon: mdi:television-classic hosts: - host: *host paths: - path: / service: identifier: app port: http tls: - hosts: - *host persistence: config: enabled: true existingClaim: *app globalMounts: - path: /config downloads: type: nfs server: 192.168.9.10 path: /var/mnt/vol1/downloads globalMounts: - path: /mnt/storage/downloads video: type: nfs server: 192.168.9.10 path: /var/mnt/vol1/video globalMounts: - path: /mnt/storage/video scripts: type: configMap name: sonarr-pushover defaultMode: 0775 globalMounts: - path: /scripts/pushover-notify.sh subPath: pushover-notify.sh readOnly: true