---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: lidarr
  namespace: media
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://k8s-at-home.com/charts/
      chart: lidarr
      version: 13.1.1
      sourceRef:
        kind: HelmRepository
        name: k8s-at-home-charts
        namespace: flux-system
      interval: 5m
  values:
    image:
      repository: ghcr.io/k8s-at-home/lidarr-develop
      tag: v0.8.1.2135
      pullPolicy: IfNotPresent

    env:
      TZ: "Europe/Paris"

    podSecurityContext:
      runAsUser: 568
      runAsGroup: 568
      fsGroup: 568

    persistence:
      config:
        enabled: true
        existingClaim: lidarr-config
      nfs-music-media:
        enabled: true
        existingClaim: nfs-music-media
        mountPath: "/mnt/storage/music"
      nfs-video-media:
        enabled: true
        existingClaim: nfs-video-media
        mountPath: "/mnt/storage/video"
      qbittorrent-cache:
        enabled: true
        existingClaim: qbittorrent-cache
        mountPath: "/downloads"

    service:
      main:
        annotations:
          prometheus.io/probe: "true"
          prometheus.io/protocol: http

    ingress:
      main:
        enabled: true
        ingressClassName: "nginx"
        annotations:
          nginx.ingress.kubernetes.io/proxy-body-size: "0"
          nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
          nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
          # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
          # traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd, networking-buffering-small@kubernetescrd
        hosts:
          - host: "lidarr.${SECRET_CLUSTER_DOMAIN}"
            paths:
              - path: /
                pathType: Prefix
        tls:
          - hosts:
              - "lidarr.${SECRET_CLUSTER_DOMAIN}"
      api:
        enabled: true
        ingressClassName: "nginx"
        # annotations:
        # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
        hosts:
          - host: "lidarr.${SECRET_CLUSTER_DOMAIN}"
            paths:
              - path: /api
                pathType: Prefix
        tls:
          - hosts:
              - "lidarr.${SECRET_CLUSTER_DOMAIN}"

    resources:
      requests:
        memory: 500Mi
        cpu: 500m
      limits:
        memory: 1500Mi

    prometheus:
      podMonitor:
        enabled: true
        interval: 10m
        scrapeTimeout: 2m

    additionalContainers:
      - name: exportarr
        image: ghcr.io/onedr0p/exportarr:v0.6.2
        imagePullPolicy: IfNotPresent
        args: ["exportarr", "lidarr"]
        env:
          - name: PORT
            value: "32123"
          - name: URL
            value: "http://localhost"
          - name: CONFIG
            value: "/config/config.xml"
          - name: ENABLE_UNKNOWN_QUEUE_ITEMS
            value: "true"
          - name: ENABLE_ADDITIONAL_METRICS
            value: "true"
        ports:
          - name: exportarr
            containerPort: 32123
        volumeMounts:
          - name: config
            mountPath: /config
            readOnly: true