--- apiVersion: helm.toolkit.fluxcd.io/v2beta1 kind: HelmRelease metadata: name: &app lidarr namespace: default spec: interval: 15m chart: spec: chart: app-template version: 1.1.3 sourceRef: kind: HelmRepository name: bjw-s namespace: flux-system install: createNamespace: true remediation: retries: 5 upgrade: remediation: retries: 5 values: image: repository: ghcr.io/onedr0p/lidarr-develop tag: 1.1.0.2649@sha256:fa286e1271ac7fcd29f25be9b9b3a8170f1e0ad4e12607aa03a3463fdbaca31a env: TZ: "${TIMEZONE}" LIDARR__INSTANCE_NAME: Lidarr LIDARR__PORT: &port 80 LIDARR__LOG_LEVEL: info envFrom: - secretRef: name: *app service: main: ports: http: port: *port ingress: main: enabled: true ingressClassName: "nginx" annotations: auth.home.arpa/enabled: "true" nginx.ingress.kubernetes.io/configuration-snippet: | proxy_set_header Accept-Encoding ""; sub_filter '' ''; sub_filter_once on; hosts: - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}" paths: - path: / pathType: Prefix tls: - hosts: - *host podSecurityContext: runAsUser: 568 runAsGroup: 568 fsGroup: 568 fsGroupChangePolicy: "OnRootMismatch" supplementalGroups: - 100 persistence: config: enabled: true existingClaim: lidarr-config mountPath: /config music: enabled: true type: nfs server: "${LOCAL_LAN_TRUENAS}" path: /mnt/storage/music mountPath: /mnt/storage/music downloads: enabled: true type: nfs server: "${LOCAL_LAN_TRUENAS}" path: /mnt/storage/downloads mountPath: /mnt/storage/downloads podAnnotations: secret.reloader.stakater.com/reload: *app resources: requests: cpu: 10m memory: 250Mi limits: memory: 2000Mi