Files
auricom-home-cluster/kubernetes/apps/default/filebrowser/app/helmrelease.yaml
feisar-bot[bot] a30a5fd80b ⬆️ Update docker.io/filebrowser/filebrowser ( v2.42.5 → v2.43.0 )
| datasource | package                           | from    | to      |
| ---------- | --------------------------------- | ------- | ------- |
| docker     | docker.io/filebrowser/filebrowser | v2.42.5 | v2.43.0 |
2025-09-14 15:16:47 +00:00

177 lines
4.7 KiB
YAML

---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: &app filebrowser
spec:
interval: 1h
chartRef:
kind: OCIRepository
name: app-template
install:
remediation:
retries: 3
upgrade:
cleanupOnFail: true
remediation:
strategy: rollback
retries: 3
values:
defaultPodOptions:
securityContext:
runAsNonRoot: true
runAsUser: 10000
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
seccompProfile:
type: RuntimeDefault
controllers:
flood:
annotations:
reloader.stakater.com/auto: "true"
containers:
app:
image:
repository: docker.io/filebrowser/filebrowser
tag: v2.43.0@sha256:1d0bcba4bd7d8886cc6f77c791694d69f9c7c78e889c4ed3a5734529daed9fa1
env:
FB_DATABASE: /config/filebrowser.db
FB_ROOT: /var/mnt
FB_LOG: stdout
FB_PORT: &port 7000
probes:
liveness: &probes
enabled: true
custom: true
spec:
httpGet:
path: /health
port: *port
initialDelaySeconds: 0
periodSeconds: 10
timeoutSeconds: 1
failureThreshold: 3
readiness: *probes
resources:
requests:
cpu: 100m
limits:
memory: 2Gi
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities:
drop:
- ALL
service:
app:
controller: *app
ports:
http:
port: *port
route:
app:
hostnames: ["{{ .Release.Name }}.${SECRET_EXTERNAL_DOMAIN}"]
parentRefs:
- name: internal
namespace: network
sectionName: https
rules:
- backendRefs:
- name: *app
port: *port
persistence:
calibre:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/apps/calibre
globalMounts:
- path: /var/mnt/vol1/apps/calibre
frigate:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/apps/frigate
globalMounts:
- path: /var/mnt/vol1/apps/frigate
sharry:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/apps/sharry
globalMounts:
- path: /var/mnt/vol1/apps/sharry
downloads:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/downloads
globalMounts:
- path: /var/mnt/vol1/downloads
claude:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/home/claude
globalMounts:
- path: /var/mnt/vol1/home/claude
helene:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/home/helene
globalMounts:
- path: /var/mnt/vol1/home/helene
music:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/music
globalMounts:
- path: /var/mnt/vol1/music
music_transcoded:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/music_transcoded
globalMounts:
- path: /var/mnt/vol1/music_transcoded
photo:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/photo
globalMounts:
- path: /var/mnt/vol1/photo
piracy:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/piracy
globalMounts:
- path: /var/mnt/vol1/piracy
shared-documents:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/shared-documents
globalMounts:
- path: /var/mnt/vol1/shared-documents
video:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol1/video
globalMounts:
- path: /var/mnt/vol1/video
minio:
enabled: true
type: nfs
server: 192.168.9.10
path: /var/mnt/vol2/apps/minio
globalMounts:
- path: /var/mnt/vol2/apps/minio