homelab/values/pihole-debian.yaml
Nik Afiq f006090fea
Some checks failed
validate / lint (push) Failing after 1s
fix: remove Immich entirely
Not used enough to justify chasing the stale-NFS-handle issue on its
photos-art mount. Removes manifests/media/immich.yaml (Namespace, PVCs,
Deployments, Service, Certificate, IngressRoute), its secret script and
sealed secret, immich.home.arpa from both Pi-hole values files, its Dashy
dashboard tile, and all other repo references (READMEs, secrets-leak-scanner
scope, regen-sealed-secret example, .env.example).

Per explicit confirmation: this also means the live namespace's PVCs
(immich-library 50Gi, immich-postgres-data 20Gi, immich-ml-cache 10Gi, all
local-path with Delete reclaim policy) are intended to be deleted along with
it -- any photos actually uploaded to Immich's own library are gone once the
namespace is deleted, separately from the read-only NFS folders it browsed
(untouched either way, those live independently on nik-debian).

Git removal alone does not delete the live cluster resources -- the media
Application has prune: false. Manual `kubectl delete namespace immich` still
needed to actually free the namespace/PVCs/data.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-23 20:21:05 +09:00

57 lines
1.4 KiB
YAML

# Apply: helm upgrade --install pihole-debian mojo2600/pihole -f values/pihole-debian.yaml -n pihole --create-namespace
# Description: Helm values for Pi-hole secondary instance on Debian node
replicaCount: 1
nodeSelector:
node-role: storage
image:
tag: "2024.07.0"
serviceWeb:
type: ClusterIP
serviceDns:
type: ClusterIP
port: 53
annotations:
kube-vip.io/loadbalancerIPs: 192.168.7.183
probes:
liveness:
enabled: false
readiness:
enabled: false
admin:
existingSecret: pihole-debian-admin-secret
passwordKey: password
extraEnvVars:
PIHOLE_DNS_1: "1.1.1.1"
PIHOLE_DNS_2: "8.8.8.8"
dnsmasq:
customDnsEntries:
- address=/gitea.home.arpa/192.168.7.77
- address=/pihole.home.arpa/192.168.7.77
- address=/home.arpa/192.168.7.77
- address=/dashy.home.arpa/192.168.7.77
- address=/jellyfin.home.arpa/192.168.7.77
- address=/qbittorrent.home.arpa/192.168.7.77
- address=/jdownloader.home.arpa/192.168.7.77
- address=/glances.home.arpa/192.168.7.77
- address=/glances-debian.home.arpa/192.168.7.77
- address=/ca.home.arpa/192.168.7.77
- address=/auth.home.arpa/192.168.7.77
- address=/traefik.home.arpa/192.168.7.77
- address=/gitea.nik4nao.com/192.168.7.77
- address=/ha.home.arpa/192.168.7.77
- address=/argocd.home.arpa/192.168.7.77
- address=/gluetun.home.arpa/192.168.7.77
persistentVolumeClaim:
enabled: true
storageClass: local-path
size: 500Mi