Nik Afiq
f006090fea
Some checks failed
validate / lint (push) Failing after 1s
Not used enough to justify chasing the stale-NFS-handle issue on its photos-art mount. Removes manifests/media/immich.yaml (Namespace, PVCs, Deployments, Service, Certificate, IngressRoute), its secret script and sealed secret, immich.home.arpa from both Pi-hole values files, its Dashy dashboard tile, and all other repo references (READMEs, secrets-leak-scanner scope, regen-sealed-secret example, .env.example). Per explicit confirmation: this also means the live namespace's PVCs (immich-library 50Gi, immich-postgres-data 20Gi, immich-ml-cache 10Gi, all local-path with Delete reclaim policy) are intended to be deleted along with it -- any photos actually uploaded to Immich's own library are gone once the namespace is deleted, separately from the read-only NFS folders it browsed (untouched either way, those live independently on nik-debian). Git removal alone does not delete the live cluster resources -- the media Application has prune: false. Manual `kubectl delete namespace immich` still needed to actually free the namespace/PVCs/data. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
83 lines
2.0 KiB
YAML
83 lines
2.0 KiB
YAML
# Apply: helm upgrade --install pihole mojo2600/pihole -f values/pihole.yaml -n pihole --create-namespace
|
|
# Description: Helm values for Pi-hole DNS server on Minisforum
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
tag: "2024.07.0"
|
|
|
|
serviceDns:
|
|
type: LoadBalancer
|
|
port: 53
|
|
|
|
serviceWeb:
|
|
type: ClusterIP
|
|
http:
|
|
enabled: true
|
|
port: 80
|
|
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: traefik
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: internal-ca-issuer
|
|
hosts:
|
|
- pihole.home.arpa
|
|
path: /admin
|
|
tls:
|
|
- secretName: pihole-tls
|
|
hosts:
|
|
- pihole.home.arpa
|
|
|
|
admin:
|
|
existingSecret: pihole-admin-secret
|
|
passwordKey: password
|
|
|
|
probes:
|
|
liveness:
|
|
enabled: false
|
|
readiness:
|
|
enabled: false
|
|
|
|
persistentVolumeClaim:
|
|
enabled: true
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 1Gi
|
|
annotations:
|
|
helm.sh/resource-policy: keep
|
|
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: node-role
|
|
operator: In
|
|
values:
|
|
- primary
|
|
|
|
extraEnvVars:
|
|
PIHOLE_DNS_1: "8.8.8.8"
|
|
PIHOLE_DNS_2: "8.8.4.4"
|
|
|
|
dnsmasq:
|
|
customDnsEntries:
|
|
- address=/gitea.home.arpa/192.168.7.77
|
|
- address=/pihole.home.arpa/192.168.7.77
|
|
- address=/home.arpa/192.168.7.77
|
|
- address=/dashy.home.arpa/192.168.7.77
|
|
- address=/jellyfin.home.arpa/192.168.7.77
|
|
- address=/qbittorrent.home.arpa/192.168.7.77
|
|
- address=/jdownloader.home.arpa/192.168.7.77
|
|
- address=/glances.home.arpa/192.168.7.77
|
|
- address=/glances-debian.home.arpa/192.168.7.77
|
|
- address=/ca.home.arpa/192.168.7.77
|
|
- address=/auth.home.arpa/192.168.7.77
|
|
- address=/traefik.home.arpa/192.168.7.77
|
|
- address=/gitea.nik4nao.com/192.168.7.77
|
|
- address=/ha.home.arpa/192.168.7.77
|
|
- address=/argocd.home.arpa/192.168.7.77
|
|
- address=/gluetun.home.arpa/192.168.7.77 |