update cross-seed, remove old code

This commit is contained in:
Joseph Hanson 2024-08-23 09:37:21 -05:00
parent 072163eaa7
commit 0c6f9c2136
Signed by: jahanson
SSH key fingerprint: SHA256:vy6dKBECV522aPAwklFM3ReKAVB086rT3oWwiuiFG7o
4 changed files with 59 additions and 67 deletions

View file

@ -11,21 +11,10 @@ spec:
name: onepassword-connect name: onepassword-connect
target: target:
name: qbittorrent-secret name: qbittorrent-secret
creationPolicy: Owner template:
engineVersion: v2
data: data:
- secretKey: WIREGUARD_ENDPOINT_IP CROSS_SEED_API_KEY: "{{ .CROSS_SEED_API_KEY }}"
remoteRef: dataFrom:
key: ProtonVPN - extract:
property: qbittorrent_vpn_endpoint_ip key: cross-seed
- secretKey: WIREGUARD_PUBLIC_KEY
remoteRef:
key: ProtonVPN
property: qbittorrent_wireguard_public_key
- secretKey: WIREGUARD_PRIVATE_KEY
remoteRef:
key: ProtonVPN
property: qbittorrent_wireguard_private_key
- secretKey: WIREGUARD_ADDRESSES
remoteRef:
key: ProtonVPN
property: qbittorrent_wireguard_addresses

View file

@ -48,8 +48,12 @@ spec:
QBT_Preferences__WebUI__AuthSubnetWhitelist: |- QBT_Preferences__WebUI__AuthSubnetWhitelist: |-
10.244.0.0/16, 10.1.2.0/24 10.244.0.0/16, 10.1.2.0/24
QBT_Preferences__WebUI__LocalHostAuth: false QBT_Preferences__WebUI__LocalHostAuth: false
# QBT_BitTorrent__Session__Interface: wg0 CROSS_SEED_HOST: cross-seed.qbittorrent.svc.cluster.local
# QBT_BitTorrent__Session__InterfaceName: wg0 CROSS_SEED_PORT: 80
CROSS_SEED_SLEEP_INTERVAL: 0
envFrom:
- secretRef:
name: qbittorrent-secret
resources: resources:
requests: requests:
cpu: 49m cpu: 49m
@ -66,53 +70,6 @@ spec:
drop: drop:
- ALL - ALL
# gluetun:
# image:
# repository: ghcr.io/qdm12/gluetun
# tag: latest@sha256:fb448a2eb8755b68106a386d1e5a78c781bf28a0eea0fb712824cd2dc0ec19a7
# env:
# VPN_SERVICE_PROVIDER: custom
# VPN_TYPE: wireguard
# VPN_INTERFACE: wg0
# WIREGUARD_ENDPOINT_PORT: 51820
# VPN_PORT_FORWARDING: on
# VPN_PORT_FORWARDING_PROVIDER: protonvpn
# FIREWALL_INPUT_PORTS: *port
# FIREWALL_OUTBOUND_SUBNETS: 10.32.0.0/16 # Allow access to k8s subnets
# envFrom:
# - secretRef:
# name: qbittorrent-secret
# securityContext:
# # until I can debug the issues on talos 1.8.
# privileged: true
# capabilities:
# add:
# - NET_ADMIN
# drop:
# - ALL
# port-forward:
# image:
# repository: ghcr.io/bjw-s/gluetun-qb-port-sync
# tag: v0.0.2
# env:
# GLUETUN_CONTROL_SERVER_HOST: localhost
# GLUETUN_CONTROL_SERVER_PORT: 8000
# QBITTORRENT_HOST: localhost
# QBITTORRENT_WEBUI_PORT: *port
# CRON_ENABLED: true
# CRON_SCHEDULE: "*/5 * * * *"
# LOG_TIMESTAMP: false
# securityContext:
# runAsUser: 568
# runAsGroup: 568
# runAsNonRoot: true
# allowPrivilegeEscalation: false
# readOnlyRootFilesystem: false
# capabilities:
# drop:
# - ALL
service: service:
app: app:
controller: *app controller: *app
@ -145,6 +102,14 @@ spec:
persistence: persistence:
config: config:
existingClaim: qbittorrent existingClaim: qbittorrent
scripts:
type: configMap
name: qbittorrent-scripts
defaultMode: 0775
globalMounts:
- path: /scripts/cross-seed.sh
subPath: cross-seed.sh
readOnly: true
media: media:
type: nfs type: nfs
server: 10.1.1.11 server: 10.1.1.11

View file

@ -6,5 +6,11 @@ resources:
- ./externalsecret.yaml - ./externalsecret.yaml
- ./helmrelease.yaml - ./helmrelease.yaml
- ../../../../templates/volsync - ../../../../templates/volsync
configMapGenerator:
- name: qbittorrent-scripts
files:
- cross-seed.sh=./resources/cross-seed.sh
generatorOptions: generatorOptions:
disableNameSuffixHash: true disableNameSuffixHash: true
annotations:
kustomize.toolkit.fluxcd.io/substitute: disabled

View file

@ -0,0 +1,32 @@
#!/usr/bin/env bash
export CROSS_SEED_HOST=${CROSS_SEED_HOST:-cross-seed.default.svc.cluster.local}
export CROSS_SEED_PORT=${CROSS_SEED_PORT:-80}
export CROSS_SEED_API_KEY=${CROSS_SEED_API_KEY:-unset}
export CROSS_SEED_SLEEP_INTERVAL=${CROSS_SEED_SLEEP_INTERVAL:-30}
SEARCH_PATH=$1
# Update permissions on the search path
chmod -R 750 "${SEARCH_PATH}"
# Search for cross-seed
response=$(
curl \
--silent \
--output /dev/null \
--write-out "%{http_code}" \
--request POST \
--data-urlencode "path=${SEARCH_PATH}" \
--header "X-Api-Key: ${CROSS_SEED_API_KEY}" \
"http://${CROSS_SEED_HOST}:${CROSS_SEED_PORT}/api/webhook"
)
if [[ "${response}" != "204" ]]; then
printf "Failed to search cross-seed for '%s'\n" "${SEARCH_PATH}"
exit 1
fi
printf "Successfully searched cross-seed for '%s'\n" "${SEARCH_PATH}"
sleep "${CROSS_SEED_SLEEP_INTERVAL}"