--- # yaml-language-server: $schema=https://ks.hsn.dev/helm.toolkit.fluxcd.io/helmrelease_v2beta2.json apiVersion: helm.toolkit.fluxcd.io/v2beta2 kind: HelmRelease metadata: name: sabnzbd spec: interval: 30m chart: spec: chart: app-template version: 2.5.0 sourceRef: kind: HelmRepository name: bjw-s namespace: flux-system install: remediation: retries: 3 upgrade: cleanupOnFail: true remediation: retries: 3 uninstall: keepHistory: false dependsOn: - name: rook-ceph-cluster namespace: rook-ceph - name: volsync namespace: storage values: controllers: main: annotations: reloader.stakater.com/auto: "true" containers: main: image: repository: ghcr.io/onedr0p/sabnzbd tag: 4.2.2@sha256:5b1f15c8d25afa2342505492486361d4ecf14449e1453aeea45cd7c1e5eeb63a env: TZ: America/Chicago SABNZBD__PORT: &port 80 SABNZBD__HOST_WHITELIST_ENTRIES: >- sabnzbd, sabnzbd.default, sabnzbd.default.svc, sabnzbd.default.svc.cluster, sabnzbd.default.svc.cluster.local, sabz.jahanson.tech, sabnzbd.jahanson.tech envFrom: - secretRef: name: sabnzbd-secret probes: liveness: &probes enabled: true custom: true spec: httpGet: path: /api?mode=version port: *port initialDelaySeconds: 0 periodSeconds: 10 timeoutSeconds: 1 failureThreshold: 3 readiness: *probes startup: enabled: false securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true capabilities: { drop: ["ALL"] } resources: requests: cpu: 100m limits: memory: 8Gi pod: securityContext: runAsUser: 568 runAsGroup: 568 runAsNonRoot: true fsGroup: 568 fsGroupChangePolicy: OnRootMismatch supplementalGroups: [10000] service: main: ports: http: port: *port ingress: main: enabled: true className: internal-nginx hosts: - host: &host sabz.jahanson.tech paths: - path: / service: name: main port: http tls: - hosts: - *host persistence: config: enabled: true existingClaim: sabnzbd tmp: type: emptyDir media: type: nfs server: 10.1.1.11 path: /volume1/Media globalMounts: - path: /data/nas-media