--- # yaml-language-server: $schema=https://ks.hsn.dev/helm.toolkit.fluxcd.io/helmrelease_v2beta2.json apiVersion: helm.toolkit.fluxcd.io/v2beta2 kind: HelmRelease metadata: name: prowlarr spec: interval: 30m chart: spec: chart: app-template version: 2.5.0 sourceRef: kind: HelmRepository name: bjw-s namespace: flux-system install: remediation: retries: 3 upgrade: cleanupOnFail: true remediation: retries: 3 uninstall: keepHistory: false values: controllers: main: annotations: reloader.stakater.com/auto: "true" containers: main: image: repository: ghcr.io/onedr0p/prowlarr-develop tag: 1.13.2.4251@sha256:1ada8d975bb6ad277de24dddfb6b266e2a3b02465f1ad63a8a3cf2578819377e env: # Ref: https://github.com/Radarr/Radarr/issues/7030#issuecomment-1039689518 # Ref: https://github.com/dotnet/runtime/issues/9336 COMPlus_EnableDiagnostics: "0" PROWLARR__INSTANCE_NAME: Prowlarr PROWLARR__PORT: &port 80 PROWLARR__LOG_LEVEL: info PROWLARR__AUTHENTICATION_METHOD: External PROWLARR__THEME: dark TZ: America/Chicago PROWLARR__POSTGRES_HOST: valueFrom: secretKeyRef: name: "${APP}-pguser-${DB_USER}" key: host PROWLARR__POSTGRES_PORT: "5432" PROWLARR__POSTGRES_USER: valueFrom: secretKeyRef: name: "${APP}-pguser-${DB_USER}" key: user PROWLARR__POSTGRES_PASSWORD: valueFrom: secretKeyRef: name: "${APP}-pguser-${DB_USER}" key: password PROWLARR__POSTGRES_MAIN_DB: prowlarr_main PROWLARR__POSTGRES_LOG_DB: prowlarr_logs envFrom: - secretRef: name: prowlarr-secret probes: liveness: &probes enabled: true custom: true spec: httpGet: path: /ping port: *port initialDelaySeconds: 0 periodSeconds: 10 timeoutSeconds: 1 failureThreshold: 3 readiness: *probes startup: enabled: false securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true capabilities: { drop: ["ALL"] } resources: requests: cpu: 10m limits: memory: 1Gi pod: securityContext: runAsUser: 568 runAsGroup: 568 runAsNonRoot: true fsGroup: 568 fsGroupChangePolicy: OnRootMismatch service: main: ports: http: port: *port ingress: main: enabled: true className: internal-nginx hosts: - host: &host "{{ .Release.Name }}.jahanson.tech" paths: - path: / service: name: main port: http tls: - hosts: - *host persistence: config: enabled: true type: emptyDir tmp: type: emptyDir