feat: migrate immich to k8s

k8s/argo-apps/dcsi.yaml

@@ -19,11 +19,11 @@ spec:
           node:
             driver:
               image:
-                tag: next
+                tag: "next@sha256:6b758d6faf96f0e96d4b8ac0e240fc290c7bace23c20d78a3eb93781652cb1f1"
           controller:
             driver:
               image:
-                tag: next
+                tag: "next@sha256:6b758d6faf96f0e96d4b8ac0e240fc290c7bace23c20d78a3eb93781652cb1f1"
           csiDriver:
             name: org.dcsi.nfs
           driver:

k8s/argo-apps/immich.yaml

@@ -0,0 +1,99 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: immich
+  namespace: argocd
+spec:
+  destination:
+    name: ''
+    namespace: apps-roboces
+    server: https://kubernetes.default.svc
+  sources:
+    - repoURL: git.roboces.dev/catalin/fukuops
+      chart: immich
+      targetRevision: 0.2.1
+      helm:
+        valuesObject:
+          replicaCount: 1
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: false
+            runAsUser: 10000
+            runAsGroup: 10000
+            capabilities:
+              drop:
+                - all
+          service:
+            type: LoadBalancer
+          db:
+            hostname: "192.168.1.3"
+            port: 5432
+            database_name: "immich"
+          redis:
+            hostname: "192.168.1.3"
+            port: 30036
+            dbindex: "12"
+          general:
+            tz: "Europe/Madrid"
+          persistence:
+            library:
+              enabled: true
+              storageClass: "truenas-nfs-csi"
+              accessMode: ReadWriteMany
+              size: 500Gi
+            encodedVideo:
+              enabled: true
+              storageClass: "truenas-nfs-csi"
+              accessMode: ReadWriteMany
+              size: 10Gi
+            thumbs:
+              enabled: true
+              storageClass: "truenas-nfs-csi"
+              accessMode: ReadWriteMany
+              size: 10Gi
+            upload:
+              enabled: true
+              storageClass: "truenas-nfs-csi"
+              accessMode: ReadWriteMany
+              size: 10Gi
+            profile:
+              enabled: true
+              storageClass: "truenas-nfs-csi"
+              accessMode: ReadWriteMany
+              size: 1Gi
+            backups:
+              enabled: true
+              storageClass: "truenas-nfs-csi"
+              accessMode: ReadWriteMany
+              size: 10Gi
+            modelCache:
+              enabled: true
+              storageClass: "truenas-nfs-csi"
+              accessMode: ReadWriteMany
+              size: 10Gi
+          resources:
+            requests:
+              cpu: 500m
+              memory: 1Gi
+            limits:
+              cpu: 1
+              memory: 2Gi
+          ingress:
+            enabled: true
+            annotations:
+              traefik.ingress.kubernetes.io/router.entrypoints: websecure
+              traefik.ingress.kubernetes.io/router.tls: "true"
+            hosts:
+              - host: photos.roboces.dev
+                paths:
+                  - path: /
+                    pathType: Prefix
+            tls: []
+          secret:
+            existingSecretName: "immich-secrets"
+  project: roboces
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true