fukuops/k8s/argo-apps/immich.yaml
cătălin 1fd2bfef3d
feat(helm): complete chart normalization with ConfigMap, HPA, and OCI migration
- Added debug mode, structured ConfigMap pattern, and README to all charts
- Migrated all flat-structure charts to hierarchical values under chartname key
- Fixed templates to use correct hierarchical paths
- Renamed helm-rustical key to rustical, added HPA support
- Fixed ingress YAML parsing (oxicloud), nested env vars (rustical)
- Pushed all normalized charts to OCI registry as 1.0.0+ and updated ArgoCD apps
2026-08-14 09:35:19 +02:00

107 lines
3.1 KiB
YAML

---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: immich
namespace: argo-cd
spec:
destination:
name: ''
namespace: apps-roboces
server: https://kubernetes.default.svc
sources:
- repoURL: git.roboces.dev/catalin/fukuops
chart: immich
targetRevision: 1.0.4
helm:
valuesObject:
immich:
autoscaling:
enabled: true
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: false
runAsUser: 10000
runAsGroup: 10000
capabilities:
drop:
- all
service:
type: LoadBalancer
config:
database:
hostname: "192.168.1.3"
port: 5432
name: "immich"
redis:
hostname: "192.168.1.3"
port: 30036
dbIndex: "12"
general:
timezone: Europe/Madrid
persistence:
library:
enabled: true
storageClass: "truenas-nfs-csi"
accessMode: ReadWriteMany
size: 500Gi
encodedVideo:
enabled: true
storageClass: "truenas-nfs-csi"
accessMode: ReadWriteMany
size: 10Gi
thumbs:
enabled: true
storageClass: "truenas-nfs-csi"
accessMode: ReadWriteMany
size: 10Gi
upload:
enabled: true
storageClass: "truenas-nfs-csi"
accessMode: ReadWriteMany
size: 10Gi
profile:
enabled: true
storageClass: "truenas-nfs-csi"
accessMode: ReadWriteMany
size: 1Gi
backups:
enabled: true
storageClass: "truenas-nfs-csi"
accessMode: ReadWriteMany
size: 10Gi
modelCache:
enabled: true
storageClass: "truenas-nfs-csi"
accessMode: ReadWriteMany
size: 10Gi
resources:
requests:
cpu: 500m
memory: 1Gi
limits:
cpu: 1
memory: 2Gi
ingress:
enabled: true
annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
hosts:
- host: photos.roboces.dev
paths:
- path: /
pathType: Prefix
tls: []
machineLearning:
enabled: true
service:
type: LoadBalancer
secret:
enabled: true
existingSecretName: "immich-secrets"
project: roboces
syncPolicy:
automated:
prune: true
selfHeal: true