mirror of
https://github.com/wahyd4/home-docker.git
synced 2026-08-09 04:15:52 +10:00
Junv (via Hermes)
a8b6890a99
Updates 7 Docker images across the infrastructure manifests (PG14 kept as-is):
media/jackett.yaml
linuxserver/jackett: 0.24.1124 → 0.24.1985 (patch)
media/media.yaml
linuxserver/qbittorrent: version-5.1.2-r4 → version-5.2.1_v2.0.12 (major 5.1→5.2)
home-apps/n8n.yaml
n8nio/n8n: 2.15.0 → 2.23.1 (minor)
db/qdrant.yaml
qdrant/qdrant: v1.16-unprivileged → v1.18.1-unprivileged (minor)
kube-vip/daemonset.yaml
kube-vip/kube-vip: v0.4.4 → v0.9.2 (conservative, stayed within v0.x)
on-demand/once-etcd-job.yaml
etcd: 3.5.1-0 → 3.5.30-0 (patch)
adhoc-config/oauth2-proxy.yaml
oauth2-proxy/oauth2-proxy: v7.6.0 → v7.15.2 (minor)
Note: postgres:14 kept unchanged per PR review feedback.
kube-vip kept at v0.9.2 (latest v0.x) instead of v1.2.0 to avoid
v0→v1 breaking changes.
113 lines
2.7 KiB
YAML
113 lines
2.7 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: jackett
|
|
spec:
|
|
revisionHistoryLimit: 3
|
|
selector:
|
|
matchLabels:
|
|
app: jackett
|
|
replicas: 1
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: jackett
|
|
spec:
|
|
imagePullSecrets:
|
|
- name: regcred
|
|
volumes:
|
|
- name: config
|
|
persistentVolumeClaim:
|
|
claimName: configs-local-pvc
|
|
- name: downloads
|
|
persistentVolumeClaim:
|
|
claimName: downloads-nfs
|
|
- name: admin-password
|
|
secret:
|
|
secretName: jackett-admin-password
|
|
items:
|
|
- key: password
|
|
path: password
|
|
containers:
|
|
- name: jackett
|
|
# https://hub.docker.com/r/linuxserver/jackett/tags
|
|
# Updated: 0.24.1124 -> 0.24.1985 (patch bump, low risk)
|
|
image: mirror.gcr.io/linuxserver/jackett:0.24.1985
|
|
securityContext:
|
|
runAsUser: 0
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- containerPort: 9117
|
|
name: jackett-port
|
|
protocol: TCP
|
|
env:
|
|
- name: PUID
|
|
value: "1000"
|
|
- name: PGID
|
|
value: "1000"
|
|
- name: TZ
|
|
value: Australia/Melbourne
|
|
- name: FILE__PASSWORD
|
|
value: /secrets/jackett/password
|
|
volumeMounts:
|
|
- name: config
|
|
subPath: jackett
|
|
mountPath: /config
|
|
- name: downloads
|
|
subPath: jackett
|
|
mountPath: /downloads
|
|
- mountPath: /secrets/jackett
|
|
name: admin-password
|
|
readOnly: true
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1024Mi
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: jackett
|
|
labels:
|
|
app: jackett
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- port: 80
|
|
targetPort: jackett-port
|
|
protocol: TCP
|
|
selector:
|
|
app: jackett
|
|
|
|
---
|
|
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: jackett-ingress
|
|
annotations:
|
|
kubernetes.io/ingress.class: "nginx"
|
|
kubernetes.io/tls-acme: "true"
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
nginx.ingress.kubernetes.io/auth-url: "https://pass.junv.cc/oauth2/auth"
|
|
nginx.ingress.kubernetes.io/auth-signin: "https://pass.junv.cc/oauth2/start?rd=https://$host$escaped_request_uri"
|
|
spec:
|
|
tls:
|
|
- hosts:
|
|
- jackett.junv.cc
|
|
secretName: jackett-tls
|
|
rules:
|
|
- host: jackett.junv.cc
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: jackett
|
|
port:
|
|
number: 80
|