controllers:
  main:
    containers:
      main:
        image:
          # Upstream chart 0.13.4 still defaults to v3.2.0; keep the running
          # application at v3.3.1 until the chart default catches up.
          tag: v3.3.1

immich:
  metrics:
    enabled: true
  persistence:
    library:
      existingClaim: immich-library

server:
  controllers:
    main:
      pod:
        nodeSelector:
          kubernetes.io/hostname: arschrock
          immich.brunner.ninja/library-ready: "true"
        tolerations:
          - key: node-role.kubernetes.io/control-plane
            operator: Exists
            effect: NoSchedule
      initContainers:
        check-bcachefs-library:
          image:
            repository: docker.io/library/alpine
            tag: 3.22.2
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
            - -ec
            - test "$(stat -f -c %t /usr/src/app/upload)" = ca451a4e && test -d /usr/src/app/upload/upload
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            runAsUser: 65534
            runAsGroup: 65534
      containers:
        main:
          securityContext:
            runAsNonRoot: true
            runAsUser: 1000
            runAsGroup: 1000
          env:
            DB_HOSTNAME: immich-postgresql-rw
            DB_DATABASE_NAME: immich
            DB_VECTOR_EXTENSION: pgvector
            DB_USERNAME:
              valueFrom:
                secretKeyRef:
                  name: immich-postgresql-app
                  key: username
            DB_PASSWORD:
              valueFrom:
                secretKeyRef:
                  name: immich-postgresql-app
                  key: password
  ingress:
    main:
      enabled: false
  persistence:
    data:
      existingClaim: '{{ .Values.immich.persistence.library.existingClaim }}'
      advancedMounts:
        main:
          main:
            - path: /usr/src/app/upload
          check-bcachefs-library:
            - path: /usr/src/app/upload
              readOnly: true

machine-learning:
  controllers:
    main:
      pod:
        nodeSelector:
          kubernetes.io/hostname: arschrock
          immich.brunner.ninja/library-ready: "true"
        tolerations:
          - key: node-role.kubernetes.io/control-plane
            operator: Exists
            effect: NoSchedule
      containers:
        main:
          securityContext:
            runAsNonRoot: true
            runAsUser: 1000
            runAsGroup: 1000
      initContainers:
        check-bcachefs-library:
          image:
            repository: docker.io/library/alpine
            tag: 3.22.2
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
            - -ec
            - test "$(stat -f -c %t /usr/src/app/upload)" = ca451a4e && test -d /usr/src/app/upload/upload
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            runAsUser: 65534
            runAsGroup: 65534
  persistence:
    library:
      existingClaim: '{{ .Values.immich.persistence.library.existingClaim }}'
      advancedMounts:
        main:
          check-bcachefs-library:
            - path: /usr/src/app/upload
              readOnly: true

valkey:
  enabled: true
  persistence:
    data:
      enabled: true
      type: persistentVolumeClaim
      accessMode: ReadWriteOnce
      size: 2Gi
      storageClass: rook-ceph-block-ec