Files
homelab-gitops/apps/immich/values.yaml
T

137 lines
3.7 KiB
YAML

controllers:
main:
containers:
main:
image:
# Upstream chart 0.13.4 still defaults to v3.2.0; keep the running
# application at v3.3.1 until the chart default catches up.
tag: v3.3.1
immich:
metrics:
enabled: true
persistence:
library:
existingClaim: immich-library
server:
controllers:
main:
strategy: Recreate
pod:
nodeSelector:
kubernetes.io/hostname: arschrock
immich.brunner.ninja/library-ready: "true"
tolerations:
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: NoSchedule
initContainers:
check-bcachefs-library:
image:
repository: docker.io/library/alpine
tag: 3.22.2
pullPolicy: IfNotPresent
command:
- /bin/sh
- -ec
- test "$(stat -f -c %t /usr/src/app/upload)" = ca451a4e && test -d /usr/src/app/upload/upload
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 65534
runAsGroup: 65534
containers:
main:
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
env:
DB_HOSTNAME: immich-postgresql-rw
DB_DATABASE_NAME: immich
DB_VECTOR_EXTENSION: pgvector
DB_USERNAME:
valueFrom:
secretKeyRef:
name: immich-postgresql-app
key: username
DB_PASSWORD:
valueFrom:
secretKeyRef:
name: immich-postgresql-app
key: password
ingress:
main:
enabled: false
persistence:
data:
existingClaim: '{{ .Values.immich.persistence.library.existingClaim }}'
advancedMounts:
main:
main:
- path: /usr/src/app/upload
check-bcachefs-library:
- path: /usr/src/app/upload
readOnly: true
machine-learning:
controllers:
main:
strategy: Recreate
pod:
nodeSelector:
kubernetes.io/hostname: arschrock
immich.brunner.ninja/library-ready: "true"
tolerations:
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: NoSchedule
containers:
main:
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
initContainers:
check-bcachefs-library:
image:
repository: docker.io/library/alpine
tag: 3.22.2
pullPolicy: IfNotPresent
command:
- /bin/sh
- -ec
- test "$(stat -f -c %t /usr/src/app/upload)" = ca451a4e && test -d /usr/src/app/upload/upload
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 65534
runAsGroup: 65534
persistence:
library:
existingClaim: '{{ .Values.immich.persistence.library.existingClaim }}'
advancedMounts:
main:
check-bcachefs-library:
- path: /usr/src/app/upload
readOnly: true
valkey:
enabled: true
persistence:
data:
enabled: true
type: persistentVolumeClaim
accessMode: ReadWriteOnce
size: 2Gi
storageClass: rook-ceph-block-ec