nest/k3s
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Migrate media from birdfeeder1 to robin

Browse source
This commit is contained in:
Astra Logical 2026-06-08 17:49:34 -04:00
parent 2a0794affc
commit 800bfa736b
21 changed files with 41 additions and 106 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
services/abs-kosync-bridge/abs-kosync-deployment.yaml
View file

@ -49,9 +49,9 @@ spec:
path: /k3s/abs-kosync-bridge
- name: abs-kosync-books
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media/books
- name: abs-kosync-audiobooks
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media/audiobooks

4
services/audiobookshelf/audiobookshelf-deployment.yaml
View file

@ -45,11 +45,11 @@ spec:
volumes:
- name: audiobookshelf-audiobooks
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media/audiobooks
- name: audiobookshelf-podcasts
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media/podcasts
- name: audiobookshelf-config
nfs:

2
services/bazarr-anime/bazarr-anime-deployment.yaml
View file

@ -49,5 +49,5 @@ spec:
path: /k3s/bazarr-anime
- name: bazarr-anime-media
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media

2
services/bazarr/bazarr-deployment.yaml
View file

@ -49,5 +49,5 @@ spec:
path: /k3s/bazarr
- name: bazarr-media
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media

5
services/calibre-web/calibre-web-deployment.yaml
View file

@ -22,9 +22,6 @@ spec:
containers:
- name: calibre-web
image: crocodilestick/calibre-web-automated:latest
envFrom:
- secretRef:
name: calibre-web-secret
env:
- name: PUID
value: "1000"
@ -57,5 +54,5 @@ spec:
path: /k3s/calibre-web
- name: calibre-web-library
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media/books/calibre-library

22
services/calibre-web/calibre-web-external-secrets.yaml
View file

@ -1,22 +0,0 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: calibre-web-credentials
namespace: default
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: calibre-web-secret
creationPolicy: Owner
data:
- secretKey: OIDC_CLIENT_ID
remoteRef:
key: oauth2-proxy/calibre-web
property: client-id
- secretKey: OIDC_CLIENT_SECRET
remoteRef:
key: oauth2-proxy/calibre-web
property: client-secret

2
services/deluge/deluge-deployment.yaml
View file

@ -60,5 +60,5 @@ spec:
path: /k3s/deluge
- name: deluge-media
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads

2
services/jellyfin/jellyfin-deployment.yaml
View file

@ -53,5 +53,5 @@ spec:
path: /k3s/jellyfin/cache
- name: yarr
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media

28
services/jellyfin/jellyfin-ingress.yaml
View file

@ -19,21 +19,21 @@ metadata:
traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.middlewares: default-jellyfin-proxy-headers@kubernetescrd
spec:
# tls:
# - hosts:
# - beak.mynest.love
# secretName: jellyfin-tls
tls:
- hosts:
- beak.mynest.love
secretName: jellyfin-tls
rules:
# - host: beak.mynest.love
# http:
# paths:
# - path: /
# pathType: Prefix
# backend:
# service:
# name: jellyfin
# port:
# name: http-web
- host: beak.mynest.love
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: jellyfin
port:
name: http-web
- host: jellyfin.k3s.home.nest
http:
paths:

19
services/lazy-librarian/lazylibrarian-account.yaml
View file

@ -1,19 +0,0 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: lazylibrarian-sa
namespace: default
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: lazylibrarian-auth-delegator
subjects:
- kind: ServiceAccount
name: lazylibrarian-sa
namespace: default
roleRef:
kind: ClusterRole
name: system:auth-delegator
apiGroup: rbac.authorization.k8s.io

12
services/lazy-librarian/lazylibrarian-deployment.yaml
View file

@ -19,17 +19,9 @@ spec:
annotations:
kompose.cmd: kompose convert -f compose-ll.yaml
kompose.version: 1.38.0 (HEAD)
vault.hashicorp.com/agent-inject: "true"
vault.hashicorp.com/role: "lazylibrarian-role"
vault.hashicorp.com/agent-inject-secret-credentials: "secret/data/lazylibrarian/config"
vault.hashicorp.com/agent-inject-template-credentials: |
{{- with secret "secret/data/lazylibrarian/config" -}}
export HARDCOVER_API_KEY="{{ .Data.data.hardcover_api_key }}"
{{- end -}}
labels:
io.kompose.service: lazylibrarian
spec:
serviceAccountName: lazylibrarian-sa
containers:
- env:
- name: DOCKER_MODS
@ -61,9 +53,9 @@ spec:
path: /k3s/lazy-librarian
- name: lazylibrarian-downloads
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads
- name: lazylibrarian-data
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr

4
services/lidarr/lidarr-deployment.yaml
View file

@ -53,9 +53,9 @@ spec:
path: /k3s/lidarr
- name: lidarr-data
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr
- name: lidarr-downloads
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads

15
services/navidrome/navidrome-deployment.yaml
View file

@ -19,24 +19,11 @@ spec:
annotations:
kompose.cmd: kompose convert -f compose-navidrome.yaml
kompose.version: 1.38.0 (HEAD)
vault.hashicorp.com/agent-inject: "true"
vault.hashicorp.com/role: "navidrome-role"
vault.hashicorp.com/agent-inject-secret-credentials: "secret/data/navidrome/config"
vault.hashicorp.com/agent-inject-template-credentials: |
{{- with secret "secret/data/navidrome/config" -}}
export ND_LASTFM_APIKEY="{{ .Data.data.lastfm_api_key }}"
export ND_LASTFM_SECRET="{{ .Data.data.lastfm_secret }}"
{{- end -}}
labels:
io.kompose.service: navidrome
spec:
serviceAccountName: navidrome-sa
containers:
- env:
- name: ND_LASTFM_APIKEY
- name: ND_LASTFM_ENABLED
value: "true"
- name: ND_LASTFM_SECRET
- name: TZ
value: America/New_York
image: deluan/navidrome:latest
@ -62,5 +49,5 @@ spec:
path: /k3s/navidrome
- name: navidrome-media
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/media/music

4
services/radarr-anime/radarr-anime-deployment.yaml
View file

@ -51,9 +51,9 @@ spec:
path: /k3s/radarr-anime
- name: radarr-anime-data
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr
- name: radarr-anime-downloads
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads

4
services/radarr/radarr-deployment.yaml
View file

@ -51,9 +51,9 @@ spec:
path: /k3s/radarr
- name: radarr-data
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr
- name: radarr-downloads
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads

2
services/sabnzbd/sabnzbd-deployment.yaml
View file

@ -49,5 +49,5 @@ spec:
path: /k3s/sabnzbd
- name: sabnzbd-downloads
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads

2
services/slskd/slskd-deployment.yaml
View file

@ -60,5 +60,5 @@ spec:
path: /k3s/slskd
- name: slskd-downloads
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads

4
services/sonarr-anime/sonarr-anime-deployment.yaml
View file

@ -51,9 +51,9 @@ spec:
path: /k3s/sonarr-anime
- name: sonarr-anime-data
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr
- name: sonarr-anime-downloads
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads

4
services/sonarr/sonarr-deployment.yaml
View file

@ -51,9 +51,9 @@ spec:
path: /k3s/sonarr
- name: sonarr-data
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr
- name: sonarr-downloads
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /yarr/downloads

2
services/syncthing/syncthing-deployment.yaml
View file

@ -58,5 +58,5 @@ spec:
path: /k3s/syncthing
- name: syncthing-data
nfs:
server: birdfeeder1.home.nest
server: robin.home.nest
path: /mnt/raid/syncthing

4
services/vault/vault-statefulset.yaml
View file

@ -46,11 +46,11 @@ spec:
command: ["sh", "-c"]
args:
- |
set -e
K8S_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
TRANSIT_TOKEN=$(vault write -field=token auth/kubernetes/login \
role=vault-unsealer \
jwt=$K8S_TOKEN \
address=http://vault-keykeeper.vault.svc.cluster.local:80)
jwt=$K8S_TOKEN)
sed "s/REPLACE_WITH_TOKEN/$TRANSIT_TOKEN/" /etc/vault/extraconfig-from-values.hcl > /vault/runtime/vault.hcl
securityContext: