nzbget to sabnzbd

media/sabnzbd/deployment.yaml

@@ -0,0 +1,62 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: sabnzbd
+  namespace: media
+spec:
+  selector:
+    matchLabels:
+      app: sabnzbd
+  template:
+    metadata:
+      labels:
+        app: sabnzbd
+    spec:
+      securityContext:
+        sysctls:
+        - name: net.ipv4.conf.all.src_valid_mark
+          value: "1"
+      containers:
+      - name: sabnzbd
+        image: lscr.io/linuxserver/sabnzbd:latest
+        envFrom:
+        - configMapRef:
+            name: sabnzbd-config
+            optional: false
+        ports:
+        - containerPort: 6789
+          name: http
+          protocol: TCP
+        volumeMounts:
+        - name: sabnzbd-config
+          mountPath: /config
+        - name: data
+          mountPath: /data/usenet
+          subPath: usenet
+      - name: wireguard
+        image: lscr.io/linuxserver/wireguard:latest
+        envFrom:
+        - configMapRef:
+            name: sabnzbd-wireguard-config
+        securityContext:
+          capabilities:
+            add:
+            - NET_ADMIN
+        volumeMounts:
+        - name: sabnzbd-wireguard-config-secret
+          mountPath: /config/wg_confs
+        - name: sabnzbd-wireguard-config
+          mountPath: /config
+      volumes:
+      - name: sabnzbd-config
+        persistentVolumeClaim:
+          claimName: sabnzbd-config
+      - name: data
+        persistentVolumeClaim:
+          claimName: media-data
+      - name: sabnzbd-wireguard-config
+        persistentVolumeClaim:
+          claimName: sabnzbd-wireguard-config
+      - name: sabnzbd-wireguard-config-secret
+        secret:
+          secretName: sabnzbd-wireguard-config-secret

media/sabnzbd/dns-endpoint.yaml

@@ -0,0 +1,12 @@
+apiVersion: externaldns.k8s.io/v1alpha1
+kind: DNSEndpoint
+metadata:
+  name: sabnzbd.michaelthomson.dev
+  namespace: media
+spec:
+  endpoints:
+  - dnsName: sabnzbd.michaelthomson.dev
+    recordTTL: 180
+    recordType: CNAME
+    targets:
+    - server.michaelthomson.dev

media/sabnzbd/ingress.yaml

@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sabnzbd
+  namespace: media
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  rules:
+  - host: sabnzbd.michaelthomson.dev
+    http:
+      paths:
+      - pathType: ImplementationSpecific
+        path: /
+        backend:
+          service:
+            name: sabnzbd
+            port: 
+              name: http
+  tls:
+    - hosts:
+        - sabnzbd.michaelthomson.dev
+      secretName: letsencrypt-wildcard-cert-michaelthomson.dev

media/sabnzbd/pvc-sabnzbd-config.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: sabnzbd-config
+  namespace: media
+spec:
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: longhorn
+  accessModes:
+    - ReadWriteOnce

media/sabnzbd/pvc-wireguard-config.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: sabnzbd-wireguard-config
+  namespace: media
+spec:
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: longhorn
+  accessModes:
+    - ReadWriteOnce

media/sabnzbd/sabnzbd-config.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: sabnzbd-config
+  namespace: media
+data:
+  PUID: "1000"
+  PGID: "1000"
+  TZ: "America/Toronto"

media/sabnzbd/sabnzbd-wireguard-config-secret.yaml

@@ -0,0 +1,21 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "sabnzbd-wireguard-config-secret",
+    "namespace": "media",
+    "creationTimestamp": null
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "sabnzbd-wireguard-config-secret",
+        "namespace": "media",
+        "creationTimestamp": null
+      }
+    },
+    "encryptedData": {
+      "wg0.conf": "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"
+    }
+  }
+}

media/sabnzbd/sabnzbd-wireguard-config.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: sabnzbd-wireguard-config
+  namespace: media
+data:
+  PUID: "1000"
+  GUID: "1000"
+  TZ: America/Toronto

media/sabnzbd/service.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: sabnzbd
+  namespace: media
+spec:
+  selector:
+    app: sabnzbd
+  ports:
+  - port: 80
+    targetPort: http
+    name: http