From b68b99bfe987057eb912d91876035f4271087152 Mon Sep 17 00:00:00 2001
From: Michael Thomson <michael@michaelthomson.dev>
Date: Tue, 24 Sep 2024 16:14:49 -0400
Subject: [PATCH] added config volume for wireguard

---
 media/qbittorrent/deployment.yaml           | 12 +++++++++---
 media/qbittorrent/pvc-wireguard-config.yaml | 12 ++++++++++++
 2 files changed, 21 insertions(+), 3 deletions(-)
 create mode 100644 media/qbittorrent/pvc-wireguard-config.yaml

diff --git a/media/qbittorrent/deployment.yaml b/media/qbittorrent/deployment.yaml
index ee7e8e1..97db8fa 100644
--- a/media/qbittorrent/deployment.yaml
+++ b/media/qbittorrent/deployment.yaml
@@ -12,6 +12,10 @@ spec:
       labels:
         app: qbittorrent
     spec:
+      securityContext:
+        sysctls:
+        - name: net.ipv4.conf.all.src_valid_mark
+          value: "1"
       containers:
       - name: qbittorrent
         image: lscr.io/linuxserver/qbittorrent:libtorrentv1
@@ -35,15 +39,14 @@ spec:
         - configMapRef:
             name: wireguard-config
         securityContext:
-          sysctls:
-          - name: net.ipv4.conf.all.src_valid_mark
-            value: "1"
           capabilities:
             add:
             - NET_ADMIN
         volumeMounts:
         - name: wireguard-config-secret
           mountPath: /config/wg_confs
+        - name: wireguard-config
+          mountPath: /config
       volumes:
       - name: qbittorrent-config
         persistentVolumeClaim:
@@ -51,6 +54,9 @@ spec:
       - name: data
         persistentVolumeClaim:
           claimName: media-data
+      - name: wireguard-config
+        persistentVolumeClaim:
+          claimName: wireguard-config
       - name: wireguard-config-secret
         secret:
           secretName: wireguard-config-secret
diff --git a/media/qbittorrent/pvc-wireguard-config.yaml b/media/qbittorrent/pvc-wireguard-config.yaml
new file mode 100644
index 0000000..e217773
--- /dev/null
+++ b/media/qbittorrent/pvc-wireguard-config.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: wireguard-config
+  namespace: media
+spec:
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: longhorn
+  accessModes:
+    - ReadWriteOnce