longhorn recurring

apps/actual/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: actual
+  namespace: actual
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: actual
+  groups:
+    - name: homelab-services

apps/emqx/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: emqx
+  namespace: emqx
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: emqx
+  groups:
+    - name: homelab-services

apps/frigate/config.yaml

@@ -0,0 +1,153 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: frigate
+  namespace: frigate
+data:
+  config.yml: |
+    tls:
+      enabled: false
+
+    mqtt:
+      enabled: true
+      host: emqx.emqx.svc.cluster.local
+      user: frigate
+      password: '{FRIGATE_MQTT_PASSWORD}'
+
+    ffmpeg:
+      hwaccel_args: preset-nvidia
+
+    detectors:
+      onnx:
+        type: onnx
+
+    detect:
+      enabled: true
+
+    audio:
+      enabled: true
+      min_volume: 200
+      listen:
+        - cat
+        - meow
+        - hiss
+        - fart
+        - speech
+
+    objects:
+      track:
+        - person
+        - cat
+
+    record:
+      enabled: true
+      motion:
+        days: 1
+      alerts:
+        retain:
+          days: 1
+          mode: motion
+      detections:
+        retain:
+          days: 1
+          mode: motion
+
+    model:
+      model_type: yolo-generic
+      width: 640 # <--- should match the imgsize set during model export
+      height: 640 # <--- should match the imgsize set during model export
+      input_tensor: nchw
+      input_dtype: float
+      path: /config/model_cache/yolov9-c-640.onnx
+      labelmap_path: /labelmap/coco-80.txt
+
+    go2rtc:
+      streams:
+        c200_1:
+          - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.20:554/stream1
+        c200_1_sub:
+          - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.20:554/stream2
+        c200_2:
+          - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.21:554/stream1
+        c200_2_sub:
+          - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.21:554/stream2
+        c200_3:
+          - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.22:554/stream1
+        c200_3_sub:
+          - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.22:554/stream2
+
+    cameras:
+      tapoC200_1:
+        enabled: true
+        live:
+          streams:
+            Main: c200_1
+            Sub: c200_1_sub
+        onvif:
+          host: 192.168.18.20
+          port: 2020
+          user: '{FRIGATE_RTSP_USERNAME}'
+          password: '{FRIGATE_RTSP_PASSWORD}'
+        ffmpeg:
+          output_args:
+            record: preset-record-generic-audio-aac
+          inputs:
+            - path: rtsp://127.0.0.1:8554/c200_1
+              input_args: preset-rtsp-restream
+              roles:
+                - record
+            - path: rtsp://127.0.0.1:8554/c200_1_sub
+              input_args: preset-rtsp-restream
+              roles:
+                - detect
+                - audio
+
+      tapoC200_2:
+        enabled: true
+        live:
+          streams:
+            Main: c200_2
+            Sub: c200_2_sub
+        onvif:
+          host: 192.168.18.21
+          port: 2020
+          user: '{FRIGATE_RTSP_USERNAME}'
+          password: '{FRIGATE_RTSP_PASSWORD}'
+        ffmpeg:
+          output_args:
+            record: preset-record-generic-audio-aac
+          inputs:
+            - path: rtsp://127.0.0.1:8554/c200_2
+              input_args: preset-rtsp-restream
+              roles:
+                - record
+            - path: rtsp://127.0.0.1:8554/c200_2_sub
+              input_args: preset-rtsp-restream
+              roles:
+                - detect
+                - audio
+
+      tapoC200_3:
+        enabled: true
+        live:
+          streams:
+            Main: c200_3
+            Sub: c200_3_sub
+        onvif:
+          host: 192.168.18.22
+          port: 2020
+          user: '{FRIGATE_RTSP_USERNAME}'
+          password: '{FRIGATE_RTSP_PASSWORD}'
+        ffmpeg:
+          output_args:
+            record: preset-record-generic-audio-aac
+          inputs:
+            - path: rtsp://127.0.0.1:8554/c200_3
+              input_args: preset-rtsp-restream
+              roles:
+                - record
+            - path: rtsp://127.0.0.1:8554/c200_3_sub
+              input_args: preset-rtsp-restream
+              roles:
+                - detect
+                - audio

apps/frigate/deployment.yaml

@@ -0,0 +1,70 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: frigate
+  namespace: frigate
+spec:
+  selector:
+    matchLabels:
+      app: frigate
+  template:
+    metadata:
+      labels:
+        app: frigate
+    spec:
+      containers:
+      - name: frigate
+        image: ghcr.io/blakeblackshear/frigate:stable-tensorrt
+        imagePullPolicy: Always
+        resources:
+          limits:
+            nvidia.com/gpu: 1
+        envFrom:
+          - secretRef:
+              name: frigate
+        ports:
+          - containerPort: 8971
+            protocol: TCP
+            name: http
+          - containerPort: 8554
+            protocol: TCP
+            name: rtsp
+          - containerPort: 8555
+            protocol: TCP
+            name: webrtc-tcp
+          - containerPort: 8555
+            protocol: UDP
+            name: webrtc-udp
+        volumeMounts:
+          - mountPath: /config
+            name: frigate-config
+          - mountPath: /config/config.yml
+            subPath: config.yml
+            name: frigate-configmap
+          - mountPath: /media/frigate
+            name: frigate-media
+          - mountPath: /tmp/cache
+            name: frigate-cache
+          - mountPath: /dev/shm
+            name: frigate-dshm
+      volumes:
+      - name: frigate-config
+        persistentVolumeClaim: 
+          claimName: frigate-config
+      - name: frigate-configmap
+        configMap:
+          name: frigate
+          items:
+            - key: config.yml
+              path: config.yml
+      - name: frigate-media
+        persistentVolumeClaim: 
+          claimName: frigate-media
+      - name: frigate-cache
+        emptyDir:
+          medium: Memory
+          sizeLimit: 1Gi
+      - name: frigate-dshm
+        emptyDir:
+          medium: Memory
+          sizeLimit: 1Gi

apps/frigate/ingress.yaml

@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: frigate
+  namespace: frigate
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  rules:
+  - host: frigate.michaelthomson.dev
+    http:
+      paths:
+      - pathType: ImplementationSpecific
+        path: /
+        backend:
+          service:
+            name: frigate
+            port: 
+              name: http
+  tls:
+  - hosts:
+    - frigate.michaelthomson.dev
+    secretName: frigate-tls

apps/frigate/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: frigate
+  namespace: frigate
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: frigate
+  groups:
+    - name: homelab-services

apps/frigate/pvc-config.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: frigate-config
+  namespace: frigate
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi

apps/frigate/pvc-media.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: frigate-media
+  namespace: frigate
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: nfs-client
+  resources:
+    requests:
+      storage: 10Gi

apps/frigate/release.yaml

@@ -1,96 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: frigate
-  namespace: frigate
-spec:
-  chart:
-    spec:
-      chart: frigate
-      version: 7.x
-      sourceRef:
-        kind: HelmRepository
-        name: frigate
-  interval: 15m
-  releaseName: frigate
-  values:
-    image:
-      repository: ghcr.io/blakeblackshear/frigate
-      pullPolicy: IfNotPresent
-
-    envFromSecrets:
-      - frigate-secret
-
-    gpu:
-      nvidia:
-        enabled: true
-        runtimeClassName: nvidia
-
-    config: |
-      mqtt:
-        enabled: true
-        host: emqx.emqx.svc.cluster.local
-        user: frigate
-        password: '{FRIGATE_MQTT_PASSWORD}'
-
-      ffmpeg:
-        hwaccel_args: preset-nvidia
-
-      go2rtc:
-        streams:
-          c200_1:
-            - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.20:554/stream1
-          c200_1_sub:
-            - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.20:554/stream2
-      cameras:
-        tapoC200_1:
-          enabled: true
-          onvif:
-            host: 192.168.18.20
-            port: 2020
-            user: '{FRIGATE_RTSP_USERNAME}'
-            password: '{FRIGATE_RTSP_PASSWORD}'
-          live:
-            stream_name: c200_1
-          ffmpeg:
-            output_args:
-              record: preset-record-generic
-            inputs:
-              - path: rtsp://127.0.0.1:8554/c200_1?video&audio
-                input_args: preset-rtsp-restream
-                roles:
-                  - record
-                  - detect
-                  - audio
-
-    ingress:
-      enabled: true
-      annotations:
-        cert-manager.io/cluster-issuer: "letsencrypt-prod"
-        traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        traefik.ingress.kubernetes.io/router.tls: "true"
-      hosts:
-        - host: frigate.michaelthomson.dev
-          paths:
-            - path: '/'
-              portName: http
-      tls:
-        - hosts:
-            - frigate.michaelthomson.dev
-          secretName: frigate-tls
-
-    persistence:
-      config:
-        enabled: true
-        storageClass: longhorn
-        accessMode: ReadWriteOnce
-        size: 100Mi
-      media:
-        enabled: true
-        storageClass: nfs-client
-        accessMode: ReadWriteOnce
-        size: 10Gi
-
-    resources:
-      limits:
-        nvidia.com/gpu: 1

apps/frigate/repository.yaml

@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: frigate
-  namespace: frigate
-spec:
-  interval: 15m
-  url: https://blakeblackshear.github.io/blakeshome-charts/

apps/frigate/secret.yaml

@@ -5,7 +5,7 @@ stringData:
     FRIGATE_RTSP_PASSWORD: ENC[AES256_GCM,data:PNI3OU9QCiOEABQu6Tg=,iv:npbl8YE1iTeEA5mJOlEb6EUKhTjd7s7lRfPVCfu+OTE=,tag:PPu1JGT8PSsSfVgOk4sVgw==,type:str]
 kind: Secret
 metadata:
-    name: frigate-secret
+    name: frigate
     namespace: frigate
 sops:
     age:
@@ -19,6 +19,6 @@ sops:
             -----END AGE ENCRYPTED FILE-----
           recipient: age1s0206tnfaaw849x5xmt95axgu8qhxzlu5ywrwz09tpt8lwpx858q089nq9
     encrypted_regex: ^(data|stringData)$
-    lastmodified: "2026-09-08T19:49:08Z"
-    mac: ENC[AES256_GCM,data:3viOyo2Qbq29GNNV7e+SacbXI/jf/LkitESACHYuwPcQZFO57J4Hg/Pk1e8lsM2Ft04Ye2L7o1Jdd8gVmPtH8EJdONWFpuv8DOgzAII/FxdDosHy5N0z8Gj8eFBCJEw4zpKKuTMoL+uG5juouWzzMnnmZ0kaz5t2dTUIkbXRDug=,iv:VaZfS84/FhkY5IJQVhbP0XUmVkBGHLMe1pnUISENQYY=,tag:sqs1pu8dThE4x9pqAsYE0g==,type:str]
+    lastmodified: "2026-09-09T12:12:10Z"
+    mac: ENC[AES256_GCM,data:mmgt9brUUt7OIbVrNDws3itVRihhpPceDSCJH/OXbgZhCChTk2i5nx7DAhzGnFik9n6jHi9+E13a7XO9wh0rUb/EMcBZhUHDwsYmPpbAUuWAzFYUXJ1MVNj0IbmGK2qoaZHKPh7WD8/5ITB0Ldv+CgAdmQ5N+QtvtfV+0IcI3XU=,iv:ZRTBFPG3Wi0Bx7yzSjAgzsxUvHe+yK4lVmesUbHMQmg=,tag:T8tT0KkMNBWdqDpGZ5m6Og==,type:str]
     version: 3.13.3

apps/frigate/service.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: frigate
+  namespace: frigate
+spec:
+  selector:
+    app: frigate
+  ports:
+    - name: http
+      port: 8971
+      targetPort: http
+    - name: rtsp
+      port: 8554
+      targetPort: rtsp
+    - name: webrtc-tcp
+      port: 8555
+      targetPort: webrtc-tcp
+    - name: webrtc-udp
+      port: 8555
+      protocol: UDP
+      targetPort: webrtc-udp

apps/gitea/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: gitea
+  namespace: gitea
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: gitea-http
+  groups:
+    - name: homelab-services

apps/grimmory/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: grimmory
+  namespace: grimmory
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: grimmory
+  groups:
+    - name: homelab-services

apps/homeassistant/networkresource.yaml

@@ -10,4 +10,4 @@ spec:
   serviceRef:
     name: homeassistant
   groups:
-    - name: All
+    - name: homelab-services

apps/immich/cluster.yaml

@@ -34,7 +34,7 @@ spec:
       source: immich-postgres
 
   storage:
-    size: 8Gi
+    size: 10Gi
     storageClass: longhorn-pg
 
   externalClusters:

apps/immich/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: immich
+  namespace: immich
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: immich-server
+  groups:
+    - name: homelab-services

apps/karakeep/networkresource-web.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: karakeep
+  namespace: karakeep
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: web
+  groups:
+    - name: homelab-services

apps/karakeep/web-service.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: web
+  name: karakeep
   namespace: karakeep
 spec:
   selector:

apps/kube-prometheus-stack/networkresource-grafana.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: grafana
+  namespace: kube-prometheus-stack
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: kube-prometheus-stack-grafana
+  groups:
+    - name: homelab-services

apps/media/bazarr/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: bazarr
+  namespace: media
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: bazarr
+  groups:
+    - name: homelab-services

apps/media/jellyfin/networkresource.yaml

@@ -10,4 +10,4 @@ spec:
   serviceRef:
     name: jellyfin
   groups:
-    - name: All
+    - name: homelab-services

apps/media/jellyseerr/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: jellyseerr
+  namespace: media
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: seerr-seerr-chart
+  groups:
+    - name: homelab-services

apps/media/prowlarr/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: prowlarr
+  namespace: media
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: prowlarr
+  groups:
+    - name: homelab-services

apps/media/radarr/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: radarr
+  namespace: media
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: radarr
+  groups:
+    - name: homelab-services

apps/media/sabnzbd/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: sabnzbd
+  namespace: media
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: sabnzbd
+  groups:
+    - name: homelab-services

apps/media/sonarr/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: sonarr
+  namespace: media
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: sonarr
+  groups:
+    - name: homelab-services

apps/michaelthomson/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: michaelthomson
+  namespace: michaelthomson
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: michaelthomson
+  groups:
+    - name: homelab-services

apps/nextcloud/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: nextcloud
+  namespace: nextcloud
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: nextcloud
+  groups:
+    - name: homelab-services

apps/pihole/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: pihole
+  namespace: pihole
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: pihole
+  groups:
+    - name: homelab-services

apps/syncthing/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: syncthing
+  namespace: syncthing
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: syncthing
+  groups:
+    - name: homelab-services

apps/uptime-kuma/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: uptime-kuma
+  namespace: uptime-kuma
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: uptime-kuma
+  groups:
+    - name: homelab-services

apps/vaultwarden/networkresource.yaml

@@ -0,0 +1,13 @@
+apiVersion: netbird.io/v1alpha1
+kind: NetworkResource
+metadata:
+  name: vaultwarden
+  namespace: vaultwarden
+spec:
+  networkRouterRef:
+    name: homelab
+    namespace: netbird
+  serviceRef:
+    name: vaultwarden
+  groups:
+    - name: homelab-services

infrastructure/configs/longhorn/recurring-job-backup.yaml

@@ -8,5 +8,5 @@ spec:
   task: "backup"
   groups:
   - backup
-  retain: 10
+  retain: 2
   concurrency: 1

infrastructure/configs/longhorn/recurring-job-snapshot.yaml

@@ -4,9 +4,9 @@ metadata:
   name: snapshot
   namespace: longhorn-system
 spec:
-  cron: "0 * * * *"
+  cron: "30 * * * *"
   task: "snapshot"
   groups:
   - snapshot
-  retain: 24
-  concurrency: 2
+  retain: 1
+  concurrency: 1