apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: radarr
  namespace: jellyfin
spec:
  chart:
    spec:
      chart: radarr
      version: 1.1.x
      sourceRef:
        kind: HelmRepository
        name: alekc
        namespace: flux-system
  interval: 15m
  timeout: 5m
  releaseName: radarr
  values:
    # Default values for radarr.
    # This is a YAML-formatted file.
    # Declare variables to be passed into your templates.
    replicaCount: 1

    image:
      repository: hotio/radarr
      pullPolicy: IfNotPresent
      # Overrides the image tag whose default is the chart appVersion.
      tag: ""

    deployment:
      # -- Deployment strategy
      strategy:
        type: Recreate

    imagePullSecrets: []
    nameOverride: ""
    fullnameOverride: ""

    serviceAccount:
      # Specifies whether a service account should be created
      create: true
      # Annotations to add to the service account
      annotations: {}
      # The name of the service account to use.
      # If not set and create is true, a name is generated using the fullname template
      name: ""

    podAnnotations: {}

    podSecurityContext:
      {}
      # fsGroup: 2000

    securityContext:
      {}
      # capabilities:
      #   drop:
      #   - ALL
      # readOnlyRootFilesystem: true
      # runAsNonRoot: true
      # runAsUser: 1000

    service:
      type: ClusterIP
      port: 80

    ingress:
      enabled: true
      # -- Ingress class name
      className: traefik
      # -- Annotations for the ingress
      annotations:
        traefik.ingress.kubernetes.io/router.tls: "true"
        traefik.ingress.kubernetes.io/router.entrypoints: websecure
        traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
      # -- Ingress hosts configuration
      # @default -- see [values.yaml](values.yaml)
      hosts:
        - host: radarr.michaelthomson.dev
          paths:
            - path: /
              pathType: ImplementationSpecific
      # -- The TLS configuration for the Ingress
      tls:
        - secretName: letsencrypt-wildcard-cert-michaelthomson.dev
          hosts:
            - radarr.michaelthomson.dev

    resources:
      {}
      # We usually recommend not to specify default resources and to leave this as a conscious
      # choice for the user. This also increases chances charts run on environments with little
      # resources, such as Minikube. If you do want to specify resources, uncomment the following
      # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
      # limits:
      #   cpu: 100m
      #   memory: 128Mi
      # requests:
      #   cpu: 100m
      #   memory: 128Mi

    autoscaling:
      enabled: false
      minReplicas: 1
      maxReplicas: 100
      targetCPUUtilizationPercentage: 80
      # targetMemoryUtilizationPercentage: 80

    nodeSelector: {}

    tolerations: []

    affinity: {}

    env:
      PUID: "1000"
      PGID: "1000"
      TZ: "America/Toronto"
      UMASK: "002"

    persistence:
      storageClass: "longhorn"
      existingClaim: ""
      enabled: true
      accessMode: ReadWriteOnce
      size: 800Mi
      # if you need any additional volumes, you can define them here
      additionalVolumes: []
      # if you need any additional volume mounts, you can define them here
      additionalMounts: []