apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: frigate
  namespace: frigate
spec:
  chart:
    spec:
      chart: frigate
      version: 7.x
      sourceRef:
        kind: HelmRepository
        name: frigate
  interval: 15m
  releaseName: frigate
  values:
    image:
      repository: ghcr.io/blakeblackshear/frigate
      tag: amd64nvidia
      pullPolicy: IfNotPresent

    envFromSecrets:
      - frigate-secret

    gpu:
      nvidia:
        enabled: true
        runtimeClassName: nvidia

    config: |
      mqtt:
        enabled: true
        host: emqx.emqx.svc.cluster.local
        user: frigate
        password: {FRIGATE_MQTT_PASSWORD}

      ffmpeg:
        hwaccel_args: preset-nvidia

      go2rtc:
        streams:
          cam1:
            - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.20:554/stream1
          cam1_sub:
            - rtsp://{FRIGATE_RTSP_USERNAME}:{FRIGATE_RTSP_PASSWORD}@192.168.18.20:554/stream2

    ingress:
      enabled: true
      annotations:
        cert-manager.io/cluster-issuer: "letsencrypt-prod"
        traefik.ingress.kubernetes.io/router.entrypoints: websecure
        traefik.ingress.kubernetes.io/router.tls: "true"
      hosts:
        - host: frigate.michaelthomson.dev
          paths:
            - path: '/'
              portName: http-auth
      tls:
        - hosts:
            - frigate.michaelthomson.dev
          secretName: frigate-tls

    persistence:
      config:
        enabled: true
        storageClass: longhorn
        accessMode: ReadWriteOnce
        size: 100Mi
      media:
        enabled: true
        storageClass: nfs-client
        accessMode: ReadWriteOnce
        size: 10Gi

    resources:
      limits:
        nvidia.com/gpu: 1