unkin-agent
f15d768227
Convert the three *arr apps from single-replica upstream LinuxServer/SQLite to our -unkin2 forks running active-active (replicas 3) on a shared CNPG Postgres cluster. - new apps/base/arrstack/postgres/: CNPG Cluster arrstack-postgres (3 instances, 3 managed login roles sonarr/radarr/prowlarr, throwaway initdb owner), per-app Database CRDs (<app>-main), cephrgw backup bucket + nightly ScheduledBackup, and 3 VaultStaticSecrets syncing the <app>-db role credentials. - per app: image -> docker-internal/<app>:v<base>-unkin2; replicas 3 + RollingUpdate; drop the apikey-init initContainer + PUID/PGID/TZ; run the binary directly with -nosingleinstancecheck; env from a new ConfigMap plus Postgres user/password and the API key from Secrets; /config PVC -> RWX cephfs-raid5-retain (shared).
25 lines
1.0 KiB
YAML
25 lines
1.0 KiB
YAML
---
|
|
# Non-secret env for the -unkin2 fork. The fork reads Servarr config from
|
|
# Sonarr__<Section>__<Key> env (no config.xml edits, no s6/PUID). Postgres wiring
|
|
# points every replica at the same shared DB (arrstack-postgres-rw / sonarr-main);
|
|
# Auth__Method=External defers UI auth to arrproxy/oauth2-proxy; Server__UrlBase
|
|
# keeps the /sonarr prefix so arrproxy path-routing works; App__InstanceName is
|
|
# identical across replicas (shared session-cookie name). User/Password/ApiKey
|
|
# come from Secrets (see deployment.yaml), not here.
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sonarr-env
|
|
namespace: arrstack
|
|
data:
|
|
Sonarr__Postgres__Host: arrstack-postgres-rw.arrstack.svc.cluster.local
|
|
Sonarr__Postgres__Port: "5432"
|
|
Sonarr__Postgres__MainDb: sonarr-main
|
|
Sonarr__Log__DbEnabled: "false"
|
|
Sonarr__Auth__Method: External
|
|
Sonarr__Auth__Required: DisabledForLocalAddresses
|
|
Sonarr__App__InstanceName: Sonarr
|
|
Sonarr__Server__Port: "8989"
|
|
Sonarr__Server__UrlBase: /sonarr
|
|
Sonarr__Update__Mechanism: External
|