85 lines
2.4 KiB
YAML
85 lines
2.4 KiB
YAML
# Defaults for jellyfin
|
|
replicaCount: 1
|
|
|
|
image:
|
|
repository: jellyfin/jellyfin
|
|
tag: latest
|
|
pullPolicy: IfNotPresent
|
|
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8096
|
|
annotations: {}
|
|
labels: {}
|
|
loadBalancerIP:
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
kubernetes.io/ingress.class: nginx
|
|
kubernetes.io/tls-acme: "true"
|
|
nginx.ingress.kubernetes.io/proxy-body-size: 10G
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
nginx.ingress.kubernetes.io/configuration-snippet: |
|
|
more_clear_headers "X-Powered-By"
|
|
more_set_headers "X-XSS-Protection: 1";
|
|
more_set_headers "X-Frame-Options: SAMEORIGIN";
|
|
more_set_headers "X-Content-Type-Options: nosniff";
|
|
more_set_headers "Referrer-Policy: strict-origin-when-cross-origin";
|
|
more_set_headers "Permissions-Policy: geolocation=(none);midi=(self);notifications=(self);push=(self);sync-xhr=();microphone=(none);camera=(none);magnetometer=(none);gyroscope=(none);speaker=(self);vibrate=(self);fullscreen=(self);payment=(none);";
|
|
more_set_headers "Content-Security-Policy: base-uri 'none'; connect-src 'self'; default-src 'none'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'self'; img-src 'self'; media-src 'self' data:; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'";
|
|
path: /
|
|
hosts:
|
|
- jellyfin.jamma.dev
|
|
tls:
|
|
- secretName: tls-jamma-jellyfin
|
|
hosts:
|
|
- jellyfin.jamma.dev
|
|
|
|
persistence:
|
|
config:
|
|
enabled: true
|
|
## If you want to reuse an existing claim, you can pass the name of the PVC using
|
|
## the existingClaim variable
|
|
# existingClaim: your-claim
|
|
# subPath: some-subpath
|
|
accessMode: ReadWriteOnce
|
|
size: 1Gi
|
|
media:
|
|
enabled: false
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
extraExistingClaimMounts: []
|
|
# - name: external-mount
|
|
# mountPath: /srv/external-mount
|
|
## A manually managed Persistent Volume and Claim
|
|
## If defined, PVC must be created manually before volume will be bound
|
|
# existingClaim:
|
|
# readOnly: true
|
|
|
|
resources: {}
|
|
limits:
|
|
cpu: 10
|
|
memory: 8Gi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
affinity: {}
|
|
|
|
extraVolumes:
|
|
- name: jammaraid
|
|
hostPath:
|
|
path: /media/raid/jammaraid
|
|
|
|
extraVolumeMounts:
|
|
- mountPath: /media/raid/jammaraid
|
|
name: jammaraid
|