81 lines
2.4 KiB
YAML
81 lines
2.4 KiB
YAML
---
|
|
replicaCount: 1
|
|
|
|
image:
|
|
repository: jellyfin/jellyfin
|
|
tag: 10.8.12-amd64
|
|
pullPolicy: IfNotPresent
|
|
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8096
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
kubernetes.io/ingress.class: nginx
|
|
kubernetes.io/tls-acme: "true"
|
|
nginx.ingress.kubernetes.io/proxy-body-size: 10G
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
nginx.ingress.kubernetes.io/configuration-snippet: |
|
|
more_clear_headers "X-Powered-By";
|
|
more_set_headers "X-XSS-Protection: 1";
|
|
more_set_headers "X-Frame-Options: SAMEORIGIN";
|
|
more_set_headers "X-Content-Type-Options: nosniff";
|
|
more_set_headers "Referrer-Policy: strict-origin-when-cross-origin";
|
|
more_set_headers "Permissions-Policy: geolocation=(none);midi=(self);notifications=(self);push=(self);sync-xhr=();microphone=(none);camera=(none);magnetometer=(none);gyroscope=(none);speaker=(self);vibrate=(self);fullscreen=(self);payment=(none);";
|
|
more_set_headers "Content-Security-Policy: base-uri 'none'; manifest-src 'self'; connect-src 'self' wss: ws: https://mb3admin.com; font-src 'self' data: ; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; frame-src 'self'; img-src data: https: http:; media-src 'self' blob: data:; object-src 'none'; script-src 'self' https://www.gstatic.com; style-src 'self' 'unsafe-inline'";
|
|
path: /
|
|
hosts:
|
|
- jellyfin.jamma.dev
|
|
tls:
|
|
- secretName: tls-jamma-jellyfin
|
|
hosts:
|
|
- jellyfin.jamma.dev
|
|
|
|
persistence:
|
|
config:
|
|
enabled: true
|
|
## If you want to reuse an existing claim, you can pass the name of the PVC using
|
|
## the existingClaim variable
|
|
# existingClaim: your-claim
|
|
# subPath: some-subpath
|
|
accessMode: ReadWriteOnce
|
|
size: 1Gi
|
|
media:
|
|
enabled: false
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
extraExistingClaimMounts: []
|
|
# - name: external-mount
|
|
# mountPath: /srv/external-mount
|
|
## A manually managed Persistent Volume and Claim
|
|
## If defined, PVC must be created manually before volume will be bound
|
|
# existingClaim:
|
|
# readOnly: true
|
|
|
|
resources:
|
|
limits:
|
|
memory: 12Gi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
affinity: {}
|
|
|
|
extraVolumes:
|
|
- name: jammaraid
|
|
hostPath:
|
|
path: /media/raid/jammaraid
|
|
|
|
extraVolumeMounts:
|
|
- mountPath: /media/raid/jammaraid
|
|
name: jammaraid
|