Jeffrey/Kubernetes-Manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Reset git history for making manifests public

Browse Source
This commit is contained in:
Jeffrey
2026-06-01 10:21:23 +02:00
commit de77d778fb
403 changed files with 41929 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
immich/immich/httproute.yaml Normal file
View File

@@ -0,0 +1,51 @@
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: immich-route
namespace: immich
spec:
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: gateway-internal
namespace: envoy-gateway
sectionName: immich
- group: gateway.networking.k8s.io
kind: Gateway
name: gateway-public
namespace: envoy-gateway
sectionName: immich
hostnames:
- "photos.jsme.be"
rules:
- matches:
- path:
type: PathPrefix
value: /
filters:
- type: RequestHeaderModifier
requestHeaderModifier:
set:
- name: X-Forwarded-Host
value: "photos.jsme.be"
- name: X-Forwarded-Proto
value: https
- type: ResponseHeaderModifier
responseHeaderModifier:
set:
- name: Strict-Transport-Security
value: "max-age=31536000; includeSubDomains"
- name: X-Content-Type-Options
value: nosniff
- name: X-Frame-Options
value: SAMEORIGIN
- name: Referrer-Policy
value: strict-origin-when-cross-origin
- name: Permissions-Policy
value: "camera=(), microphone=(), geolocation=(), payment=()"
backendRefs:
- name: immich
port: 2283
kind: Service
group: ""
weight: 1

36
immich/immich/immich-pvc.yaml Normal file
View File

@@ -0,0 +1,36 @@
apiVersion: v1
kind: PersistentVolume
metadata:
name: immich-data-smb
spec:
capacity:
storage: 5Gi
accessModes:
- ReadWriteMany
persistentVolumeReclaimPolicy: Retain
mountOptions:
- dir_mode=0700
- file_mode=0700
- noperm
csi:
driver: smb.csi.k8s.io
volumeHandle: immich-photos
volumeAttributes:
source: "//10.8.14.2/Photos"
nodeStageSecretRef:
name: immich-secrets
namespace: immich
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
namespace: immich
name: immich-pvc
spec:
accessModes:
- ReadWriteMany
resources:
requests:
storage: 1Gi
volumeName: immich-data-smb
storageClassName: ""

13
immich/immich/immich-svc.yaml Normal file
View File

@@ -0,0 +1,13 @@
apiVersion: v1
kind: Service
metadata:
namespace: immich
name: immich
spec:
selector:
app: immich
ports:
- protocol: TCP
port: 2283
targetPort: 2283
type: ClusterIP

61
immich/immich/immich.yaml Normal file
View File

@@ -0,0 +1,61 @@
apiVersion: apps/v1
kind: StatefulSet
metadata:
namespace: immich
name: immich
spec:
replicas: 1
selector:
matchLabels:
app: immich
serviceName: immich
template:
metadata:
labels:
app: immich
spec:
restartPolicy: Always
terminationGracePeriodSeconds: 60
containers:
- name: immich
image: ghcr.io/immich-app/immich-server:v2.7.5
resources:
requests:
memory: "256Mi"
cpu: "250m"
limits:
memory: "2Gi"
cpu: "2000m"
ports:
- containerPort: 2283
env:
- name: TZ
value: "Europe/Brussels"
- name: DB_HOSTNAME
value: "immich-postgresql.immich.svc.cluster.local"
- name: DB_DATABASE_NAME
valueFrom:
secretKeyRef:
name: immich-secrets
key: db_name
- name: DB_USERNAME
valueFrom:
secretKeyRef:
name: immich-secrets
key: db_user
- name: DB_PASSWORD
valueFrom:
secretKeyRef:
name: immich-secrets
key: db_password
- name: REDIS_HOSTNAME
value: "valkey.immich.svc.cluster.local"
- name: IMMICH_PORT
value: "2283"
volumeMounts:
- name: photos
mountPath: /data
volumes:
- name: photos
persistentVolumeClaim:
claimName: immich-pvc

53
immich/postgres/postgres.yaml Normal file
View File

@@ -0,0 +1,53 @@
apiVersion: apps/v1
kind: StatefulSet
metadata:
namespace: immich
name: immich-postgresql
spec:
replicas: 1
serviceName: immich-postgresql
selector:
matchLabels:
app: immich-postgresql
template:
metadata:
labels:
app: immich-postgresql
spec:
restartPolicy: Always
terminationGracePeriodSeconds: 60
containers:
- name: immich-postgresql
image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0
resources:
requests:
memory: "256Mi"
cpu: "100m"
limits:
memory: "1Gi"
cpu: "500m"
ports:
- containerPort: 5432
volumeMounts:
- name: immich-postgresql-immich
mountPath: /var/lib/postgresql/pgdata
env:
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: immich-secrets
key: db_password
- name: POSTGRES_USER
valueFrom:
secretKeyRef:
name: immich-secrets
key: db_user
- name: POSTGRES_DB
valueFrom:
secretKeyRef:
name: immich-secrets
key: db_name
volumes:
- name: immich-postgresql-immich
persistentVolumeClaim:
claimName: immich-postgresql-pvc

12
immich/postgres/postgresql-pvc.yaml Normal file
View File

@@ -0,0 +1,12 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
namespace: immich
name: immich-postgresql-pvc
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn-static
resources:
requests:
storage: 5Gi

14
immich/postgres/postgresql-svc.yaml Normal file
View File

@@ -0,0 +1,14 @@
apiVersion: v1
kind: Service
metadata:
name: immich-postgresql
namespace: immich
spec:
selector:
app: immich-postgresql
type: ClusterIP
ports:
- name: immich-postgresql-port
protocol: TCP
port: 5432
targetPort: 5432

14
immich/valkey/valkey-svc.yaml Normal file
View File

@@ -0,0 +1,14 @@
apiVersion: v1
kind: Service
metadata:
name: valkey
namespace: immich
spec:
selector:
app: valkey
type: ClusterIP
ports:
- name: valkey-port
protocol: TCP
port: 6379
targetPort: 6379

28
immich/valkey/valkey.yaml Normal file
View File

@@ -0,0 +1,28 @@
apiVersion: apps/v1
kind: Deployment
metadata:
namespace: immich
name: valkey
spec:
replicas: 1
selector:
matchLabels:
app: valkey
template:
metadata:
labels:
app: valkey
spec:
restartPolicy: Always
containers:
- name: valkey
image: valkey/valkey:9
resources:
requests:
memory: "64Mi"
cpu: "50m"
limits:
memory: "256Mi"
cpu: "200m"
ports:
- containerPort: 6379