helmrelease.yaml

# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/app-template-3.5.1/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: plex
  namespace: plex
spec:
  chart:
    spec:
      chart: app-template
      version: 3.5.1
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        namespace: flux-system
        name: bjw-s
  interval: 1h
  driftDetection:
    mode: enabled
  values:
    controllers:
      plex:
        containers:
          app:
            image:
              repository: ghcr.io/onedr0p/plex
              tag: 1.32.8.7639-fb6452ebf@sha256:97bf4a8eac34de4b0df78e4fc3e2b501187161a3a264fa2b220bd51b0f89ba77
              pullPolicy: IfNotPresent
            env:
              TZ: America/Chicago
            resources:
              requests:
                gpu.intel.com/i915: 1
              limits:
                gpu.intel.com/i915: 1
                memory: 4096Mi
            probes:
              startup:
                enabled: true
                spec:
                  failureThreshold: 30
                  periodSeconds: 5
              liveness:
                enabled: true
              readiness:
                enabled: true
            securityContext:
              readOnlyRootFilesystem: true
        pod:
          labels:
            policy.gabe565.com/egress-world: "true"
            policy.gabe565.com/ingress-home-assistant: "true"
            policy.gabe565.com/ingress-ingress: "true"
            policy.gabe565.com/ingress-world: "true"
          securityContext:
            fsGroup: 568
            fsGroupChangePolicy: OnRootMismatch

    persistence:
      config:
        enabled: true
        retain: true
        storageClass: longhorn-ssd
        accessMode: ReadWriteOnce
        size: 16Gi
      data:
        enabled: true
        type: nfs
        server: 192.168.1.240
        path: /volume1/media
      transcode:
        enabled: true
        type: emptyDir
        sizeLimit: 32Gi
      tmp:
        enabled: true
        type: emptyDir

    service:
      plex:
        controller: plex
        type: LoadBalancer
        loadBalancerIP: 192.168.1.223
        externalTrafficPolicy: Local
        ports:
          http:
            port: 32400

    ingress:
      plex:
        enabled: true
        annotations:
          nginx.ingress.kubernetes.io/from-to-www-redirect: "true"
          nginx.ingress.kubernetes.io/configuration-snippet: |
            sub_filter '</head>' '<link rel="stylesheet" href="${theme_park}/base/plex/overseerr.css"><link rel="stylesheet" href="${theme_park}/addons/plex/plex-alt-logo/plex-alt-logo.css"></head>';
        hosts:
          - host: ${app_url}
            paths:
              - path: /
                service:
                  identifier: plex
                  port: http
        tls: &tls
          - secretName: ${certificate_name}
            hosts:
              - ${app_url}
              - www.${app_url}
      root:
        enabled: true
        annotations:
          nginx.ingress.kubernetes.io/temporal-redirect: "https://${app_url}/web$request_uri"
        hosts:
          - host: ${app_url}
            paths:
              - path: /
                pathType: Exact
                service:
                  identifier: plex
                  port: http
        tls: *tls