feat(streaming): public routes jelly/seerr via forust.xyz

This reverts commit 7a81b4ea8b.

adguardhome/k8s/adguard.yaml

@@ -68,35 +68,6 @@ spec:
         reloader.stakater.com/auto: "true"
     spec:
       containers:
-        - name: netbird
-          image: netbirdio/netbird:0.80.0
-          envFrom:
-            - configMapRef:
-                name: adguard-config
-          env:
-            - name: NB_SETUP_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: adguard-netbird-secrets
-                  key: NB_SETUP_KEY
-          securityContext:
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_ADMIN
-                - SYS_RESOURCE
-          resources:
-            requests:
-              memory: "64Mi"
-              cpu: "50m"
-            limits:
-              memory: "256Mi"
-              cpu: "200m"
-          volumeMounts:
-            - name: netbird-state
-              mountPath: /var/lib/netbird
-            - name: dev-tun
-              mountPath: /dev/net/tun
         - name: adguard
           image: adguard/adguardhome:v0.107.79
           resources:
@@ -131,12 +102,6 @@ spec:
               mountPath: /certs
               readOnly: true
       volumes:
-        - name: netbird-state
-          emptyDir: {}
-        - name: dev-tun
-          hostPath:
-            path: /dev/net/tun
-            type: CharDevice
         - name: adguard-data
           persistentVolumeClaim:
             claimName: adguard-pvc

adguardhome/k8s/config.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: adguard-config
-  namespace: adguard
-data:
-  NB_MANAGEMENT_URL: "https://nb.forust.xyz"
-  NB_HOSTNAME: "adguard"
-  NB_LOG_LEVEL: "info"
-  NB_DISABLE_DNS: "true"

adguardhome/k8s/netbird-secrets.yaml.example

@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: adguard-netbird-secrets
-  namespace: adguard
-type: Opaque
-stringData:
-  NB_SETUP_KEY: "REPLACE_ME"

streaming/compose.yaml

@@ -87,8 +87,9 @@ services:
       - streaming
 
   jellyseerr:
-    image: fallenbagel/jellyseerr:latest
+    image: ghcr.io/seerr-team/seerr:latest
     container_name: jellyseerr
+    init: true
     restart: unless-stopped
     environment:
       - TZ=${TZ:-Europe/Berlin}
@@ -99,6 +100,48 @@ services:
     networks:
       - streaming
 
+  bazarr:
+    image: lscr.io/linuxserver/bazarr:latest
+    container_name: bazarr
+    restart: unless-stopped
+    environment:
+      - PUID=${PUID:-1000}
+      - PGID=${PGID:-1000}
+      - TZ=${TZ:-Europe/Berlin}
+    volumes:
+      - bazarr-cfg:/config
+      - movies:/movies
+      - tv:/tv
+    ports:
+      - "16767:6767"
+    networks:
+      - streaming
+
+  lampac:
+    image: ghcr.io/lampac-nextgen/lampac:latest
+    container_name: lampac
+    restart: unless-stopped
+    shm_size: 1024mb
+    # Restore persisted passwd/init.conf from seed volume before start,
+    # so config survives container recreation (upstream entrypoint is
+    # ENTRYPOINT ["dotnet", "Core.dll"], WORKDIR /lampac, USER lampac).
+    entrypoint:
+      [
+        "/bin/sh",
+        "-c",
+        "if [ -f /seed/passwd ] && [ ! -f /lampac/passwd ]; then cp /seed/passwd /lampac/passwd; fi; if [ -f /seed/init.conf ] && [ ! -f /lampac/init.conf ]; then cp /seed/init.conf /lampac/init.conf; fi; exec /usr/share/dotnet/dotnet Core.dll",
+      ]
+    environment:
+      - TZ=${TZ:-Europe/Berlin}
+    volumes:
+      - lampac-seed:/seed
+      - lampac-cache:/lampac/cache
+      - lampac-db:/lampac/database
+    ports:
+      - "19118:9118"
+    networks:
+      - streaming
+
 volumes:
   jellyfin-cfg:
   qbittorrent-cfg:
@@ -106,6 +149,10 @@ volumes:
   radarr-cfg:
   prowlarr-cfg:
   jellyseerr-cfg:
+  bazarr-cfg:
+  lampac-seed:
+  lampac-cache:
+  lampac-db:
   downloads:
   movies:
   tv:

streaming/k8s/routing/certificates.yaml

@@ -13,19 +13,32 @@ spec:
   issuerRef:
     name: internal-ca
     kind: ClusterIssuer
-# ---
-# apiVersion: cert-manager.io/v1
-# kind: Certificate
-# metadata:
-#   name: jellyfin-prod-tls
-#   namespace: streaming
-# spec:
-#   secretName: jellyfin-prod-tls
-#   dnsNames:
-#     - jellyfin.forust.xyz
-#   issuerRef:
-#     name: letsencrypt-prod
-#     kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: jelly-prod-tls
+  namespace: streaming
+spec:
+  secretName: jelly-prod-tls
+  dnsNames:
+    - jelly.forust.xyz
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: seerr-prod-tls
+  namespace: streaming
+spec:
+  secretName: seerr-prod-tls
+  dnsNames:
+    - seerr.forust.xyz
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
 # ---
 # apiVersion: cert-manager.io/v1
 # kind: Certificate
@@ -78,16 +91,3 @@ spec:
 #   issuerRef:
 #     name: letsencrypt-prod
 #     kind: ClusterIssuer
-# ---
-# apiVersion: cert-manager.io/v1
-# kind: Certificate
-# metadata:
-#   name: jellyseerr-prod-tls
-#   namespace: streaming
-# spec:
-#   secretName: jellyseerr-prod-tls
-#   dnsNames:
-#     - jellyseerr.forust.xyz
-#   issuerRef:
-#     name: letsencrypt-prod
-#     kind: ClusterIssuer

streaming/k8s/routing/external-service.yaml

@@ -159,3 +159,57 @@ endpoints:
       - "192.168.88.100"
     conditions:
       ready: true
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: bazarr
+  namespace: streaming
+spec:
+  ports:
+    - port: 16767
+      targetPort: 16767
+---
+apiVersion: discovery.k8s.io/v1
+kind: EndpointSlice
+metadata:
+  name: bazarr
+  namespace: streaming
+  labels:
+    kubernetes.io/service-name: bazarr
+addressType: IPv4
+ports:
+  - port: 16767
+    protocol: TCP
+endpoints:
+  - addresses:
+      - "192.168.88.100"
+    conditions:
+      ready: true
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: lampac
+  namespace: streaming
+spec:
+  ports:
+    - port: 19118
+      targetPort: 19118
+---
+apiVersion: discovery.k8s.io/v1
+kind: EndpointSlice
+metadata:
+  name: lampac
+  namespace: streaming
+  labels:
+    kubernetes.io/service-name: lampac
+addressType: IPv4
+ports:
+  - port: 19118
+    protocol: TCP
+endpoints:
+  - addresses:
+      - "192.168.88.100"
+    conditions:
+      ready: true

streaming/k8s/routing/ingress.yaml

@@ -99,3 +99,71 @@ spec:
           port: 15055
   tls:
     secretName: internal-wildcard-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: bazarr-local
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`bazarr.workstation.internal`)
+      kind: Rule
+      services:
+        - name: bazarr
+          port: 16767
+  tls:
+    secretName: internal-wildcard-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: lampac-local
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`lampac.workstation.internal`)
+      kind: Rule
+      services:
+        - name: lampac
+          port: 19118
+  tls:
+    secretName: internal-wildcard-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: jellyfin-prod
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`jelly.forust.xyz`)
+      kind: Rule
+      services:
+        - name: jellyfin
+          port: 18096
+  tls:
+    secretName: jelly-prod-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: seerr-prod
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`seerr.forust.xyz`)
+      kind: Rule
+      services:
+        - name: jellyseerr
+          port: 15055
+  tls:
+    secretName: seerr-prod-tls