feat(streaming): public routes jelly/seerr via forust.xyz

streaming/compose.yaml

@@ -87,8 +87,9 @@ services:
       - streaming
 
   jellyseerr:
-    image: fallenbagel/jellyseerr:latest
+    image: ghcr.io/seerr-team/seerr:latest
     container_name: jellyseerr
+    init: true
     restart: unless-stopped
     environment:
       - TZ=${TZ:-Europe/Berlin}
@@ -116,6 +117,31 @@ services:
     networks:
       - streaming
 
+  lampac:
+    image: ghcr.io/lampac-nextgen/lampac:latest
+    container_name: lampac
+    restart: unless-stopped
+    shm_size: 1024mb
+    # Restore persisted passwd/init.conf from seed volume before start,
+    # so config survives container recreation (upstream entrypoint is
+    # ENTRYPOINT ["dotnet", "Core.dll"], WORKDIR /lampac, USER lampac).
+    entrypoint:
+      [
+        "/bin/sh",
+        "-c",
+        "if [ -f /seed/passwd ] && [ ! -f /lampac/passwd ]; then cp /seed/passwd /lampac/passwd; fi; if [ -f /seed/init.conf ] && [ ! -f /lampac/init.conf ]; then cp /seed/init.conf /lampac/init.conf; fi; exec /usr/share/dotnet/dotnet Core.dll",
+      ]
+    environment:
+      - TZ=${TZ:-Europe/Berlin}
+    volumes:
+      - lampac-seed:/seed
+      - lampac-cache:/lampac/cache
+      - lampac-db:/lampac/database
+    ports:
+      - "19118:9118"
+    networks:
+      - streaming
+
 volumes:
   jellyfin-cfg:
   qbittorrent-cfg:
@@ -124,6 +150,9 @@ volumes:
   prowlarr-cfg:
   jellyseerr-cfg:
   bazarr-cfg:
+  lampac-seed:
+  lampac-cache:
+  lampac-db:
   downloads:
   movies:
   tv:

streaming/k8s/routing/certificates.yaml

@@ -13,19 +13,32 @@ spec:
   issuerRef:
     name: internal-ca
     kind: ClusterIssuer
-# ---
-# apiVersion: cert-manager.io/v1
-# kind: Certificate
-# metadata:
-#   name: jellyfin-prod-tls
-#   namespace: streaming
-# spec:
-#   secretName: jellyfin-prod-tls
-#   dnsNames:
-#     - jellyfin.forust.xyz
-#   issuerRef:
-#     name: letsencrypt-prod
-#     kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: jelly-prod-tls
+  namespace: streaming
+spec:
+  secretName: jelly-prod-tls
+  dnsNames:
+    - jelly.forust.xyz
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: seerr-prod-tls
+  namespace: streaming
+spec:
+  secretName: seerr-prod-tls
+  dnsNames:
+    - seerr.forust.xyz
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
 # ---
 # apiVersion: cert-manager.io/v1
 # kind: Certificate
@@ -78,16 +91,3 @@ spec:
 #   issuerRef:
 #     name: letsencrypt-prod
 #     kind: ClusterIssuer
-# ---
-# apiVersion: cert-manager.io/v1
-# kind: Certificate
-# metadata:
-#   name: jellyseerr-prod-tls
-#   namespace: streaming
-# spec:
-#   secretName: jellyseerr-prod-tls
-#   dnsNames:
-#     - jellyseerr.forust.xyz
-#   issuerRef:
-#     name: letsencrypt-prod
-#     kind: ClusterIssuer

streaming/k8s/routing/external-service.yaml

@@ -186,3 +186,30 @@ endpoints:
       - "192.168.88.100"
     conditions:
       ready: true
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: lampac
+  namespace: streaming
+spec:
+  ports:
+    - port: 19118
+      targetPort: 19118
+---
+apiVersion: discovery.k8s.io/v1
+kind: EndpointSlice
+metadata:
+  name: lampac
+  namespace: streaming
+  labels:
+    kubernetes.io/service-name: lampac
+addressType: IPv4
+ports:
+  - port: 19118
+    protocol: TCP
+endpoints:
+  - addresses:
+      - "192.168.88.100"
+    conditions:
+      ready: true

streaming/k8s/routing/ingress.yaml

@@ -116,3 +116,54 @@ spec:
           port: 16767
   tls:
     secretName: internal-wildcard-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: lampac-local
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`lampac.workstation.internal`)
+      kind: Rule
+      services:
+        - name: lampac
+          port: 19118
+  tls:
+    secretName: internal-wildcard-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: jellyfin-prod
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`jelly.forust.xyz`)
+      kind: Rule
+      services:
+        - name: jellyfin
+          port: 18096
+  tls:
+    secretName: jelly-prod-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: seerr-prod
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`seerr.forust.xyz`)
+      kind: Rule
+      services:
+        - name: jellyseerr
+          port: 15055
+  tls:
+    secretName: seerr-prod-tls