From 0fda7f84bac77ad8d72342b73ee5466e39b99089 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1s=20Limpinho?= <53994778+TomasLimpinho@users.noreply.github.com> Date: Sat, 3 Jan 2026 14:45:07 +0000 Subject: [PATCH] bazarr --- roles/bazarr/files/bazarr-deployment.yaml | 71 +++++++++++++++++++ roles/bazarr/files/bazarr-nfs-csi.yaml | 11 +++ roles/bazarr/files/bazarr-pvcs.yaml | 60 ++++++++++++++++ roles/bazarr/files/bazarr-secret.yaml | 11 +++ roles/bazarr/files/bazarr-service.yaml | 12 ++++ roles/bazarr/tasks/main.yml | 51 +++++++++++++ roles/bazarr/vars/main.yml | 4 ++ roles/jellyfin/files/jellyfin-deployment.yaml | 4 ++ 8 files changed, 224 insertions(+) create mode 100644 roles/bazarr/files/bazarr-deployment.yaml create mode 100644 roles/bazarr/files/bazarr-nfs-csi.yaml create mode 100644 roles/bazarr/files/bazarr-pvcs.yaml create mode 100644 roles/bazarr/files/bazarr-secret.yaml create mode 100644 roles/bazarr/files/bazarr-service.yaml create mode 100644 roles/bazarr/tasks/main.yml create mode 100644 roles/bazarr/vars/main.yml diff --git a/roles/bazarr/files/bazarr-deployment.yaml b/roles/bazarr/files/bazarr-deployment.yaml new file mode 100644 index 0000000..5cf0825 --- /dev/null +++ b/roles/bazarr/files/bazarr-deployment.yaml @@ -0,0 +1,71 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bazarr + namespace: stack-arr +spec: + replicas: 1 + selector: + matchLabels: + app: bazarr + template: + metadata: + labels: + app: bazarr + spec: + imagePullSecrets: + - name: regcred + containers: + - name: bazarr + image: lscr.io/linuxserver/bazarr:1.5.3 + securityContext: + capabilities: + add: + - NET_ADMIN + ports: + - containerPort: 6767 + name: webui + env: + - name: PUID + value: "1013" + - name: PGID + value: "1013" + - name: TZ + value: 'Etc/UTC' + - name: BAZARR__POSTGRES__HOST + value: 'stolon-proxy-service.postgresql.svc.cluster.local' + - name: BAZARR__POSTGRES__USER + valueFrom: + secretKeyRef: + name: bazarr-secret + key: username + - name: BAZARR__POSTGRES__PASSWORD + valueFrom: + secretKeyRef: + name: bazarr-secret + key: password + - name: BAZARR__POSTGRES__MAINDB + valueFrom: + secretKeyRef: + name: bazarr-secret + key: maindb + - name: BAZARR__POSTGRES__LOGDB + valueFrom: + secretKeyRef: + name: bazarr-secret + key: logsdb + volumeMounts: + - name: config + mountPath: /config + - name: media + mountPath: /media + volumes: + - name: config + persistentVolumeClaim: + claimName: bazarr-config-pvc + - name: media + persistentVolumeClaim: + claimName: bazarr-media-pvc + + + diff --git a/roles/bazarr/files/bazarr-nfs-csi.yaml b/roles/bazarr/files/bazarr-nfs-csi.yaml new file mode 100644 index 0000000..79994bd --- /dev/null +++ b/roles/bazarr/files/bazarr-nfs-csi.yaml @@ -0,0 +1,11 @@ +apiVersion: storage.k8s.io/v1 +kind: StorageClass +metadata: + name: bazarr-nfs-csi + namespace: stack-arr +provisioner: nfs.csi.k8s.io +parameters: + server: 192.168.1.22 + share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bazarr +allowVolumeExpansion: true +reclaimPolicy: Retain \ No newline at end of file diff --git a/roles/bazarr/files/bazarr-pvcs.yaml b/roles/bazarr/files/bazarr-pvcs.yaml new file mode 100644 index 0000000..03a0523 --- /dev/null +++ b/roles/bazarr/files/bazarr-pvcs.yaml @@ -0,0 +1,60 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: bazarr-config-pv + namespace: stack-arr +spec: + capacity: + storage: 2Gi + storageClassName: bazarr-nfs-csi + accessModes: + - ReadWriteOnce + persistentVolumeReclaimPolicy: Retain + nfs: + server: 192.168.1.22 + path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bazarr/config +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: bazarr-config-pvc + namespace: stack-arr +spec: + storageClassName: bazarr-nfs-csi + accessModes: + - ReadWriteOnce + volumeName: bazarr-config-pv + resources: + requests: + storage: 2Gi +--- +apiVersion: v1 +kind: PersistentVolume +metadata: + name: bazarr-media-pv + namespace: stack-arr +spec: + capacity: + storage: 150Gi + storageClassName: jellyfin-videos-nfs-csi + accessModes: + - ReadWriteOnce + persistentVolumeReclaimPolicy: Retain + nfs: + server: 192.168.1.22 + path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: bazarr-videos-pvc + namespace: stack-arr +spec: + storageClassName: jellyfin-videos-nfs-csi + accessModes: + - ReadWriteOnce + volumeName: bazarr-media-pv + resources: + requests: + storage: 150Gi +--- \ No newline at end of file diff --git a/roles/bazarr/files/bazarr-secret.yaml b/roles/bazarr/files/bazarr-secret.yaml new file mode 100644 index 0000000..d666b81 --- /dev/null +++ b/roles/bazarr/files/bazarr-secret.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: Secret +metadata: + name: bazarr-secret + namespace: stack-arr +type: Opaque +data: + username: dXNlcm5hbWU= + password: cGFzc3dvcmQ= + maindb: bWFpbmRiLXByb3dsYXJy + logsdb: bG9nZGItcHJvd2xhcnI= \ No newline at end of file diff --git a/roles/bazarr/files/bazarr-service.yaml b/roles/bazarr/files/bazarr-service.yaml new file mode 100644 index 0000000..7cfb048 --- /dev/null +++ b/roles/bazarr/files/bazarr-service.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: Service +metadata: + name: bazarr-service + namespace: stack-arr +spec: + ports: + - port: 6767 + targetPort: 6767 + selector: + app: bazarr + type: ClusterIP \ No newline at end of file diff --git a/roles/bazarr/tasks/main.yml b/roles/bazarr/tasks/main.yml new file mode 100644 index 0000000..7d942cc --- /dev/null +++ b/roles/bazarr/tasks/main.yml @@ -0,0 +1,51 @@ +- name: Remover o diretório /tmp/stack-arr/bazarr/kubernetes-files + ansible.builtin.file: + path: /tmp/stack-arr/bazarr/kubernetes-files + state: absent + +- name: Criar diretório temporário no remoto + file: + path: /tmp/stack-arr/bazarr/kubernetes-files + state: directory + mode: '0755' + +- name: Copy file with owner and permissions + ansible.builtin.copy: + src: ../files + dest: /tmp/stack-arr/bazarr/kubernetes-files + owner: fenix + group: root + mode: '0644' + + +- name: Obter várias notas do Bitwarden + shell: | + echo "unlock" + BW_SESSION=$(bw unlock {{ bw_password }} --raw) + echo "get item" + bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }} + loop: + - { id: "iac.ansible.stackarr.bazarr.secret", dest: "/tmp/stack-arr/bazarr/kubernetes-files/files/bazarr-secret.yaml" } + args: + executable: /bin/bash + environment: + BW_PASSWORD: "{{ BW_PASSWORD }}" + + +- name: Listar conteúdo do diretório remoto + shell: ls -l /tmp/stack-arr/bazarr/kubernetes-files/files + register: resultado_ls + + +- name: Mostrar resultado do ls + debug: + var: resultado_ls.stdout_lines + + +- name: Aplicar o stolon + become: yes + become_user: fenix + shell: | + kubectl apply -f /tmp/stack-arr/bazarr/kubernetes-files/files/ + environment: + KUBECONFIG: /home/fenix/.kube/config \ No newline at end of file diff --git a/roles/bazarr/vars/main.yml b/roles/bazarr/vars/main.yml new file mode 100644 index 0000000..c8fe60b --- /dev/null +++ b/roles/bazarr/vars/main.yml @@ -0,0 +1,4 @@ +bw_password: "{{ lookup('env', 'BW_PASSWORD') }}" +VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}" +BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}" +BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}" \ No newline at end of file diff --git a/roles/jellyfin/files/jellyfin-deployment.yaml b/roles/jellyfin/files/jellyfin-deployment.yaml index 4e2facb..8f995f5 100644 --- a/roles/jellyfin/files/jellyfin-deployment.yaml +++ b/roles/jellyfin/files/jellyfin-deployment.yaml @@ -18,6 +18,10 @@ spec: containers: - name: jellyfin image: lscr.io/linuxserver/jellyfin:10.11.2 + resources: + limits: + memory: "9G" # Maximum memory allowed + cpu: "4" # Maximum CPU allowed securityContext: capabilities: add: