bittorrent

roles/stack-arr/qbittorrent/files/docker-secrets.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: regcred
+  namespace: stack-arr
+data:
+  .dockerconfigjson: >-
+    eyJhdXRocyI6eyJodHRwczovL2luZGV4LmRvY2tlci5pby92MS8iOnsidXNlcm5hbWUiOiJ1c2VyIiwicGFzc3dvcmQiOiJwYXNzIiwiYXV0aCI6ImRmamlla2ZlcldFS1dFa29mY2RrbzM0MzUzZmQ9In19fQ==
+type: kubernetes.io/dockerconfigjson

roles/stack-arr/qbittorrent/files/qbittorrent-deployment.yaml

@@ -0,0 +1,86 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: qbittorrentvpn
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: qbittorrentvpn
+  template:
+    metadata:
+      labels:
+        app: qbittorrentvpn
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: qbittorrentvpn
+        image: binhex/arch-qbittorrentvpn:5
+        securityContext:
+          privileged: true   # necessário para manipular tun devices
+        ports:
+        - containerPort: 8080   # WebUI do qBittorrent
+        - containerPort: 8118  
+        - containerPort: 9118  
+        - containerPort: 58946  
+        env:
+        - name: VPN_ENABLED
+          value: "yes"
+        - name: VPN_PROV
+          valueFrom:
+            secretKeyRef:
+              name: vpn-secrets
+              key: vpnprov
+        - name: VPN_USER
+          valueFrom:
+            secretKeyRef:
+              name: vpn-secrets
+              key: username
+        - name: VPN_PASS
+          valueFrom:
+            secretKeyRef:
+              name: vpn-secrets
+              key: password
+        - name: VPN_CLIENT
+          value: "openvpn"
+        - name: ENABLE_STARTUP_SCRIPTS
+          value: "no"
+        - name: ENABLE_PRIVOXY
+          value: "yes"
+        - name: STRICT_PORT_FORWARD
+          value: "yes"
+        - name: USERSPACE_WIREGUARD
+          value: "no"
+        - name: ENABLE_SOCKS
+          value: "no"
+        - name: DEBUG
+          value: "false"
+        - name: WEBUI_PORT
+          value: "8080"
+        - name: UMASK
+          value: "000"
+        - name: PUID
+          value: "1013"
+        - name: PGID
+          value: "1013"
+        - name: LAN_NETWORK
+          valueFrom:
+            secretKeyRef:
+              name: vpn-secrets
+              key: lannetwork
+        - name: NAME_SERVERS
+          value: "1.1.1.1,8.8.8.8"
+        volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: downloads
+          mountPath: /data
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: qbittorrent-config-pvc
+      - name: downloads
+        persistentVolumeClaim:
+          claimName: qbittorrent-downloads-pvc

roles/stack-arr/qbittorrent/files/qbittorrent-namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: stack-arr

roles/stack-arr/qbittorrent/files/qbittorrent-pvcs.yaml

@@ -0,0 +1,60 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: qbittorrent-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 2Gi
+  storageClassName: qbittorrent-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bittorrent/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: qbittorrent-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: qbittorrent-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: qbittorrent-config-pv
+  resources:
+    requests:
+      storage: 2Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: qbittorrent-downloads-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 10Gi
+  storageClassName: qbittorrent-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bittorrent/downloads
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: qbittorrent-downloads-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: qbittorrent-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: qbittorrent-downloads-pv
+  resources:
+    requests:
+      storage: 10Gi
+---

roles/stack-arr/qbittorrent/files/stolon-nfs-csi.yaml

@@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: qbittorrent-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bittorrent
+allowVolumeExpansion: true
+reclaimPolicy: Retain

roles/stack-arr/qbittorrent/files/vpn-secret.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name:  vpn-secret
+    namespace: stack-arr
+type: Opaque
+data:
+    lannetwork: MTkyLjE2OC4xLjAvMjQ=
+    vpnprov: cGlh
+    username: dXNlcm5hbWU=
+    password: cGFzc3dvcmQ=