invidious.yaml

---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/common-3.0.1/charts/library/common/values.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: invidious-server
  namespace: default
spec:
  interval: 15m
  chart:
    spec:
      chart: app-template
      version: 3.6.0
      sourceRef:
        kind: HelmRepository
        name: bjw-s-helm-charts
        namespace: flux-system
      interval: 15m
  maxHistory: 3
  install:
    createNamespace: true
    remediation:
      retries: 3
  upgrade:
    cleanupOnFail: true
    remediation:
      retries: 3
  uninstall:
    keepHistory: false
  values:
    controllers:
      main:
        strategy: RollingUpdate
        annotations:
          reloader.stakater.com/auto: "true"
        # initContainers:
        #   init-db:
        #     image:
        #       repository: ghcr.io/auricom/postgres-init
        #       tag: 15.5@sha256:9b1b80d8101d3f1c73ef13b90dff2ab3bc855bd79ebcd334cba57db391ce6db0
        #       pullPolicy: IfNotPresent
        #     env:
        #       INIT_POSTGRES_HOST: shared-psql-v16-rw.default.svc.cluster.local
        #       INIT_POSTGRES_SUPER_PASS: ${SECRET_CNPG_SUPER_PASS}
        #       INIT_POSTGRES_DBNAME: invidious
        #       INIT_POSTGRES_USER: invidious
        #       INIT_POSTGRES_PASS: ${SECRET_INVIDIOUS_DB_PASSWORD}
        containers:
          main:
            image:
              repository: quay.io/invidious/invidious
              tag: latest@sha256:6ff95432b1e3b0f21592d581dbe1589c8d8ad2a6dc2792e17cdb102308e438e6
            env:
              INVIDIOUS_CONFIG: |
                database_url: postgres://invidious:${SECRET_INVIDIOUS_DB_PASSWORD}@shared-psql-v16-rw.default.svc.cluster.local.:5432/invidious
                check_tables: true
                domain: invidious.${SECRET_DOMAIN}
                external_port: 443
                https_only: true
                hmac_key: ${SECRET_INVIDIOUS_HMAC_KEY}
                admins: ["billimek"]
                channel_threads: 2
                full_refresh: false
            resources:
              requests:
                cpu: 50m
                memory: 256Mi
    service:
      main:
        controller: main
        ports:
          http:
            port: 3000
    ingress:
      main:
        enabled: true
        className: "nginx-internal"
        annotations:
          nginx.ingress.kubernetes.io/whitelist-source-range: "10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 100.90.0.0/10"
        hosts:
          - host: &host "invidious.${SECRET_DOMAIN}"
            paths:
              - path: /
                service:
                  identifier: main
                  port: http