247 lines
6.2 KiB
Nix
247 lines
6.2 KiB
Nix
|
{
|
||
|
kubernetes.resources = {
|
||
|
deployments = {
|
||
|
immich-server = {
|
||
|
metadata.labels = {
|
||
|
app = "immich";
|
||
|
component = "server";
|
||
|
};
|
||
|
|
||
|
spec = {
|
||
|
selector.matchLabels = {
|
||
|
app = "immich";
|
||
|
component = "server";
|
||
|
};
|
||
|
|
||
|
strategy = {
|
||
|
type = "RollingUpdate";
|
||
|
|
||
|
rollingUpdate = {
|
||
|
maxSurge = 0;
|
||
|
maxUnavailable = 1;
|
||
|
};
|
||
|
};
|
||
|
|
||
|
template = {
|
||
|
metadata.labels = {
|
||
|
app = "immich";
|
||
|
component = "server";
|
||
|
};
|
||
|
|
||
|
spec = {
|
||
|
volumes.data.persistentVolumeClaim.claimName = "immich";
|
||
|
|
||
|
containers.immich = {
|
||
|
image = "ghcr.io/immich-app/immich-server:v1.106.4";
|
||
|
imagePullPolicy = "Always";
|
||
|
ports.web.containerPort = 3001;
|
||
|
|
||
|
env = {
|
||
|
TZ.value = "Europe/Amsterdam";
|
||
|
UPLOAD_LOCATION.value = "/library";
|
||
|
# IMMICH_CONFIG_FILE.value = "?";
|
||
|
REDIS_HOSTNAME.value = "immich-redis.default.svc.cluster.local";
|
||
|
DB_HOSTNAME.value = "immich-postgres.default.svc.cluster.local";
|
||
|
DB_USERNAME.value = "postgres";
|
||
|
DB_PASSWORD.value = "ref+sops://secrets/kubernetes.yaml#/immich/databasePassword";
|
||
|
DB_DATABASE_NAME.value = "immich";
|
||
|
IMMICH_MACHINE_LEARNING_URL.value = "http://immich-ml.default.svc.cluster.local";
|
||
|
};
|
||
|
|
||
|
volumeMounts = [{
|
||
|
name = "data";
|
||
|
mountPath = "/library";
|
||
|
}];
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
|
||
|
immich-ml = {
|
||
|
metadata.labels = {
|
||
|
app = "immich";
|
||
|
component = "machine-learning";
|
||
|
};
|
||
|
|
||
|
spec = {
|
||
|
selector.matchLabels = {
|
||
|
app = "immich";
|
||
|
component = "machine-learning";
|
||
|
};
|
||
|
|
||
|
template = {
|
||
|
metadata.labels = {
|
||
|
app = "immich";
|
||
|
component = "machine-learning";
|
||
|
};
|
||
|
|
||
|
spec = {
|
||
|
containers.machine-learning = {
|
||
|
image = "ghcr.io/immich-app/immich-machine-learning:v1.106.4";
|
||
|
imagePullPolicy = "Always";
|
||
|
ports.ml.containerPort = 3003;
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
|
||
|
immich-redis = {
|
||
|
metadata.labels = {
|
||
|
app = "immich";
|
||
|
component = "redis";
|
||
|
};
|
||
|
|
||
|
spec = {
|
||
|
selector.matchLabels = {
|
||
|
app = "immich";
|
||
|
component = "redis";
|
||
|
};
|
||
|
|
||
|
strategy = {
|
||
|
type = "RollingUpdate";
|
||
|
|
||
|
rollingUpdate = {
|
||
|
maxSurge = 0;
|
||
|
maxUnavailable = 1;
|
||
|
};
|
||
|
};
|
||
|
|
||
|
template = {
|
||
|
metadata.labels = {
|
||
|
app = "immich";
|
||
|
component = "redis";
|
||
|
};
|
||
|
|
||
|
spec = {
|
||
|
containers.redis = {
|
||
|
image = "docker.io/redis:6.2-alpine@sha256:d6c2911ac51b289db208767581a5d154544f2b2fe4914ea5056443f62dc6e900";
|
||
|
ports.redis.containerPort = 6379;
|
||
|
imagePullPolicy = "Always";
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
|
||
|
immich-database = {
|
||
|
metadata.labels = {
|
||
|
app = "immich";
|
||
|
component = "database";
|
||
|
};
|
||
|
|
||
|
spec = {
|
||
|
selector.matchLabels = {
|
||
|
app = "immich";
|
||
|
component = "database";
|
||
|
};
|
||
|
|
||
|
strategy = {
|
||
|
type = "RollingUpdate";
|
||
|
|
||
|
rollingUpdate = {
|
||
|
maxSurge = 0;
|
||
|
maxUnavailable = 1;
|
||
|
};
|
||
|
};
|
||
|
|
||
|
template = {
|
||
|
metadata.labels = {
|
||
|
app = "immich";
|
||
|
component = "database";
|
||
|
};
|
||
|
|
||
|
spec = {
|
||
|
volumes.data.persistentVolumeClaim.claimName = "immich-db";
|
||
|
# securityContext.fsGroup = 0700;
|
||
|
|
||
|
containers.postgres = {
|
||
|
image = "docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0";
|
||
|
imagePullPolicy = "Always";
|
||
|
command = [ "postgres" ];
|
||
|
args = [ "-c" "shared_preload_libraries=vectors.so" "-c" "search_path=\"$$user\", public, vectors" "-c" "logging_collector=on" "-c" "max_wal_size=2GB" "-c" "shared_buffers=512MB" "-c" "wal_compression=on" ];
|
||
|
ports.postgres.containerPort = 5432;
|
||
|
securityContext.runAsUser = 999;
|
||
|
securityContext.runAsGroup = 999;
|
||
|
|
||
|
env = {
|
||
|
POSTGRES_PASSWORD.value = "ref+sops://secrets/kubernetes.yaml#/immich/databasePassword";
|
||
|
POSTGRES_USER.value = "postgres";
|
||
|
POSTGRES_DB.value = "immich";
|
||
|
POSTGRES_INITDB_ARGS.value = "--data-checksums";
|
||
|
PGDATA.value = "/pgdata/data";
|
||
|
};
|
||
|
|
||
|
volumeMounts = [{
|
||
|
name = "data";
|
||
|
mountPath = "/pgdata";
|
||
|
}];
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
|
||
|
services = {
|
||
|
immich-server.spec = {
|
||
|
selector = {
|
||
|
app = "immich";
|
||
|
component = "server";
|
||
|
};
|
||
|
|
||
|
ports.web = {
|
||
|
port = 80;
|
||
|
targetPort = "web";
|
||
|
};
|
||
|
};
|
||
|
|
||
|
immich-redis.spec = {
|
||
|
selector = {
|
||
|
app = "immich";
|
||
|
component = "redis";
|
||
|
};
|
||
|
|
||
|
ports.redis = {
|
||
|
port = 6379;
|
||
|
targetPort = "redis";
|
||
|
};
|
||
|
};
|
||
|
|
||
|
immich-ml.spec = {
|
||
|
selector = {
|
||
|
app = "immich";
|
||
|
component = "machine-learning";
|
||
|
};
|
||
|
|
||
|
ports.machine-learning = {
|
||
|
port = 80;
|
||
|
targetPort = "ml";
|
||
|
};
|
||
|
};
|
||
|
|
||
|
immich-postgres.spec = {
|
||
|
selector = {
|
||
|
app = "immich";
|
||
|
component = "database";
|
||
|
};
|
||
|
|
||
|
ports.postgres = {
|
||
|
port = 5432;
|
||
|
targetPort = "postgres";
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
};
|
||
|
|
||
|
lab.ingresses.immich-test = {
|
||
|
host = "immich.kun.is";
|
||
|
|
||
|
service = {
|
||
|
name = "immich-server";
|
||
|
portName = "web";
|
||
|
};
|
||
|
};
|
||
|
}
|