From 5629801afe1532fc2bb2f75f7a0bccf848cf9980 Mon Sep 17 00:00:00 2001
From: Pim Kunis <pim@kunis.nl>
Date: Thu, 23 May 2024 21:47:47 +0200
Subject: [PATCH] Migrate paperless data to longhorn

---
 kubenix-modules/paperless-ngx.nix | 14 ++++++++++++--
 kubenix-modules/volumes.nix       | 15 ++++++++++-----
 nixos-modules/data-sharing.nix    |  2 --
 3 files changed, 22 insertions(+), 9 deletions(-)

diff --git a/kubenix-modules/paperless-ngx.nix b/kubenix-modules/paperless-ngx.nix
index 7f13fd0..01b1d3a 100644
--- a/kubenix-modules/paperless-ngx.nix
+++ b/kubenix-modules/paperless-ngx.nix
@@ -41,7 +41,7 @@
             };
 
             spec = {
-              volumes.data.persistentVolumeClaim.claimName = "paperless-ngx-data";
+              volumes.data.persistentVolumeClaim.claimName = "paperless-data";
 
               containers.paperless-ngx = {
                 image = "ghcr.io/paperless-ngx/paperless-ngx:2.3";
@@ -64,6 +64,11 @@
                   mountPath = "/data";
                 }];
               };
+
+              securityContext = {
+                fsGroup = 33;
+                fsGroupChangePolicy = "OnRootMismatch";
+              };
             };
           };
         };
@@ -88,7 +93,7 @@
             };
 
             spec = {
-              volumes.data.persistentVolumeClaim.claimName = "paperless-ngx-redisdata";
+              volumes.data.persistentVolumeClaim.claimName = "paperless-redisdata";
 
               containers.redis = {
                 image = "docker.io/library/redis:7";
@@ -99,6 +104,11 @@
                   mountPath = "/data";
                 }];
               };
+
+              securityContext = {
+                fsGroup = 999;
+                fsGroupChangePolicy = "OnRootMismatch";
+              };
             };
           };
         };
diff --git a/kubenix-modules/volumes.nix b/kubenix-modules/volumes.nix
index ffc4ca1..9dd57f3 100644
--- a/kubenix-modules/volumes.nix
+++ b/kubenix-modules/volumes.nix
@@ -5,14 +5,19 @@
 
   #     volumeMounts = [
   #       {
-  #         name = "syncthing";
-  #         mountPath = "/syncthing";
+  #         name = "paperless-data";
+  #         mountPath = "/paperless-data";
+  #       }
+  #       {
+  #         name = "paperless-redisdata";
+  #         mountPath = "/paperless-redisdata";
   #       }
   #     ];
   #   };
 
   #   volumes = {
-  #     syncthing.persistentVolumeClaim.claimName = "syncthing";
+  #     paperless-data.persistentVolumeClaim.claimName = "paperless-data";
+  #     paperless-redisdata.persistentVolumeClaim.claimName = "paperless-redisdata";
   #   };
   # };
 
@@ -28,6 +33,8 @@
       forgejo.storage = "20Gi";
       kitchenowl.storage = "100Mi";
       syncthing.storage = "400Mi";
+      paperless-data.storage = "10Gi";
+      paperless-redisdata.storage = "20Mi";
     };
 
     nfsVolumes = {
@@ -41,8 +48,6 @@
       sonarr-config.path = "sonarr/config";
       bazarr-config.path = "bazarr/config";
       atticd.path = "atticd";
-      paperless-ngx-redisdata.path = "paperless-ngx/redisdata";
-      paperless-ngx-data.path = "paperless-ngx/data";
     };
   };
 }
diff --git a/nixos-modules/data-sharing.nix b/nixos-modules/data-sharing.nix
index 2e02d32..695d7a5 100644
--- a/nixos-modules/data-sharing.nix
+++ b/nixos-modules/data-sharing.nix
@@ -3,8 +3,6 @@ let
   cfg = config.lab.data-sharing;
 
   nfsShares = [
-    "/paperless-ngx/data"
-    "/paperless-ngx/redisdata"
     "/media"
     "/media/books"
     "/media/movies"