set up mealie

AGENTS.md

@@ -9,3 +9,6 @@ The mac-worker is running inside orbstack linux VM if that matters.
 I have a DNS rewrite pointing *.internal to 10.0.1.250 which is traefik-internal.
 
 /dogstore/ is a NFS path that's available to all nodes
+
+
+secrets are managed by sops

charts/headlamp/templates/headlamp.yaml

@@ -43,7 +43,7 @@ spec:
           args:
             - -in-cluster
             - -plugins-dir=/headlamp/plugins
-            - -insecure-no-authentication
+            - -enable-helm
           ports:
             - containerPort: 4466
 ---

charts/mealie/templates/mealie-ingressroute.yaml

@@ -0,0 +1,32 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: mealie
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - web
+  routes:
+    - match: Host(`mealie.{{ .Values.internalDomain }}`)
+      kind: Rule
+      services:
+        - name: mealie
+          port: 9000
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: mealie-tls
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`mealie.{{ .Values.internalDomain }}`)
+      kind: Rule
+      services:
+        - name: mealie
+          port: 9000
+  tls: {}

charts/mealie/templates/mealie.yaml

@@ -1,16 +1,3 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: mealie-data
-  labels:
-    app: mealie
-spec:
-  accessModes: [ReadWriteOnce]
-  storageClassName: {{ .Values.storageClass }}
-  resources:
-    requests:
-      storage: {{ .Values.storageSize }}
----
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -29,6 +16,8 @@ spec:
       labels:
         app: mealie
     spec:
+      nodeSelector:
+        homelab/node-role: worker
       containers:
         - name: mealie
           image: {{ .Values.image }}
@@ -66,8 +55,9 @@ spec:
               mountPath: /app/data
       volumes:
         - name: data
-          persistentVolumeClaim:
-            claimName: mealie-data
+          hostPath:
+            path: /dogstore/service-data/mealie
+            type: DirectoryOrCreate
 ---
 apiVersion: v1
 kind: Service

charts/mealie/values.yaml

@@ -1,14 +1,13 @@
 domain: ratboo.me
+internalDomain: dog
 certResolver: myresolver
 tz: America/Los_Angeles
 puid: "1000"
 pgid: "1000"
 
-image: ghcr.io/mealie-recipes/mealie:v3.14.0
+image: ghcr.io/mealie-recipes/mealie:v3.16.0
 
 secretName: mealie-secrets
-storageClass: longhorn
-storageSize: 5Gi
 
 resources:
   limits:

charts/paperless/values.yaml

@@ -11,7 +11,7 @@ storageClass: longhorn
 
 webserver:
   image: ghcr.io/paperless-ngx/paperless-ngx:latest
-  csrfTrustedOrigins: "https://paperless.ratboo.me"
+  csrfTrustedOrigins: "https://paperless.ratboo.me,http://paperless.dog,https://paperless.dog"
 
 redis:
   image: docker.io/library/redis:7