add(qbittorrent)

Author: nold

charts/qbittorrent/.helmignore

@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+
+# helm-docs templates
+*.gotmpl
+
+# helm unit tests
+tests/

charts/qbittorrent/Chart.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: v2
+description: QBittorrent
+name: qbittorrent
+version: 1.0.0
+kubeVersion: ">=1.22.0-0"
+sources:
+  - https://github.com/qbittorrent/qBittorrent
+home: https://github.com/lib42/charts
+icon: https://avatars.githubusercontent.com/u/2131270
+maintainers:
+  - name: nold
+    email: nold@gnu.one
+dependencies:
+  - name: common
+    repository: https://bjw-s.github.io/helm-charts
+    version: 1.5.1

charts/qbittorrent/README.md

@@ -0,0 +1,5 @@
+# qBitTorrent
+
+"Minimal Permissions" Helm Chart for qBitTorrent. See `values.yaml` for exampe values.
+
+Based on: [bjw-s common chart](https://github.com/bjw-s/helm-charts/tree/main/charts/library/common)

charts/qbittorrent/templates/common.yaml

@@ -0,0 +1,18 @@
+---
+{{- include "bjw-s.common.loader.init" . }}
+
+{{- define "qbittorrent.hardcodedValues" -}}
+securityContext:
+#  runAsNonRoot: true
+  privileged: false
+  readOnlyRootFilesystem: true
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+    - ALL
+{{- end -}}
+{{- $_ := mergeOverwrite .Values (include "qbittorrent.hardcodedValues" . | fromYaml) -}}
+
+
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

charts/qbittorrent/values.yaml

@@ -0,0 +1,104 @@
+---
+image:
+  repository: ghcr.io/onedr0p/qbittorrent
+  tag: 4.5.2
+
+podSecurityContext:
+  sysctls:
+    - name: net.ipv6.conf.all.disable_ipv6
+      value: "1"
+  # fsGroup: 1000
+  # fsGroupChangePolicy: "OnRootMismatch"
+  # supplementalGroups:
+  #   - 100
+
+ingress:
+  main:
+    enabled: false
+    # annotations:
+    #   nginx.ingress.kubernetes.io/proxy-body-size: 50m
+    # hosts:
+    #   - host: qbittorrent.local
+    #     paths:
+    #       - path: /
+    #         pathType: Prefix
+    # tls:
+    #   - secretName: qbittorrent-tls
+    #     hosts:
+    #        - qbittorrent.local
+
+service:
+  main:
+    enabled: true
+    ports:
+      http:
+        port: 8080
+
+persistence:
+  config:
+    enabled: true
+    mountPath: /config
+    size: 10M
+
+  # # for custom themes:
+  # theme:
+  #   enabled: false
+  #   mountpath: /theme
+  #   type: emptyDir
+
+  # # example used hostpath instead
+  # downloads:
+  #   enabled: false
+  #   type: hostPath
+  #   hostPath: /data/media/torrent
+  #   mountPath: /downloads
+
+
+## Install custom Theme
+# initContainers:
+#   init-config:
+#     image: alpine/git
+#     args: 
+#       - "clone"
+#       - "--depth"
+#       - "1"
+#       - "https://github.com/dracula/qbittorrent.git"
+#       - "/theme"
+#     volumeMounts:
+#     - name: theme
+#       mountPath: /theme
+#     securityContext:
+#       runAsNonRoot: true
+#       privileged: false
+#       readOnlyRootFilesystem: true
+#       allowPrivilegeEscalation: false
+#       capabilities:
+#         drop:
+#         - ALL
+
+## VPN
+addons:
+  vpn:
+    enabled: false
+
+    #env:
+    #  VPN_SERVICE_PROVIDER: mullvad
+    #  VPN_TYPE: openvpn
+
+    #  DNS_KEEP_NAMESERVER: "on"
+    # DOT: "on"
+    # FIREWALL: "on"
+    # FIREWALL_INPUT_PORTS: "8112,8000"
+    # FIREWALL_VPN_INPUT_PORTS: 61086
+
+    securityContext:
+      capabilities:
+        add:
+          - NET_ADMIN
+
+    livenessProbe:
+      httpGet:
+        path: /v1/openvpn/status
+        port: 8000
+      initialDelaySeconds: 30
+      periodSeconds: 30