---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: immich
  namespace: flux-system
spec:
  chart:
    spec:
      chart: immich
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        name: immich
        namespace: flux-system
      version: 0.10.3
  interval: 1m0s
  targetNamespace: immich
  values:
    controllers:
      main:
        strategy: Recreate
        pod:
          securityContext:
            seccompProfile:
              type: RuntimeDefault
        containers:
          main:
            image:
              tag: v2.5.6
            resources:
              requests:
                cpu: 100m
                memory: 512Mi
              limits:
                memory: 2Gi
            env:
              DB_HOSTNAME: immich-db
              DB_USERNAME:
                valueFrom:
                  secretKeyRef:
                    name: immich-credentials
                    key: DB_USERNAME
              DB_PASSWORD:
                valueFrom:
                  secretKeyRef:
                    name: immich-credentials
                    key: DB_PASSWORD
              DB_DATABASE_NAME:
                valueFrom:
                  secretKeyRef:
                    name: immich-credentials
                    key: DB_DATABASE_NAME
              DB_STORAGE_TYPE: HDD
    immich:
      persistence:
        library:
          existingClaim: immich-library
    server:
      enabled: true
      ingress:
        main:
          enabled: true
          annotations:
            cert-manager.io/cluster-issuer: letsencrypt
          hosts:
            - host: ${IMMICH_HOST}
              paths:
                - path: /
                  pathType: Prefix
          tls:
            - hosts:
                - ${IMMICH_HOST}
              secretName: immich-tls
    machine-learning:
      enabled: true
      controllers:
        main:
          strategy: Recreate
          pod:
            securityContext:
              seccompProfile:
                type: RuntimeDefault
          containers:
            main:
              resources:
                requests:
                  cpu: 50m
                  memory: 512Mi
                limits:
                  memory: 2Gi
      persistence:
        cache:
          enabled: true
          storageClass: nfs-synology-ssd
          accessMode: ReadWriteOnce
          size: 10Gi
          type: persistentVolumeClaim
    valkey:
      enabled: true
      controllers:
        main:
          strategy: Recreate
          pod:
            securityContext:
              seccompProfile:
                type: RuntimeDefault
          containers:
            main:
              resources:
                requests:
                  cpu: 25m
                  memory: 64Mi
                limits:
                  memory: 256Mi
      persistence:
        data:
          enabled: true
          size: 1Gi
          type: persistentVolumeClaim
          accessMode: ReadWriteOnce
          storageClass: nfs-synology-ssd