Reconfigure flexvolsmb pv/pvc's;Jellyfin++;Jellyseerr++;Plex--

services/PVR/Jellyfin/manifests/persistentvolume-flexvolsmb-jellyfin-movies.yaml

@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-jellyfin-movies
+  namespace: jellyfin
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-jellyfin-movies
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: flexvolsmb-credentials
+    options:
+      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
+      server: 192.168.154.195
+      share: /Public/Video's/Films

services/PVR/Jellyfin/manifests/persistentvolume-flexvolsmb-jellyfin-series.yaml

@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-jellyfin-series
+  namespace: jellyfin
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-jellyfin-series
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: flexvolsmb-credentials
+    options:
+      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
+      server: 192.168.154.195
+      share: /Public/Video's/Series

services/PVR/Jellyfin/manifests/persistentvolumeclaim-flexvolsmb-jellyfin-movies.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-jellyfin-movies
+  namespace: jellyfin
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-jellyfin-movies
+  resources:
+    requests:
+      storage: 1Gi

services/PVR/Jellyfin/manifests/persistentvolumeclaim-flexvolsmb-jellyfin-series.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-jellyfin-series
+  namespace: jellyfin
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-jellyfin-series
+  resources:
+    requests:
+      storage: 1Gi

services/PVR/Jellyfin/manifests/pvc-jellyfin.yaml

@@ -1,66 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-jellyfin-movies
-  namespace: jellyfin
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-movies
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
-      server: 192.168.154.195
-      share: /Public/Video's/Films
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-jellyfin-movies
-  namespace: jellyfin
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-movies
-  resources:
-    requests:
-      storage: 1Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-jellyfin-series
-  namespace: jellyfin
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-series
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
-      server: 192.168.154.195
-      share: /Public/Video's/Series
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-jellyfin-series
-  namespace: jellyfin
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-series
-  resources:
-    requests:
-      storage: 1Gi
- 

services/PVR/Jellyfin/values.yaml

@@ -1,6 +1,8 @@
 ingress:
   enabled: true
   className: traefik
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: security-headers@file
   hosts:
     - host: player.pvr.spamasaurus.com
       paths:
@@ -41,4 +43,4 @@ persistence:
     enabled: true
     size: 5Gi
   media:
-    enabled: false
+    enabled: false

services/PVR/Plex/chart-values.yml

@@ -1,34 +0,0 @@
-image:
-  pullPolicy: Always
-
-ingress:
-  enabled: true
-  ingressClassName: traefik
-
-  url: media.pvr.spamasaurus.com
-
-pms:
-  configStorage: 20Gi
-
-  resources:
-    limits:
-      gpu.intel.com/i915: "1"
-    requests:
-      gpu.intel.com/i915: "1"
-
-extraVolumeMounts:
-  - name: flexvolsmb-pvr-movies
-    mountPath: /movies
-  - name: flexvolsmb-pvr-series
-    mountPath: /series
-
-extraVolumes:
-  - name: flexvolsmb-pvr-movies
-    persistentVolumeClaim:
-      claimName: flexvolsmb-pvr-movies
-  - name: flexvolsmb-pvr-series
-    persistentVolumeClaim:
-      claimName: flexvolsmb-pvr-series
-
-# extraEnv:
-#   PLEX_CLAIM: "claim-EzKU3rNVbWtc3qY_y7wq"

services/PVR/Prowlarr/persistentvolume-flexvolsmb-prowlarr-config.yaml

@@ -15,5 +15,5 @@ spec:
       name: flexvolsmb-credentials
     options:
       opts: file_mode=0777,dir_mode=0777,uid=1000,gid=1000,iocharset=utf8,nobrl
-      server: 192.168.154.225
+      server: 192.168.154.195
       share: /K3s.Volumes/prowlarr/config

services/PVR/Radarr/persistentvolume-flexvolsmb-radarr-config.yaml

@@ -15,5 +15,5 @@ spec:
       name: flexvolsmb-credentials
     options:
       opts: file_mode=0777,dir_mode=0777,iocharset=utf8
-      server: 192.168.154.225
+      server: 192.168.154.195
       share: /K3s.Volumes/radarr/config

services/PVR/SABnzbd/persistentvolume-flexvolsmb-sabnzbd-config.yaml

@@ -15,5 +15,5 @@ spec:
       name: flexvolsmb-credentials
     options:
       opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8
-      server: 192.168.154.225
+      server: 192.168.154.195
       share: /K3s.Volumes/sabnzbd/config

services/PVR/Sonarr/persistentvolume-flexvolsmb-sonarr-config.yaml

@@ -15,5 +15,5 @@ spec:
       name: flexvolsmb-credentials
     options:
       opts: file_mode=0777,dir_mode=0777,uid=1000,gid=1000,iocharset=utf8,nobrl
-      server: 192.168.154.225
+      server: 192.168.154.195
       share: /K3s.Volumes/sonarr/config

services/PVR/persistentVolumeClaim-PVR.yml

@@ -1,65 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-pvr-movies
-  namespace: pvr
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-pvr-movies
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
-      server: 192.168.154.225
-      share: /Public/Video's/Films
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-pvr-movies
-  namespace: pvr
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-pvr-movies
-  resources:
-    requests:
-      storage: 1Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-pvr-series
-  namespace: pvr
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-pvr-series
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
-      server: 192.168.154.225
-      share: /Public/Video's/Series
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-pvr-series
-  namespace: pvr
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-pvr-series
-  resources:
-    requests:
-      storage: 1Gi

services/PVR/persistentvolume-flexvolsmb-pvr-movies.yaml

@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-pvr-movies
+  namespace: pvr
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-pvr-movies
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: flexvolsmb-credentials
+    options:
+      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
+      server: 192.168.154.195
+      share: /Public/Video's/Films

services/PVR/persistentvolume-flexvolsmb-pvr-series.yaml

@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-pvr-series
+  namespace: pvr
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-pvr-series
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: flexvolsmb-credentials
+    options:
+      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
+      server: 192.168.154.195
+      share: /Public/Video's/Series

services/PVR/persistentvolumeclaim-flexvolsmb-pvr-movies.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-pvr-movies
+  namespace: pvr
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-pvr-movies
+  resources:
+    requests:
+      storage: 1Gi

services/PVR/persistentvolumeclaim-flexvolsmb-pvr-series.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-pvr-series
+  namespace: pvr
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-pvr-series
+  resources:
+    requests:
+      storage: 1Gi

services/PVR/persistentvolumeclaim-smb-pvr-volatile.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: smb-pvr-volatile
+  namespace: pvr
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: pvr
+  resources:
+    requests:
+      storage: 100Gi

services/PVR/storageclass-pvr.yaml

@@ -4,7 +4,7 @@ metadata:
   name: pvr
 provisioner: smb.csi.k8s.io
 parameters:
-  source: "//192.168.154.225/K3s.StorageClass/pvr"
+  source: "//192.168.154.195/K3s.StorageClass/pvr"
   csi.storage.k8s.io/node-stage-secret-name: "smb-credentials"
   csi.storage.k8s.io/node-stage-secret-namespace: "pvr"
 #  createSubDir: "true"  # optional: create a sub dir for new volume
@@ -17,16 +17,3 @@ mountOptions:
   - cache=none
   - uid=911
   - gid=911
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: smb-pvr-volatile
-  namespace: pvr
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: pvr
-  resources:
-    requests:
-      storage: 100Gi

storage/csi-driver-smb/sealedSecret-CSIdriverSMB.yml

@@ -1,25 +0,0 @@
-{
-  "kind": "SealedSecret",
-  "apiVersion": "bitnami.com/v1alpha1",
-  "metadata": {
-    "name": "smb-credentials",
-    "namespace": "default",
-    "creationTimestamp": null
-  },
-  "spec": {
-    "template": {
-      "metadata": {
-        "name": "smb-credentials",
-        "namespace": "default",
-        "creationTimestamp": null
-      },
-      "type": "Opaque",
-      "data": null
-    },
-    "encryptedData": {
-      "domain": "AgCFtOnYpGlu49+rxtdMcweWKvIOo+cRq2wbI+SkQft1cARN5msXCyepELkF79onzT6UtQg3ASNvzR81TZRPqLKibq/qeV3+TyeuTYQOsj8xahe0+pJmg3NZGa4CBhYSj5Es6UFBZ6m8EcOR08HTG3zkXRao5tdfUoKWzB5Ie9savYYUrCHBVCWW29oBoKMKujPxId51qB1yP1Rwa5rZE2+9mfscs+cp5WAyLFd5UjVIjSP13///U/VzFAYcMW/Sm+xmenxnYuzKD2xmAF7YLIsQaaKHv2gNcJuHluSna3YZrSebZoomXdpjWhB78a1pZvQSJkTrDX++E71Urqf9fsKUu6ekV/rfffRyzUFdnxwlJVB94c9ZRml82fJRdFtIYwvkSI/EFU18CjjJKfpuwG5HmL/1AKVSl5/NdaB+xGSlhi6QblIl/p97RZa3wt9l9LzhlCqT9EoDCNB45fOBSX5lpLPBDxOvlWrW4m3sKvwIdno8bKMPhO/m9yCooZZ8QX1zfakgfkCThsOQ1UCFWBiNqzFnTqPhz3Mg8GLTD4jREi10KONTGl+aFFSJ8Y51Ufen8YLA9DcgLypdn4UBelwBsu6qmg/CZbxb5QIPjE2NN5Ioz3R4Nyl2pX9EbyQGfw8umBn57sdFzbl58tbhp4YQn4vl0cFCwYxkJMqx4bd5Rz9Jvf1dCgKU5AXg60+LhZJMU8TLzAN6Qa5L",
-      "password": "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",
-      "username": "AgCr48TUqDuqHyKLzZTrKqUawED+Ltb/NuA6nOSjb08TuVR7tOPzgga3IH+Y6fN16lzobcmylwh70kosXs0KKWFmpG7TsoNzWtB5hq1KJsvJNWAJNs6mO1n+40wyLE0aS/bo4dDFpFtUVe/n8DdDyH42FwsnnfNJbtEqzItOXaVO/TiDjFDy09SPblVSgFaK+i0A+jdIbqdBQH2bkPDM3WTn0iBLdXpaxAHqWyLDnLmg8dyU8kJfjUS17OylJZP2bm375exikKw+69h7hLbcuKhsFQnmY2Vffe+0D+ozpCO/8PBqv1dkA0FG8EuhqGCbX6dUxbOdhVzkHyK0a+N8bX45ORSlc+V49bzU7BrvzkmPz3j4Yg11ZZP9vXnRrUJgzD8Jp274dArb+3EF+JH5lNBl1RFbB6s0vrbHXOI5oNXxl+dv9ri+2JKE95DXbsN9uXeLnCh+UqBCmSWW4MfO8rHgM/HQL8k8IHwEBphsDjwthWzQz34b4yUSzh5hEJMMa74S2VFTJeITY8DsvNo+rvOjSxyc3XxkLNH6FmFmGgAfVcWHelm4JCY47Ua1IgztsQbeqXRQQVmxC/A9iqYamZuvkZBSYdN6EcRbFf/FXlmqWw4BQV1d4xHgakoY3O/zWAg/39nNH2bIm190EsLap4qAEShFGf5kvXqymXXpqWPIjIDTy11eGlF9N9OhuYbsP+U6XPwemhg="
-    }
-  }
-}

storage/csi-driver-smb/sealedsecret-smb-credentials.yaml

@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: smb-credentials
+  namespace: default
+spec:
+  encryptedData:
+    password: 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
+    username: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: smb-credentials
+      namespace: default
+    type: Opaque

storage/csi-driver-smb/storageClass-SMB.yml.example

@@ -1,17 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: <name>
-provisioner: smb.csi.k8s.io
-parameters:
-  source: "//192.168.11.225/K3s.StorageClass/<name>"
-  csi.storage.k8s.io/node-stage-secret-name: "smb-credentials"
-  csi.storage.k8s.io/node-stage-secret-namespace: "default"
-  createSubDir: "true"  # optional: create a sub dir for new volume
-reclaimPolicy: Retain  # only retain is supported
-volumeBindingMode: Immediate
-mountOptions:
-  - dir_mode=0700
-  - file_mode=0700
-  - uid=1001
-  - gid=1001

storage/csi-driver-smb/storageclass-smb-csi.yaml

@@ -0,0 +1,23 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: smb-csi
+mountOptions:
+- dir_mode=0777
+- file_mode=0777
+- uid=1001
+- gid=1001
+- nobrl
+- noperm
+- mfsymlinks
+- cache=strict
+- noserverino
+parameters:
+  csi.storage.k8s.io/node-stage-secret-name: smb-credentials
+  csi.storage.k8s.io/node-stage-secret-namespace: default
+  csi.storage.k8s.io/provisioner-secret-name: smb-credentials
+  csi.storage.k8s.io/provisioner-secret-namespace: default
+  source: //192.168.154.195/K3s.StorageClass/smb-csi
+provisioner: smb.csi.k8s.io
+reclaimPolicy: Retain
+volumeBindingMode: Immediate