ingress:
  enabled: true
  className: traefik
  annotations:
    traefik.ingress.kubernetes.io/router.middlewares: security-headers@file
  hosts:
    - host: player.pvr.spamasaurus.com
      paths:
        - path: /
          pathType: ImplementationSpecific

securityContext:
  capabilities:
    add:
      - "SYS_ADMIN"
    drop:
      - "ALL"
  privileged: true

volumes:
  - name: flexvolsmb-jellyfin-movies
    persistentVolumeClaim:
      claimName: flexvolsmb-jellyfin-movies
  - name: flexvolsmb-jellyfin-series
    persistentVolumeClaim:
      claimName: flexvolsmb-jellyfin-series
  - name: igpu
    hostPath:
      path: /dev/dri

volumeMounts:
  - name: flexvolsmb-jellyfin-movies
    mountPath: "/movies"
  - name: flexvolsmb-jellyfin-series
    mountPath: "/series"
  - name: igpu
    mountPath: /dev/dri

# jellyfin: {}

persistence:
  config:
    enabled: true
    size: 5Gi
  media:
    enabled: false