helm-release.yaml

---
apiVersion: helm.toolkit.fluxcd.io/v2beta2
kind: HelmRelease
metadata:
  name: calibre-web
  namespace: media
spec:
  interval: 5m
  chart:
    spec:
      chart: app-template
      version: 1.5.1
      sourceRef:
        kind: HelmRepository
        name: bjw-s-charts
        namespace: flux-system
      interval: 5m

  install:
    remediation:
      retries: 4
  upgrade:
    remediation:
      remediateLastFailure: true

  dependsOn:
    - name: calibre
      namespace: media

  values:
    image:
      repository: ghcr.io/bjw-s/calibre-web
      tag: 0.6.21@sha256:c9db35c46d93760e2779eb146cf83964c3f178f86db6e83f0b4c8317fc6c1c1b

    env:
      TZ: "${TZ}"
      PGID: "${MEDIA_GID}"
      PUID: "${CALIBRE_WEB_PID}"

    securityContext:
      runAsUser: 0
      runAsGroup: 0

    podSecurityContext:
      fsGroup: "${MEDIA_GID}"
      fsGroupChangePolicy: "OnRootMismatch"
      supplementalGroups:
        - 100
        - 568
        # Custom Camelus Group(s)
        - 65541
        - 65536
        - 65537

    enableServiceLinks: false

    service:
      main:
        ports:
          http:
            port: 8083

    persistence:
      config:
        enabled: true
        existingClaim: calibre-web-config
      media:
        enabled: true
        type: custom
        volumeSpec:
          nfs:
            server: "${NAS_ADDRESS}"
            path: /volume3/Data/Library
        mountPath: /data/nas-media

    ingress:
      main:
        enabled: true
        ingressClassName: "traefik"
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-production
          traefik.ingress.kubernetes.io/router.entrypoints: websecure
          traefik.ingress.kubernetes.io/router.middlewares: networking-chain-no-auth@kubernetescrd
          hajimari.io/instance: "bloop-xyz"
          hajimari.io/enable: "true"
          hajimari.io/icon: "bookshelf"
          hajimari.io/appName: "Library"

        hosts:
          - host: books.${XYZ_DOMAIN}
            paths:
              - path: /

        tls:
          - secretName: tls.calibre-web
            hosts:
              - books.${XYZ_DOMAIN}

      kobo:
        enabled: true
        ingressClassName: "traefik"
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-production
          traefik.ingress.kubernetes.io/router.entrypoints: websecure
          traefik.ingress.kubernetes.io/router.middlewares: networking-rfc1918@kubernetescrd

        hosts:
          - host: books.${XYZ_DOMAIN}
            paths:
              - path: /kobo/

        tls:
          - secretName: tls.calibre-web
            hosts:
              - calibre-web.${XYZ_DOMAIN}

    # tolerations:
    #   - key: "kubernetes.io/arch"
    #     operator: "Equal"
    #     value: "arm64"
    #     effect: "NoSchedule"

    # affinity:
    #   podAntiAffinity:
    #     preferredDuringSchedulingIgnoredDuringExecution:
    #       - weight: 100
    #         podAffinityTerm:
    #           labelSelector:
    #             matchExpressions:
    #               - key: app.kubernetes.io/name
    #                 operator: In
    #                 values:
    #                   - calibre-web
    #           topologyKey: kubernetes.io/hostname

    resources:
      requests:
        memory: 256Mi
      limits:
        memory: 512Mi

    # probes:
    #   liveness:
    #     enabled: true
    #     custom: true
    #     spec:
    #       initialDelaySeconds: 5
    #       periodSeconds: 10
    #       timeoutSeconds: 2
    #       failureThreshold: 3
    #   readiness:
    #     enabled: true
    #     custom: true
    #     spec:
    #       initialDelaySeconds: 5
    #       periodSeconds: 10
    #       timeoutSeconds: 2
    #       failureThreshold: 3
    #   startup:
    #     enabled: true
    #     custom: true
    #     spec:
    #       initialDelaySeconds: 5
    #       timeoutSeconds: 2
    #       periodSeconds: 5
    #       failureThreshold: 30