ntwl/media/jellyfin.yaml
2025-06-27 21:23:40 +10:00

141 lines
2.7 KiB
YAML

---
apiVersion: apps/v1
kind: Deployment
metadata:
name: jellyfin
namespace: media
spec:
selector:
matchLabels:
app: jellyfin
template:
metadata:
labels:
app: jellyfin
spec:
# USE GPU
runtimeClassName: nvidia
restartPolicy: Always
containers:
- image: ghcr.io/hotio/jellyfin
imagePullPolicy: Always
name: jellyfin
env:
- name: TZ
value: Australia/Melbourne
- name: PUID
value: '1000'
- name: PGID
value: '1000'
- name: UMASK
value: '002'
- name: NVIDIA_VISIBLE_DEVICES
value: all
- name: NVIDIA_DRIVER_CAPABILITIES
value: all
ports:
- containerPort: 8096
protocol: TCP
volumeMounts:
- mountPath: /data
name: jellyfin-data
readOnly: true
- mountPath: /config
name: jellyfin-config
volumes:
- name: jellyfin-data
persistentVolumeClaim:
claimName: data
- name: jellyfin-config
persistentVolumeClaim:
claimName: jellyfin-config
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: jellyfin-config
namespace: media
spec:
storageClassName: zfs-fast
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 8Gi
---
apiVersion: v1
kind: Service
metadata:
labels:
app: jellyfin
name: jellyfin
namespace: media
spec:
ports:
- name: web
port: 8096
protocol: TCP
targetPort: 8096
selector:
app: jellyfin
type: ClusterIP
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: jellyfin-ingress
namespace: media
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
ingressClassName: haproxy
tls:
- secretName: jellyfin-ingress
hosts:
- jf.ntwl.xyz
rules:
- host: jf.ntwl.xyz
http:
paths:
- backend:
service:
name: jellyfin
port:
name: web
path: /
pathType: Prefix
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: jellyfin-lan-ingress
namespace: media
annotations:
haproxy.org/ssl-redirect: "false"
haproxy.org/ssl-certificate: "default/tls-secret"
spec:
ingressClassName: haproxy
rules:
- host: jfl.ntwl.xyz
http:
paths:
- backend:
service:
name: jellyfin
port:
name: web
path: /
pathType: Prefix