chore(kubernetes): update env orders

buroa · Apr 30, 2024 · 1ee6385 · 1ee6385
1 parent 51fcbee
commit 1ee6385
Show file tree

Hide file tree

Showing 19 changed files with 30 additions and 25 deletions.
diff --git a/kubernetes/apps/home/home-assistant/app/helmrelease.yaml b/kubernetes/apps/home/home-assistant/app/helmrelease.yaml
@@ -40,11 +40,11 @@ spec:
               repository: ghcr.io/buroa/home-assistant
               tag: 2024.4.4@sha256:a471cad766556f93afb04fbf2558b2a8faea198e8f905946554a6d97220bd509
             env:
-              TZ: ${TIMEZONE}
               HOME_ASSISTANT_EXTERNAL_URL: https://hass.${PUBLIC_DOMAIN}
               HOME_ASSISTANT_PURGE_KEEP_DAYS: 30
               HOME_ASSISTANT_TRUSTED_PROXIES: ${CLUSTER_POD_IP_CIDR}
               HOME_ASSISTANT_UNIT_SYSTEM: imperial
+              TZ: ${TIMEZONE}
             envFrom: *envFrom
             resources:
               requests:

diff --git a/kubernetes/apps/home/node-red/app/helmrelease.yaml b/kubernetes/apps/home/node-red/app/helmrelease.yaml
@@ -32,12 +32,12 @@ spec:
               repository: docker.io/nodered/node-red
               tag: 3.1.9@sha256:4f7f84b8e8b8ad67cab30ce1283affe2b3f7cd6ccfb6fc260ad6290202430218
             env:
-              TZ: ${TIMEZONE}
               NODE_RED_OAUTH_ISSUER_URL: https://auth.${PUBLIC_DOMAIN}
               NODE_RED_OAUTH_AUTH_URL: https://auth.${PUBLIC_DOMAIN}/api/oidc/authorization
               NODE_RED_OAUTH_CALLBACK_URL: https://nr.${PUBLIC_DOMAIN}/auth/strategy/callback
               NODE_RED_OAUTH_TOKEN_URL: http://authelia.security.svc.cluster.local:9091/api/oidc/token
               NODE_RED_OAUTH_USER_URL: http://authelia.security.svc.cluster.local:9091/api/oidc/userinfo
+              TZ: ${TIMEZONE}
             envFrom:
               - secretRef:
                   name: node-red-secret

diff --git a/kubernetes/apps/media/autobrr/app/externalsecret.yaml b/kubernetes/apps/media/autobrr/app/externalsecret.yaml
@@ -16,9 +16,9 @@ spec:
         AUTOBRR__DATABASE_TYPE: postgres
         AUTOBRR__POSTGRES_DATABASE: &dbName autobrr
         AUTOBRR__POSTGRES_HOST: &dbHost postgres-rw.databases.svc.cluster.local
+        AUTOBRR__POSTGRES_PORT: "5432"
         AUTOBRR__POSTGRES_USER: &dbUser "{{ .AUTOBRR_POSTGRES_USER }}"
         AUTOBRR__POSTGRES_PASS: &dbPass "{{ .AUTOBRR_POSTGRES_PASS }}"
-        AUTOBRR__POSTGRES_PORT: "5432"
         AUTOBRR__SESSION_SECRET: "{{ .AUTOBRR_SESSION_SECRET }}"
         INIT_POSTGRES_DBNAME: *dbName
         INIT_POSTGRES_HOST: *dbHost

diff --git a/kubernetes/apps/media/autobrr/app/helmrelease.yaml b/kubernetes/apps/media/autobrr/app/helmrelease.yaml
@@ -44,6 +44,7 @@ spec:
               AUTOBRR__HOST: 0.0.0.0
               AUTOBRR__PORT: &port 7474
               AUTOBRR__LOG_LEVEL: INFO
+              TZ: ${TIMEZONE}
             envFrom: *envFrom
             probes:
               liveness: &probes

diff --git a/kubernetes/apps/media/overseerr/app/helmrelease.yaml b/kubernetes/apps/media/overseerr/app/helmrelease.yaml
@@ -30,9 +30,9 @@ spec:
               repository: ghcr.io/sct/overseerr
               tag: 1.33.2@sha256:714ea6db2bc007a2262d112bef7eec74972eb33d9c72bddb9cbd98b8742de950
             env:
-              TZ: ${TIMEZONE}
               LOG_LEVEL: info
               PORT: &port 5055
+              TZ: ${TIMEZONE}
             probes:
               liveness: &probes
                 enabled: true

diff --git a/kubernetes/apps/media/plex/tools/auto-languages/helmrelease.yaml b/kubernetes/apps/media/plex/tools/auto-languages/helmrelease.yaml
@@ -32,9 +32,9 @@ spec:
               repository: docker.io/remirigal/plex-auto-languages
               tag: v1.2.3@sha256:54bd9cf5d399514b8ed3052ce1d01a14375825a429653cb06da129685740889e
             env:
-              TZ: ${TIMEZONE}
               PLEX_URL: http://plex.media.svc.cluster.local:32400
               REFRESH_LIBRARY_ON_SCAN: false
+              TZ: ${TIMEZONE}
             envFrom:
               - secretRef:
                   name: plex-auto-languages-secret

diff --git a/kubernetes/apps/media/plex/tools/image-cleanup/helmrelease.yaml b/kubernetes/apps/media/plex/tools/image-cleanup/helmrelease.yaml
@@ -37,11 +37,11 @@ spec:
               repository: docker.io/meisnate12/plex-image-cleanup
               tag: v1.0.2@sha256:257634cb149f104658079274139bd55d652962ecf331bfda01e71c10686f9e32
             env:
-              TZ: *timeZone
               MODE: remove
               PHOTO_TRANSCODER: true
               PLEX_PATH: /plex/Library/Application Support/Plex Media Server
               PLEX_URL: http://plex.media.svc.cluster.local:32400
+              TZ: *timeZone
             envFrom:
               - secretRef:
                   name: plex-image-cleanup-secret

diff --git a/kubernetes/apps/media/prowlarr/app/externalsecret.yaml b/kubernetes/apps/media/prowlarr/app/externalsecret.yaml
@@ -17,6 +17,7 @@ spec:
         PROWLARR__POSTGRES_MAIN_DB: prowlarr_main
         PROWLARR__POSTGRES_LOG_DB: prowlarr_log
         PROWLARR__POSTGRES_HOST: &dbHost postgres-rw.databases.svc.cluster.local
+        PROWLARR__POSTGRES_PORT: "5432"
         PROWLARR__POSTGRES_USER: &dbUser "{{ .PROWLARR_POSTGRES_USER }}"
         PROWLARR__POSTGRES_PASSWORD: &dbPass "{{ .PROWLARR_POSTGRES_PASS }}"
         INIT_POSTGRES_DBNAME: prowlarr_main prowlarr_log

diff --git a/kubernetes/apps/media/prowlarr/app/helmrelease.yaml b/kubernetes/apps/media/prowlarr/app/helmrelease.yaml
@@ -40,13 +40,13 @@ spec:
               repository: ghcr.io/buroa/prowlarr-develop
               tag: 1.17.0.4448@sha256:68b5d558eb3aa56575cf10e0f10546b2e76b38c567a9b407695da3cfde509f4b
             env:
-              TZ: ${TIMEZONE}
               PROWLARR__AUTHENTICATION_METHOD: External
               PROWLARR__AUTHENTICATION_REQUIRED: DisabledForLocalAddresses
               PROWLARR__INSTANCE_NAME: Prowlarr
               PROWLARR__PORT: &port 9696
               PROWLARR__LOG_LEVEL: info
               PROWLARR__THEME: dark
+              TZ: ${TIMEZONE}
             envFrom: *envFrom
             probes:
               liveness: &probes

diff --git a/kubernetes/apps/media/qbittorrent/app/helmrelease.yaml b/kubernetes/apps/media/qbittorrent/app/helmrelease.yaml
@@ -30,7 +30,6 @@ spec:
               repository: ghcr.io/buroa/qbittorrent-beta
               tag: 4.6.4@sha256:c9c8d7f4700039c165906538b6fa40b9d621e1c6e2414c7a6c4315c68ade002e
             env:
-              TZ: ${TIMEZONE}
               QBITTORRENT__PORT: &port 8080
               QBITTORRENT__BT_PORT: &bittorrentPort ${TORRENT_PUBLIC_PORT}
               QBT_Application__MemoryWorkingSetLimit:
@@ -50,6 +49,7 @@ spec:
                   fieldRef:
                     fieldPath: status.podIP
               QBT_BitTorrent__Session__InterfaceName: eth0
+              TZ: ${TIMEZONE}
             probes:
               liveness: &probes
                 enabled: true

diff --git a/kubernetes/apps/media/radarr/app/externalsecret.yaml b/kubernetes/apps/media/radarr/app/externalsecret.yaml
@@ -17,6 +17,7 @@ spec:
         RADARR__POSTGRES_MAIN_DB: radarr_main
         RADARR__POSTGRES_LOG_DB: radarr_log
         RADARR__POSTGRES_HOST: &dbHost postgres-rw.databases.svc.cluster.local
+        RADARR__POSTGRES_PORT: "5432"
         RADARR__POSTGRES_USER: &dbUser "{{ .RADARR_POSTGRES_USER }}"
         RADARR__POSTGRES_PASSWORD: &dbPass "{{ .RADARR_POSTGRES_PASS }}"
         INIT_POSTGRES_DBNAME: radarr_main radarr_log

diff --git a/kubernetes/apps/media/radarr/app/helmrelease.yaml b/kubernetes/apps/media/radarr/app/helmrelease.yaml
@@ -40,13 +40,13 @@ spec:
               repository: ghcr.io/buroa/radarr-develop
               tag: 5.5.1.8747@sha256:c7a3110f7c4296340873d0404af8d2e12aea1ca539bed35854fb1744f6b20bd4
             env:
-              TZ: ${TIMEZONE}
               RADARR__AUTHENTICATION_METHOD: External
               RADARR__AUTHENTICATION_REQUIRED: DisabledForLocalAddresses
               RADARR__INSTANCE_NAME: Radarr
               RADARR__LOG_LEVEL: info
               RADARR__PORT: &port 7878
               RADARR__THEME: dark
+              TZ: ${TIMEZONE}
             envFrom: *envFrom
             probes:
               liveness: &probes

diff --git a/kubernetes/apps/media/recyclarr/app/helmrelease.yaml b/kubernetes/apps/media/recyclarr/app/helmrelease.yaml
@@ -39,8 +39,8 @@ spec:
             args:
               - sync
             env:
-              TZ: *timeZone
               COMPlus_EnableDiagnostics: 0
+              TZ: *timeZone
             envFrom:
               - secretRef:
                   name: recyclarr-secret

diff --git a/kubernetes/apps/media/sabnzbd/app/helmrelease.yaml b/kubernetes/apps/media/sabnzbd/app/helmrelease.yaml
@@ -32,7 +32,6 @@ spec:
               repository: ghcr.io/buroa/sabnzbd
               tag: 4.2.3@sha256:940fb35946bf88a3ab21b4f658558c5678f820c40d0af63dd7c6729da0d67491
             env:
-              TZ: ${TIMEZONE}
               SABNZBD__PORT: &port 8080
               SABNZBD__HOST_WHITELIST_ENTRIES: >-
                 sabnzbd,
@@ -42,6 +41,7 @@ spec:
                 sabnzbd.media.svc.cluster.local,
                 {{ .Release.Name }}.${PUBLIC_DOMAIN},
                 sab.${PUBLIC_DOMAIN}
+              TZ: ${TIMEZONE}
             envFrom:
               - secretRef:
                   name: sabnzbd-secret

diff --git a/kubernetes/apps/media/sonarr/app/externalsecret.yaml b/kubernetes/apps/media/sonarr/app/externalsecret.yaml
@@ -13,12 +13,13 @@ spec:
     template:
       engineVersion: v2
       data:
-        SONARR__API_KEY: "{{ .SONARR_API_KEY }}"
+        SONARR__AUTH__APIKEY: "{{ .SONARR_API_KEY }}"
         SONARR__POSTGRES_MAIN_DB: sonarr_main
         SONARR__POSTGRES_LOG_DB: sonarr_log
-        SONARR__POSTGRES_HOST: &dbHost postgres-rw.databases.svc.cluster.local
-        SONARR__POSTGRES_USER: &dbUser "{{ .SONARR_POSTGRES_USER }}"
-        SONARR__POSTGRES_PASSWORD: &dbPass "{{ .SONARR_POSTGRES_PASS }}"
+        SONARR__POSTGRES__HOST: &dbHost postgres-rw.databases.svc.cluster.local
+        SONARR__POSTGRES__PORT: "5432"
+        SONARR__POSTGRES__USER: &dbUser "{{ .SONARR_POSTGRES_USER }}"
+        SONARR__POSTGRES__PASSWORD: &dbPass "{{ .SONARR_POSTGRES_PASS }}"
         INIT_POSTGRES_DBNAME: sonarr_main sonarr_log
         INIT_POSTGRES_HOST: *dbHost
         INIT_POSTGRES_USER: *dbUser

diff --git a/kubernetes/apps/media/sonarr/app/helmrelease.yaml b/kubernetes/apps/media/sonarr/app/helmrelease.yaml
@@ -40,13 +40,14 @@ spec:
               repository: ghcr.io/buroa/sonarr-develop
               tag: 4.0.4.1572@sha256:a021d5e3e636f01aefc9dc869abc69c227d2d74d14c6faef0c0916e981d21982
             env:
+              SONARR__APP__INSTANCENAME: Sonarr
+              SONARR__APP__THEME: dark
+              SONARR__AUTH__METHOD: External
+              SONARR__AUTH__REQUIRED: DisabledForLocalAddresses
+              SONARR__LOG__LEVEL: info
+              SONARR__SERVER__PORT: &port 8989
+              SONARR__UPDATE__BRANCH: develop
               TZ: ${TIMEZONE}
-              SONARR__AUTHENTICATION_METHOD: External
-              SONARR__AUTHENTICATION_REQUIRED: DisabledForLocalAddresses
-              SONARR__INSTANCE_NAME: Sonarr
-              SONARR__LOG_LEVEL: info
-              SONARR__PORT: &port 8989
-              SONARR__THEME: dark
             envFrom: *envFrom
             probes:
               liveness: &probes

diff --git a/kubernetes/apps/monitoring/exporters/mqtt-exporter/app/helmrelease.yaml b/kubernetes/apps/monitoring/exporters/mqtt-exporter/app/helmrelease.yaml
@@ -32,11 +32,11 @@ spec:
               repository: ghcr.io/kpetremann/mqtt-exporter
               tag: 1.4.2@sha256:f590a1b0364ec76af94472621543c79839b11bce59a6683145efe2cb923c8376
             env:
-              TZ: ${TIMEZONE}
               MQTT_ADDRESS: emqx-listeners.databases.svc.cluster.local
               MQTT_TOPIC: zigbee2mqtt/#
               MQTT_V5_PROTOCOL: true
               PROMETHEUS_PORT: &port 3321
+              TZ: ${TIMEZONE}
               ZIGBEE2MQTT_AVAILABILITY: true
             envFrom:
               - secretRef:

diff --git a/kubernetes/apps/monitoring/gatus/app/helmrelease.yaml b/kubernetes/apps/monitoring/gatus/app/helmrelease.yaml
@@ -58,10 +58,10 @@ spec:
               repository: ghcr.io/twin/gatus
               tag: v5.10.0@sha256:658a9cb993ff0b16832947dab8de885b2e2a66037330b839310fa3f39d5c00f4
             env:
-              TZ: ${TIMEZONE}
+              CUSTOM_WEB_PORT: &port 80
               GATUS_CONFIG_PATH: /config
               GATUS_DELAY_START_SECONDS: 5
-              CUSTOM_WEB_PORT: &port 80
+              TZ: ${TIMEZONE}
             envFrom: *envFrom
             probes:
               liveness: &probes

diff --git a/kubernetes/apps/networking/tailscale/app/helmrelease.yaml b/kubernetes/apps/networking/tailscale/app/helmrelease.yaml
@@ -34,14 +34,14 @@ spec:
               repository: ghcr.io/tailscale/tailscale
               tag: v1.64.2@sha256:7ee2ab4b9efadc5a68c92fb4549206eedac240a758f61b5431e39e8c0806930d
             env:
-              TZ: ${TIMEZONE}
               NO_AUTOUPDATE: true
               PORT: &port ${TAILNET_PUBLIC_PORT}
               TS_EXTRA_ARGS: --advertise-exit-node --advertise-tags=tag:k8s
               TS_ROUTES: ${LAN_SERVER_IP_CIDR},${CILIUM_LB_CIDR}
               TS_STATE_DIR: &path /tmp
               TS_TAILSCALED_EXTRA_ARGS: --debug=0.0.0.0:3000
               TS_USERSPACE: true
+              TZ: ${TIMEZONE}
             envFrom:
               - secretRef:
                   name: tailscale-secret