---
replicaCount: 1

qbittorrent:
  image:
    repository: lscr.io/linuxserver/qbittorrent
    tag: "5.1.0"
    pullPolicy: Always
  env:
    - name: PUID
      value: "1000"
    - name: PGID
      value: "1000"
    - name: TZ
      value: "Europe/Amsterdam"
    - name: WEBUI_PORT
      value: "8080"
    - name: TORRENTING_PORT
      value: "6881"
  torrentPort: 6881
  livenessProbe:
    tcpSocket:
      port: 8080
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 2
    failureThreshold: 3
  readinessProbe:
    tcpSocket:
      port: 8080
    initialDelaySeconds: 5
    periodSeconds: 10
    timeoutSeconds: 2
    failureThreshold: 3
  resources:
    requests:
      memory: "500Mi"
      cpu: "500m"
      ephemeral-storage: "50Mi"
    limits:
      memory: "2Gi"
      cpu: "2"
      ephemeral-storage: "1Gi"
  volumeMounts:
    - name: plex-data
      mountPath: "/config"
      subPath: "configs/qbittorrent"
    - name: plex-data
      mountPath: "/nfs/torrents"
      subPath: "torrent"

gluetun:
  image:
    repository: qmcgaw/gluetun
    tag: latest
    pullPolicy: IfNotPresent
  env:
    - name: VPN_SERVICE_PROVIDER
      value: "airvpn"
    - name: VPN_TYPE
      value: "wireguard"
    - name: WIREGUARD_PRIVATE_KEY
      valueFrom:
        secretKeyRef:
          name: gluetun-wireguard
          key: WIREGUARD_PRIVATE_KEY
    - name: WIREGUARD_PRESHARED_KEY
      valueFrom:
        secretKeyRef:
          name: gluetun-wireguard
          key: WIREGUARD_PRESHARED_KEY
    - name: WIREGUARD_ADDRESSES
      value: "10.160.17.207/32,fd7d:76ee:e68f:a993:61d7:a5fe:f834:90e1/128"
    - name: SERVER_COUNTRIES
      value: "Netherlands"
    - name: FIREWALL_INPUT_PORTS
      value: "8080"
    - name: FIREWALL_VPN_INPUT_PORTS
      value: "6881"
    - name: TZ
      value: "Europe/Amsterdam"
  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
      add:
        - NET_ADMIN
  livenessProbe:
    tcpSocket:
      port: 8000
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 2
    failureThreshold: 3
  readinessProbe:
    tcpSocket:
      port: 8000
    initialDelaySeconds: 5
    periodSeconds: 10
    timeoutSeconds: 2
    failureThreshold: 3
  resources:
    requests:
      memory: 128Mi
      cpu: 100m
    limits:
      memory: 512Mi
      cpu: 500m
  volumeMounts:
    - name: dev-tun
      mountPath: "/dev/net/tun"

service:
  type: ClusterIP
  port: 8080

volumes:
  - name: plex-data
    persistentVolumeClaim:
      claimName: plex-data
  - name: dev-tun
    hostPath:
      path: /dev/net/tun

nodeSelector:
  kubernetes.io/arch: arm64

tolerations: []

affinity: {}