apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  annotations:
    argocd.argoproj.io/client-side-apply-migration-manager: argocd-controller
    argocd.argoproj.io/sync-wave: "3"
  name: jellyfin
  namespace: argocd
spec:
  destination:
    namespace: jellyfin
    server: https://kubernetes.default.svc
  project: default
  sources:
    - chart: jellyfin
      helm:
        values: |
          image:
            tag: "12.2"
          service:
            type: ClusterIP
            port: 8096
          ingress:
            enabled: false
          persistence:
            config:
              enabled: true
              size: 2Gi
            media:
              enabled: true
              type: hostPath
              hostPath: /srv/media
          # Metadata, artwork, and subtitles come from the internet; the
          # cluster and the LAN stay off limits
          networkPolicy:
            enabled: true
            ingress:
              allowExternal: false
              namespaceSelector:
                matchLabels:
                  kubernetes.io/metadata.name: traefik
            egress:
              allowAllEgress: false
              restrictedEgress:
                allowMetadata: false
                allowInCluster: false
              customRules:
                - to:
                    - ipBlock:
                        cidr: 0.0.0.0/0
                        except:
                          - 10.0.0.0/8
                          - 172.16.0.0/12
                          - 192.168.0.0/16
          resources:
            limits:
              cpu: 3000m
              memory: 2Gi
            requests:
              cpu: 50m
              memory: 512Mi
      repoURL: https://jellyfin.github.io/jellyfin-helm
      targetRevision: 3.2.0
    - path: apps/jellyfin
      repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
      targetRevision: main
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true