86 lines
2.7 KiB
YAML
86 lines
2.7 KiB
YAML
---
|
|
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
namespace: lidarr
|
|
name: youtube-downloader
|
|
spec:
|
|
schedule: "0/5 * * * *"
|
|
concurrencyPolicy: Forbid
|
|
jobTemplate:
|
|
spec:
|
|
template:
|
|
spec:
|
|
affinity:
|
|
podAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchLabels:
|
|
app: lidarr
|
|
topologyKey: kubernetes.io/hostname
|
|
restartPolicy: OnFailure
|
|
initContainers:
|
|
- name: killswitch
|
|
image: xjasonlyu/tun2socks:latest
|
|
command: ["sh","-c"]
|
|
args:
|
|
- |
|
|
iptables -t mangle -A POSTROUTING -o eth0 -d 172.16.0.0/12 -j ACCEPT
|
|
iptables -t mangle -A POSTROUTING -o eth0 -d 10.0.0.0/8 -j ACCEPT
|
|
iptables -t mangle -A POSTROUTING -o eth0 -d 192.168.0.0/16 -j ACCEPT
|
|
iptables -t mangle -A POSTROUTING -o eth0 -j DROP
|
|
securityContext:
|
|
capabilities:
|
|
add: ["NET_ADMIN","SYS_TIME"]
|
|
volumes:
|
|
- name: config
|
|
persistentVolumeClaim:
|
|
claimName: lidarr-config
|
|
- name: dropbox
|
|
nfs:
|
|
server: 172.16.18.1
|
|
path: /volume1/dropbox
|
|
- name: music
|
|
nfs:
|
|
server: 172.16.18.1
|
|
path: /volume1/music
|
|
securityContext:
|
|
fsGroup: 101
|
|
containers:
|
|
- name: youtube-downloader
|
|
image: git.strudelline.net/infra/lidarr-youtube-downloader:main
|
|
env:
|
|
- name: LIDARR_URL
|
|
value: https://lidarr.strudelline.net
|
|
- name: LIDARR_API_KEY
|
|
value: f371b7b67584461085bf1004520f0fe8
|
|
- name: LIDARR_DB
|
|
value: /config/lidarr.db
|
|
- name: LIDARR_MUSIC_PATH
|
|
value: /volume1/music
|
|
volumeMounts:
|
|
- mountPath: /volume1/music
|
|
name: music
|
|
- mountPath: /volume1/dropbox
|
|
name: dropbox
|
|
- mountPath: /config
|
|
name: config
|
|
- name: vpn
|
|
image: xjasonlyu/tun2socks:latest
|
|
command: ["sh","-c"]
|
|
args:
|
|
- |
|
|
mkdir -p /dev/net
|
|
mknod /dev/net/tun c 10 200
|
|
exec /entrypoint.sh
|
|
env:
|
|
- name: TUN
|
|
value: tun0
|
|
- name: PROXY
|
|
value: socks5://172.16.17.180:1080
|
|
- name: TUN_EXCLUDED_ROUTES
|
|
value: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
|
|
securityContext:
|
|
capabilities:
|
|
add: ["NET_ADMIN","SYS_TIME"]
|