apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: immich
spec:
  interval: 5m0s
  chart:
    spec:
      chart: immich
      version: 0.9.3
      sourceRef:
        kind: HelmRepository
        name: immich
  values:
    env:
      REDIS_HOSTNAME: "immich-redis-master"
      DB_HOSTNAME: "immich-postgresql"
      DB_USERNAME: "immich"
      DB_DATABASE_NAME: "immich"
      DB_PASSWORD: "immich"

    image:
      tag: v1.134.0

    immich:
      metrics:
        enabled: false
      persistence:
        library:
          existingClaim: immich-library

      configuration:
        {}
        # trash:
        #   enabled: false
        #   days: 30
        # storageTemplate:
        #   enabled: true
        #   template: "{{y}}/{{y}}-{{MM}}-{{dd}}/{{filename}}"

    # Dependencies
    useDeprecatedPostgresChart: true
    postgresql:
      enabled: true
      image:
        repository: tensorchord/pgvecto-rs
        tag: pg14-v0.2.0@sha256:739cdd626151ff1f796dc95a6591b55a714f341c737e27f045019ceabf8e8c52
      global:
        postgresql:
          auth:
            username: immich
            database: immich
            password: immich
      primary:
        containerSecurityContext:
          readOnlyRootFilesystem: false
        initdb:
          scripts:
            create-extensions.sql: |
              CREATE EXTENSION cube;
              CREATE EXTENSION earthdistance;
              CREATE EXTENSION vectors;

    redis:
      enabled: true
      architecture: standalone
      auth:
        enabled: false

    server:
      enabled: true
      image:
        repository: ghcr.io/immich-app/immich-server
        pullPolicy: IfNotPresent

      ingress:
        main:
          enabled: true
          ingressClassName: "traefik"
          annotations:
            traefik.ingress.kubernetes.io/proxy-body-size: "0"
            traefik.ingress.kubernetes.io/router.entrypoints: websecure
            kubernetes.io/ingress.class: "traefik"
          hosts:
            - host: ${ingress_url}
              paths:
                - path: "/"
          tls:
            - secretName: ${certificate_secret_name}
              hosts:
                - ${ingress_url}