From 5d0adc5116071382c236becbd9005ebe857b0ae6 Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Tue, 20 Aug 2024 21:59:09 +0800
Subject: [PATCH] fix(immich): Renovate & flux-local

---
 .renovate/groups.json5              | 11 +++++++++++
 kube/deploy/apps/immich/app/hr.yaml | 11 ++++++-----
 2 files changed, 17 insertions(+), 5 deletions(-)

diff --git a/.renovate/groups.json5 b/.renovate/groups.json5
index abeca869..02ddec98 100644
--- a/.renovate/groups.json5
+++ b/.renovate/groups.json5
@@ -97,6 +97,17 @@
         "commitMessageTopic": "{{{groupName}}} group"
       }
     },
+    {
+      "description": "Immich Group",
+      "groupName": "Immich",
+      "matchPackagePatterns": ["immich"],
+      "versioning": "semver",
+      "customChangelogUrl": "https://github.com/immich-app/immich",
+      "separateMinorPatch": true,
+      "group": {
+        "commitMessageTopic": "{{{groupName}}} group"
+      }
+    },
     {
       "description": "Manually approve app-template major releases",
       "matchPackagePatterns": ["app-template"],
diff --git a/kube/deploy/apps/immich/app/hr.yaml b/kube/deploy/apps/immich/app/hr.yaml
index 2a283891..6065dfef 100644
--- a/kube/deploy/apps/immich/app/hr.yaml
+++ b/kube/deploy/apps/immich/app/hr.yaml
@@ -76,7 +76,7 @@ spec:
             prom.home.arpa/kps: allow
           securityContext:
             runAsNonRoot: true
-            runAsUser: &uid ${APP_UID_IMMICH}
+            runAsUser: &uid ${APP_UID_IMMICH:=1000}
             runAsGroup: *uid
             fsGroup: *uid
             fsGroupChangePolicy: Always
@@ -188,7 +188,7 @@ spec:
       main:
         className: nginx-internal
         hosts:
-          - host: &host "${APP_DNS_IMMICH}"
+          - host: &host "${APP_DNS_IMMICH:=immich}"
             paths: &paths
               - path: /
                 pathType: Prefix
@@ -223,6 +223,7 @@ spec:
       tmp:
         type: emptyDir
         medium: Memory
+        sizeLimit: 16Mi
         globalMounts:
           - subPath: tmp
             path: /tmp
@@ -243,11 +244,11 @@ spec:
       automountServiceAccountToken: false
       enableServiceLinks: false
       hostAliases:
-        - ip: "${APP_IP_AUTHENTIK}"
-          hostnames: ["${APP_DNS_AUTHENTIK}"]
+        - ip: "${APP_IP_AUTHENTIK:=127.0.0.1}"
+          hostnames: ["${APP_DNS_AUTHENTIK:=authentik}"]
       securityContext:
         runAsNonRoot: true
-        runAsUser: &uid ${APP_UID_IMMICH}
+        runAsUser: &uid ${APP_UID_IMMICH:=1000}
         runAsGroup: *uid
         fsGroup: *uid
         fsGroupChangePolicy: Always