From f2559690f4b2b0c4c169c12e1cad3d6884b86e16 Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Wed, 26 Nov 2025 19:59:05 +0800
Subject: [PATCH] feat(home-assistant): Plex integration netpols

---
 kube/deploy/apps/home-assistant/app/netpol.yaml |  4 ++++
 kube/deploy/apps/media/plex/app/hr.yaml         | 15 +++++++++++++++
 2 files changed, 19 insertions(+)

diff --git a/kube/deploy/apps/home-assistant/app/netpol.yaml b/kube/deploy/apps/home-assistant/app/netpol.yaml
index d519b810..64647d74 100644
--- a/kube/deploy/apps/home-assistant/app/netpol.yaml
+++ b/kube/deploy/apps/home-assistant/app/netpol.yaml
@@ -38,6 +38,10 @@ spec:
         - matchLabels:
             io.kubernetes.pod.namespace: go2rtc
             app.kubernetes.io/name: go2rtc
+    - toEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: media
+            app.kubernetes.io/name: plex
     - toFQDNs:
         # HACS
         - matchPattern: "*.hacs.xyz"
diff --git a/kube/deploy/apps/media/plex/app/hr.yaml b/kube/deploy/apps/media/plex/app/hr.yaml
index 28e3118f..ddcc04be 100644
--- a/kube/deploy/apps/media/plex/app/hr.yaml
+++ b/kube/deploy/apps/media/plex/app/hr.yaml
@@ -160,3 +160,18 @@ spec:
               - matchExpressions:
                   - key: fuckoff.home.arpa/plex
                     operator: DoesNotExist
+    networkpolicies:
+      app:
+        controller: app
+        policyTypes: [Ingress, Egress]
+        rules:
+          ingress:
+            - from:
+                - podSelector:
+                    matchLabels:
+                      app.kubernetes.io/name: home-assistant
+                  namespaceSelector:
+                    matchLabels:
+                      kubernetes.io/metadata.name: home-assistant
+              ports:
+                - port: *port