update immich

apps/immich/kustomization.yaml

@@ -4,6 +4,7 @@ resources:
 - namespace.yaml
 - ingress.yaml
 - pvc.yaml
+- postgres.sealedsecret.yaml
 
 namespace: immich
 

apps/immich/postgres.sealedsecret.yaml

@@ -0,0 +1,23 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "postgres-password",
+    "namespace": "default",
+    "creationTimestamp": null
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "postgres-password",
+        "namespace": "default",
+        "creationTimestamp": null
+      }
+    },
+    "encryptedData": {
+      "database": "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",
+      "password": "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",
+      "username": "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"
+    }
+  }
+}

apps/immich/pvc.yaml

@@ -6,7 +6,6 @@ metadata:
 spec:
   capacity:
     storage: "50Gi"
-  # volumeMode: Filesystem
   accessModes:
     - ReadWriteOnce
   nfs:

apps/immich/values.yaml

@@ -6,11 +6,22 @@
 
 env:
   REDIS_HOSTNAME: '{{ printf "%s-redis-master" .Release.Name }}'
-  DB_HOSTNAME: "{{ .Release.Name }}-postgresql"
-  DB_USERNAME: "{{ .Values.postgresql.global.postgresql.auth.username }}"
-  DB_DATABASE_NAME: "{{ .Values.postgresql.global.postgresql.auth.database }}"
-  # -- You should provide your own secret outside of this helm-chart and use `postgresql.global.postgresql.auth.existingSecret` to provide credentials to the postgresql instance
-  DB_PASSWORD: "{{ .Values.postgresql.global.postgresql.auth.password }}"
+  DB_HOSTNAME: "postgres-postgresql.postgres"
+  DB_USERNAME: 
+    valueFrom:
+      secretKeyRef:
+        name: postgres-password
+        key: username
+  DB_DATABASE_NAME:
+    valueFrom:
+      secretKeyRef:
+        name: postgres-password
+        key: database
+  DB_PASSWORD:
+    valueFrom:
+      secretKeyRef:
+        name: postgres-password
+        key: password
   TYPESENSE_ENABLED: "{{ .Values.typesense.enabled }}"
   TYPESENSE_API_KEY: "{{ .Values.typesense.env.TYPESENSE_API_KEY }}"
   TYPESENSE_HOST: '{{ printf "%s-typesense" .Release.Name }}'
@@ -19,7 +30,7 @@ env:
   IMMICH_MACHINE_LEARNING_URL: '{{ printf "http://%s-machine-learning:3003" .Release.Name }}'
 
 image:
-  tag: v1.88.1
+  tag: v1.88.2
 
 immich:
   persistence:
@@ -32,13 +43,8 @@ immich:
 # Dependencies
 
 postgresql:
-  enabled: true
-  global:
-    postgresql:
-      auth:
-        username: immich
-        database: immich
-        password: immich
+  enabled: false
+
 
 redis:
   enabled: true

infrastructure/postgres/adding.md

@@ -9,5 +9,5 @@ You will be prompted to enter first the password for the new role and to reenter
 
 Create a new database with the new role as the owner:
 ```
-createdb -U postgres DATABASE_NAME  -O USER_NAME
+createdb -U postgres DATABASE_NAME -O USER_NAME
 ```

infrastructure/postgres/postgres-password.sealedsecret.yaml

@@ -15,7 +15,7 @@
       }
     },
     "encryptedData": {
-      "password": "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"
+      "password": "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"
     }
   }
 }