update immich

apps/immich/kustomization.yaml

@@ -4,6 +4,7 @@ resources:
 - namespace.yaml
 - ingress.yaml
 - pvc.yaml
+- postgres.sealedsecret.yaml
 
 namespace: immich
 

apps/immich/postgres.sealedsecret.yaml

@@ -0,0 +1,23 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "postgres-password",
+    "namespace": "default",
+    "creationTimestamp": null
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "postgres-password",
+        "namespace": "default",
+        "creationTimestamp": null
+      }
+    },
+    "encryptedData": {
+      "database": "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",
+      "password": "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",
+      "username": "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"
+    }
+  }
+}

apps/immich/pvc.yaml

@@ -6,7 +6,6 @@ metadata:
 spec:
   capacity:
     storage: "50Gi"
-  # volumeMode: Filesystem
   accessModes:
     - ReadWriteOnce
   nfs:

apps/immich/values.yaml

@@ -6,11 +6,22 @@
 
 env:
   REDIS_HOSTNAME: '{{ printf "%s-redis-master" .Release.Name }}'
-  DB_HOSTNAME: "{{ .Release.Name }}-postgresql"
-  DB_USERNAME: "{{ .Values.postgresql.global.postgresql.auth.username }}"
-  DB_DATABASE_NAME: "{{ .Values.postgresql.global.postgresql.auth.database }}"
-  # -- You should provide your own secret outside of this helm-chart and use `postgresql.global.postgresql.auth.existingSecret` to provide credentials to the postgresql instance
-  DB_PASSWORD: "{{ .Values.postgresql.global.postgresql.auth.password }}"
+  DB_HOSTNAME: "postgres-postgresql.postgres"
+  DB_USERNAME: 
+    valueFrom:
+      secretKeyRef:
+        name: postgres-password
+        key: username
+  DB_DATABASE_NAME:
+    valueFrom:
+      secretKeyRef:
+        name: postgres-password
+        key: database
+  DB_PASSWORD:
+    valueFrom:
+      secretKeyRef:
+        name: postgres-password
+        key: password
   TYPESENSE_ENABLED: "{{ .Values.typesense.enabled }}"
   TYPESENSE_API_KEY: "{{ .Values.typesense.env.TYPESENSE_API_KEY }}"
   TYPESENSE_HOST: '{{ printf "%s-typesense" .Release.Name }}'
@@ -19,7 +30,7 @@ env:
   IMMICH_MACHINE_LEARNING_URL: '{{ printf "http://%s-machine-learning:3003" .Release.Name }}'
 
 image:
-  tag: v1.88.1
+  tag: v1.88.2
 
 immich:
   persistence:
@@ -32,13 +43,8 @@ immich:
 # Dependencies
 
 postgresql:
-  enabled: true
-  global:
-    postgresql:
-      auth:
-        username: immich
-        database: immich
-        password: immich
+  enabled: false
+
 
 redis:
   enabled: true