Deploy romm

Deploy romm to manage game library.

k8s/applications/build.sh

@@ -21,6 +21,7 @@ kubectl kustomize prowlarr && echo "---"
 kubectl kustomize qbittorrent && echo "---"
 kubectl kustomize radarr && echo "---"
 kubectl kustomize radarr-uhd && echo "---"
+kubectl kustomize romm && echo "---"
 kubectl kustomize sonarr && echo "---"
 kubectl kustomize sonarr-uhd && echo "---"
 kubectl kustomize static && echo "---"

k8s/applications/romm/deployment.yaml

@@ -0,0 +1,65 @@
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: romm
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  template:
+    spec:
+      securityContext:
+        fsGroup: 1000
+      containers:
+        - name: romm
+          image: rommapp/romm:3.5.1
+          ports:
+            - name: ingress
+              containerPort: 8080
+          env:
+            - name: TZ
+              value: America/New_York
+            - name: DB_NAME
+              value: romm
+            - name: DB_USER
+              value: romm-user
+          envFrom:
+            - secretRef:
+                name: qbittorrent
+          volumeMounts:
+            - name: romm
+              mountPath: /romm/config
+              subPath: config
+            - name: romm
+              mountPath: /redis-data
+              subPath: redis
+            - name: media
+              mountPath: /romm/library
+              subPath: libraries/games
+            - name: media
+              mountPath: /romm/assets
+              subPath: libraries/games/assets
+            - name: media
+              mountPath: /romm/resources
+              subPath: libraries/games/resources
+        - name: db
+          image: mariadb:11.5.2
+          env:
+            - name: MYSQL_DATABASE
+              value: romm
+            - name: MYSQL_USER
+              value: romm-user
+          envFrom:
+            - secretRef:
+                name: qbittorrent
+          volumeMounts:
+            - name: romm
+              mountPath: /var/lib/mysql
+              subPath: mysql
+      volumes:
+        - name: romm
+          persistentVolumeClaim:
+            claimName: romm
+        - name: media
+          persistentVolumeClaim:
+            claimName: media

k8s/applications/romm/kustomization.yaml

@@ -0,0 +1,21 @@
+namespace: server
+commonLabels:
+  app: romm
+  subdomain: romm
+resources:
+  - ../../overlays/ingress
+  - ../../overlays/persistence
+  - deployment.yaml
+  - sealed-secret.yaml
+patches:
+  - target:
+      kind: IngressRoute
+    patch: |-
+      - op: add
+        path: /spec/routes/-
+        value:
+          match: Host("$(SUBDOMAIN).mchill.io") && PathPrefix("/api")
+          kind: Rule
+          services:
+            - name: $(APP)
+              port: 80

k8s/applications/romm/sealed-secret.yaml

@@ -0,0 +1,22 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: romm
+  namespace: server
+spec:
+  encryptedData:
+    DB_PASSWD: AgBtGDtM2gmwYCW0qHSdUZ+XcM1/d5lvwVwBVegTFMXiQ92QSPHfPAwwAy2UTGolWvBEL0cjyUSDWZhFERRdy6FakQyVwm0OH2Yq7pNdD3apUM47Zc8rmmPru6YgP3H2PEcHimmmAd9lxDDFniefc/U6m8ROUvwT0qgFM2u/xzB69Zzl+vYI+N0nUCgfUoa3zreYkZZkR9czk5wPtNDaWxI8JKy9wpusv9fQ91zk2AcJhVrgxl3tCFqcYXuDITMU8SjwgNha81SIWzqWZ2men0maJTpJ62zGpDxmsmUWGJfvK8M/MNISdMipcqWtzrU3I1jDppQRECEfR5O3N/QzFgO1bfSM5up6roUt/hosgIYeZLMkDoZKwnRpgRsOZkOySribIUvA3ijEOHp2FeIjNy+MPx7aUZtzuXFsRRc+ToLaH/2qLUYGhVQFWEhNnfl4jt1B8QTQf70m0PvVGYzsmbFfwTup93wf+gocKK10I34mq1APjXlJ+wyWMBNSTmKC47lKj00p5aC7/r5Xd+sf2gXWsiz8qbTTzNjrk/qQ0SV3PnVkqyWdBYxjmwLT2sGFYhYgomP/a35ICkqV6HO2mT+JX+1vObGBr2Zv4ev/P1//LmPJv4UrXHHz0D4hyMwn0HkUI74g960Y/t5FmiJT//Bj30hiLxPWA6HT8O2jvtUGKMLhN3cuOODU7cS6uoMPKYkmY982dElhpwNsuVW0wFs6ipQZeHJOlElS0sMU8chS1Q==
+    IGDB_CLIENT_ID: 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
+    IGDB_CLIENT_SECRET: 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
+    MYSQL_PASSWORD: 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
+    MYSQL_ROOT_PASSWORD: AgAM9VbquldN/0JPgLnxPPxqew0N+P6RxpfsGGuwM5zkYz4S4BJBqF2As9ezsebuX5lKFpjV9Ugn4XMWm1RxJjrQVJMUppoivpJKP79ODGS1hrSd8wv4PMJFSmqpriGppyIuVKMMdEe01PMuOuCUsA5zDkNWZn9e9PZqJXv6kP/fUDJcpeuhboO7xkiH38Zg3tJRTzmsUhmrqpzozYzb8+v0rYItJWPs9iLOr/vg5XKKSPGg2Mv75qd6P1M5gMLuYeFOSZrR839p5n0aX/FVdlYw0OiQ6mvxg/wF5m5hUN3mMwb2vzLOEbq6BkyGxJEOTafhaVR2QJ8Mq/xOCeNHPqyOyg98ghTwv0Ye1IKTkhGHJtLI8+NUWiOuFor3xsXNmR3gmpC9AWeI/pOgpnWR7B/xr+aHxXGzXabgIslLFaqyvDSFnikhr6tHJzr/1zo5+i/Lk/74O1VGFc4ltTl7yHkb5fyu8S23e1yxtpo9jnFLAM97SjbpSaPBJ5Gxz1k/R/UX9c/J8Z1aBGqZ77UVXbR3xcMeOOn27IiIoaHUTnIPjA46E44xyJOvLKSu5c3iBrXu3e308kQRfBlyB171syjRJGhZK9eaGBfEqFq14p0KDoIXjELl+QFCOcvRqjp+nXHodvDhsScTbVh9ax4/IcmW7kLjLKgCcVR60YVZLF/XVoLMkaGCD0MQkOq6tiPabqW6LMqrrcTEXZO3QVkHeRBe3Fl53GCQc8wm4Btqn3DXmA==
+    ROMM_AUTH_SECRET_KEY: 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
+    STEAMGRIDDB_API_KEY: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: romm
+      namespace: server
+    type: Opaque
+