helmrelease.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: ascii-movie
  namespace: ascii-movie
spec:
  chart:
    spec:
      chart: ascii-movie
      version: 0.16.3
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        namespace: flux-system
        name: gabe565
  interval: 1h
  driftDetection:
    mode: enabled
  valuesFrom:
    - kind: Secret
      name: ascii-movie-values
  values:
    env:
      TZ: America/Chicago
      ASCII_MOVIE_CONCURRENT_STREAMS: "5"

    podLabels:
      policy.gabe565.com/ingress-prometheus: "true"
      policy.gabe565.com/ingress-world: "true"

    service:
      main:
        loadBalancerIP: 192.168.1.225

    securityContext:
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
      capabilities: { drop: [ALL] }

    podSecurityContext:
      runAsNonRoot: true
      seccompProfile: { type: RuntimeDefault }

    serviceMonitor:
      main:
        enabled: true