From ed7c339e61b41072fb2c827687c854554a718a6a Mon Sep 17 00:00:00 2001
From: Tyler Perkins <tyler@clortox.com>
Date: Fri, 24 May 2024 20:04:48 -0400
Subject: [PATCH] Add invidious

---
 invidious/invidious-deployment.yaml | 61 +++++++++++++++++++++++++++++
 invidious/invidious-service.yaml    | 13 ++++++
 invidious/sealed-secret.yaml        | 15 +++++++
 3 files changed, 89 insertions(+)
 create mode 100644 invidious/invidious-deployment.yaml
 create mode 100644 invidious/invidious-service.yaml
 create mode 100644 invidious/sealed-secret.yaml

diff --git a/invidious/invidious-deployment.yaml b/invidious/invidious-deployment.yaml
new file mode 100644
index 0000000..8575553
--- /dev/null
+++ b/invidious/invidious-deployment.yaml
@@ -0,0 +1,61 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: invidious
+  namespace: invidious-ns
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: invidious
+  template:
+    metadata:
+      labels:
+        app: invidious
+    spec:
+      containers:
+      - name: wait-and-die
+        image: alpine:latest
+        command: ["/bin/sh", "-c"]
+        args: ["sleep 21600; exit 0"]
+      - name: invidious
+        image: quay.io/invidious/invidious:2024.04.26-eda7444
+        env:
+        - name: INVIDIOUS_PORT
+          value: "3000"
+        - name: INVIDIOUS_DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: invidious-secret
+              key: invidious-postgres-password
+        - name: INVIDIOUS_HMAC_KEY
+          valueFrom:
+            secretKeyRef:
+              name: invidious-secret
+              key: hmac
+        - name: INVIDIOUS_CONFIG
+          value: |
+            db:
+              dbname: Invidious
+              user: invidious
+              password: $(INVIDIOUS_DB_PASSWORD)
+              host: postgresql.postgresql-system.svc.cluster.local
+              port: 5432
+            check_tables: true
+            hmac_key: "$(INVIDIOUS_HMAC_KEY)"
+            pool_size: 100
+            statistics_enabled: true
+            admins: ["tyler"]
+            channel_threads: 2
+            channel_refresh_interval: 15m
+            feed_threads: 2
+            banner: "Lol. Lmao even."
+            default_user_preferences:
+              default_home: "Subscriptions"
+              quality: dash
+              save_player_pos: true
+            port: 3000
+              #external_port: 443
+              #domain: watch.clortox.com
+        ports:
+        - containerPort: 3000
diff --git a/invidious/invidious-service.yaml b/invidious/invidious-service.yaml
new file mode 100644
index 0000000..0f6065d
--- /dev/null
+++ b/invidious/invidious-service.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: invidious
+  namespace: invidious-ns
+spec:
+  type: LoadBalancer
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 3000
+  selector:
+    app: invidious
diff --git a/invidious/sealed-secret.yaml b/invidious/sealed-secret.yaml
new file mode 100644
index 0000000..153cb5d
--- /dev/null
+++ b/invidious/sealed-secret.yaml
@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: invidious-secret
+  namespace: invidious-ns
+spec:
+  encryptedData:
+    hmac: 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
+    invidious-postgres-password: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: invidious-secret
+      namespace: invidious-ns