feat(navidrome): deploy navidrome to server music

Deploy Navidrome to serve a music library.

Author: d3adb5

argo/app-of-apps/templates/media/navidrome.yaml

@@ -0,0 +1,66 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: navidrome
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: media
+
+  source:
+    repoURL: oci.trueforge.org/truecharts
+    chart: navidrome
+    targetRevision: 22.13.0
+
+    helm:
+      valuesObject:
+        workload:
+          main:
+            podSpec:
+              containers:
+                main:
+                  env:
+                    ND_MUSICFOLDER: /music
+                    ND_PROMETHEUS_ENABLED: "true"
+                    ND_ENABLESHARING: "false"
+
+        persistence:
+          data:
+            enabled: true
+            type: pvc
+            storageClass: longhorn
+            size: 10Gi
+          music:
+            existingClaim: media-library-music
+            subPath: library
+            mountPath: /music
+            readOnly: true
+
+        ingress:
+          main:
+            enabled: true
+            ingressClassName: nginx
+            annotations:
+              nginx.ingress.kubernetes.io/configuration-snippet: |
+                location /metrics {
+                  deny all;
+                  return 403;
+                }
+              cert-manager.io/cluster-issuer: letsencrypt
+            hosts:
+              - host: navidrome.d3adb5.ca
+            tls:
+              - hosts:
+                  - navidrome.d3adb5.ca
+                secretName: navidrome-tls
+
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: {{ .Values.media.namespace }}
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true

argo/app-of-apps/templates/projects/media.yaml

@@ -12,6 +12,7 @@ spec:
     - https://charts.d3adb5.net
     - https://raw.githubusercontent.com/plexinc/pms-docker/gh-pages
     - https://oauth2-proxy.github.io/manifests
+    - oci.trueforge.org/truecharts
 
   destinations:
     - namespace: {{ .Values.media.namespace }}

argo/media/extra-resources/library-music.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: media-library-music
+  finalizers:
+    - kubernetes.io/pvc-protection
+spec:
+  storageClassName: truenas-nfs-hdd
+  accessModes: [ ReadWriteMany ]
+  resources:
+    requests:
+      storage: 4Ti