From a55366a6c1c797fc83994fe12f2c276643d7dd12 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Wed, 21 Jan 2026 17:20:18 +0100
Subject: [PATCH] Change helm-immich

---
 immich/helm-immich.yaml | 71 +++++++++++++++++++++++++++++++++++++----
 1 file changed, 65 insertions(+), 6 deletions(-)

diff --git a/immich/helm-immich.yaml b/immich/helm-immich.yaml
index b669afe..ec71e7b 100644
--- a/immich/helm-immich.yaml
+++ b/immich/helm-immich.yaml
@@ -37,37 +37,90 @@ spec:
 
           immich:
             metrics:
+              # Enabling this will create the service monitors needed to monitor immich with the prometheus operator
               enabled: false
             persistence:
+              # Main data store for all photos shared between different components.
               library:
+                # Automatically creating the library volume is not supported by this chart
+                # You have to specify an existing PVC to use
                 existingClaim: immich-claim
+                        
+            # configuration is immich-config.json converted to yaml
+            # ref: https://immich.app/docs/install/config-file/
+            #
+            configuration: {}
+              # trash:
+              #   enabled: false
+              #   days: 30
+              # storageTemplate:
+              #   enabled: true
+              #   template: "{{y}}/{{y}}-{{MM}}-{{dd}}/{{filename}}"
+
+          # Dependencies
 
-          # Disable built-in PostgreSQL - using CloudNativePG instead
           postgresql:
-            enabled: false
+            enabled: true
+            image:
+              repository: tensorchord/pgvecto-rs
+              tag: pg14-v0.2.0
+            global:
+              postgresql:
+                auth:
+                  username: immich
+                  database: immich
+                  password: immich
+            primary:
+              containerSecurityContext:
+                readOnlyRootFilesystem: false
+              initdb:
+                scripts:
+                  create-extensions.sql: |
+                    CREATE EXTENSION cube;
+                    CREATE EXTENSION earthdistance;
+                    CREATE EXTENSION vectors;
+              resources:
+                limits: {}
+                requests:
+                  cpu: 200m
+                  memory: 256Mi
 
           redis:
             enabled: true
+            image:
+              repository: bitnamilegacy/redis
             architecture: standalone
             auth:
               enabled: false
-            master:
-              persistence:
-                storageClass: longhorn
+
+          # Immich components
 
           server:
             enabled: true
             image:
               repository: ghcr.io/immich-app/immich-server
               pullPolicy: IfNotPresent
+            probes:
+              startup: 
+                enabled: true
+                spec:
+                  initialDelaySeconds: 0
+                  timeoutSeconds: 1
+                  periodSeconds: 5
+                  failureThreshold: 1000
             ingress:
               main:
                 enabled: true
                 ingressClassName: nginx
                 annotations:
+                  # proxy-body-size is set to 0 to remove the body limit on file uploads
                   nginx.ingress.kubernetes.io/proxy-body-size: "0"
                   cert-manager.io/cluster-issuer: prod-cluster-issuer
+                  nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
                 hosts:
+                  # - host: immich.hensen.io
+                  #   paths:
+                  #     - path: "/"
                   - host: mbg.hensen.io
                     paths:
                       - path: "/"
@@ -80,9 +133,11 @@ spec:
                         service:
                           name: sol-auth-svc
                           port: 8002
+                      
                 tls:
-                  - secretName: letsencrypt-prod
+                  - secretName:  letsencrypt-prod
                     hosts:
+                      # - immich.hensen.io
                       - mbg.hensen.io
                       - foto.scoutingmbg.nl
 
@@ -97,8 +152,12 @@ spec:
               cache:
                 enabled: true
                 size: 10Gi
+                # Optional: Set this to pvc to avoid downloading the ML models every start.
                 type: emptyDir
+                accessMode: ReadWriteMany
+                # storageClass: your-class
 
+          
   destination:
     server: https://kubernetes.default.svc
     namespace: immich