k8scd/immich/helm-immich.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: helm-immich
  namespace: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated:
      prune: true
      selfHeal: true
  project: default
  sources:
    - chart: immich
      repoURL: https://immich-app.github.io/immich-charts
      targetRevision: 0.8.5
      helm:
        values: |
          env:
            REDIS_HOSTNAME: '{{ printf "%s-redis-master" .Release.Name }}'
            # External PostgreSQL (CloudNativePG)
            DB_HOSTNAME: "immich-postgres-rw"
            DB_USERNAME: "immich"
            DB_DATABASE_NAME: "immich"
            DB_PASSWORD:
              valueFrom:
                secretKeyRef:
                  name: immich-postgres-app
                  key: password
            IMMICH_MACHINE_LEARNING_URL: '{{ printf "http://%s-machine-learning:3003" .Release.Name }}'

          image:
            tag: v1.125.7

          immich:
            metrics:
              enabled: false
            persistence:
              library:
                existingClaim: immich-claim

          # Disable built-in PostgreSQL - using CloudNativePG instead
          postgresql:
            enabled: false

          redis:
            enabled: true
            architecture: standalone
            auth:
              enabled: false
            master:
              persistence:
                storageClass: longhorn

          server:
            enabled: true
            image:
              repository: ghcr.io/immich-app/immich-server
              pullPolicy: IfNotPresent
            ingress:
              main:
                enabled: true
                ingressClassName: nginx
                annotations:
                  nginx.ingress.kubernetes.io/proxy-body-size: "0"
                  cert-manager.io/cluster-issuer: prod-cluster-issuer
                hosts:
                  - host: mbg.hensen.io
                    paths:
                      - path: "/"
                        service:
                          name: sol-auth-svc
                          port: 8002
                  - host: foto.scoutingmbg.nl
                    paths:
                      - path: "/"
                        service:
                          name: sol-auth-svc
                          port: 8002
                tls:
                  - secretName: letsencrypt-prod
                    hosts:
                      - mbg.hensen.io
                      - foto.scoutingmbg.nl

          machine-learning:
            enabled: true
            image:
              repository: ghcr.io/immich-app/immich-machine-learning
              pullPolicy: IfNotPresent
            env:
              TRANSFORMERS_CACHE: /cache
            persistence:
              cache:
                enabled: true
                size: 10Gi
                type: emptyDir

  destination:
    server: https://kubernetes.default.svc
    namespace: immich