k8scd/immich/helm-immich.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: helm-immich
  namespace: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated:
      prune: true
      selfHeal: true
  project: default
  sources:
    - chart: immich
      repoURL: https://immich-app.github.io/immich-charts
      targetRevision: 0.10.3
      helm:
        values: |
          controllers:
            main:
              containers:
                main:
                  image:
                    tag: v1.125.7
                  env:
                    # External PostgreSQL connection
                    DB_HOSTNAME: "immich-postgres-rw"
                    DB_PORT: "5432"
                    DB_USERNAME: "immich"
                    DB_DATABASE_NAME: "immich"
                    # Reference the CNPG secret for password
                    DB_PASSWORD:
                      valueFrom:
                        secretKeyRef:
                          name: immich-postgres-app
                          key: password
                    # Valkey (Redis replacement)
                    REDIS_HOSTNAME: '{{ printf "%s-valkey" .Release.Name }}'
                    IMMICH_MACHINE_LEARNING_URL: '{{ printf "http://%s-machine-learning:3003" .Release.Name }}'

          immich:
            metrics:
              enabled: false
            persistence:
              library:
                existingClaim: immich-claim

          # Enable Valkey (Redis replacement)
          valkey:
            enabled: true
            persistence:
              data:
                enabled: true
                size: 1Gi
                storageClass: longhorn
                type: persistentVolumeClaim

          server:
            enabled: true
            controllers:
              main:
                containers:
                  main:
                    image:
                      repository: ghcr.io/immich-app/immich-server
                      pullPolicy: IfNotPresent
                    probes:
                      startup:
                        enabled: true
                        spec:
                          initialDelaySeconds: 0
                          timeoutSeconds: 1
                          periodSeconds: 5
                          failureThreshold: 1000
            ingress:
              main:
                enabled: true
                className: nginx
                annotations:
                  nginx.ingress.kubernetes.io/proxy-body-size: "0"
                  cert-manager.io/cluster-issuer: prod-cluster-issuer
                hosts:
                  - host: mbg.hensen.io
                    paths:
                      - path: "/"
                        service:
                          identifier: main
                  - host: foto.scoutingmbg.nl
                    paths:
                      - path: "/"
                        service:
                          identifier: main
                tls:
                  - secretName: letsencrypt-prod
                    hosts:
                      - mbg.hensen.io
                      - foto.scoutingmbg.nl

          machine-learning:
            enabled: true
            controllers:
              main:
                containers:
                  main:
                    image:
                      repository: ghcr.io/immich-app/immich-machine-learning
                      pullPolicy: IfNotPresent
                    env:
                      TRANSFORMERS_CACHE: /cache
                      HF_XET_CACHE: /cache/huggingface-xet
                      MPLCONFIGDIR: /cache/matplotlib-config
            persistence:
              cache:
                enabled: true
                size: 10Gi
                type: emptyDir

  destination:
    server: https://kubernetes.default.svc
    namespace: immich