Remove standalone qbittorrent — superseded by fornax workers
This commit is contained in:
Will Anderson
@@ -1,200 +0,0 @@
|
||||
# gluetun + qBittorrent — all torrent traffic routed through ProtonVPN WireGuard
|
||||
# Port forwarding via gluetun's native ProtonVPN support (VPN_PORT_FORWARDING=on)
|
||||
# gluetun writes the assigned port to /tmp/gluetun/forwarded_port (shared emptyDir)
|
||||
# portforward-helper reads that file and updates qBittorrent's listen port
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: qbittorrent
|
||||
namespace: media
|
||||
labels:
|
||||
app: qbittorrent
|
||||
spec:
|
||||
replicas: 0
|
||||
strategy:
|
||||
type: Recreate
|
||||
selector:
|
||||
matchLabels:
|
||||
app: qbittorrent
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: qbittorrent
|
||||
spec:
|
||||
initContainers:
|
||||
- name: tun-setup
|
||||
image: busybox:latest
|
||||
command: ["sh", "-c", "mkdir -p /dev/net && [ -c /dev/net/tun ] || mknod /dev/net/tun c 10 200 && chmod 666 /dev/net/tun && sysctl -w net.ipv6.conf.all.disable_ipv6=1 || true && ip route flush table 51820 2>/dev/null || true && ip rule del priority 101 2>/dev/null || true && ip rule del table 51820 2>/dev/null || true"]
|
||||
securityContext:
|
||||
privileged: true
|
||||
# Patch qBittorrent config before it starts: set password hash + performance defaults
|
||||
- name: qbt-config-patch
|
||||
image: python:3-alpine
|
||||
command:
|
||||
- python3
|
||||
- -c
|
||||
- |
|
||||
import os, re
|
||||
|
||||
CONF = '/config/qBittorrent/qBittorrent.conf'
|
||||
os.makedirs('/config/qBittorrent', exist_ok=True)
|
||||
|
||||
text = open(CONF).read() if os.path.exists(CONF) else ''
|
||||
|
||||
def set_key(text, section, key, value):
|
||||
"""Set key=value under [section], inserting if missing."""
|
||||
key_pat = re.compile(r'^' + re.escape(key) + r'=.*', re.M)
|
||||
if key_pat.search(text):
|
||||
return key_pat.sub(key + '=' + value, text)
|
||||
sec_pat = re.compile(r'^\[' + re.escape(section) + r'\]', re.M)
|
||||
if sec_pat.search(text):
|
||||
return sec_pat.sub('[' + section + ']\n' + key + '=' + value, text)
|
||||
return text + f'\n[{section}]\n{key}={value}\n'
|
||||
|
||||
HASH = '@ByteArray(HqYj1eGsdXlQ4CSy597Y9A==:J9hsJIlU5FYfHb5rY5qQoIpVpTijryS/H+CE07oMtplL/ytneBVFd2tfVJtqGjhdht8tEi4wmqSSlqTgEu444w==)'
|
||||
|
||||
# Preferences
|
||||
text = set_key(text, 'Preferences', r'WebUI\Password_PBKDF2', f'"{HASH}"')
|
||||
text = set_key(text, 'Preferences', r'WebUI\LocalhostAuthEnabled', 'false')
|
||||
|
||||
# BitTorrent performance defaults (only applied when key absent — API updates persist)
|
||||
bt_defaults = {
|
||||
r'Session\MaxActiveDownloads': '50',
|
||||
r'Session\MaxActiveTorrents': '100',
|
||||
r'Session\MaxActiveUploads': '20',
|
||||
r'Session\MaxConnections': '3000',
|
||||
r'Session\MaxConnectionsPerTorrent': '300',
|
||||
r'Session\MaxUploads': '-1',
|
||||
r'Session\MaxUploadsPerTorrent': '10',
|
||||
r'Session\GlobalDLSpeedLimit': '0',
|
||||
r'Session\GlobalUPSpeedLimit': '0',
|
||||
r'Session\DHTEnabled': 'true',
|
||||
}
|
||||
for key, val in bt_defaults.items():
|
||||
text = set_key(text, 'BitTorrent', key, val)
|
||||
|
||||
open(CONF, 'w').write(text)
|
||||
print('qBittorrent config patched.')
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
containers:
|
||||
- name: gluetun
|
||||
image: ghcr.io/qdm12/gluetun:latest
|
||||
securityContext:
|
||||
capabilities:
|
||||
add: ["NET_ADMIN"]
|
||||
env:
|
||||
- name: VPN_SERVICE_PROVIDER
|
||||
value: "protonvpn"
|
||||
- name: VPN_TYPE
|
||||
value: "wireguard"
|
||||
- name: WIREGUARD_PRIVATE_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: media-secrets
|
||||
key: PROTONVPN_PRIVATE_KEY
|
||||
- name: SERVER_NAMES
|
||||
value: "US-IL#1"
|
||||
- name: VPN_PORT_FORWARDING
|
||||
value: "on"
|
||||
- name: FIREWALL_OUTBOUND_SUBNETS
|
||||
value: "10.42.0.0/16,10.43.0.0/16"
|
||||
volumeMounts:
|
||||
- name: gluetun-data
|
||||
mountPath: /tmp/gluetun
|
||||
ports:
|
||||
- containerPort: 8888
|
||||
resources:
|
||||
requests:
|
||||
memory: 128Mi
|
||||
cpu: 50m
|
||||
limits:
|
||||
memory: 512Mi
|
||||
cpu: 200m
|
||||
|
||||
- name: portforward-helper
|
||||
image: alpine:latest
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
until apk add -q curl 2>/dev/null; do sleep 5; done
|
||||
echo "Watching /tmp/gluetun/forwarded_port for assigned port..."
|
||||
while true; do
|
||||
if [ -f /tmp/gluetun/forwarded_port ]; then
|
||||
PORT=$(cat /tmp/gluetun/forwarded_port)
|
||||
if [ -n "$PORT" ] && [ "$PORT" != "0" ]; then
|
||||
echo "$(date): Forwarded port: $PORT — updating qBittorrent"
|
||||
curl -s -c /tmp/qbt.txt -X POST http://localhost:8080/api/v2/auth/login \
|
||||
-d "username=admin&password=adminadmin" >/dev/null 2>&1
|
||||
curl -s -b /tmp/qbt.txt -X POST http://localhost:8080/api/v2/app/setPreferences \
|
||||
-d "json={\"listen_port\":$PORT,\"random_port\":false}" >/dev/null 2>&1
|
||||
echo "$(date): qBittorrent listen port set to $PORT"
|
||||
else
|
||||
echo "$(date): Port file empty, waiting..."
|
||||
fi
|
||||
else
|
||||
echo "$(date): Waiting for gluetun to write port file..."
|
||||
fi
|
||||
sleep 45
|
||||
done
|
||||
volumeMounts:
|
||||
- name: gluetun-data
|
||||
mountPath: /tmp/gluetun
|
||||
resources:
|
||||
requests:
|
||||
memory: 32Mi
|
||||
cpu: 10m
|
||||
limits:
|
||||
memory: 96Mi
|
||||
cpu: 50m
|
||||
|
||||
- name: qbittorrent
|
||||
image: lscr.io/linuxserver/qbittorrent:latest
|
||||
env:
|
||||
- name: PUID
|
||||
value: "1000"
|
||||
- name: PGID
|
||||
value: "1000"
|
||||
- name: TZ
|
||||
value: "America/Chicago"
|
||||
- name: WEBUI_PORT
|
||||
value: "8080"
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
- name: media
|
||||
mountPath: /media
|
||||
resources:
|
||||
requests:
|
||||
memory: 256Mi
|
||||
cpu: 100m
|
||||
limits:
|
||||
memory: 1Gi
|
||||
cpu: 500m
|
||||
volumes:
|
||||
- name: gluetun-data
|
||||
emptyDir: {}
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
claimName: qbittorrent-config
|
||||
- name: media
|
||||
persistentVolumeClaim:
|
||||
claimName: media-data
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: qbittorrent
|
||||
namespace: media
|
||||
spec:
|
||||
selector:
|
||||
app: qbittorrent
|
||||
ports:
|
||||
- name: webui
|
||||
port: 8080
|
||||
targetPort: 8080
|
||||
type: ClusterIP
|
||||
Reference in New Issue
Block a user