feat: add Transmission with Gluetun VPN sidecar

2026-05-24 14:14:53 +00:00 · 2026-05-24 14:14:53 +00:00 · 2026-05-24 14:14:53 +00:00 · 2026-05-24 14:14:52 +00:00 · 2026-05-20 09:24:18 +00:00 · 2026-05-20 09:20:48 +00:00
5 changed files with 170 additions and 0 deletions
@@ -20,6 +20,10 @@ spec:
      labels:
        app: khalisio
    spec:
+      imagePullSecrets:
+        - name: ghcr-pull-secret
+      nodeSelector:
+        kubernetes.io/arch: amd64
      containers:
        - name: web
          image: ghcr.io/richard-callis/portfolio:latest
@@ -0,0 +1,113 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: transmission
+  namespace: media
+  labels:
+    app: transmission
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: transmission
+  template:
+    metadata:
+      labels:
+        app: transmission
+    spec:
+      securityContext:
+        capabilities:
+          add:
+            - NET_ADMIN
+      containers:
+        - name: gluetun
+          image: qmcgaw/gluetun:latest
+          env:
+            - name: VPN_SERVICE_PROVIDER
+              value: protonvpn
+            - name: REGION
+              value: "New York"
+            - name: OPENVPN_USER
+              valueFrom:
+                secretKeyRef:
+                  name: transmission-vpn-secret
+                  key: VPN_USERNAME
+            - name: OPENVPN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: transmission-vpn-secret
+                  key: VPN_PASSWORD
+            - name: WIREGUARD_PRIVATE_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: transmission-vpn-secret
+                  key: WIREGUARD_PRIVATE_KEY
+            - name: FIREWALL_OUTBOUND_SUBNET
+              value: ""
+            - name: UPNP_ENABLED
+              value: "true"
+            - name: DOT
+              value: "true"
+          volumeMounts:
+            - name: config
+              mountPath: /gluetun
+        - name: transmission
+          image: lscr.io/linuxserver/transmission:latest
+          env:
+            - name: PUID
+              value: "1000"
+            - name: PGID
+              value: "1000"
+            - name: TZ
+              value: "America/New_York"
+            - name: USER
+              valueFrom:
+                secretKeyRef:
+                  name: transmission-vpn-secret
+                  key: TRANS_USERNAME
+            - name: PASS
+              valueFrom:
+                secretKeyRef:
+                  name: transmission-vpn-secret
+                  key: TRANS_PASSWORD
+            - name: WHITELIST
+              value: "*"
+            - name: HOST_WHITELIST
+              value: "transmission.khalis.corp"
+            - name: PEER_PORT
+              value: "51413"
+            - name: NVM_CONFIGDIR
+              value: "/config"
+            - name: NVM_DATAROOT
+              value: "/downloads"
+          ports:
+            - containerPort: 9091
+              name: http
+            - containerPort: 51413
+              protocol: TCP
+              name: peer-tcp
+            - containerPort: 51413
+              protocol: UDP
+              name: peer-udp
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: media
+              mountPath: /downloads
+            - name: downloads
+              mountPath: /downloads
+            - name: watch
+              mountPath: /watch
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: transmission-config
+        - name: media
+          persistentVolumeClaim:
+            claimName: media-data
+        - name: downloads
+          persistentVolumeClaim:
+            claimName: media-data
+        - name: watch
+          persistentVolumeClaim:
+            claimName: media-data
@@ -0,0 +1,19 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: transmission
+  namespace: media
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  rules:
+    - host: transmission.khalis.corp
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: transmission
+                port:
+                  number: 9091
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: transmission-config
+  namespace: media
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 10Gi
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: transmission
+  namespace: media
+spec:
+  selector:
+    app: transmission
+  ports:
+    - protocol: TCP
+      port: 9091
+      targetPort: 9091
+      name: http
+    - protocol: TCP
+      port: 51413
+      targetPort: 51413
+      name: peer-tcp
+    - protocol: UDP
+      port: 51413
+      targetPort: 51413
+      name: peer-udp
+  type: ClusterIP
Author	SHA1	Message	Date
gitea-admin	92b7649d37	feat: add Transmission with Gluetun VPN sidecar Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-24 14:14:53 +00:00
gitea-admin	4ceb90a24c	feat: add Transmission with Gluetun VPN sidecar	2026-05-24 14:14:53 +00:00
gitea-admin	9b5eaf9cd9	feat: add Transmission with Gluetun VPN sidecar	2026-05-24 14:14:53 +00:00
gitea-admin	2f4244985a	feat: add Transmission with Gluetun VPN sidecar	2026-05-24 14:14:52 +00:00
gitea-admin	9e2562897c	fix(khalisio): pin to amd64 nodes (image is amd64-only for now)	2026-05-20 09:24:18 +00:00
gitea-admin	277e834d5c	fix(khalisio): add ghcr-pull-secret imagePullSecret	2026-05-20 09:20:48 +00:00