Erich Blume
5a9596c7d9
- argocd/manifests/immich-ringtail/: full port of the immich stack
(server, ML, valkey, services, ingress, pvc-ml-cache) from
argocd/manifests/immich/, with ringtail-specific tweaks:
- deployment-ml: runtimeClassName=nvidia, nvidia.com/gpu:1 limit,
-cuda image tag
- deployment-valkey + kustomization: drop the
registry.ops.eblu.me/blumeops/valkey mirror (arm64-only), use
upstream docker.io/valkey/valkey:8.1.6 (multi-arch)
- ingress-tailscale: tls.hosts=[photos-ringtail] for staging
- argocd/apps/immich-ringtail.yaml: new ArgoCD app (manual sync,
ringtail destination)
- argocd/manifests/nvidia-device-plugin/time-slicing-config.yaml:
bump replicas 2 -> 4 so the ringtail GPU can be shared by
frigate + ollama + immich-ml
The immich-db Secret in the immich namespace is created manually
(matching minikube pattern) — see argocd/apps/immich-ringtail.yaml
header for the procedure.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
37 lines
1.2 KiB
YAML
37 lines
1.2 KiB
YAML
# Tailscale ProxyGroup Ingress for Immich on ringtail.
|
|
#
|
|
# Staging hostname: photos-ringtail.tail8d86e.ts.net
|
|
# The minikube ingress claims the "photos" Tailscale device name.
|
|
# Tailscale enforces uniqueness across the tailnet, so this ingress
|
|
# uses photos-ringtail until the minikube ingress is torn down at
|
|
# cutover. See [[immich-cutover-and-decommission]] for the rename.
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: immich-tailscale
|
|
namespace: immich
|
|
annotations:
|
|
tailscale.com/funnel: "false"
|
|
tailscale.com/proxy-group: "ingress"
|
|
gethomepage.dev/enabled: "true"
|
|
gethomepage.dev/name: "Immich"
|
|
gethomepage.dev/group: "Content"
|
|
gethomepage.dev/icon: "immich.png"
|
|
gethomepage.dev/description: "Photo management"
|
|
gethomepage.dev/href: "https://photos.ops.eblu.me"
|
|
gethomepage.dev/pod-selector: "app=immich,component=server"
|
|
spec:
|
|
ingressClassName: tailscale
|
|
rules:
|
|
- http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: immich-server
|
|
port:
|
|
number: 2283
|
|
tls:
|
|
- hosts:
|
|
- photos-ringtail
|