chore(k8s/magiclove/immich): add smb server

Author: uhthomas

k8s/magiclove/immich/server/deployment_list.cue

@@ -23,6 +23,24 @@ import (
 				volumes: [{
 					name: "library"
 					persistentVolumeClaim: claimName: "\(#Name)-library"
+				}, {
+					name: "external-library"
+					persistentVolumeClaim: claimName: "\(#Name)-external-library"
+				}, {
+					name: "smb-var-cache"
+					emptyDir: {}
+				}, {
+					name: "smb-var-lib"
+					emptyDir: {}
+				}, {
+					name: "smb-var-lib-private"
+					emptyDir: {}
+				}, {
+					name: "smb-var-log"
+					emptyDir: {}
+				}, {
+					name: "smb-var-run"
+					emptyDir: {}
 				}]
 				containers: [{
 					name:  "server"
@@ -69,6 +87,46 @@ import (
 					volumeMounts: [{
 						name:      "library"
 						mountPath: "/usr/src/app/upload"
+					}, {
+						name:      "external-library"
+						readOnly:  true
+						mountPath: "/external-library"
+					}]
+					imagePullPolicy: v1.#PullIfNotPresent
+					securityContext: {
+						capabilities: drop: ["ALL"]
+						readOnlyRootFilesystem:   true
+						allowPrivilegeEscalation: false
+					}
+				}, {
+					name:  "samba"
+					image: "ghcr.io/uhthomas/uhthomas/samba:6f48fe9eef20bc6966f2694e89d351c4727bfcd1"
+					ports: [{
+						name:          "smb"
+						containerPort: 445
+					}]
+					resources: limits: {
+						(v1.#ResourceCPU):    "1"
+						(v1.#ResourceMemory): "1Gi"
+					}
+					volumeMounts: [{
+						name:      "smb-var-cache"
+						mountPath: "/var/cache/samba"
+					}, {
+						name:      "smb-var-lib"
+						mountPath: "/var/lib/samba"
+					}, {
+						name:      "smb-var-lib-private"
+						mountPath: "/var/lib/samba/private"
+					}, {
+						name:      "smb-var-log"
+						mountPath: "/var/log/samba"
+					}, {
+						name:      "smb-var-run"
+						mountPath: "/var/run/samba"
+					}, {
+						name:      "external-library"
+						mountPath: "/data"
 					}]
 					imagePullPolicy: v1.#PullIfNotPresent
 					securityContext: {

k8s/magiclove/immich/server/service_list.cue

@@ -21,7 +21,12 @@ import "k8s.io/api/core/v1"
 			name:       "http-metrics"
 			port:       8081
 			targetPort: "http-metrics"
+		}, {
+			name:       "smb"
+			port:       445
+			targetPort: "smb"
 		}]
 		selector: "app.kubernetes.io/name": #Name
+		type: v1.#ServiceTypeLoadBalancer
 	}
 }]