homelab/k8s/apps/paperless/paperless-values.yaml

image:
  tag: 2.18.2
resources:
  requests:
    memory: "1Gi"
    cpu: "500m"
  limits:
    memory: "4Gi"
    cpu: "2000m"
initContainers:
  install-tesseract-langs:
    image: ghcr.io/paperless-ngx/paperless-ngx:2.18.2
    resources:
      requests:
        memory: "256Mi"
        cpu: "100m"
      limits:
        memory: "1Gi"
        cpu: "500m"
    command: ["/bin/sh", "-c"]
    args:
      - apt-get update && apt-get install -y --reinstall tesseract-ocr-rus tesseract-ocr-jpn tesseract-ocr-chi-sim tesseract-ocr-eng tesseract-ocr-ell && cp -v -r /usr/share/tesseract-ocr/5/tessdata/* /custom-tessdata/
    volumeMounts:
      - name: tessdata
        mountPath: /custom-tessdata
nodeSelector:
  kubernetes.io/hostname: nas.homenet
env:
  TZ: Asia/Nicosia
  PAPERLESS_URL: https://docs.hexor.cy
  PAPERLESS_ALLOWED_HOSTS: docs.hexor.cy
  PAPERLESS_REDIS: redis://:NOTSECUREBUTMAYBELOCAL@paperless-ngx-redis-master
  PAPERLESS_CSRF_TRUSTED_ORIGINS: https://idm.hexor.cy
  PAPERLESS_OCR_LANGUAGE: "eng+rus+ell+jpn+chi_sim"
  TESSDATA_PREFIX: /custom-tessdata
  PAPERLESS_TIKA_ENABLED: "1"
  PAPERLESS_TIKA_GOTENBERG_ENDPOINT: "http://gotenberg.paperless.svc:3000"
  PAPERLESS_TIKA_ENDPOINT: "http://apache-tika.paperless.svc:9998"
  PAPERLESS_DBENGINE: postgresql
  PAPERLESS_DBHOST: psql-nas.psql.svc
  PAPERLESS_DBPORT: "5432"
  PAPERLESS_DBNAME: paperless
  PAPERLESS_DBUSER:
    valueFrom:
      secretKeyRef:
        name: postgres-creds
        key: psql_user
  PAPERLESS_DBPASS:
    valueFrom:
      secretKeyRef:
        name: postgres-creds
        key: psql_pass
  PAPERLESS_ACCOUNT_AUTO_CREATION: "true"
  PAPERLESS_ACCOUNT_SUPERUSER_GROUP: PaperlessAdmins
  PAPERLESS_ACCOUNT_SOCIAL_OIDC_GROUPS_CLAIM: groups
  PAPERLESS_DISABLE_REGULAR_LOGIN: "true"
  PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect
  PAPERLESS_SOCIALACCOUNT_PROVIDERS:
    valueFrom:
      secretKeyRef:
        name: postgres-creds
        key: oauth_config
ingress:
  main:
    enabled: true
    ingressClassName: traefik
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt
      traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
    hosts:
      - host: docs.hexor.cy
        paths:
          - path: /
            pathType: Prefix
    tls:
      - hosts:
          - '*.hexor.cy'
        secretName: docs-tls
persistence:
  tessdata:
    enabled: true
    type: emptyDir
    mountPath: /custom-tessdata
  data:
    enabled: true
    type: hostPath
    hostPath: /mnt/storage/Storage/k8s/paperless/data
    globalMounts:
      - path: /usr/src/paperless/data
  media:
    enabled: true
    type: hostPath
    hostPath: /mnt/storage/Storage/k8s/paperless/media
    globalMounts:
      - path: /usr/src/paperless/media
  export:
    enabled: true
    type: hostPath
    hostPath: /mnt/storage/Storage/k8s/paperless/export
    globalMounts:
      - path: /usr/src/paperless/export
  consume:
    enabled: true
    type: hostPath
    hostPath: /mnt/storage/Storage/k8s/paperless/consume
    globalMounts:
      - path: /usr/src/paperless/consume
redis:
  enabled: true
  master:
    nodeSelector:
      kubernetes.io/hostname: nas.homenet
  replica:
    nodeSelector:
      kubernetes.io/hostname: nas.homenet
  global:
    redis:
      password: "NOTSECUREBUTMAYBELOCAL"
postgresql:
  enabled: false
mariadb:
  enabled: false