From fd129e7701eeaefedcf410ab7e4de9a1a48a30f5 Mon Sep 17 00:00:00 2001
From: Jory Irving <46251616+joryirving@users.noreply.github.com>
Date: Fri, 29 Nov 2024 14:35:48 -0700
Subject: [PATCH] feat: deploy dashbrr (#3275)

---
 docs/src/assets/icons/dashbrr.png             | Bin 0 -> 7418 bytes
 .../crunchy-postgres/cluster/cluster.yaml     |   4 +
 .../downloads/bazarr/app/externalsecret.yaml  |   2 +-
 .../downloads/dashbrr/app/externalsecret.yaml |  63 +++++++++++
 .../downloads/dashbrr/app/helmrelease.yaml    | 107 ++++++++++++++++++
 .../downloads/dashbrr/app/kustomization.yaml  |  18 +++
 .../main/apps/downloads/dashbrr/app/rbac.yaml |  22 ++++
 .../dashbrr/app/resources/config.toml         |   0
 .../main/apps/downloads/dashbrr/ks.yaml       |  27 +++++
 .../main/apps/downloads/kustomization.yaml    |   1 +
 .../downloads/radarr/app/externalsecret.yaml  |   2 +-
 .../downloads/readarr/app/externalsecret.yaml |   2 +-
 .../apps/media/plex/app/externalsecret.yaml   |   2 +-
 .../media/plex/kometa/externalsecret.yaml     |   2 +-
 .../plex/movie-roulette/externalsecret.yaml   |   2 +-
 .../homepage/app/externalsecret.yaml          |   2 +-
 terraform/authentik/applications.tf           |   9 ++
 17 files changed, 258 insertions(+), 7 deletions(-)
 create mode 100644 docs/src/assets/icons/dashbrr.png
 create mode 100644 kubernetes/main/apps/downloads/dashbrr/app/externalsecret.yaml
 create mode 100644 kubernetes/main/apps/downloads/dashbrr/app/helmrelease.yaml
 create mode 100644 kubernetes/main/apps/downloads/dashbrr/app/kustomization.yaml
 create mode 100644 kubernetes/main/apps/downloads/dashbrr/app/rbac.yaml
 create mode 100644 kubernetes/main/apps/downloads/dashbrr/app/resources/config.toml
 create mode 100644 kubernetes/main/apps/downloads/dashbrr/ks.yaml

diff --git a/docs/src/assets/icons/dashbrr.png b/docs/src/assets/icons/dashbrr.png
new file mode 100644
index 0000000000000000000000000000000000000000..6ffb3b83417bb5f2e2be3e2cd884da3d69bb0b1b
GIT binary patch
literal 7418
zcmX|G1ymK^*L^e+QcA}YBoyiHE|m^J>F!3lyGy!3=?+1<JEgljADwT$hrj>&?pkx_
zoOAcx`<yc~Yt5PoRgjayL?cE6fk2ot(&9?6bNlmwiU6C9;L|xkAh=IvD(a5vvY&Yk
zY^)gd3~ls{7+tJvVe23ezmSWqo`HptBUs<a#LQZN^0cXq5^QEDK>3A3mRZ(T%*fPC
z+Rffb*-cKxz|F#d$B<G;5RKo37e-)Z<fsRBv9h#w;B^t8{Kv}+v!BCEl;D35M+*T;
zk!L}$x~u|N%*Ngb%)!XXV8Fu04d&uuWZ~f9W@Y~XW@TpKWMbxFVqs@sX5nS#;bmq4
z|8GzVqJjDC4UKt~#3lbH2J-|cO&uL=d6}4;ot+t-*%)o?O_*4CczBqYS(#W_8DIzo
z2UlxHJr@RR2dZa^|2V{r91QHuY#q&PtijKmdipj_jsldFOwS@r|5JgL$Mpa8!JPl^
zkdZa4E%vbb!7}B%u-+k>h{%e7KvmJ`k9tTjAI?EZN)%K+O1cjMA%GM<t4P3tk|BMP
z!F`fpU9edxqE{lg?^8&xbZC!MaGykIk3>+PR7fAp7LOQzhK2OP@Gy)-aPPAl-21%b
z2ebckpTUyB{m(EM<{wfruwOFhSptTX4E(3{%=3>5w(B3^GgVN}zf7JLVf@d`A^p$s
ze^gS>{5}6vU;tSBKe^}a62U#s89wViC;u<<Y{NvK6@&X>OaCSOKTJ@+I4r|w>HkW5
zCV}z)TZL_b8P8g)XHZx~I<yY}fR$6|@+tIVSpU)qR63+jCbXa4sfE$Gb>$4o@7r|^
z1^9frm|R-v9GWkoz#{;>b8KOCYu~>CgadlkA;88tuyp~zYB{(C1pT^Y!usz3;0XYv
zLi<i0fCm7ewrdg#>}7Fny9WSnug=3e;1&SHgL*kVJ9e)C>Cj#w|892ob~d;6YXG=>
z0ysQ67{0ekhxQ-e1CU4H>;YJV0Bh#}uXpDa06+m?@dUbe4ZyC^hwm+-fjyKqjSA62
zHvq764a=>0`x2nFZ~nV`fBpnG7R-JMA9!oqWRx-KUb+zdXMGI<{gyat`*UXf9OzlS
z(n%f<ty|Sd7?q6}U~*~GPn$To2jZJID#wr0I(OO^FA`fffA;Ug`Y9FKKY#Qzd-!;8
z2bg9}=JxIdRIj)cFBA_Sgx9ZD|2>h599%sE>LyQA<3_&3k67hSC%12VS1dKoo_#Nz
z+q!@*9zXW4U&9j6N*ePlTb$m%_pMqk7~Bu4T^ZTBSw4YwEM3eW-It9X!R`(7?5T;}
zo578n)_F))_pWm6aMK*bBy(zf=XUk%aryMAe)`lRXPV2iEA02$;QA$*Wdqpy&&K(q
zef~_($~lo){pi*un`_xL>>1E@RFYE$wS=LbBQRlz`QWk6DI&#xDi)AT&OgBd_qaAV
z)eRHb(bMUFVb`)wk4T(&68~z<qf+Tr6LYk^%oT`FW;xI`Q?zlrwFW8klkG5l_?aUd
z;{JAb^5FjJ^5PnRTtg$ur9dEpSs8H=6_<r$EfjTSlf|g76ODFiho$ayPHI+VYK!I;
z$CVckM_KXlBDm+lZ{PaH#7K+cBf?{1-_G$7ivPA$Xq(Ydq_-}q<33n1J+=leGT&ma
z8NSJZG&WR}TvMhyob&H`uIzepa%(cVO@wP-<`T5*NiezTbriCQsg-63-Ca3n!EWud
zNM)1A<U7r_g5Y~7-b#RiX4?q@^h(70*4`=$(;-n-eQO(%-pnZkUmff%yTb3ZUi(EL
z5!!(cE;yS>p7$4sg%Svgg-|KrnX!L$b94KQks)`p8N?<*WG0f4qAqB5c|^b;4%M^3
zX)GkFE&U`R^hMLW*|zvh*K2<?t`r=UDEBFeo+y^cjI2Su%JTl>nBE$dIJ78s9|aS)
zNWE+{D$1B764G4lnPf9dLHB;iJA!y{>%MP~lFt?bX^zbl0USa=IJecv>Z<{L1Ox=M
zh_Hc-W*_iI#=MAKM#9bZ<hriWf48dv%HGI2l^V>{C!fB7pL!oj;uC7u#mtzAA`L0=
zQI>JRc#G;{cmI}!cEI*e>xn3|s(Z<idex1ArYv)2c}o6vD`hOJqkGpz-m7TxiarKu
zZH1#(@9%1F2#xr#VokU+*Om$7&!4Y{3CWN8fb~!B4bF$+vzDCW3U4A)@C;dUh;u|f
zNINbd!~SG%jC$}=QwzJ}eEiB2--+PKfr|9qMacZI^<KEg&*q1Wae~vg@Gg=_eU%UT
zJ$5|wVe)4zLf@D7ta&K4?RWUy=I^5*{V34a1LDo}VDmZLsPze~T{d+^v$9VsCTsC*
z%-t{U>qqJv_1YJ)Ux}{{bu^)^=92~{-{{KAyb51@{|U&v4QSE}a-i}3vPd==Lor!9
zJ9W$0UO$i>tSrwpb-PU?YD_Lj23?3}W?tYyHm+NSz?~Z;pD1#+hJ($gDi8KjsP?Cc
z5{>pA5G8deb_rd6A4mE6_?}5k+?M+rDiq?qJVqNcQkWp~Bs(V`S4GZrj`EG>Wr>OO
z#=WIMjaS`$d4ZnmF+5c1syR!jzD<fiwQzC<k70T^eM^ft5QAw`L2tG^en{&$@FI1e
z6k)7xndJmMJCN}sL>?p8hQD;dolDDlWz0azDbWAd=s3`NMHb(|qktHHwhU5wneOKJ
zMTDcHyYrFp7L%SVo&uuQ#K3uKf%-QART;7jkBe2l{Eaf)Pru^}L-HCg3KJeFOJ#G*
z6*rm(zC(!E5&6qAA@j9cJ`HvnqNnOF#*NkyyyM~yyy*!~tKt!V4scnb15O$7mEtW(
zI*o{E@PnL1BJu^BAR3=7HLDwI)UA<C?5<?y#;r(iaRUcN3iep?%a{$ro5XP2sf@SC
z{VdYL!f|X$KVU=p5L44t$mQu&a<I`{i-<*ZHH7_Yh>Jooz0-PdQ}EX%xE#*jRIm4A
zxaBEOMn%bqlInXlzn@kJ@^-mS^Bh^kVLyEcQu?sgLoz?1UzE&%;b_c7Yr7Ht*G#1n
z^;=&<lCMYwSVwecm%M~~$z?sblkLtsy`idR$78#yNkgjmJGhWH&Z*RX_UZ3qC;Drr
z;BpVV&UNvNv#9R^GN?&ez(_4>yp97s3cc?r750zXOGj+H+=sh?yxR5kL2;V+0gx`u
z`z|L<AzpzX$#}MEulKyRjp|Bi8wyct3t4scKm6sFNw7)ac%ri-y3K*hv(nyR$SWy(
zahbqV76*eD8O?>GRT>qF=qO+H*6Em%_`}T(!L!)-&@aE<OoxtqFe@6^LgAYmR90)5
zzoQq_-u~F1zuGIWWeE3v?l1su`;$_Q{4X{?K9@IS;<vn8{&%k_8s18YwFH-vt(riR
zdAfu&S?#X#HQ0h$+0574V^IYOxy|>&Ckw1ePg-`$#;}v7E*)ni0@;WYC<90gL$_W^
z+BPx$CJGKw-$G8f>ijXkhVE>5g2uvaLT<(#z2(IR5;)Zru=62<knxR@ee+_hMl^Ii
zQswNCL68UO;N1CgsQbK@UEce7I%lOGFfMPT2EZ3^pT28v<9{i|9pZx5HCtOEv~u8e
zj}jq~`Je;vRaVfeaX!*w+6wPY^8B{cQJv!zy0;?YF}RAuN*YPKfbOu^fFkA}q3IJ{
zNmp7NdRO68+Fp8t%zQa))klb>RqnVC8?J77nX}@x+#_*rjPYS~KC&6r^w&gtujmhf
zrC}mZ0`GGsWl5~NvA*3#)$e0*EB^Q&D5{OSnyHy0)%WX+Vy096dLx~G3feQij=nYw
zQW-M)qw2*dp~qe${K5Z_buz}Jt-h!3wdtvRMA~)>srj^jl%DZUO*F0h*mA8cy6q$v
z+@h+Q$t)5zlKrTfA>@uowSZijBfm_JU3#oCX4B_PvhT}%q5#^AhSu#t^=tHO+Rh|;
znrOJHPqBOX6SLYr@PgpDeabrzqs($S%TYdsIi8$$#)TP0x_d9HUHaYMf%2SUGrJOB
zk#)Lt-#aPV3%SuhZhh5qq4a+fwq+8aPks9te47==K98;=wHj+SQA3bR19jup(A7_*
z<RMOg6Ky9WB&=WJeA1~!zLT`E5-9CTwkMVy+Cqsfi8@}mQ{GSU4-^7(yU?^<_Ks>L
zXsGgKGYg6pUFA*eP4gNX&Uy3kb6i5Kt1`$wZ={bJ#*EA=-5~}4+zB6A6H@ON4B|C*
z)Q+fg#g(sjxi^s2rx;4wy{C^pvau{|)ABkLxeyaEw`yMLM;3lcCWV7qUR)3D4%)1i
z2vrv3p7q|9Do}UYU@Xh`^)ox*X1+EZi@@8n&@U`wSI9$U5WSdDBQ1L=R+xI=D7~OB
zz_1V|_}+gA_t=Kt^)!u}MJmG(BUBl}j@<2y!HfWTi<zpD`JNGR{oU8HwUBu`KhIq`
zoh65cs>(}#B8@+ee;8x$W>bzpd>Dm_tc$`G^>d%$uOrRHu~&{Y>6rH~MyD!t%pra>
z*?#D%hoc0`XtDNjDt<I3@hrZ?If7q@6~${dkrthGO6Z%b=;@EdKc$nsc(2C3qgdwr
z**Y(G&OV(iOyv8FyK?$D%2%vhSK<4C2tTduH@JC|wa(IzH>KUwp*$0Iem1F_n@2=A
zzHewB7g}W6@ZR9lrasXkSZ?N&r)aOeF=VLk=x5=#J9{sZjZ=*HeUr)ejgXV>T7eq!
z#&10F5Xz_VUq7i8G7axGCz+%DPG7t#k>CC*h2r_hR5(Hz!1Z&+G*+v5{`LLDO%}mI
zy5{HZ8;qa9kBeo(!#SK|vTiRPt(z|{+x%OBrQ(u-?#x_@3Y^68vZ+EjM~?DH-*Crl
zo%B%=S%iZuQoP5Ei{B6N{_x&uL}u$gF|o5?Yc{^iq%O)>`HWFg4|oqDH`8!Gzf+MP
zp;&;qU|11R8+kyPqm((sj{3Z+M)8KHzpi6F8jw3tyobEa+%R;?XJx1RoI+c|j8^so
zzdAe*Y+6zuPXcO&$2p|?+<EhXj`;RE#UNDENX@H-a`gT<f#_mi?sUVh{l@<htIM}l
zU>LN4=-mTZemZWc(YMoe?~_s#N5F9|AOxwB@|}PD*_^2jQpU~d!>4_b#@oubukEJb
z&edbx85cw7%5$HUy}I*Pnh_pZ+wMCG9xI7%7|KMnjS@jG_dC&SWXieI^03`Qk;{i(
z9ZUmofWRptLVV02YePK`c^ybxh75g9MlOI~#~n*Cr}imKSpK<pOVgCSPls~F+06Hf
z?<Vr_!S_ks7`yP9YZzxaNyhFo@G)z=wrIj~D&P<BLEMLwpU(@Cm{%eU_3yjqaNnXe
z5p5`<3kQ&}`9^Yey+EGvJ5$cd9f;p62my>kgzo~DMRRv0Ef=`!Pan|1bdiS|-;(Lr
z)$;w3Tn3ESyv`1KDrzMRQ=~@G1U~w$#j^@85P!=b3o1L_6m8T(_NRS;?U9NfN~(`D
zm(nVGk@M0?v;(>;hDa{n)<}&pGJn%UxoQ!}BjZb|?SaFlIkbK7mkrC%{pHg;%O@>-
zX%&6y0b5U5rd1OXsv!K)XaOY+2XCN!)4gVhfA^_RYE^185=Z@Ag`nwD*0An`-vtSI
zg3ij9(sc+%=bmshPY>OjfnO<w_9<2+GYQ1+{JprxNf`z>gHRnX;C*}jIhlJ1wNjHL
zD;2$dBcjSz@*i|g8_H?=F|Aw(D|*)n;r*f*!US;yBW4Z99ph5roQ8t&yBHE&g{35Q
zGeI^Uk<2k(I!LrJ{Bd4rSd6s&<DE6mRcJoiVwTA7Z^~KtdZ-3&sH=J~Sv1){a*?w+
z2$FC|4GK|{uW`o>&Y2sOF;9bq<JDfk!TG`qJf5{;M6ybL=;Z`A$F7=LZ14+jD=1wx
zMJEc)?OI^_z51rao>ulnpb$L|DaUSQg7ZW6tO)Kg2H#qiiEz6hY2LPS&3lXMtbQSN
zmxE5Mz+Ze_!wGVW`3u#;BI}}V2Hzn<V?K_j6}jw!{zX&v6H`2N-VwMtoTA-H+MFZ6
z9T-6=`NvuGBt?wMVD5rx>N&Y#+qQVC&`A~-A7<(W?~&mHeK@HqCVljxZ2Ap`%7`k)
zhx>Z3t!#ZK64Ts9h92%7C6|FS0RLtRlFvPe#84iNJmzAy5!c$aJCed?b6Z>_hQeq5
zljs`lY^6#GcqhZ)^ja#?NWhTH?!EA^ZQ0>#O9O18FvAr?XZ8R(G`;PL6r`)TObvLk
zQCF+kR5IfpKWe%I1z)MRoeUZu%q!I#>r6z&j_8Lm+~H98l1b6;LK?h(hl>KHJ~n~d
zlv2{RJDKD!M(;i{{v{=FSwyAuJ3*Rp4Lp#dN0GLV498CuUD!;`99L*f?}BPEo|F3F
z`@Zf>v;<2aT%2p<Q<0tzw9xIt35moj=hhgU&GkuB#9-an3?~wXw7Q6)l6tR6TL;~#
zydD2Ie{yr|Iep`(_dC3aOi!D6124ch(<OVu_EqtYjRjh+pD)7GyFwEWkE4fla^?U=
zIO@jc5`of9-!I4m34B<mMGaUJ+xaI2Wy+G2z&X`W<Vn4FAcy8`m;$dM+f2&f``pJT
zGet@VF0(AV20I%npkR5uAp`D7R-qFIqL_48rK2@rmOiTT$-NdpvLiVDgem`;cFT<P
zfw+4s9x6CWt!=4q=Z^5bMuvD*N~QEs@{6S^8q*y;!Y@~Mww`SHC}#x=!?grkPhNuB
z#yROnw~{B`@3}ot?I3Ao7wVO(crf*%EiLd^^<IJa+t(XmNQ>6Xse-&t%RnnF#e$*c
ztka7}lA#r|aBY6{zlf?Mj0G>GkJ2<!*vsPJ!r~3kI<bn5f4NE9YLVxJ_f;bJBqRAZ
z3yi8F!&5&1VOE&4C_{fnEcuXS4xIa(#^XQ69BU&X-}#ncD8x}rlv&vLYutq)@_oAn
zrFv$q^I-f8`k|6nWs8nNq*!kiZ6zH8U6*fX>^mmMSy(SdRa~<$UEYe>rx+&X_S|<G
zKT|MtxW#1IC!nGDv%r8^@=3p`GBng~m2Bcog=5+uBXi92m_p*rvN;VuZVGl|VQaH%
zMAg2*P4U^OLM9LHcypt#eg{x#C{GLK>sOv^IIooC>_5dHkh1UP+V6v@jFM<sJxUi|
zeV#OEtz+TId(n#c-6t*ecSp>NuX?rgdQ5Q&n)~v<8IPCX7kV3JD=~3%@54xsd}fzL
zg}&aTe%lRW*(E`xkj&`%om-h;dU0%K$)SP_#1bqy$+s&`OsctuN8gD;Y(2FNE&0NP
z9}w9ZGy<KTqW?;1t__blkHP!Qyuw*GE<;C;c`RThZJtoIilrSdCXJ6K0@2Q#_nTh3
z<+u|PlA&Av5spMZ1*)T(@}5XCP<lZ-^MroL1OtU9ya>Zp&i9enCMCaxJ8bn|x#Z}m
z=dU(%5?s1IFiRwfG0QhkvSdHPo!etQeH(|fml!?Ki&JzHj%xJ|*SI*aRo+JTRgI0n
z$$8sTR6Ty5Vq$l)2(P!^ltC;g@pifs%clP`o>u-hNwVaKH`PKHH!-8Q;_U5rthP^K
zde-{72pfk|#~VDcLR3UkXRVYWMjuVetV`}iSD>87HjjBnqn8gf?aunF9@!xwDb~3Z
zRt{Gc4(xDa^#j=OvnPyxtO@z*bB-mrAoy23#UFU-JCZj<{N#68Z~|Xf4a#0_=GUL*
z)<911rv3sJf(m&f2B|bZTDbleOT@?YmNn-2S;%BKgCx$uis-4sTn*t~Q)5^aZv8d%
z_kMfsfgCE{uF3Pj!ub2K6=BaEXiR`W4_n}5XMsN^00BEsVC5&_oWER5$_8y_@@u^6
z(lnM*pG_Qv_s>OLD#bq9@C>`WStDfKVx(`J#@!BQtT{F|-AGN@>D579Xl&<A371<M
z;`h;NmRI~~yd7J%Xw*budJ?LgSMME0G(>fmm{TBDR<~}h;Qy*7%c}i@kF<4>D1+MY
z{V(fI^V;j%DE|qa`|}9tT5N+2-G~j(Z6@`ehma14kG$9_fO|6`gc0z`sgHvnMP$T*
zXwK8ja~v0$BZyW6x4kKW<}Pbj@LrMZBLnw7U7Mk{FC-&36-=k0MZBs3QdT)zA!HaA
z5_DLW7NUcP=rJ=Ll96`w+Q*t<@vnA}KVV0iIDUtxo4@bXRKDKTaQ<sEsHLB(dkp3u
zlIOC>F*>fsWAYP-xixVN-ZJr1aR6p9Z2R!K|7O6=`41nOY?9^o&CNQxdR!pFAFdsh
z0Lb5^gJ027zh=Z5<VZkmay?(bo=S7p^pyWFD){Y9QeY~p`C-BDil0g+rbX0W&BiQc
zv^WSxw9B&gweKGoP^h@Ecw)2O;zpjGDE-liF{|xbz?oqHPx<k3cbrEE3wT`7*0i+D
zEPIFOVpD>08r#;>Y5EdyyJ=WF?zxA45Ll*F^6a6jU~2jX_Om8Js(Ic#5L0U86D6*2
zI~y#q^`kM%YYwbSU;4gG@>R(%Y)QQO#y#KNnaWW12dP@lRf;YlY~Hsi{5x_=9Tq#;
zt`~+#iR+()B*siO8WN6|Cg;C8+h&jZ4O8QX3IkUuj;L7U)#lYzV!bs7it+EVG0G2P
zQ=S|qCOq|cy;JwPd%p45K6;b(<4T|s=-_IcZ<=Obkd2R$qX$l!>YBDuFIP1Pl}lCj
zvf5C`WscI#*9g3bvZ-!+`Qz(tTBoBL;UIjfRSMK8IzqOl3O(`n2=|86c3{GcR-%2t
zcULf{=dXr1`3rPpCii!Z$iQUgBSbl?>xwi;PJ49_LF5M`UPfbZ(%x|~^<VFw16NY|
z3OC3Jxgu#o7P9=_)t1EN!4rW0gu!AjUx?{>ajtP_r>+er{yXfbRSloax}EgpcGZ<n
zEx{Gq^AtDHx^tbOWp@Um3kDhs9d1;X^%5DK#%Vn2VHemgp4=;xA5~%_zHe^aFh`qy
zi&Kgq?}K~E^{YZ6u~1~Xn#$c3m(O1xgu)uKX1MAUeT-7EzVpHaQS=qVp&^5%J5z00
z$J=z;_30No$HG3fNYqzuc76=MK0?IbiL$sv8ol1C&ZuAe`d67+BHt+4LIWwa{LFby
z*sdG4tFNkZi%5A~^DWhps>vc9QZ8YQ_h79c7XOQ<os=K%H6Fe}#fl<*HS#$?Cg=KN
zo1j_m2$_QX30$lW&LF1x{oEY#ez;MK=6yr-0<uRrzp^M0ikFIWpL}Cf(cT~I^jO!e
zL`3%!PqZfdvc4+?WZNf&@I~5Wl1WerGwhv|B*T~;ZnsE1gqW}+w3JOJw2BvwV>N;Q
zH`nO`g5^&R8kYBS)9?m+%1=h@_Pn^e9k-|g(}k>1Cffq2S?(67@IhUuKc1)^6G~WF
zDaP1_yz4lJ`r_a(VHV?6&t)lL4q5`~DDOKnu4oK-MXrku!#);n`94!e(rmhmAGtGO
z2>MaCh?p2*<l7L8HRBZHbE8b`8s$=47I)S+W3_?Im;3I8W9jv5s-Mjw?>KEI)J8Sr
z5fB>83?^nCS3j!g=6Wipu%tM`S#{0-CcJUfU7{@{oGA7R?jc2Te;9jQQiut0bstym
z1eF6#ric-0cgHybNgwY%DDT5wHX901R&??XelQkH6jRAoEp5}=$>V+Yj$tl4J}s9c
z_i=C3eY!bA9iPi-D0n&awQCQ(SDw_z9j$8rqH0J;o5dS)^seFmKdn!oNB05<eahM!
Vu?^eDu%8Ja83{S@a#3Bs{{tQdm7D+o

literal 0
HcmV?d00001

diff --git a/kubernetes/main/apps/database/crunchy-postgres/cluster/cluster.yaml b/kubernetes/main/apps/database/crunchy-postgres/cluster/cluster.yaml
index b316317acd..1f837c47d2 100644
--- a/kubernetes/main/apps/database/crunchy-postgres/cluster/cluster.yaml
+++ b/kubernetes/main/apps/database/crunchy-postgres/cluster/cluster.yaml
@@ -62,6 +62,10 @@ spec:
       databases: ["bazarr"]
       password:
         type: AlphaNumeric
+    - name: "dashbrr"
+      databases: ["dashbrr"]
+      password:
+        type: AlphaNumeric
     - name: "lubelog"
       databases: ["lubelog"]
       password:
diff --git a/kubernetes/main/apps/downloads/bazarr/app/externalsecret.yaml b/kubernetes/main/apps/downloads/bazarr/app/externalsecret.yaml
index f8fd4ed198..41b5cd7995 100644
--- a/kubernetes/main/apps/downloads/bazarr/app/externalsecret.yaml
+++ b/kubernetes/main/apps/downloads/bazarr/app/externalsecret.yaml
@@ -15,7 +15,7 @@ spec:
       data:
         # App
         BAZARR__API_KEY: '{{ .BAZARR_API_KEY }}'
-        PLEX_TOKEN: "{{ .PLEX_TOKEN }}"
+        PLEX_TOKEN: "{{ .PLEX_API_KEY }"
   dataFrom:
   - extract:
       key: bazarr
diff --git a/kubernetes/main/apps/downloads/dashbrr/app/externalsecret.yaml b/kubernetes/main/apps/downloads/dashbrr/app/externalsecret.yaml
new file mode 100644
index 0000000000..2d907f9306
--- /dev/null
+++ b/kubernetes/main/apps/downloads/dashbrr/app/externalsecret.yaml
@@ -0,0 +1,63 @@
+---
+# yaml-language-server: $schema=https://kube-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: &name dashbrr-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: *name
+    template:
+      engineVersion: v2
+      data:
+        # App
+        DASHBRR_RADARR_API_KEY: "{{ .RADARR_API_KEY }}"
+        DASHBRR_SONARR_API_KEY: "{{ .SONARR_API_KEY }}"
+        DASHBRR_PROWLARR_API_KEY: "{{ .PROWLARR_API_KEY }}"
+        DASHBRR_PLEX_API_KEY: "{{ .PLEX_API_KEY }}"
+        # OIDC
+        OIDC_ISSUER: "https://sso.${SECRET_DOMAIN}/application/o/dashbrr/"
+        OIDC_CLIENT_ID: "{{ .DASHBRR_CLIENT_ID }}"
+        OIDC_CLIENT_SECRET: "{{ .DASHBRR_CLIENT_SECRET }}"
+        OIDC_REDIRECT_URL: "https://dashbrr.${SECRET_DOMAIN}/api/auth/callback"
+  dataFrom:
+  - extract:
+      key: radarr
+  - extract:
+      key: sonarr
+  - extract:
+      key: prowlarr
+  - extract:
+      key: plex
+  - extract:
+      key: dashbrr
+---
+# yaml-language-server: $schema=https://kube-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: &name dashbrr-db-secret
+spec:
+  refreshInterval: 1m
+  secretStoreRef:
+    name: crunchy-pgo-secrets
+    kind: ClusterSecretStore
+  target:
+    name: dashbrr-secret
+    creationPolicy: Merge
+    deletionPolicy: Retain
+    template:
+      type: Opaque
+      data:
+        DASHBRR__DB_TYPE: postgres
+        DASHBRR__DB_NAME: '{{ .dbname }}'
+        DASHBRR__DB_HOST: '{{ index . "pgbouncer-host" }}'
+        DASHBRR__DB_PORT: '{{ index . "pgbouncer-port" }}'
+        DASHBRR__DB_USER: '{{ .user }}'
+        DASHBRR__DB_PASSWORD: '{{ .password }}'
+  dataFrom:
+  - extract:
+      key: postgres-pguser-dashbrr
diff --git a/kubernetes/main/apps/downloads/dashbrr/app/helmrelease.yaml b/kubernetes/main/apps/downloads/dashbrr/app/helmrelease.yaml
new file mode 100644
index 0000000000..9ee7ea65a6
--- /dev/null
+++ b/kubernetes/main/apps/downloads/dashbrr/app/helmrelease.yaml
@@ -0,0 +1,107 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: &app dashbrr
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.5.1
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      strategy: rollback
+      retries: 3
+  dependsOn:
+  - name: rook-ceph-cluster
+    namespace: rook-ceph
+  - name: volsync
+    namespace: storage
+  values:
+    controllers:
+      dashbrr:
+        labels:
+          postgres: "true"
+        annotations:
+          reloader.stakater.com/auto: "true"
+        containers:
+          app:
+            image:
+              repository: ghcr.io/autobrr/dashbrr
+              tag: v0.2.0@sha256:b3b898d4bf9b463bf802e7af188de45e6ca08eb96e828b4e9cbfde6e418441ad
+            env:
+              DASHBRR__CONFIG_PATH: /config/config.toml
+              DASHBRR__DB_PATH: /cache/._  # cache path is derived from DASHBRR__DB_PATH
+              DASHBRR__LISTEN_ADDR: 0.0.0.0:8080
+              GIN_MODE: debug
+              TZ: ${TIMEZONE}
+            envFrom:
+            - secretRef:
+                name: dashbrr-secret
+            probes:
+              liveness: &probes
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /health
+                    port: &port 8080
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
+              readiness: *probes
+            securityContext:
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+              capabilities: { drop: ["ALL"] }
+            resources:
+              requests:
+                cpu: 100m
+              limits:
+                memory: 2Gi
+    service:
+      app:
+        controller: *app
+        ports:
+          http:
+            port: *port
+    ingress:
+      app:
+        className: internal
+        annotations:
+          # gethomepage.dev/enabled: "true"
+          # gethomepage.dev/group: Downloads
+          # gethomepage.dev/name: dashbrr
+          # gethomepage.dev/icon: dashbrr.png
+          # gethomepage.dev/description: Media stack management
+          # gethomepage.dev/widget.type: dashbrr
+          # gethomepage.dev/widget.url: http://dashbrr.downloads
+          # gethomepage.dev/widget.key: "{{ `{{HOMEPAGE_VAR_DASHBRR_TOKEN}}` }}"
+          external-dns.alpha.kubernetes.io/target: internal.${SECRET_DOMAIN}
+        hosts:
+        - host: "{{ .Release.Name }}.${SECRET_DOMAIN}"
+          paths:
+          - path: /
+            service:
+              identifier: app
+              port: http
+    serviceAccount:
+      create: true
+      name: dashbrr
+    persistence:
+      cache:
+        type: emptyDir
+        sizeLimit: 1Gi
+      config:
+        type: configMap
+        name: dashbrr-config
diff --git a/kubernetes/main/apps/downloads/dashbrr/app/kustomization.yaml b/kubernetes/main/apps/downloads/dashbrr/app/kustomization.yaml
new file mode 100644
index 0000000000..bff03698bf
--- /dev/null
+++ b/kubernetes/main/apps/downloads/dashbrr/app/kustomization.yaml
@@ -0,0 +1,18 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./externalsecret.yaml
+  - ./helmrelease.yaml
+  - ./rbac.yaml
+  - ../../../../../shared/templates/gatus/guarded
+configMapGenerator:
+  - name: dashbrr-config
+    files:
+      - ./resources/config.toml
+    options:
+      annotations:
+        kustomize.toolkit.fluxcd.io/substitute: disabled
+generatorOptions:
+  disableNameSuffixHash: true
diff --git a/kubernetes/main/apps/downloads/dashbrr/app/rbac.yaml b/kubernetes/main/apps/downloads/dashbrr/app/rbac.yaml
new file mode 100644
index 0000000000..0ed486223b
--- /dev/null
+++ b/kubernetes/main/apps/downloads/dashbrr/app/rbac.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: dashbrr
+rules:
+  - apiGroups: [""]
+    resources: ["services"]
+    verbs: ["get", "watch", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: dashbrr
+roleRef:
+  kind: ClusterRole
+  name: dashbrr
+  apiGroup: rbac.authorization.k8s.io
+subjects:
+  - kind: ServiceAccount
+    name: dashbrr
+    namespace: downloads
diff --git a/kubernetes/main/apps/downloads/dashbrr/app/resources/config.toml b/kubernetes/main/apps/downloads/dashbrr/app/resources/config.toml
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/kubernetes/main/apps/downloads/dashbrr/ks.yaml b/kubernetes/main/apps/downloads/dashbrr/ks.yaml
new file mode 100644
index 0000000000..437c4ad8bd
--- /dev/null
+++ b/kubernetes/main/apps/downloads/dashbrr/ks.yaml
@@ -0,0 +1,27 @@
+---
+# yaml-language-server: $schema=https://kube-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app dashbrr
+  namespace: flux-system
+spec:
+  targetNamespace: downloads
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  dependsOn:
+    - name: crunchy-postgres-operator-cluster
+    - name: crunchy-postgres-stores
+    - name: external-secrets-stores
+  path: ./kubernetes/main/apps/downloads/dashbrr/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  wait: false # no flux ks dependents
+  interval: 30m
+  timeout: 5m
+  postBuild:
+    substitute:
+      APP: *app
diff --git a/kubernetes/main/apps/downloads/kustomization.yaml b/kubernetes/main/apps/downloads/kustomization.yaml
index 4b36d5686d..98815012b0 100644
--- a/kubernetes/main/apps/downloads/kustomization.yaml
+++ b/kubernetes/main/apps/downloads/kustomization.yaml
@@ -7,6 +7,7 @@ resources:
   - ./namespace.yaml
   # Flux-Kustomizations
   - ./bazarr/ks.yaml
+  - ./dashbrr/ks.yaml
   - ./flaresolverr/ks.yaml
   - ./kapowarr/ks.yaml
   - ./metube/ks.yaml
diff --git a/kubernetes/main/apps/downloads/radarr/app/externalsecret.yaml b/kubernetes/main/apps/downloads/radarr/app/externalsecret.yaml
index 6d597a77f6..4fda21d041 100644
--- a/kubernetes/main/apps/downloads/radarr/app/externalsecret.yaml
+++ b/kubernetes/main/apps/downloads/radarr/app/externalsecret.yaml
@@ -40,7 +40,7 @@ spec:
         RADARR__POSTGRES__PORT: '{{ index . "pgbouncer-port" }}'
         RADARR__POSTGRES__USER: '{{ .user }}'
         RADARR__POSTGRES__PASSWORD: '{{ .password }}'
-        RADARR__POSTGRES__MAINDB: radarr_main
+        RADARR__POSTGRES__MAINDB: '{{ .dbname }}'
   dataFrom:
   - extract:
       key: postgres-pguser-radarr
diff --git a/kubernetes/main/apps/downloads/readarr/app/externalsecret.yaml b/kubernetes/main/apps/downloads/readarr/app/externalsecret.yaml
index bfb9002986..3aad9c4e5c 100644
--- a/kubernetes/main/apps/downloads/readarr/app/externalsecret.yaml
+++ b/kubernetes/main/apps/downloads/readarr/app/externalsecret.yaml
@@ -40,7 +40,7 @@ spec:
         READARR__POSTGRES__PORT: '{{ index . "pgbouncer-port" }}'
         READARR__POSTGRES__USER: '{{ .user }}'
         READARR__POSTGRES__PASSWORD: '{{ .password }}'
-        READARR__POSTGRES__MAINDB: readarr_main
+        READARR__POSTGRES__MAINDB: '{{ .dbname }}'
         READARR__POSTGRES__LOGDB: readarr_log
         READARR__POSTGRES__CACHEDB: readarr_cache
   dataFrom:
diff --git a/kubernetes/main/apps/media/plex/app/externalsecret.yaml b/kubernetes/main/apps/media/plex/app/externalsecret.yaml
index 0a5660d87f..03c8da3ab6 100644
--- a/kubernetes/main/apps/media/plex/app/externalsecret.yaml
+++ b/kubernetes/main/apps/media/plex/app/externalsecret.yaml
@@ -13,7 +13,7 @@ spec:
     template:
       engineVersion: v2
       data:
-        PLEX_TOKEN: "{{ .PLEX_TOKEN }}"
+        PLEX_TOKEN: "{{ .PLEX_API_KEY }"
   dataFrom:
   - extract:
       key: plex
diff --git a/kubernetes/main/apps/media/plex/kometa/externalsecret.yaml b/kubernetes/main/apps/media/plex/kometa/externalsecret.yaml
index 93a22cf7bb..65dfabc00b 100644
--- a/kubernetes/main/apps/media/plex/kometa/externalsecret.yaml
+++ b/kubernetes/main/apps/media/plex/kometa/externalsecret.yaml
@@ -21,7 +21,7 @@ spec:
         KOMETA_MYANIMELIST_LOCALHOST_URL: "{{ .MYANIMELIST_LOCALHOST_URL }}"
         KOMETA_MYANIMELIST_REFRESH_TOKEN: "{{ .MYANIMELIST_REFRESH_TOKEN }}"
         KOMETA_OMDB_API_KEY: "{{ .OMDB_API_KEY }}"
-        KOMETA_PLEX_API_KEY: "{{ .PLEX_TOKEN }}"
+        KOMETA_PLEX_API_KEY: "{{ .PLEX_API_KEY }"
         KOMETA_RADARR_API_KEY: "{{ .RADARR_API_KEY }}"
         KOMETA_SONARR_API_KEY: "{{ .SONARR_API_KEY }}"
         KOMETA_TAUTULLI_API_KEY: "{{ .TAUTULLI_API_KEY }}"
diff --git a/kubernetes/main/apps/media/plex/movie-roulette/externalsecret.yaml b/kubernetes/main/apps/media/plex/movie-roulette/externalsecret.yaml
index 94abb72ba4..d3cd8fbb60 100644
--- a/kubernetes/main/apps/media/plex/movie-roulette/externalsecret.yaml
+++ b/kubernetes/main/apps/media/plex/movie-roulette/externalsecret.yaml
@@ -13,7 +13,7 @@ spec:
     template:
       engineVersion: v2
       data:
-        PLEX_TOKEN: "{{ .PLEX_TOKEN }}"
+        PLEX_TOKEN: "{{ .PLEX_API_KEY }"
         PLEX_POSTER_USERS: "{{ .PLEX_POSTER_USERS }}"
   dataFrom:
   - extract:
diff --git a/kubernetes/main/apps/self-hosted/homepage/app/externalsecret.yaml b/kubernetes/main/apps/self-hosted/homepage/app/externalsecret.yaml
index 02a2dfd76b..b26e43bf44 100644
--- a/kubernetes/main/apps/self-hosted/homepage/app/externalsecret.yaml
+++ b/kubernetes/main/apps/self-hosted/homepage/app/externalsecret.yaml
@@ -38,7 +38,7 @@ spec:
         HOMEPAGE_VAR_SONARR_TOKEN: "{{ .SONARR_API_KEY }}"
         ## Media
         HOMEPAGE_VAR_OVERSEERR_TOKEN: "{{ .OVERSEERR_API_KEY }}"
-        HOMEPAGE_VAR_PLEX_TOKEN: "{{ .PLEX_TOKEN }}"
+        HOMEPAGE_VAR_PLEX_TOKEN: "{{ .PLEX_API_KEY }"
         HOMEPAGE_VAR_TAUTULLI_TOKEN: "{{ .TAUTULLI_API_KEY }}"
         HOMEPAGE_VAR_KAVITA_USERNAME: "{{ .KAVITA_USERNAME }}"
         HOMEPAGE_VAR_KAVITA_PASSWORD: "{{ .KAVITA_PASSWORD }}"
diff --git a/terraform/authentik/applications.tf b/terraform/authentik/applications.tf
index b91f3a653a..1f72ee760b 100644
--- a/terraform/authentik/applications.tf
+++ b/terraform/authentik/applications.tf
@@ -1,5 +1,6 @@
 locals {
   oauth_apps = [
+    "dashbrr",
     "grafana",
     "headscale",
     "kyoo",
@@ -20,6 +21,14 @@ module "onepassword_application" {
 # Step 2: Parse the secrets using regex to extract client_id and client_secret
 locals {
   applications = {
+    dashbrr = {
+      client_id     = module.onepassword_application["dashbrr"].fields["DASHBRR_CLIENT_ID"]
+      client_secret = module.onepassword_application["dashbrr"].fields["DASHBRR_CLIENT_SECRET"]
+      group         = authentik_group.monitoring.name
+      icon_url      = "https://raw.githubusercontent.com/joryirving/home-ops/main/docs/src/assets/icons/dashbrr.png"
+      redirect_uri  = "https://dashbrr.${var.cluster_domain}/api/auth/callback"
+      launch_url    = "https://dashbrr.${var.cluster_domain}/api/auth/callback"
+    },
     grafana = {
       client_id     = module.onepassword_application["grafana"].fields["GRAFANA_CLIENT_ID"]
       client_secret = module.onepassword_application["grafana"].fields["GRAFANA_CLIENT_SECRET"]