running cluster with immich, photoprism and authentik

k3s/apps/photo/immich/immich-data-pv.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: immich-data-pv
+spec:
+  capacity:
+    storage: 100Gi  # Irgendwas großzügiges, spielt bei NFS weniger Rolle
+  accessModes:
+    - ReadWriteMany   # GANZ WICHTIG!
+  storageClassName: nfs
+  persistentVolumeReclaimPolicy: Retain  # Optional: verhindert, dass K8s dein Share löscht
+  nfs:
+    path: /export/fastData/immichData
+    server: 192.168.178.166

k3s/apps/photo/immich/immich-db-deployment.yaml

@@ -40,6 +40,10 @@ spec:
               mountPath: /var/lib/postgresql/data
               subPath: postgres
           resources: {}
+          securityContext:
+            runAsUser: 1001
+            runAsGroup: 1000
+#            fsGroup: 2000
       volumes:
         - name: pgdata
           persistentVolumeClaim:

k3s/apps/photo/immich/immich-db-pv.yaml

@@ -12,6 +12,6 @@ spec:
   accessModes:
     - ReadWriteMany
   nfs:
-    path: /slowData/immichDB  # Static path on the NFS server
-    server: 192.168.178.132               # Your NFS server's IP
+    path: /export/fastData/immichDB  # Static path on the NFS server
+    server: 192.168.178.166               # Your NFS server's IP
   persistentVolumeReclaimPolicy: Retain

k3s/apps/photo/immich/immich-library-pv.yaml

@@ -12,5 +12,5 @@ spec:
   accessModes:
     - ReadWriteMany
   nfs:
-    path: /fastData/immichLibrary  # Static path on the NFS server
-    server: 192.168.178.132
+    path: /export/fastData/immichLibrary  # Static path on the NFS server
+    server: 192.168.178.166

k3s/apps/photo/immich/immich-server-deployment.yaml

@@ -88,6 +88,10 @@ spec:
               subPath: library
             - name: ext-library
               mountPath: /photos
+          # securityContext:
+#            runAsUser: 1001
+#            runAsGroup: 1000
+#            fsGroup: 2000
       volumes:
         - name: library
           persistentVolumeClaim: