From 891eb792c2ce747ada948a0f724070a26ea11250 Mon Sep 17 00:00:00 2001
From: "pierre.geeraert" <pierre.geeraert@betfred.com>
Date: Wed, 14 Oct 2026 17:28:58 +0100
Subject: [PATCH] enable immich

---
 applications/variables.auto.tfvars            | 61 ++-----------------
 .../immich/immich-db.secret.yaml              | 10 ---
 2 files changed, 5 insertions(+), 66 deletions(-)
 delete mode 100644 external_manifests/immich/immich-db.secret.yaml

diff --git a/applications/variables.auto.tfvars b/applications/variables.auto.tfvars
index c572c6c..31e57e0 100644
--- a/applications/variables.auto.tfvars
+++ b/applications/variables.auto.tfvars
@@ -1099,8 +1099,7 @@ kubernetes = {
   }
   immich = {
     enabled = false ##was enabled
-    #replicas     = 0
-    connected_namespace = "immich"
+    replicas     = 0
     image               = "ghcr.io/immich-app/immich-server:v3.0.0"
     service_port        = [2283]
     database = {
@@ -1116,72 +1115,27 @@ kubernetes = {
       requests-cpu    = "10m"
       requests-memory = "300Mi"
     }
-    extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/immich/immich-db.secret.yaml"]
-
     environment = {
-      DB_DATABASE_NAME = {
-        value_from = {
-          secret_key_ref = {
-            name = "immich-db-credentials"
-            key  = "DB_DATABASE_NAME"
-          }
-        }
-      }
-      DB_USERNAME = {
-        value_from = {
-          secret_key_ref = {
-            name = "immich-db-credentials"
-            key  = "DB_USERNAME"
-          }
-        }
-      }
-      DB_PASSWORD = {
-        value_from = {
-          secret_key_ref = {
-            name = "immich-db-credentials"
-            key  = "DB_PASSWORD"
-          }
-        }
-      }
       POSTGRES_DATABASE = {
         value_from = {
           secret_key_ref = {
-            name = "immich-db-credentials"
+            name = "immich-db-terraform"
             key  = "DB_DATABASE_NAME"
           }
         }
       }
-      POSTGRES_USER = {
-        value_from = {
-          secret_key_ref = {
-            name = "immich-db-credentials"
-            key  = "DB_USERNAME"
-          }
-        }
-      }
-      POSTGRES_PASSWORD = {
-        value_from = {
-          secret_key_ref = {
-            name = "immich-db-credentials"
-            key  = "DB_PASSWORD"
-          }
-        }
-      }
-
       POSTGRES_POSTGRES_PASSWORD = {
         value_from = {
           secret_key_ref = {
-            name = "immich-db-credentials"
+            name = "immich-db-terraform"
             key  = "DB_PASSWORD"
           }
         }
       }
-
-
       DB_HOSTNAME = {
         value_from = {
           secret_key_ref = {
-            name = "immich-db-credentials"
+            name = "immich-db-terraform"
             key  = "DB_HOST"
           }
         }
@@ -1209,16 +1163,10 @@ kubernetes = {
     }
     pvc = {
       immich-data = {
-        name       = "immich-data"
-        pvc_size   = "10Mi"
-        pvc        = false
         host_path  = "/ssd/Image/immich/immich-storage-fastaccess"
         mount_path = "/usr/src/app/upload"
       }
       stash-data = {
-        name       = "stash-data"
-        pvc_size   = "10Mi"
-        pvc        = false
         host_path  = "/ssd/stash/data-pvc"
         mount_path = "/stash/"
       }
@@ -1229,6 +1177,7 @@ kubernetes = {
     enabled = false ##was enabled
     #replicas = 0
     connected_namespace = "immich"
+    exposed = false
     image               = "ghcr.io/immich-app/immich-machine-learning:v2.5.6"
     service_port        = [3003]
     environment = {
diff --git a/external_manifests/immich/immich-db.secret.yaml b/external_manifests/immich/immich-db.secret.yaml
deleted file mode 100644
index ac07265..0000000
--- a/external_manifests/immich/immich-db.secret.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: v1
-data:
-  DB_DATABASE_NAME: aW1taWNo
-  DB_HOST: aW1taWNoLWRiLXN2Yw==
-  DB_PASSWORD: U3Bvb24tQm9yb3VnaC1CYXNpczg=
-  DB_USERNAME: aW1taWNo
-kind: Secret
-metadata:
-  name: immich-db-credentials
-  namespace: immich