From d16fa1c3e34ef10b3bc3109e19c9ad531ee106f4 Mon Sep 17 00:00:00 2001
From: gwg313 <gwg313@pm.me>
Date: Thu, 18 Jun 2026 20:28:50 -0400
Subject: [PATCH] update soulsync

Signed-off-by: gwg313 <gwg313@pm.me>
---
 apps/soulsync/deployment.yaml               |  9 ++++++++-
 apps/soulsync/kustomization.yaml            |  1 +
 apps/soulsync/network-policy.yaml           | 15 ++++++++++++++-
 apps/soulsync/protonvpn-wg-sealed.yaml      |  2 +-
 apps/soulsync/service.yaml                  |  2 +-
 apps/soulsync/slskd-sealed.yaml             | 18 ++++++++++++++++++
 management/platform-apps/kustomization.yaml |  2 +-
 7 files changed, 44 insertions(+), 5 deletions(-)
 create mode 100644 apps/soulsync/slskd-sealed.yaml

diff --git a/apps/soulsync/deployment.yaml b/apps/soulsync/deployment.yaml
index 4206943..ef8301d 100644
--- a/apps/soulsync/deployment.yaml
+++ b/apps/soulsync/deployment.yaml
@@ -78,6 +78,13 @@ spec:
               value: /app/config
             - name: SLSKD_DOWNLOADS_DIR
               value: /app/downloads
+            - name: SLSKD_SHARED_DIR
+              value: /app/music
+            - name: SLSKD_REMOTE_CONFIGURATION
+              value: "true"
+          envFrom:
+            - secretRef:
+                name: slskd-credentials
           volumeMounts:
             - name: slskd-config
               mountPath: /app/config
@@ -97,7 +104,7 @@ spec:
               drop:
                 - ALL
           ports:
-            - containerPort: 8080
+            - containerPort: 8008
               name: soulsync-ui
           env:
             - name: SLSKD_URL
diff --git a/apps/soulsync/kustomization.yaml b/apps/soulsync/kustomization.yaml
index 37ac3fa..574ce1b 100644
--- a/apps/soulsync/kustomization.yaml
+++ b/apps/soulsync/kustomization.yaml
@@ -6,6 +6,7 @@ resources:
   - storage.yaml
   - pvcs.yaml
   - protonvpn-wg-sealed.yaml
+  - slskd-sealed.yaml
   - network-policy.yaml
   - deployment.yaml
   - service.yaml
diff --git a/apps/soulsync/network-policy.yaml b/apps/soulsync/network-policy.yaml
index 78cda90..db6372c 100644
--- a/apps/soulsync/network-policy.yaml
+++ b/apps/soulsync/network-policy.yaml
@@ -18,7 +18,7 @@ spec:
         - ports:
             - port: "5030"
               protocol: TCP
-            - port: "8080"
+            - port: "8008"
               protocol: TCP
 
 ---
@@ -43,3 +43,16 @@ spec:
         - ports:
             - port: "51820"
               protocol: UDP
+    - toEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: kube-system
+            k8s-app: kube-dns
+      toPorts:
+        - ports:
+            - port: "53"
+              protocol: UDP
+            - port: "53"
+              protocol: TCP
+          rules:
+            dns:
+              - matchPattern: "*"
diff --git a/apps/soulsync/protonvpn-wg-sealed.yaml b/apps/soulsync/protonvpn-wg-sealed.yaml
index eb6068d..79e78cc 100644
--- a/apps/soulsync/protonvpn-wg-sealed.yaml
+++ b/apps/soulsync/protonvpn-wg-sealed.yaml
@@ -7,7 +7,7 @@ metadata:
   namespace: slskd
 spec:
   encryptedData:
-    wg0.conf: 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
+    wg0.conf: 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
   template:
     metadata:
       creationTimestamp: null
diff --git a/apps/soulsync/service.yaml b/apps/soulsync/service.yaml
index d0a7d3a..225033e 100644
--- a/apps/soulsync/service.yaml
+++ b/apps/soulsync/service.yaml
@@ -23,5 +23,5 @@ spec:
   ports:
     - name: http
       port: 80
-      targetPort: 8080
+      targetPort: 8008
   type: ClusterIP
diff --git a/apps/soulsync/slskd-sealed.yaml b/apps/soulsync/slskd-sealed.yaml
new file mode 100644
index 0000000..73c1b21
--- /dev/null
+++ b/apps/soulsync/slskd-sealed.yaml
@@ -0,0 +1,18 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: slskd-credentials
+  namespace: slskd
+spec:
+  encryptedData:
+    SLSKD_API_KEY: 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
+    SLSKD_SLSK_PASSWORD: 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
+    SLSKD_SLSK_USERNAME: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: slskd-credentials
+      namespace: slskd
+    type: Opaque
diff --git a/management/platform-apps/kustomization.yaml b/management/platform-apps/kustomization.yaml
index 792bfea..2aecd46 100644
--- a/management/platform-apps/kustomization.yaml
+++ b/management/platform-apps/kustomization.yaml
@@ -18,5 +18,5 @@ resources:
   - navidrome.yaml
   - bytestash.yaml
   - stirling-pdf.yaml
-  - soulsync.yaml
+  # - soulsync.yaml
   - vikunja.yaml