zigbee2mqtt

2026-07-19 12:55:16 +03:00
parent 57296b2d34
commit 75db76b185
9 changed files with 136 additions and 9 deletions
@@ -0,0 +1,84 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: zigbee2mqtt
+  namespace: zigbee2mqtt
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: zigbee2mqtt
+      version: "2.12.1"
+      sourceRef:
+        kind: HelmRepository
+        name: zigbee2mqtt
+  values:
+    service:
+      type: ClusterIP
+      port: 8080
+
+    statefulset:
+      storage:
+        enabled: true
+        size: 1Gi
+        storageClassName: longhorn
+      secrets:
+        name: zigbee2mqtt-secrets
+
+    configmap:
+      enabled: true
+      # devices.yaml / groups.yaml already exist on the PV and are the live source
+      # of truth (zigbee2mqtt mutates them as devices pair/rename). Do not set
+      # configmap.devices here — the chart only seeds devices.yaml from it when
+      # the file is missing, but leaving it unset avoids any risk of clobbering
+      # the real data and any drift between this file and reality.
+
+    zigbee2mqtt:
+      homeassistant:
+        enabled: true
+        legacy_entity_attributes: true
+
+      permit_join: false
+      timezone: Europe/Moscow
+
+      mqtt:
+        server: "mqtt://mosquitto.mqtt.svc.cluster.local:1883"
+        user: iot
+        password: '!secret.yaml mqtt_password'
+        include_device_information: true
+        keepalive: 60
+        reject_unauthorized: true
+        version: 4
+
+      serial:
+        port: "tcp://10.0.64.72:6638"
+        adapter: ember
+        baudrate: 115200
+        rtscts: false
+
+      frontend:
+        enabled: true
+        port: 8080
+        url: "https://zigbee2mqtt.aggtaa.com"
+
+      advanced:
+        channel: 11
+        pan_id: 7410
+        ext_pan_id: [46, 22, 201, 245, 48, 186, 40, 6]
+        network_key: '!secret.yaml network_key'
+        log_level: info
+
+    ingress:
+      enabled: true
+      ingressClassName: traefik
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+      hosts:
+        - host: zigbee2mqtt.aggtaa.com
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - secretName: zigbee2mqtt-tls
+          hosts:
+            - zigbee2mqtt.aggtaa.com
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: zigbee2mqtt
+  namespace: zigbee2mqtt
+spec:
+  interval: 1h
+  url: https://charts.zigbee2mqtt.io/
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrepository.yaml
+  - secret.enc.yaml
+  - helmrelease.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: zigbee2mqtt-secrets
+    namespace: zigbee2mqtt
+stringData:
+    secret.yaml: ENC[AES256_GCM,data:x9YutASbHeMTPsm9wTaxuOMNzvvAJIhKwUYkS3s7rTpYgqVsMVtVLjDtbxW8V9iTOkdL2GhqpXHkuIPY77TFJ+IwB6dm321v1JjUonc48BQv/Qfqq9vNJdxnzZeQwd0RiD4Irdk38ZxUxxja+3MVKOfmGC9XGuzsoU+lFpI=,iv:SxoJzEwvpIC4DgEIuo1x7kAl7NBvb/gjBVeVThlI7KA=,tag:bXyEc9HBuHycRtfm2huoJQ==,type:str]
+sops:
+    age:
+        - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5eXVjTVpUWGg5RUxRNUpS
+            OEg5eWVCSzYzenQvNGpDb3hpRHV0MGlQVndZCmVPZGU0NndJdDMrblc0MDhyUUlC
+            dG1OdzBPZ3Y0ci9TZ0dxMksxZUFZeUkKLS0tIGttMUt3d3Y1b2pyb3JEL2RvMGlN
+            amxpQkVkWW5Lay9XZ3NJcjQrbVlyVkEKG9hRHgo9WBbJELiEZ1rQ653LNgbm/jz5
+            NqCt+kNx3oGoRFMibEsuqRV4MYNNL/epv+RPpg56LxghY0jQ6rFKjg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-08-26T10:17:42Z"
+    mac: ENC[AES256_GCM,data:Ehu/yxV7LfmZoMoY1xD6NUi/53goQOk3d+FYEBnii+TZKJNzpm5ftSiuuKPjT7K4CQnQuZQd5whOT7UuzFiaDiRRloN4b0RXgS0I6oHKUE0CoBjtJL3oo091+PrMACoo4c4XHkePpE6vCg3hWbiy58z3MMM2kGvJA584+GznaL0=,iv:7cGMgW2fP8M3lqhMKHHhmivWN84iAhGMtvopBD2Ico4=,tag:9keLGJ/LtOKlh3iyEk6FpQ==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0