feat: Separate Icecast streaming server into standalone deployment with standby fallbacks

README.md

@@ -32,7 +32,9 @@ De HTPC omgeving omvat onder andere de volgende diensten:
 | **Lidarr** | `8686` | Automatisch beheer en downloaden van muziek |
 | **Bazarr** | `6767` | Ondertitelbeheer en synchronisatie |
 | **Jackett / Prowlarr** | `9117` / `9696` | Torrent- en usenet indexer proxy |
-| **SABnzbd / Torrent** | `8080` / `8085` | Downloadclients voor media-acquisitie |
+| **SABnzbd / Transmission** | `8080` / `9091` | Downloadclients voor media-acquisitie (BitTorrent peer-poort `53662`) |
+| **slskd** | `5030` / `50300` | Soulseek peer-to-peer client en web daemon (HTTP: `5030`, Soulseek listen: `50300`) |
+| **Radio Chicken & Icecast** | `5000` / `8000` | Gepersonaliseerd radiostation, Icecast audio/video streams, live web-UI en clip downloader |
 
 ---
 
@@ -44,6 +46,99 @@ De HTPC omgeving omvat onder andere de volgende diensten:
 
 ---
 
-## 🔄 GitOps & Deployment
+## 🚀 Migratie van Host Services naar Kubernetes
 
-Wijzigingen in de `k8s/` manifests worden automatisch gesynchroniseerd via Gitea Actions naar de centrale GitOps repository [`k8s-infra-vmserver`](https://git.bnhmeijer.nl/bart/k8s-infra-vmserver.git) onder `workloads/htpc/`, waarna ArgoCD deze reconcileert.
+### Radarr
+Voor het migreren van de standalone `radarr.service` op `10.2.0.4` naar de Kubernetes pod is een geautomatiseerd script beschikbaar:
+
+```bash
+# Migratie uitvoeren (stopt host service, synct /storage/var/lib/radarr naar K8s PVC, start pod):
+./migrate_radarr_to_cluster.sh
+
+# Terugrollen naar standalone service indien gewenst:
+./rollback_radarr_migration.sh
+```
+
+- **Dataopslag**: PersistentVolumeClaim `radarr-config` (10Gi, `local-path` op `/datadisk/infra/pv`).
+- **Mediaopslag**: HostPath `/datadisk` gemount op `/datadisk` (voor films in `/datadisk/htpc/Films` en downloads in `/datadisk/upload`).
+- **Netwerk & Ingress**: Luistert op poort `7878` (zowel via ClusterIP als HostPort `7878` op `10.2.0.4`), waardoor de bestaande Apache reverse proxy rule (`ProxyPass /radarr http://127.0.0.1:7878/radarr`) naadloos blijft functioneren.
+
+### Transmission
+De BitTorrent daemon (`transmission`) draait als pod in de `htpc` namespace:
+
+- **Dataopslag**: PersistentVolumeClaim `transmission-config` (10Gi, `local-path` op `/datadisk/infra/pv`), gemigreerd vanuit `/var/www/.config/transmission-daemon` met behoud van alle torrents, resume-bestanden en instellingen.
+- **Mediaopslag**: HostPath `/datadisk` en `/mnt/mp3` zodat `/datadisk/upload/finished` en `/datadisk/upload/incomplete` identiek zijn voor Transmission, Radarr, Sonarr en Lidarr.
+- **Netwerk**: Web UI / RPC op poort `9091` (ClusterIP + HostPort `9091`) en BitTorrent peer-poort `53662` (TCP & UDP, ClusterIP + HostPort `53662`).
+
+### slskd
+De Soulseek daemon (`slskd`) draait als pod in de `htpc` namespace:
+
+- **Dataopslag**: PersistentVolumeClaim `slskd-config` (10Gi, `local-path` op `/datadisk/infra/pv`), gemigreerd vanuit `/var/www/.local/share/slskd` via een init-container (inclusief `slskd.yml`, SQLite databases en state).
+- **Mediaopslag**: HostPath `/datadisk` gemount op `/datadisk` (voor `/datadisk/upload/slskd`, `/datadisk/upload/incomplete` en `/datadisk/htpc/mp3`) en `/mnt/mp3` gemount op `/mnt/mp3`.
+- **Netwerk**: Web UI op poort `5030` (ClusterIP + HostPort `5030`), optioneel HTTPS op poort `5031` en Soulseek listen poort `50300` (ClusterIP + HostPort `50300`).
+- **Migratie & Opruimen**:
+  ```bash
+  # Migratie uitvoeren (maakt backup in /storage/backups/, stopt host service, start pod):
+  ./migrate_slskd_to_cluster.sh
+
+  # Oude host bestanden en service opruimen:
+  ./cleanup_old_slskd.sh
+  ```
+
+### Jackett
+De torrent indexer proxy (`jackett`) draait als pod in de `htpc` namespace:
+
+- **Dataopslag**: PersistentVolumeClaim `jackett-config` (10Gi, `local-path` op `/datadisk/infra/pv`), gemigreerd vanuit `/home/bart/.config/Jackett` via init-container (inclusief alle indexers en `ServerConfig.json`).
+- **Mediaopslag**: HostPath `/datadisk` gemount op `/datadisk`.
+- **Netwerk & Ingress**: Luistert op poort `9117` (ClusterIP + HostPort `9117`). De Apache reverse proxy routeert `https://thuus.bnhmeijer.nl/jackett/` naadloos door naar `127.0.0.1:9117`.
+- **Migratie & Opruimen**:
+  ```bash
+  # Migratie uitvoeren (maakt backup in /storage/backups/, stopt host service, start pod):
+  ./migrate_jackett_to_cluster.sh
+
+  # Oude host bestanden en service opruimen:
+  ./cleanup_old_jackett.sh
+  ```
+
+### Jellyfin
+De Jellyfin media server (`jellyfin`) draait als pod in de `htpc` namespace:
+
+- **Dataopslag**: PersistentVolumeClaim `jellyfin-config` (30Gi, `local-path` op `/datadisk/infra/pv`), gemigreerd vanuit `/etc/jellyfin` en `/var/lib/jellyfin` via init-container (inclusief alle databases, metadata en plugins).
+- **Mediaopslag**: HostPath `/datadisk` gemount op `/datadisk` en `/mnt/mp3` gemount op `/mnt/mp3` zodat alle bibliotheekpaden en symlinks exact behouden blijven.
+- **Hardware Transcoding**: Directe hardware-acceleratie via VA-API met AMD Phoenix2 iGPU (`/dev/dri` hostPath gemount in container met `privileged: true`).
+- **Netwerk & Ingress**: Luistert op poort `8096` (ClusterIP + HostPort `8096`). De Apache reverse proxy routeert `https://thuus.bnhmeijer.nl/jellyfin` en `wss://.../jellyfin/socket` naadloos door naar `127.0.0.1:8096`.
+- **Migratie, Terugrol & Opruimen**:
+  ```bash
+  # Migratie uitvoeren (maakt backup in /storage/backups/, stopt host service, synct data, start pod):
+  ./migrate_jellyfin_to_cluster.sh
+
+  # Terugrollen naar standalone host service indien gewenst:
+  ./rollback_jellyfin_migration.sh
+
+  # Oude host bestanden en service opruimen:
+  ./cleanup_old_jellyfin.sh
+  ```
+
+### Radio Chicken & Icecast
+Het Radio Chicken streamingplatform en Icecast server draaien als multi-container pod (`radio-chicken`) in de `htpc` namespace:
+
+- **Containers in pod**:
+  - `icecast` (`moul/icecast:latest`): Luistert op poort `8000` (ClusterIP + HostPort `8000`) voor audio (`/chicken`) en live webm video (`/chicken_video.webm`).
+  - `radio-chicken` (`git.bnhmeijer.nl/bart/radio-chicken:latest`): Flask web-UI, stemsynthese, live ffmpeg hardware transcoding en streaming naar Icecast op poort `5000` (ClusterIP + HostPort `5000`).
+  - `autoplacer` (`git.bnhmeijer.nl/bart/radio-chicken-autoplacer:latest`): Achtergrond-worker die nummers in Jellyfin analyseert en in playlists plaatst.
+  - `mv-downloader` (`git.bnhmeijer.nl/bart/radio-chicken-mv-downloader:latest`): Achtergrond-worker die ontbrekende videoclips van favoriete nummers automatisch downloadt via YouTube naar `/music_videos`.
+- **Dataopslag**: PersistentVolumeClaim `radio-chicken-data` (10Gi, `local-path` op `/datadisk/infra/pv`), gemigreerd vanuit `/home/bart/jellyfinradio/data` en `webroot` via init-container.
+- **Mediaopslag**: HostPath `/datadisk/htpc/music_video` gemount op `/music_videos`.
+- **Hardware Transcoding**: Directe hardware-acceleratie via VA-API met AMD Phoenix2 iGPU (`/dev/dri` hostPath gemount met `privileged: true`).
+- **Netwerk & Ingress**: Luistert op poort `5000` en `8000`. De Apache reverse proxy routeert `/radio/live`, `/radio/vote` en `/radio/` direct door naar `127.0.0.1:5000` en `127.0.0.1:8000`.
+- **Migratie, Terugrol & Opruimen**:
+  ```bash
+  # Migratie uitvoeren (maakt backup, sync video's, stopt host containers, start pod):
+  ./migrate_radio_chicken_to_cluster.sh
+
+  # Terugrollen naar standalone host containers indien gewenst:
+  ./rollback_radio_chicken_migration.sh
+
+  # Oude host containers opruimen:
+  ./cleanup_old_radio_chicken.sh
+  ```

cleanup_old_jackett.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Opruimen van oude standalone Jackett installatie op vmserver (10.2.0.4)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   OPRUIMEN OUDE STANDALONE JACKETT OP ${CLUSTER_HOST}"
+echo "========================================================================"
+echo "Dit stopt en verwijdert de oude standalone bestanden op ${CLUSTER_HOST}:"
+echo " - /etc/systemd/system/jackett.service"
+echo " - /opt/Jackett (oude binaries & updater)"
+echo " - /home/bart/.config/Jackett (config is gemigreerd naar K8s PVC & backup in /storage/backups/)"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de oude standalone Jackett bestanden wilt verwijderen? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Opruimen geannuleerd."
+    exit 0
+fi
+
+log_step "Verwijderen van systemd service en programmabestanden op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen en uitschakelen van jackett.service...'
+    sudo systemctl stop jackett 2>/dev/null || true
+    sudo systemctl disable jackett 2>/dev/null || true
+    sudo rm -f /etc/systemd/system/jackett.service
+    sudo systemctl daemon-reload
+    sudo systemctl reset-failed 2>/dev/null || true
+
+    echo '--> Verwijderen van /opt/Jackett...'
+    sudo rm -rf /opt/Jackett
+
+    echo '--> Verwijderen van /home/bart/.config/Jackett...'
+    sudo rm -rf /home/bart/.config/Jackett
+
+    echo '--> Opslagruimte controleren...'
+    df -h / /datadisk /storage
+"
+
+echo ""
+log_info "De oude standalone Jackett is succesvol opgeruimd!"
+echo "Alle verkeer naar poort 9117 en /jackett loopt nu direct via de Kubernetes pod."

cleanup_old_jellyfin.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Opruimen van oude standalone jellyfin installatie op vmserver (10.2.0.4)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   OPRUIMEN OUDE STANDALONE JELLYFIN OP ${CLUSTER_HOST}"
+echo "========================================================================"
+echo "Dit stopt en verwijdert de host-service configuratie en optioneel de"
+echo "oude data-directories op ${CLUSTER_HOST}:"
+echo " - jellyfin.service (stoppen en uitschakelen)"
+echo " - /etc/systemd/system/jellyfin.service.d"
+echo " - /var/cache/jellyfin"
+echo "LET OP: Voer dit script pas uit nadat de Kubernetes pod succesvol draait"
+echo "en geverifieerd is!"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de oude standalone jellyfin host service wilt opruimen? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Opruimen geannuleerd."
+    exit 0
+fi
+
+log_step "Uitschakelen van jellyfin.service en opruimen van host service bestanden..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen en masken van jellyfin.service...'
+    sudo systemctl stop jellyfin 2>/dev/null || true
+    sudo systemctl disable jellyfin 2>/dev/null || true
+    sudo systemctl mask jellyfin 2>/dev/null || true
+
+    echo '--> Opruimen van cache...'
+    sudo rm -rf /var/cache/jellyfin
+
+    echo '--> Opslagruimte controleren...'
+    df -h / /datadisk /storage
+"
+
+echo ""
+log_info "De oude standalone jellyfin host service is uitgeschakeld en gemaskeerd!"
+echo "De Jellyfin media server draait nu volledig in het Kubernetes cluster."

cleanup_old_lidarr.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Opruimen van oude standalone Lidarr installatie op vmserver (10.2.0.4)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   OPRUIMEN OUDE STANDALONE LIDARR OP $CLUSTER_HOST"
+echo "========================================================================"
+echo "Dit stopt en verwijdert de oude standalone bestanden op $CLUSTER_HOST:"
+echo " - /etc/systemd/system/lidarr.service"
+echo " - /opt/Lidarr"
+echo " - /storage/var/lib/lidarr"
+echo "Er is al een reservekopie gemaakt in /storage/backups/lidarr_complete_backup_2026-10-18.tar.gz"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de oude Lidarr bestanden wilt verwijderen? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Opruimen geannuleerd."
+    exit 0
+fi
+
+log_step "Verwijderen van systemd service en programmabestanden op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen en uitschakelen van lidarr.service...'
+    sudo systemctl stop lidarr 2>/dev/null || true
+    sudo systemctl disable lidarr 2>/dev/null || true
+    sudo rm -f /etc/systemd/system/lidarr.service
+    sudo systemctl daemon-reload
+    sudo systemctl reset-failed 2>/dev/null || true
+
+    echo '--> Verwijderen van /opt/Lidarr...'
+    sudo rm -rf /opt/Lidarr
+
+    echo '--> Verwijderen van /storage/var/lib/lidarr...'
+    sudo rm -rf /storage/var/lib/lidarr
+
+    echo '--> Opslagruimte controleren...'
+    df -h / /storage
+"
+
+echo ""
+log_info "De oude standalone Lidarr is succesvol en volledig opgeruimd!"
+echo "Alle verkeer naar https://thuus.bnhmeijer.nl/lidarr/ loopt nu direct via de Kubernetes pod."

cleanup_old_radarr.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Opruimen van oude standalone Radarr installatie op vmserver (10.2.0.4)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   OPRUIMEN OUDE STANDALONE RADARR OP $CLUSTER_HOST"
+echo "========================================================================"
+echo "Dit verwijdert de oude bestanden op $CLUSTER_HOST:"
+echo " - /etc/systemd/system/radarr.service"
+echo " - /opt/Radarr (170 MB)"
+echo " - /storage/var/lib/radarr (679 MB)"
+echo "Er is al een reservekopie gemaakt in /storage/backups/"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de oude Radarr bestanden wilt verwijderen? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Opruimen geannuleerd."
+    exit 0
+fi
+
+log_step "Verwijderen van systemd service en programmabestanden op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen en verwijderen van radarr.service...'
+    sudo systemctl stop radarr 2>/dev/null || true
+    sudo systemctl disable radarr 2>/dev/null || true
+    sudo rm -f /etc/systemd/system/radarr.service
+    sudo systemctl daemon-reload
+    sudo systemctl reset-failed 2>/dev/null || true
+
+    echo '--> Verwijderen van /opt/Radarr...'
+    sudo rm -rf /opt/Radarr
+
+    echo '--> Verwijderen van /storage/var/lib/radarr...'
+    sudo rm -rf /storage/var/lib/radarr
+
+    echo '--> Opslagruimte controleren...'
+    df -h / /storage
+"
+
+echo ""
+log_info "De oude standalone Radarr is succesvol en volledig opgeruimd!"

cleanup_old_radio_chicken.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Radio Chicken Host Cleanup Script
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+log_err()  { echo -e "${COLOR_RED}[ERROR]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo " OPRUIMEN OUDE RADIO CHICKEN DOCKER CONTAINERS OP HOST (${CLUSTER_HOST})"
+echo "========================================================================"
+echo "Let op: Voer dit script pas uit nadat de Kubernetes pod stabiel draait."
+echo "Dit script verwijdert de gestopte Docker containers (barttradio, icecast,"
+echo "radio_chicken_autoplacer, radio_chicken_mv_downloader)."
+echo "De code en configuratie in /home/bart/jellyfinradio blijven onaangeraakt."
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de oude Docker containers wilt verwijderen? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Opruimen geannuleerd."
+    exit 0
+fi
+
+log_info "Verwijderen van oude host Docker containers..."
+ssh "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Verwijderen van containers...'
+    docker rm -f barttradio radio_chicken_autoplacer radio_chicken_mv_downloader icecast 2>/dev/null || true
+    echo 'Containers opgeruimd.'
+"
+
+log_info "Opruimactie succesvol afgerond."

cleanup_old_slskd.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Opruimen van oude standalone slskd installatie op vmserver (10.2.0.4)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   OPRUIMEN OUDE STANDALONE SLSKD OP ${CLUSTER_HOST}"
+echo "========================================================================"
+echo "Dit stopt en verwijdert de oude standalone bestanden op ${CLUSTER_HOST}:"
+echo " - /etc/systemd/system/slskd.service"
+echo " - /datadisk/slskd (oude binaries en frontend bestanden)"
+echo " - /var/www/.local/share/slskd (data is gemigreerd naar K8s PVC & backup in /storage/backups/)"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de oude standalone slskd bestanden wilt verwijderen? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Opruimen geannuleerd."
+    exit 0
+fi
+
+log_step "Verwijderen van systemd service en programmabestanden op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen en uitschakelen van slskd.service...'
+    sudo systemctl stop slskd 2>/dev/null || true
+    sudo systemctl disable slskd 2>/dev/null || true
+    sudo rm -f /etc/systemd/system/slskd.service
+    sudo systemctl daemon-reload
+    sudo systemctl reset-failed 2>/dev/null || true
+
+    echo '--> Verwijderen van /datadisk/slskd...'
+    sudo rm -rf /datadisk/slskd
+
+    echo '--> Verwijderen van /var/www/.local/share/slskd...'
+    sudo rm -rf /var/www/.local/share/slskd
+    sudo rm -rf /var/www/.local/slskd 2>/dev/null || true
+
+    echo '--> Opslagruimte controleren...'
+    df -h / /datadisk /storage
+"
+
+echo ""
+log_info "De oude standalone slskd is succesvol opgeruimd!"
+echo "Alle verkeer naar slskd loopt nu direct via de Kubernetes pod."

cleanup_old_sonarr.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Opruimen van oude standalone Sonarr installatie op vmserver (10.2.0.4)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   OPRUIMEN OUDE STANDALONE SONARR OP $CLUSTER_HOST"
+echo "========================================================================"
+echo "Dit stopt en verwijdert de oude standalone bestanden op $CLUSTER_HOST:"
+echo " - /etc/systemd/system/sonarr.service"
+echo " - /opt/Sonarr"
+echo " - /storage/var/lib/sonarr"
+echo "Er is al een reservekopie gemaakt in /storage/backups/sonarr_complete_backup_2026-10-18.tar.gz"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de oude Sonarr bestanden wilt verwijderen? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Opruimen geannuleerd."
+    exit 0
+fi
+
+log_step "Verwijderen van systemd service en programmabestanden op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen en uitschakelen van sonarr.service...'
+    sudo systemctl stop sonarr 2>/dev/null || true
+    sudo systemctl disable sonarr 2>/dev/null || true
+    sudo rm -f /etc/systemd/system/sonarr.service
+    sudo systemctl daemon-reload
+    sudo systemctl reset-failed 2>/dev/null || true
+
+    echo '--> Verwijderen van /opt/Sonarr...'
+    sudo rm -rf /opt/Sonarr
+
+    echo '--> Verwijderen van /storage/var/lib/sonarr...'
+    sudo rm -rf /storage/var/lib/sonarr
+
+    echo '--> Opslagruimte controleren...'
+    df -h / /storage
+"
+
+echo ""
+log_info "De oude standalone Sonarr is succesvol en volledig opgeruimd!"
+echo "Alle verkeer naar https://thuus.bnhmeijer.nl/sonarr/ loopt nu direct via de Kubernetes pod."

cleanup_old_transmission.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Opruimen van oude standalone Transmission installatie op vmserver (10.2.0.4)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   OPRUIMEN OUDE STANDALONE TRANSMISSION OP $CLUSTER_HOST"
+echo "========================================================================"
+echo "Dit stopt en verwijdert de oude standalone bestanden op $CLUSTER_HOST:"
+echo " - /etc/systemd/system/transmission-daemon.service"
+echo " - /var/www/.config/transmission-daemon"
+echo " - /etc/transmission-daemon & /var/lib/transmission-daemon"
+echo "Er is al een reservekopie gemaakt in /storage/backups/transmission_complete_backup_2026-10-18.tar.gz"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de oude Transmission bestanden wilt verwijderen? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Opruimen geannuleerd."
+    exit 0
+fi
+
+log_step "Verwijderen van systemd service en configuratiebestanden op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen en uitschakelen van transmission-daemon.service...'
+    sudo systemctl stop transmission-daemon 2>/dev/null || true
+    sudo systemctl disable transmission-daemon 2>/dev/null || true
+    sudo rm -f /etc/systemd/system/transmission-daemon.service
+    sudo systemctl daemon-reload
+    sudo systemctl reset-failed 2>/dev/null || true
+
+    echo '--> Verwijderen van /var/www/.config/transmission-daemon...'
+    sudo rm -rf /var/www/.config/transmission-daemon
+
+    echo '--> Opslagruimte controleren...'
+    df -h / /storage
+"
+
+echo ""
+log_info "De oude standalone Transmission is succesvol en volledig opgeruimd!"
+echo "Alle verkeer naar poort 9091 en 53662 loopt nu direct via de Kubernetes pod."

k8s/flaresolverr/deployment.yaml

@@ -0,0 +1,62 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: flaresolverr
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: flaresolverr
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: flaresolverr
+  template:
+    metadata:
+      labels:
+        app: flaresolverr
+        app.kubernetes.io/name: flaresolverr
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      containers:
+        - name: flaresolverr
+          image: ghcr.io/flaresolverr/flaresolverr:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: LOG_LEVEL
+              value: "info"
+            - name: LOG_HTML
+              value: "false"
+            - name: CAPTCHA_SOLVER
+              value: "none"
+            - name: TZ
+              value: "Europe/Amsterdam"
+          ports:
+            - name: http
+              containerPort: 8191
+              protocol: TCP
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 1000m
+              memory: 1Gi
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 8191
+            initialDelaySeconds: 30
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: 8191
+            initialDelaySeconds: 15
+            periodSeconds: 10
+            timeoutSeconds: 5

k8s/flaresolverr/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - service.yaml
+  - deployment.yaml

k8s/flaresolverr/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: flaresolverr
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: flaresolverr
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  ports:
+    - port: 8191
+      targetPort: 8191
+      protocol: TCP
+      name: http
+  selector:
+    app: flaresolverr

k8s/jackett/deployment.yaml

@@ -0,0 +1,104 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: jackett
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: jackett
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: jackett
+  template:
+    metadata:
+      labels:
+        app: jackett
+        app.kubernetes.io/name: jackett
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      initContainers:
+        - name: migrate-config
+          image: lscr.io/linuxserver/jackett:latest
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/bash
+            - -c
+            - |
+              mkdir -p /config/Jackett
+              if [ ! -f /config/Jackett/ServerConfig.json ] || [ -f /config/ServerConfig.json ]; then
+                echo "Syncing Jackett config and indexers from host..."
+                [ -d /host-config/Indexers ] && cp -a /host-config/Indexers /config/Jackett/
+                [ -d /host-config/DataProtection ] && cp -a /host-config/DataProtection /config/Jackett/
+                [ -f /host-config/ServerConfig.json ] && cp -a /host-config/ServerConfig.json /config/Jackett/
+                # Remove misplaced root files if present
+                rm -rf /config/Indexers /config/ServerConfig.json /config/DataProtection /config/log.txt* /config/updater.txt*
+              fi
+              chown -R 33:33 /config
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: host-config
+              mountPath: /host-config
+              readOnly: true
+      containers:
+        - name: jackett
+          image: lscr.io/linuxserver/jackett:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PUID
+              value: "33"
+            - name: PGID
+              value: "33"
+            - name: TZ
+              value: "Europe/Amsterdam"
+            - name: AUTO_UPDATE
+              value: "false"
+          ports:
+            - name: http
+              containerPort: 9117
+              hostPort: 9117
+              protocol: TCP
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 1000m
+              memory: 1Gi
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: datadisk
+              mountPath: /datadisk
+          livenessProbe:
+            httpGet:
+              path: /jackett/health
+              port: 9117
+            initialDelaySeconds: 30
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /jackett/health
+              port: 9117
+            initialDelaySeconds: 15
+            periodSeconds: 10
+            timeoutSeconds: 5
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: jackett-config
+        - name: host-config
+          hostPath:
+            path: /home/bart/.config/Jackett
+            type: DirectoryOrCreate
+        - name: datadisk
+          hostPath:
+            path: /datadisk
+            type: Directory

k8s/jackett/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - pvc.yaml
+  - service.yaml
+  - deployment.yaml

k8s/jackett/pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jackett-config
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: jackett
+    app.kubernetes.io/part-of: htpc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

k8s/jackett/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: jackett
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: jackett
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  ports:
+    - port: 9117
+      targetPort: 9117
+      protocol: TCP
+      name: http
+  selector:
+    app: jackett

k8s/jellyfin/deployment.yaml

@@ -0,0 +1,175 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: jellyfin
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: jellyfin
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: jellyfin
+  template:
+    metadata:
+      labels:
+        app: jellyfin
+        app.kubernetes.io/name: jellyfin
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      initContainers:
+        - name: migrate-config
+          image: lscr.io/linuxserver/jellyfin:latest
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/bash
+            - -c
+            - |
+              if [ ! -f /config/system.xml ] && [ -f /host-etc/system.xml ]; then
+                echo "Syncing Jellyfin configuration from /etc/jellyfin..."
+                cp -a /host-etc/* /config/
+                sed -i 's|<MetadataPath>/var/lib/jellyfin/metadata</MetadataPath>|<MetadataPath>/config/metadata</MetadataPath>|g' /config/system.xml || true
+                sed -i 's|<CachePath>/var/cache/jellyfin</CachePath>|<CachePath>/config/cache</CachePath>|g' /config/system.xml || true
+              fi
+
+              mkdir -p /config/data/data /config/data/root /config/data/plugins /config/metadata /config/cache /config/log
+
+              # Move misplaced database files into /config/data/data if needed
+              if [ -f /config/data/jellyfin.db ]; then
+                echo "Relocating database files from /config/data to /config/data/data..."
+                mv -n /config/data/*.db* /config/data/data/ 2>/dev/null || true
+                mv -n /config/data/playlists /config/data/data/ 2>/dev/null || true
+                mv -n /config/data/subtitles /config/data/data/ 2>/dev/null || true
+                mv -n /config/data/ScheduledTasks /config/data/data/ 2>/dev/null || true
+                mv -n /config/data/SQLiteBackups /config/data/data/ 2>/dev/null || true
+                mv -n /config/data/attachments /config/data/data/ 2>/dev/null || true
+                mv -n /config/data/device.txt /config/data/data/ 2>/dev/null || true
+                mv -n /config/data/splashscreen.png /config/data/data/ 2>/dev/null || true
+              fi
+
+              if [ ! -f /config/data/data/jellyfin.db ] && [ -d /host-data/data ]; then
+                echo "Syncing data from /var/lib/jellyfin/data..."
+                cp -a /host-data/data/* /config/data/data/ || true
+              fi
+
+              if [ ! -d /config/metadata/library ] && [ -d /host-data/metadata ]; then
+                echo "Syncing metadata from /var/lib/jellyfin/metadata..."
+                cp -a /host-data/metadata/* /config/metadata/ || true
+              fi
+
+              if [ ! -d /config/data/plugins/configurations ] && [ -d /host-data/plugins ]; then
+                echo "Syncing plugins from /var/lib/jellyfin/plugins..."
+                cp -a /host-data/plugins/* /config/data/plugins/ || true
+              fi
+
+              if [ ! -d /config/data/root/default ] && [ -d /host-data/root ]; then
+                echo "Syncing root library structure from /var/lib/jellyfin/root..."
+                cp -a /host-data/root/* /config/data/root/ || true
+              fi
+
+              [ ! -e /config/root ] && ln -sf /config/data/root /config/root || true
+              [ ! -e /config/plugins ] && ln -sf /config/data/plugins /config/plugins || true
+
+              # Legacy compatibility for historical paths pointing to /var/lib/jellyfin
+              mkdir -p /config/legacy-jellyfin
+              ln -sfn /config/data/root /config/legacy-jellyfin/root
+              ln -sfn /config/metadata /config/legacy-jellyfin/metadata
+              ln -sfn /config/data/data /config/legacy-jellyfin/data
+              chmod 755 /config/legacy-jellyfin
+              chown -R 33:33 /config/legacy-jellyfin
+
+              chown -R 33:33 /config
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: host-etc
+              mountPath: /host-etc
+              readOnly: true
+            - name: host-data
+              mountPath: /host-data
+              readOnly: true
+      containers:
+        - name: jellyfin
+          image: lscr.io/linuxserver/jellyfin:latest
+          imagePullPolicy: IfNotPresent
+          securityContext:
+            privileged: true
+          env:
+            - name: PUID
+              value: "33"
+            - name: PGID
+              value: "33"
+            - name: TZ
+              value: "Europe/Amsterdam"
+            - name: DOTNET_gcServer
+              value: "0"
+            - name: DOTNET_GCHeapHardLimit
+              value: "0x160000000"
+            - name: DOTNET_GCLargeObjectHeapCompactionMode
+              value: "1"
+          ports:
+            - name: http
+              containerPort: 8096
+              hostPort: 8096
+          resources:
+            requests:
+              cpu: 200m
+              memory: 1Gi
+            limits:
+              cpu: 4000m
+              memory: 8Gi
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: datadisk
+              mountPath: /datadisk
+            - name: mnt-mp3
+              mountPath: /mnt/mp3
+            - name: dri
+              mountPath: /dev/dri
+            - name: config
+              mountPath: /var/lib/jellyfin
+              subPath: legacy-jellyfin
+          livenessProbe:
+            httpGet:
+              path: /jellyfin/health
+              port: 8096
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /jellyfin/health
+              port: 8096
+            initialDelaySeconds: 30
+            periodSeconds: 10
+            timeoutSeconds: 5
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: jellyfin-config
+        - name: datadisk
+          hostPath:
+            path: /datadisk
+            type: Directory
+        - name: mnt-mp3
+          hostPath:
+            path: /mnt/mp3
+            type: Directory
+        - name: dri
+          hostPath:
+            path: /dev/dri
+            type: Directory
+        - name: host-etc
+          hostPath:
+            path: /etc/jellyfin
+            type: DirectoryOrCreate
+        - name: host-data
+          hostPath:
+            path: /var/lib/jellyfin
+            type: DirectoryOrCreate

k8s/jellyfin/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - pvc.yaml
+  - service.yaml
+  - deployment.yaml

k8s/jellyfin/pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jellyfin-config
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: jellyfin
+    app.kubernetes.io/part-of: htpc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 30Gi

k8s/jellyfin/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: jellyfin
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: jellyfin
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      port: 8096
+      targetPort: 8096
+      protocol: TCP
+  selector:
+    app: jellyfin

k8s/kustomization.yaml

@@ -5,3 +5,14 @@ namespace: htpc
 
 resources:
   - namespace.yaml
+  - radarr
+  - sonarr
+  - lidarr
+  - transmission
+  - slskd
+  - jackett
+  - flaresolverr
+  - jellyfin
+  - radio-chicken
+
+

k8s/lidarr/deployment.yaml

@@ -0,0 +1,84 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: lidarr
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: lidarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: lidarr
+  template:
+    metadata:
+      labels:
+        app: lidarr
+        app.kubernetes.io/name: lidarr
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      containers:
+        - name: lidarr
+          image: lscr.io/linuxserver/lidarr:nightly
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PUID
+              value: "33"
+            - name: PGID
+              value: "33"
+            - name: TZ
+              value: "Europe/Amsterdam"
+            - name: UMASK
+              value: "0002"
+          envFrom:
+            - secretRef:
+                name: lidarr-secret
+          ports:
+            - name: http
+              containerPort: 8686
+              hostPort: 8686
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 2000m
+              memory: 2Gi
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: datadisk
+              mountPath: /datadisk
+            - name: mnt-mp3
+              mountPath: /mnt/mp3
+          livenessProbe:
+            httpGet:
+              path: /lidarr/ping
+              port: 8686
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /lidarr/ping
+              port: 8686
+            initialDelaySeconds: 30
+            periodSeconds: 10
+            timeoutSeconds: 5
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: lidarr-config
+        - name: datadisk
+          hostPath:
+            path: /datadisk
+            type: Directory
+        - name: mnt-mp3
+          hostPath:
+            path: /mnt/mp3
+            type: Directory

k8s/lidarr/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - secret.yaml
+  - pvc.yaml
+  - service.yaml
+  - deployment.yaml

k8s/lidarr/pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: lidarr-config
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: lidarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

k8s/lidarr/secret.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: lidarr-secret
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: lidarr
+    app.kubernetes.io/part-of: htpc
+type: Opaque
+stringData:
+  LIDARR__POSTGRES__HOST: "postgresql.cluster-infra.svc.cluster.local"
+  LIDARR__POSTGRES__PORT: "5432"
+  LIDARR__POSTGRES__USER: "lidarr"
+  LIDARR__POSTGRES__PASSWORD: "lidarr_pg_pass_2026"
+  LIDARR__POSTGRES__MAINDB: "lidarr-main"
+  LIDARR__POSTGRES__LOGDB: "lidarr-log"
+  LIDARR__SERVER__URLBASE: "lidarr"
+  LIDARR__SERVER__PORT: "8686"
+  LIDARR__SERVER__ALLOWEDHOSTS: "*"
+  LIDARR__AUTH__APIKEY: "463c1d257f6a473fb41a23fa34ca762b"

k8s/lidarr/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: lidarr
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: lidarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  ports:
+    - port: 8686
+      targetPort: 8686
+      protocol: TCP
+      name: http
+  selector:
+    app: lidarr

k8s/radarr/deployment.yaml

@@ -0,0 +1,84 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: radarr
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: radarr
+  template:
+    metadata:
+      labels:
+        app: radarr
+        app.kubernetes.io/name: radarr
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      containers:
+        - name: radarr
+          image: lscr.io/linuxserver/radarr:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PUID
+              value: "33"
+            - name: PGID
+              value: "33"
+            - name: TZ
+              value: "Europe/Amsterdam"
+          envFrom:
+            - secretRef:
+                name: radarr-secret
+
+          ports:
+            - name: http
+              containerPort: 7878
+              hostPort: 7878
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 2000m
+              memory: 2Gi
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: datadisk
+              mountPath: /datadisk
+            - name: mnt-mp3
+              mountPath: /mnt/mp3
+          livenessProbe:
+            httpGet:
+              path: /radarr/ping
+              port: 7878
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /radarr/ping
+              port: 7878
+            initialDelaySeconds: 30
+            periodSeconds: 10
+            timeoutSeconds: 5
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: radarr-config
+        - name: datadisk
+          hostPath:
+            path: /datadisk
+            type: Directory
+        - name: mnt-mp3
+          hostPath:
+            path: /mnt/mp3
+            type: Directory
+

k8s/radarr/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - secret.yaml
+  - pvc.yaml
+  - service.yaml
+  - deployment.yaml
+

k8s/radarr/pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: radarr-config
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

k8s/radarr/secret.yaml

@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: radarr-secret
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: htpc
+type: Opaque
+stringData:
+  RADARR__POSTGRES__HOST: "postgresql.cluster-infra.svc.cluster.local"
+  RADARR__POSTGRES__PORT: "5432"
+  RADARR__POSTGRES__USER: "radarr"
+  RADARR__POSTGRES__PASSWORD: "radarr_pg_pass_2026"
+  RADARR__POSTGRES__MAINDB: "radarr-main"
+  RADARR__POSTGRES__LOGDB: "radarr-log"
+  RADARR__SERVER__URLBASE: "radarr"
+  RADARR__SERVER__PORT: "7878"
+  RADARR__SERVER__ALLOWEDHOSTS: "*"
+  RADARR__AUTH__APIKEY: "e4ffa6273473460eb57073ff861534ae"
+

k8s/radarr/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: radarr
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  ports:
+    - port: 7878
+      targetPort: 7878
+      protocol: TCP
+      name: http
+  selector:
+    app: radarr

k8s/radio-chicken/configmap.yaml

@@ -0,0 +1,74 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: radio-chicken-icecast-config
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radio-chicken
+    app.kubernetes.io/part-of: htpc
+data:
+  icecast.xml: |
+    <icecast>
+        <location>Radio Chicken Coop</location>
+        <admin>admin@localhost</admin>
+
+        <limits>
+            <clients>500</clients>
+            <sources>20</sources>
+            <queue-size>524288</queue-size>
+            <client-timeout>30</client-timeout>
+            <header-timeout>15</header-timeout>
+            <source-timeout>10</source-timeout>
+            <burst-on-connect>1</burst-on-connect>
+            <burst-size>65535</burst-size>
+        </limits>
+
+        <authentication>
+            <source-password>hackme</source-password>
+            <relay-password>hackme</relay-password>
+            <admin-user>admin</admin-user>
+            <admin-password>hackme</admin-password>
+        </authentication>
+
+        <hostname>localhost</hostname>
+
+        <listen-socket>
+            <port>8000</port>
+        </listen-socket>
+
+        <fileserve>1</fileserve>
+
+        <paths>
+            <logdir>/var/log/icecast2</logdir>
+            <webroot>/usr/share/icecast2/web</webroot>
+            <adminroot>/usr/share/icecast2/admin</adminroot>
+            <alias source="/" destination="/status.xsl"/>
+        </paths>
+
+        <logging>
+            <accesslog>access.log</accesslog>
+            <errorlog>error.log</errorlog>
+            <loglevel>3</loglevel>
+            <logsize>10000</logsize>
+        </logging>
+
+        <security>
+            <chroot>0</chroot>
+        </security>
+
+        <!-- Mountpoint configuratie voor Radio Chicken Audio met Fallback -->
+        <mount type="normal">
+            <mount-name>/chicken</mount-name>
+            <fallback-mount>/standby.ogg</fallback-mount>
+            <fallback-override>1</fallback-override>
+            <fallback-when-full>1</fallback-when-full>
+        </mount>
+
+        <!-- Mountpoint configuratie voor Radio Chicken Video met Fallback -->
+        <mount type="normal">
+            <mount-name>/chicken_video.webm</mount-name>
+            <fallback-mount>/standby_video.webm</fallback-mount>
+            <fallback-override>1</fallback-override>
+            <fallback-when-full>1</fallback-when-full>
+        </mount>
+    </icecast>

k8s/radio-chicken/deployment-icecast.yaml

@@ -0,0 +1,102 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: radio-chicken-icecast
+  namespace: htpc
+  labels:
+    app: radio-chicken-icecast
+    app.kubernetes.io/name: radio-chicken-icecast
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: radio-chicken-icecast
+  template:
+    metadata:
+      labels:
+        app: radio-chicken-icecast
+        app.kubernetes.io/name: radio-chicken-icecast
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      containers:
+        - name: icecast
+          image: moul/icecast:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: ICECAST_SOURCE_PASSWORD
+              value: "hackme"
+            - name: ICECAST_ADMIN_PASSWORD
+              value: "hackme"
+            - name: ICECAST_PASSWORD
+              value: "hackme"
+          ports:
+            - name: icecast
+              containerPort: 8000
+              hostPort: 8000
+              protocol: TCP
+          resources:
+            requests:
+              cpu: 50m
+              memory: 64Mi
+            limits:
+              cpu: 500m
+              memory: 512Mi
+          volumeMounts:
+            - name: icecast-config
+              mountPath: /etc/icecast2/icecast.xml
+              subPath: icecast.xml
+            - name: standby-media
+              mountPath: /usr/share/icecast2/web/standby.ogg
+              subPath: standby.ogg
+            - name: standby-media
+              mountPath: /usr/share/icecast2/web/standby.mp3
+              subPath: standby.mp3
+            - name: standby-media
+              mountPath: /usr/share/icecast2/web/standby_video.webm
+              subPath: standby_video.webm
+          livenessProbe:
+            httpGet:
+              path: /status-json.xsl
+              port: 8000
+            initialDelaySeconds: 15
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /status-json.xsl
+              port: 8000
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 5
+      volumes:
+        - name: icecast-config
+          configMap:
+            name: radio-chicken-icecast-config
+        - name: standby-media
+          hostPath:
+            path: /home/bart/jellyfinradio/webroot
+            type: Directory
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: radio-chicken-icecast
+  namespace: htpc
+  labels:
+    app: radio-chicken-icecast
+    app.kubernetes.io/name: radio-chicken-icecast
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  selector:
+    app: radio-chicken-icecast
+  ports:
+    - name: http-icecast
+      port: 8000
+      targetPort: 8000
+      protocol: TCP

k8s/radio-chicken/deployment.yaml

@@ -0,0 +1,177 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: radio-chicken
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radio-chicken
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: radio-chicken
+  template:
+    metadata:
+      labels:
+        app: radio-chicken
+        app.kubernetes.io/name: radio-chicken
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      initContainers:
+        - name: migrate-data
+          image: alpine:3.20
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -c
+            - |
+              echo "Checking and preparing directories for Radio Chicken..."
+              mkdir -p /data/data /data/webroot
+
+              if [ ! -f /data/data/settings.json ] && [ -f /host-radio/data/settings.json ]; then
+                echo "Syncing Radio Chicken data and cache from host (/home/bart/jellyfinradio/data)..."
+                cp -a /host-radio/data/* /data/data/ || true
+              fi
+
+              if [ ! -f /data/webroot/standby.ogg ] && [ -d /host-radio/webroot ]; then
+                echo "Syncing standby media files from host (/home/bart/jellyfinradio/webroot)..."
+                cp -a /host-radio/webroot/* /data/webroot/ || true
+              fi
+
+              chmod -R 777 /data
+              echo "Init container completed successfully."
+          volumeMounts:
+            - name: data
+              mountPath: /data
+            - name: host-radio
+              mountPath: /host-radio
+              readOnly: true
+      containers:
+        # Container: Radio Chicken Web Application & Audio/Video Streamer
+        - name: radio-chicken
+          image: git.bnhmeijer.nl/bart/radio-chicken:latest
+          imagePullPolicy: Always
+          securityContext:
+            privileged: true
+          env:
+            - name: JELLYFIN_URL
+              value: "http://jellyfin:8096/jellyfin"
+            - name: JELLYFIN_API_KEY
+              value: "c58f4b427eaf475aafd86abd87f139af"
+            - name: JELLYFIN_USER_ID
+              value: "40a220e1e05e4a4395c9b0c6569f6e82"
+            - name: ICECAST_URL
+              value: "icecast://source:hackme@radio-chicken-icecast:8000/chicken"
+            - name: ICECAST_STATUS_URL
+              value: "http://radio-chicken-icecast:8000/status-json.xsl"
+            - name: VIDEO_ENCODER
+              value: "h264_vaapi"
+            - name: VAAPI_DEVICE
+              value: "/dev/dri/renderD128"
+          ports:
+            - name: web
+              containerPort: 5000
+              hostPort: 5000
+              protocol: TCP
+          resources:
+            requests:
+              cpu: 200m
+              memory: 1Gi
+            limits:
+              cpu: 4000m
+              memory: 6Gi
+          volumeMounts:
+            - name: data
+              mountPath: /app/data
+              subPath: data
+            - name: music-videos
+              mountPath: /music_videos
+            - name: dri
+              mountPath: /dev/dri
+          livenessProbe:
+            httpGet:
+              path: /live
+              port: 5000
+            initialDelaySeconds: 45
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /live
+              port: 5000
+            initialDelaySeconds: 20
+            periodSeconds: 10
+            timeoutSeconds: 5
+
+        # Container 3: Radio Chicken Autoplacer Worker
+        - name: autoplacer
+          image: git.bnhmeijer.nl/bart/radio-chicken-autoplacer:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: JELLYFIN_URL
+              value: "http://jellyfin:8096/jellyfin"
+            - name: JELLYFIN_API_KEY
+              value: "c58f4b427eaf475aafd86abd87f139af"
+            - name: JELLYFIN_USER_ID
+              value: "40a220e1e05e4a4395c9b0c6569f6e82"
+            - name: CHECK_INTERVAL_SECONDS
+              value: "60"
+            - name: PROCESS_DELAY_SECONDS
+              value: "3"
+          resources:
+            requests:
+              cpu: 50m
+              memory: 256Mi
+            limits:
+              cpu: 1000m
+              memory: 2Gi
+
+        # Container 4: Radio Chicken Music Video Downloader Worker
+        - name: mv-downloader
+          image: git.bnhmeijer.nl/bart/radio-chicken-mv-downloader:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: JELLYFIN_URL
+              value: "http://jellyfin:8096/jellyfin"
+            - name: JELLYFIN_API_KEY
+              value: "c58f4b427eaf475aafd86abd87f139af"
+            - name: JELLYFIN_USER_ID
+              value: "40a220e1e05e4a4395c9b0c6569f6e82"
+            - name: MUSIC_VIDEOS_DIR
+              value: "/music_videos"
+            - name: CHECK_INTERVAL_SECONDS
+              value: "3600"
+            - name: PROCESS_DELAY_SECONDS
+              value: "3"
+          resources:
+            requests:
+              cpu: 50m
+              memory: 256Mi
+            limits:
+              cpu: 2000m
+              memory: 2Gi
+          volumeMounts:
+            - name: music-videos
+              mountPath: /music_videos
+
+      volumes:
+        - name: data
+          persistentVolumeClaim:
+            claimName: radio-chicken-data
+        - name: music-videos
+          hostPath:
+            path: /datadisk/htpc/music_video
+            type: Directory
+        - name: dri
+          hostPath:
+            path: /dev/dri
+            type: Directory
+        - name: host-radio
+          hostPath:
+            path: /home/bart/jellyfinradio
+            type: DirectoryOrCreate

k8s/radio-chicken/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - configmap.yaml
+  - pvc.yaml
+  - service.yaml
+  - deployment-icecast.yaml
+  - deployment.yaml

k8s/radio-chicken/pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: radio-chicken-data
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radio-chicken
+    app.kubernetes.io/part-of: htpc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

k8s/radio-chicken/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: radio-chicken
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radio-chicken
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  selector:
+    app: radio-chicken
+  ports:
+    - name: http-web
+      port: 5000
+      targetPort: 5000
+      protocol: TCP

k8s/slskd/deployment.yaml

@@ -0,0 +1,124 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: slskd
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: slskd
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: slskd
+  template:
+    metadata:
+      labels:
+        app: slskd
+        app.kubernetes.io/name: slskd
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      initContainers:
+        - name: migrate-config
+          image: slskd/slskd:latest
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/bash
+            - -c
+            - |
+              if [ ! -f /app/slskd.yml ] && [ -f /host-config/slskd.yml ]; then
+                echo "Migrating slskd config and databases from host..."
+                cp -a /host-config/* /app/
+              fi
+              chown -R 33:33 /app
+          volumeMounts:
+            - name: config
+              mountPath: /app
+            - name: host-config
+              mountPath: /host-config
+              readOnly: true
+      containers:
+        - name: slskd
+          image: slskd/slskd:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PUID
+              value: "33"
+            - name: PGID
+              value: "33"
+            - name: SLSKD_UMASK
+              value: "0002"
+            - name: SLSKD_APP_DIR
+              value: "/app"
+            - name: SLSKD_REMOTE_CONFIGURATION
+              value: "true"
+            - name: SLSKD_REMOTE_FILE_MANAGEMENT
+              value: "true"
+          ports:
+            - name: http
+              containerPort: 5030
+              hostPort: 5030
+              protocol: TCP
+            - name: https
+              containerPort: 5031
+              hostPort: 5031
+              protocol: TCP
+            - name: slsk-listen
+              containerPort: 50300
+              hostPort: 50300
+              protocol: TCP
+          resources:
+            requests:
+              cpu: 100m
+              memory: 512Mi
+            limits:
+              cpu: 2000m
+              memory: 6Gi
+          volumeMounts:
+            - name: config
+              mountPath: /app
+            - name: datadisk
+              mountPath: /datadisk
+            - name: mnt-mp3
+              mountPath: /mnt/mp3
+          startupProbe:
+            httpGet:
+              path: /health
+              port: 5030
+            failureThreshold: 240
+            periodSeconds: 10
+            timeoutSeconds: 5
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 5030
+            initialDelaySeconds: 30
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: 5030
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 5
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: slskd-config
+        - name: host-config
+          hostPath:
+            path: /var/www/.local/share/slskd
+            type: DirectoryOrCreate
+        - name: datadisk
+          hostPath:
+            path: /datadisk
+            type: Directory
+        - name: mnt-mp3
+          hostPath:
+            path: /mnt/mp3
+            type: Directory

k8s/slskd/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - pvc.yaml
+  - service.yaml
+  - deployment.yaml

k8s/slskd/pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: slskd-config
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: slskd
+    app.kubernetes.io/part-of: htpc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

k8s/slskd/service.yaml

@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: slskd
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: slskd
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  ports:
+    - port: 5030
+      targetPort: 5030
+      protocol: TCP
+      name: http
+    - port: 5031
+      targetPort: 5031
+      protocol: TCP
+      name: https
+    - port: 50300
+      targetPort: 50300
+      protocol: TCP
+      name: slsk-listen
+  selector:
+    app: slskd

k8s/sonarr/deployment.yaml

@@ -0,0 +1,84 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: sonarr
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: sonarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: sonarr
+  template:
+    metadata:
+      labels:
+        app: sonarr
+        app.kubernetes.io/name: sonarr
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      containers:
+        - name: sonarr
+          image: lscr.io/linuxserver/sonarr:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PUID
+              value: "33"
+            - name: PGID
+              value: "33"
+            - name: TZ
+              value: "Europe/Amsterdam"
+            - name: UMASK
+              value: "0002"
+          envFrom:
+            - secretRef:
+                name: sonarr-secret
+          ports:
+            - name: http
+              containerPort: 8989
+              hostPort: 8989
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 2000m
+              memory: 2Gi
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: datadisk
+              mountPath: /datadisk
+            - name: mnt-mp3
+              mountPath: /mnt/mp3
+          livenessProbe:
+            httpGet:
+              path: /sonarr/ping
+              port: 8989
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /sonarr/ping
+              port: 8989
+            initialDelaySeconds: 30
+            periodSeconds: 10
+            timeoutSeconds: 5
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: sonarr-config
+        - name: datadisk
+          hostPath:
+            path: /datadisk
+            type: Directory
+        - name: mnt-mp3
+          hostPath:
+            path: /mnt/mp3
+            type: Directory

k8s/sonarr/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - secret.yaml
+  - pvc.yaml
+  - service.yaml
+  - deployment.yaml

k8s/sonarr/pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: sonarr-config
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: sonarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

k8s/sonarr/secret.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: sonarr-secret
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: sonarr
+    app.kubernetes.io/part-of: htpc
+type: Opaque
+stringData:
+  SONARR__POSTGRES__HOST: "postgresql.cluster-infra.svc.cluster.local"
+  SONARR__POSTGRES__PORT: "5432"
+  SONARR__POSTGRES__USER: "sonarr"
+  SONARR__POSTGRES__PASSWORD: "sonarr_pg_pass_2026"
+  SONARR__POSTGRES__MAINDB: "sonarr-main"
+  SONARR__POSTGRES__LOGDB: "sonarr-log"
+  SONARR__SERVER__URLBASE: "sonarr"
+  SONARR__SERVER__PORT: "8989"
+  SONARR__SERVER__ALLOWEDHOSTS: "*"
+  SONARR__AUTH__APIKEY: "ad33af0344fe41159904acf76cdc03ce"

k8s/sonarr/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: sonarr
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: sonarr
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  ports:
+    - port: 8989
+      targetPort: 8989
+      protocol: TCP
+      name: http
+  selector:
+    app: sonarr

k8s/transmission/cronjob.yaml

@@ -0,0 +1,70 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: transmission-cleanup
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: transmission-cleanup
+    app.kubernetes.io/part-of: htpc
+spec:
+  schedule: "*/15 * * * *"
+  concurrencyPolicy: Forbid
+  successfulJobsHistoryLimit: 1
+  failedJobsHistoryLimit: 2
+  jobTemplate:
+    spec:
+      template:
+        metadata:
+          labels:
+            app.kubernetes.io/name: transmission-cleanup
+            app.kubernetes.io/part-of: htpc
+        spec:
+          nodeSelector:
+            kubernetes.io/hostname: vmserver
+          restartPolicy: OnFailure
+          containers:
+            - name: cleanup
+              image: lscr.io/linuxserver/transmission:latest
+              imagePullPolicy: IfNotPresent
+              command:
+                - /bin/bash
+                - -c
+                - |
+                  set -euo pipefail
+                  RPC_URL="http://transmission.htpc.svc.cluster.local:9091/transmission/rpc"
+                  MAX_IDLE_SECONDS=43200 # 12 uur
+
+                  SESSION=$(curl -s "$RPC_URL" | sed -n 's/.*X-Transmission-Session-Id: \([^<]*\).*/\1/p')
+                  if [ -z "$SESSION" ]; then
+                    echo "Kon geen X-Transmission-Session-Id ophalen."
+                    exit 1
+                  fi
+
+                  NOW=$(date +%s)
+                  RESPONSE=$(curl -s -H "X-Transmission-Session-Id: $SESSION" \
+                    -d '{"method":"torrent-get","arguments":{"fields":["id","name","activityDate","addedDate","rateDownload","rateUpload","percentDone","status"]}}' \
+                    "$RPC_URL")
+
+                  STALE_JSON=$(echo "$RESPONSE" | jq -c --argjson now "$NOW" --argjson max_idle "$MAX_IDLE_SECONDS" '
+                    [
+                      .arguments.torrents[]
+                      | (. as $t | (if $t.activityDate > $t.addedDate then $t.activityDate else $t.addedDate end)) as $last_active
+                      | select($last_active > 0 and (($now - $last_active) > $max_idle) and (.rateDownload == 0) and (.rateUpload == 0))
+                      | {id: .id, name: .name, idle_hours: ((($now - $last_active) / 3600 * 10 | floor) / 10)}
+                    ]
+                  ')
+
+                  COUNT=$(echo "$STALE_JSON" | jq 'length')
+                  if [ "$COUNT" -eq 0 ]; then
+                    echo "Geen torrents gevonden die langer dan 12 uur inactief zijn."
+                    exit 0
+                  fi
+
+                  echo "Verwijderen van $COUNT inactieve torrents (>12u) inclusief lokale data:"
+                  echo "$STALE_JSON" | jq -r '.[] | " - [\(.id)] \(.name) (\(.idle_hours)u inactief)"'
+
+                  IDS=$(echo "$STALE_JSON" | jq -c '[.[].id]')
+                  REMOVE_PAYLOAD=$(jq -nc --argjson ids "$IDS" '{"method":"torrent-remove","arguments":{"ids":$ids,"delete-local-data":true}}')
+
+                  RESULT=$(curl -s -H "X-Transmission-Session-Id: $SESSION" -d "$REMOVE_PAYLOAD" "$RPC_URL")
+                  echo "RPC resultaat: $RESULT"

k8s/transmission/deployment.yaml

@@ -0,0 +1,124 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: transmission
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: transmission
+    app.kubernetes.io/part-of: htpc
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: transmission
+  template:
+    metadata:
+      labels:
+        app: transmission
+        app.kubernetes.io/name: transmission
+        app.kubernetes.io/part-of: htpc
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: vmserver
+      initContainers:
+        - name: migrate-config
+          image: lscr.io/linuxserver/transmission:latest
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -c
+            - |
+              if [ ! -d /config/torrents ] && [ -d /host-config/torrents ]; then
+                echo "Migrating transmission config from host..."
+                cp -a /host-config/torrents /config/
+                cp -a /host-config/resume /config/
+                [ -d /host-config/blocklists ] && cp -a /host-config/blocklists /config/
+                for f in settings.json stats.json dht.dat bandwidth-groups.json; do
+                  [ -f "/host-config/$f" ] && cp -a "/host-config/$f" /config/
+                done
+              fi
+              if [ -f /config/settings.json ]; then
+                sed -i 's/"rpc-authentication-required": true/"rpc-authentication-required": false/g' /config/settings.json
+                sed -i 's/"rpc-whitelist-enabled": true/"rpc-whitelist-enabled": false/g' /config/settings.json
+                sed -i 's/"rpc-host-whitelist-enabled": true/"rpc-host-whitelist-enabled": false/g' /config/settings.json
+              fi
+              chown -R 33:33 /config
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: host-config
+              mountPath: /host-config
+              readOnly: true
+      containers:
+        - name: transmission
+          image: lscr.io/linuxserver/transmission:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PUID
+              value: "33"
+            - name: PGID
+              value: "33"
+            - name: TZ
+              value: "Europe/Amsterdam"
+            - name: UMASK
+              value: "0002"
+          envFrom:
+            - secretRef:
+                name: transmission-secret
+          ports:
+            - name: http
+              containerPort: 9091
+              hostPort: 9091
+              protocol: TCP
+            - name: peer-tcp
+              containerPort: 53662
+              hostPort: 53662
+              protocol: TCP
+            - name: peer-udp
+              containerPort: 53662
+              hostPort: 53662
+              protocol: UDP
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 2000m
+              memory: 4Gi
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: datadisk
+              mountPath: /datadisk
+            - name: mnt-mp3
+              mountPath: /mnt/mp3
+          livenessProbe:
+            tcpSocket:
+              port: 9091
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            timeoutSeconds: 5
+          readinessProbe:
+            tcpSocket:
+              port: 9091
+            initialDelaySeconds: 15
+            periodSeconds: 10
+            timeoutSeconds: 5
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: transmission-config
+        - name: host-config
+          hostPath:
+            path: /var/www/.config/transmission-daemon
+            type: DirectoryOrCreate
+        - name: datadisk
+          hostPath:
+            path: /datadisk
+            type: Directory
+        - name: mnt-mp3
+          hostPath:
+            path: /mnt/mp3
+            type: Directory

k8s/transmission/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - secret.yaml
+  - pvc.yaml
+  - service.yaml
+  - deployment.yaml
+  - cronjob.yaml

k8s/transmission/pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: transmission-config
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: transmission
+    app.kubernetes.io/part-of: htpc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

k8s/transmission/secret.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: transmission-secret
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: transmission
+    app.kubernetes.io/part-of: htpc
+type: Opaque
+stringData:
+  PEERPORT: "53662"

k8s/transmission/service.yaml

@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: transmission
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: transmission
+    app.kubernetes.io/part-of: htpc
+spec:
+  type: ClusterIP
+  ports:
+    - port: 9091
+      targetPort: 9091
+      protocol: TCP
+      name: http
+    - port: 53662
+      targetPort: 53662
+      protocol: TCP
+      name: peer-tcp
+    - port: 53662
+      targetPort: 53662
+      protocol: UDP
+      name: peer-udp
+  selector:
+    app: transmission

migrate_jackett_to_cluster.sh

@@ -0,0 +1,106 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Jackett Migration Script: Host Service -> Kubernetes Cluster (htpc namespace)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+HTPC_NS="htpc"
+BACKUP_DIR="/storage/backups"
+DATE_STR=$(date +%Y-%m-%d)
+KUBECONFIG_PATH="${KUBECONFIG:-$HOME/.kube/config_vmserver}"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+log_err()  { echo -e "${COLOR_RED}[ERROR]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   JACKETT MIGRATIE NAAR KUBERNETES CLUSTER (NAMESPACE: ${HTPC_NS})"
+echo "========================================================================"
+echo "Bron:       jackett.service op ${CLUSTER_HOST}"
+echo "Config:     /home/bart/.config/Jackett"
+echo "Doel:       K8s Pod in namespace '${HTPC_NS}' op ${CLUSTER_HOST}"
+echo "Poort:      9117 (ClusterIP & HostPort 9117)"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de Jackett migratie naar Kubernetes wilt starten? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Migratie geannuleerd."
+    exit 0
+fi
+
+# ------------------------------------------------------------------------------
+# STAP 1: PRE-FLIGHT CHECKS
+# ------------------------------------------------------------------------------
+log_step "1. Pre-flight checks uitvoeren..."
+
+log_info "Verbinding testen naar host (${CLUSTER_HOST})..."
+ssh -o BatchMode=yes -o ConnectTimeout=5 "${SSH_USER}@${CLUSTER_HOST}" "true" || {
+    log_err "Kan niet verbinden met host (${CLUSTER_HOST}) via SSH."
+    exit 1
+}
+
+# ------------------------------------------------------------------------------
+# STAP 2: RESERVEKOPIE MAKEN VAN JACKETT DATA
+# ------------------------------------------------------------------------------
+log_step "2. Reservekopie maken van /home/bart/.config/Jackett op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    sudo mkdir -p '${BACKUP_DIR}'
+    if [ -d '/home/bart/.config/Jackett' ]; then
+        echo 'Inpakken van Jackett config naar ${BACKUP_DIR}/jackett_backup_${DATE_STR}.tar.gz...'
+        sudo tar -czf '${BACKUP_DIR}/jackett_backup_${DATE_STR}.tar.gz' -C /home/bart/.config Jackett
+        echo 'Backup gereed:'
+        ls -lh '${BACKUP_DIR}/jackett_backup_${DATE_STR}.tar.gz'
+    fi
+"
+
+# ------------------------------------------------------------------------------
+# STAP 3: STANDALONE JACKETT SERVICE STOPPEN OP DE HOST
+# ------------------------------------------------------------------------------
+log_step "3. Standalone jackett.service stoppen op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen van jackett.service...'
+    sudo systemctl stop jackett
+"
+
+# ------------------------------------------------------------------------------
+# STAP 4: KUBERNETES MANIFESTS TOEPASSEN
+# ------------------------------------------------------------------------------
+log_step "4. Kubernetes manifests toepassen..."
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl apply -k "${SCRIPT_DIR}/k8s/"
+
+log_info "Wachten op succesvolle uitrol van Jackett pod..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl rollout status deployment/jackett -n "${HTPC_NS}" --timeout=120s
+
+# ------------------------------------------------------------------------------
+# STAP 5: VERIFICATIE
+# ------------------------------------------------------------------------------
+log_step "5. Verificatie van endpoints..."
+sleep 5
+
+log_info "Health endpoint testen via host (poort 9117)..."
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://127.0.0.1:9117/jackett/health" | head -n 1
+
+log_info "Cluster IP service testen..."
+CLUSTER_IP=$(KUBECONFIG="${KUBECONFIG_PATH}" kubectl get svc jackett -n "${HTPC_NS}" -o jsonpath='{.spec.clusterIP}')
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://${CLUSTER_IP}:9117/jackett/health" | head -n 1
+
+echo ""
+echo "========================================================================"
+log_info "JACKETT MIGRATIE SUCCESVOL AFGEROND!"
+echo "Jackett draait nu als pod in Kubernetes namespace '${HTPC_NS}'."
+echo "Configuratie en indexers zijn bewaard in PersistentVolume jackett-config."
+echo "URL via Apache: https://thuus.bnhmeijer.nl/jackett/"
+echo "Direct LAN:     http://10.2.0.4:9117/jackett/"
+echo "Host service uitschakelen / opruimen kan via: ./cleanup_old_jackett.sh"
+echo "========================================================================"

migrate_jellyfin_to_cluster.sh

@@ -0,0 +1,119 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Jellyfin Migration Script: Host Service -> Kubernetes Cluster (htpc namespace)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+HTPC_NS="htpc"
+BACKUP_DIR="/storage/backups"
+DATE_STR=$(date +%Y-%m-%d)
+KUBECONFIG_PATH="${KUBECONFIG:-$HOME/.kube/config_vmserver}"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+log_err()  { echo -e "${COLOR_RED}[ERROR]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   JELLYFIN MIGRATIE NAAR KUBERNETES CLUSTER (NAMESPACE: ${HTPC_NS})"
+echo "========================================================================"
+echo "Bron:       jellyfin.service op ${CLUSTER_HOST}"
+echo "Config:     /etc/jellyfin & /var/lib/jellyfin"
+echo "Doel:       K8s Pod in namespace '${HTPC_NS}' op ${CLUSTER_HOST}"
+echo "Poort:      8096 (ClusterIP & HostPort 8096)"
+echo "Transcode:  AMD VA-API (/dev/dri/renderD128)"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de Jellyfin migratie naar Kubernetes wilt starten? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Migratie geannuleerd."
+    exit 0
+fi
+
+# ------------------------------------------------------------------------------
+# STAP 1: PRE-FLIGHT CHECKS
+# ------------------------------------------------------------------------------
+log_step "1. Pre-flight checks uitvoeren..."
+
+log_info "Verbinding testen naar host (${CLUSTER_HOST})..."
+ssh -o BatchMode=yes -o ConnectTimeout=5 "${SSH_USER}@${CLUSTER_HOST}" "true" || {
+    log_err "Kan niet verbinden met host (${CLUSTER_HOST}) via SSH."
+    exit 1
+}
+
+log_info "Controleren van KUBECONFIG verbinding..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl get nodes | grep -q "vmserver" || {
+    log_err "Kan vmserver node niet bereiken via kubectl (KUBECONFIG=${KUBECONFIG_PATH})!"
+    exit 1
+}
+
+# ------------------------------------------------------------------------------
+# STAP 2: RESERVEKOPIE MAKEN VAN JELLYFIN CONFIG & DATA
+# ------------------------------------------------------------------------------
+log_step "2. Reservekopie maken van /etc/jellyfin en /var/lib/jellyfin/data op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    sudo mkdir -p '${BACKUP_DIR}'
+    if [ -d '/etc/jellyfin' ] || [ -d '/var/lib/jellyfin/data' ]; then
+        echo 'Inpakken van Jellyfin configuratie en database naar ${BACKUP_DIR}/jellyfin_backup_${DATE_STR}.tar.gz...'
+        sudo tar -czf '${BACKUP_DIR}/jellyfin_backup_${DATE_STR}.tar.gz' \
+            -C / etc/jellyfin \
+            -C /var/lib/jellyfin data
+        echo 'Backup gereed:'
+        ls -lh '${BACKUP_DIR}/jellyfin_backup_${DATE_STR}.tar.gz'
+    else
+        echo 'Geen bestaande Jellyfin data gevonden om te back-uppen.'
+    fi
+"
+
+# ------------------------------------------------------------------------------
+# STAP 3: STANDALONE JELLYFIN SERVICE STOPPEN OP DE HOST
+# ------------------------------------------------------------------------------
+log_step "3. Standalone jellyfin.service stoppen op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen en uitschakelen van jellyfin.service...'
+    sudo systemctl stop jellyfin
+    sudo systemctl disable jellyfin
+"
+
+# ------------------------------------------------------------------------------
+# STAP 4: KUBERNETES MANIFESTS TOEPASSEN
+# ------------------------------------------------------------------------------
+log_step "4. Kubernetes manifests toepassen..."
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl apply -k "${SCRIPT_DIR}/k8s/"
+
+log_info "Wachten op succesvolle uitrol van Jellyfin pod (eerste start kan enkele minuten duren voor datamigratie)..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl rollout status deployment/jellyfin -n "${HTPC_NS}" --timeout=300s
+
+# ------------------------------------------------------------------------------
+# STAP 5: VERIFICATIE
+# ------------------------------------------------------------------------------
+log_step "5. Verificatie van endpoints..."
+sleep 5
+
+log_info "Health endpoint testen via host (poort 8096)..."
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://127.0.0.1:8096/jellyfin/health" | head -n 1
+
+log_info "Cluster IP service testen..."
+CLUSTER_IP=$(KUBECONFIG="${KUBECONFIG_PATH}" kubectl get svc jellyfin -n "${HTPC_NS}" -o jsonpath='{.spec.clusterIP}')
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://${CLUSTER_IP}:8096/jellyfin/health" | head -n 1
+
+log_info "Controleer of render apparaten (/dev/dri) toegankelijk zijn in container..."
+POD_NAME=$(KUBECONFIG="${KUBECONFIG_PATH}" kubectl get pod -n "${HTPC_NS}" -l app=jellyfin -o jsonpath='{.items[0].metadata.name}')
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl exec -n "${HTPC_NS}" "${POD_NAME}" -- ls -la /dev/dri || true
+
+echo ""
+echo "========================================================================"
+log_info "JELLYFIN MIGRATIE SUCCESVOL AFGEROND!"
+echo "De Jellyfin media server draait nu in Kubernetes."
+echo "Apache proxy: https://thuus.bnhmeijer.nl/jellyfin"
+echo "========================================================================"

migrate_lidarr_sqlite_to_postgres.py

@@ -0,0 +1,146 @@
+#!/usr/bin/env python3
+import sqlite3
+import csv
+import sys
+from collections import defaultdict
+
+def escape_pg_string(s):
+    if s is None:
+        return "NULL"
+    if isinstance(s, bytes):
+        s = s.decode('utf-8', errors='replace')
+    s = str(s).replace("'", "''")
+    return f"'{s}'"
+
+def main():
+    sqlite_db_path = "/tmp/lidarr.db"
+    pg_columns_path = "/tmp/pg_lidarr_columns.csv"
+    output_sql_path = "/tmp/migrate_lidarr_data.sql"
+
+    # 1. Lees PG tabellen en kolommen
+    pg_schema = defaultdict(dict)
+    with open(pg_columns_path, mode='r', encoding='utf-8') as f:
+        reader = csv.reader(f)
+        for row in reader:
+            if not row or len(row) < 3:
+                continue
+            table, col, dtype = row[0].strip(), row[1].strip(), row[2].strip()
+            pg_schema[table][col] = dtype
+
+    # 2. Open SQLite
+    conn = sqlite3.connect(f"file:{sqlite_db_path}?mode=ro&immutable=1", uri=True)
+    cur = conn.cursor()
+
+    cur.execute("SELECT name FROM sqlite_master WHERE type='table';")
+    sqlite_tables = set(r[0] for r in cur.fetchall())
+
+    with open(output_sql_path, mode='w', encoding='utf-8') as out:
+        out.write("-- Lidarr SQLite naar PostgreSQL Data Migratie\n")
+        out.write("BEGIN;\n")
+        out.write("SET session_replication_role = 'replica';\n\n")
+
+        # Tabellen die we NIET moeten overschrijven
+        skip_tables = {"VersionInfo"}
+
+        total_rows_imported = 0
+
+        for table, pg_cols in pg_schema.items():
+            if table in skip_tables:
+                continue
+
+            out.write(f"-- Tabel: {table}\n")
+            out.write(f'TRUNCATE TABLE "{table}" CASCADE;\n')
+
+            if table == "DelayProfiles":
+                out.write('INSERT INTO "DelayProfiles" ("Id", "EnableUsenet", "EnableTorrent", "PreferredProtocol", "UsenetDelay", "TorrentDelay", "Order", "Tags", "BypassIfHighestQuality", "BypassIfAboveCustomFormatScore", "MinimumCustomFormatScore") VALUES (1, true, true, 1, 0, 0, 2147483647, \'[]\', true, false, 0);\n\n')
+                total_rows_imported += 1
+                continue
+
+            if table not in sqlite_tables:
+                out.write(f"-- Tabel {table} bestaat niet in SQLite, leeggemaakt en overgeslagen.\n\n")
+                continue
+
+            # Haal SQLite kolommen op
+            cur.execute(f'PRAGMA table_info("{table}");')
+            sqlite_col_names = set(r[1] for r in cur.fetchall())
+
+            # Gemeenschappelijke kolommen
+            common_cols = [c for c in pg_cols.keys() if c in sqlite_col_names]
+            if not common_cols:
+                out.write(f"-- Geen gemeenschappelijke kolommen voor {table}\n\n")
+                continue
+
+            # Query data uit SQLite
+            cols_quoted = [f'"{c}"' for c in common_cols]
+            cur.execute(f'SELECT {", ".join(cols_quoted)} FROM "{table}";')
+            rows = cur.fetchall()
+
+            if not rows:
+                out.write(f"-- Geen rijen in SQLite voor {table}\n\n")
+                continue
+
+            out.write(f'-- {len(rows)} rijen migreren voor {table}\n')
+            total_rows_imported += len(rows)
+
+            chunk_size = 500
+            for i in range(0, len(rows), chunk_size):
+                chunk = rows[i:i + chunk_size]
+                out.write(f'INSERT INTO "{table}" ({", ".join([f"""\"{c}\"""" for c in common_cols])}) VALUES\n')
+                val_lines = []
+                for row_data in chunk:
+                    val_parts = []
+                    for val, col_name in zip(row_data, common_cols):
+                        dtype = pg_cols[col_name].lower()
+                        if val is None:
+                            val_parts.append("NULL")
+                        elif "bool" in dtype:
+                            val_parts.append("TRUE" if str(val) in ("1", "True", "true") else "FALSE")
+                        elif dtype in ("integer", "bigint", "smallint", "numeric", "double precision", "real"):
+                            s = str(val).strip()
+                            if s == "TorrentDownloadProtocol":
+                                val_parts.append("2")
+                            elif s == "SoulseekDownloadProtocol":
+                                val_parts.append("3")
+                            elif s == "UsenetDownloadProtocol":
+                                val_parts.append("1")
+                            else:
+                                try:
+                                    val_parts.append(str(int(s)))
+                                except ValueError:
+                                    try:
+                                        float(s)
+                                        val_parts.append(s)
+                                    except ValueError:
+                                        val_parts.append("0")
+                        else:
+                            val_parts.append(escape_pg_string(val))
+                    val_lines.append(f'  ({", ".join(val_parts)})')
+                out.write(",\n".join(val_lines) + ";\n")
+            out.write("\n")
+
+        # Sequences resetten
+        out.write("-- Sequences bijwerken naar MAX(Id)\n")
+        out.write("""DO $$
+DECLARE
+    r RECORD;
+    has_seq text;
+BEGIN
+    FOR r IN SELECT table_name FROM information_schema.tables WHERE table_schema = 'public' AND table_name != 'VersionInfo' LOOP
+        IF EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema = 'public' AND table_name = r.table_name AND column_name = 'Id') THEN
+            has_seq := pg_get_serial_sequence('"' || r.table_name || '"', 'Id');
+            IF has_seq IS NOT NULL THEN
+                EXECUTE format('SELECT setval(%L, coalesce(max("Id"), 1)) FROM %I', has_seq, r.table_name);
+            END IF;
+        END IF;
+
+    END LOOP;
+END $$;\n\n""")
+
+        out.write("SET session_replication_role = 'origin';\n")
+        out.write("COMMIT;\n")
+
+    print(f"SQL dump succesvol gegenereerd: {output_sql_path}")
+    print(f"Totaal aantal rijen klaargezet voor import: {total_rows_imported}")
+
+if __name__ == "__main__":
+    main()

migrate_radarr_to_cluster.sh

@@ -0,0 +1,112 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Radarr Migration Script: Host Service -> Kubernetes Cluster met PostgreSQL
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+HTPC_NS="htpc"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+log_err()  { echo -e "${COLOR_RED}[ERROR]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   RADARR MIGRATIE NAAR KUBERNETES & POSTGRESQL (NAMESPACE: HTPC)"
+echo "========================================================================"
+echo "Bron:       radarr.service op $CLUSTER_HOST (SQLite)"
+echo "Doel:       K8s Pod in '$HTPC_NS' gekoppeld aan PostgreSQL in 'cluster-infra'"
+echo "Downtime:   Geschat op minder dan 1 minuut"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de migratie naar PostgreSQL wilt starten? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Migratie geannuleerd."
+    exit 0
+fi
+
+# ------------------------------------------------------------------------------
+# STAP 1: PRE-FLIGHT CHECKS
+# ------------------------------------------------------------------------------
+log_step "1. Pre-flight checks uitvoeren..."
+
+log_info "Verbinding testen naar host ($CLUSTER_HOST)..."
+ssh -o BatchMode=yes -o ConnectTimeout=5 "${SSH_USER}@${CLUSTER_HOST}" "true" || {
+    log_err "Kan niet verbinden met host (${CLUSTER_HOST}) via SSH."
+    exit 1
+}
+
+log_info "Controleren van PostgreSQL status in cluster-infra..."
+kubectl get pod postgresql-0 -n cluster-infra -o jsonpath='{.status.phase}' | grep -q "Running" || {
+    log_err "PostgreSQL pod in cluster-infra is niet Running!"
+    exit 1
+}
+
+# ------------------------------------------------------------------------------
+# STAP 2: STANDALONE RADARR SERVICE STOPPEN OP DE HOST
+# ------------------------------------------------------------------------------
+log_step "2. Standalone radarr.service stoppen en uitschakelen op $CLUSTER_HOST..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "sudo systemctl stop radarr && sudo systemctl disable radarr"
+
+# ------------------------------------------------------------------------------
+# STAP 3: KUBERNETES MANIFESTS TOEPASSEN & HERSTARTEN
+# ------------------------------------------------------------------------------
+log_step "3. Kubernetes manifests toepassen (Secret, PVC, Service, Deployment)..."
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+kubectl apply -k "${SCRIPT_DIR}/k8s/"
+
+log_info "Pod herstarten om de nieuwe PostgreSQL configuratie te laden..."
+kubectl rollout restart deployment/radarr -n "${HTPC_NS}"
+
+log_info "Wachten op succesvolle uitrol van Radarr pod..."
+kubectl rollout status deployment/radarr -n "${HTPC_NS}" --timeout=120s
+
+# ------------------------------------------------------------------------------
+# STAP 4: OPTIONEEL: MEDIACOVERS OVERZETTEN
+# ------------------------------------------------------------------------------
+log_step "4. Bestaande mediacovers (posters/fanart) overzetten..."
+RADARR_PV=$(kubectl get pv -o jsonpath='{range .items[?(@.spec.claimRef.name=="radarr-config")]}{.spec.hostPath.path}{end}')
+if [ -n "$RADARR_PV" ] && [ -d "/storage/var/lib/radarr/MediaCover" ]; then
+    ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+        if [ -d '/storage/var/lib/radarr/MediaCover' ]; then
+            echo 'Kopiëren van bestaande MediaCover map...'
+            sudo cp -a /storage/var/lib/radarr/MediaCover '$RADARR_PV/'
+            sudo chown -R 33:33 '$RADARR_PV/MediaCover'
+        fi
+    " || true
+fi
+
+# ------------------------------------------------------------------------------
+# STAP 5: VERIFICATIE
+# ------------------------------------------------------------------------------
+log_step "5. Verificatie van Radarr endpoints & PostgreSQL tabellen..."
+sleep 5
+
+log_info "Lokale ping testen via host..."
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://127.0.0.1:7878/radarr/ping" | head -n 1
+
+log_info "Cluster IP service testen..."
+CLUSTER_IP=$(kubectl get svc radarr -n "${HTPC_NS}" -o jsonpath='{.spec.clusterIP}')
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://${CLUSTER_IP}:7878/radarr/ping" | head -n 1
+
+log_info "Aantal tabellen in PostgreSQL radarr-main controleren..."
+TABLE_COUNT=$(kubectl exec -n cluster-infra postgresql-0 -- psql -U radarr -d radarr-main -t -c "SELECT count(*) FROM information_schema.tables WHERE table_schema = 'public';" | tr -d ' ')
+echo "Aangemaakte tabellen in PostgreSQL 'radarr-main': ${TABLE_COUNT}"
+
+echo ""
+echo "========================================================================"
+log_info "MIGRATIE NAAR POSTGRESQL SUCCESVOL AFGEROND!"
+echo "Radarr draait nu als pod in Kubernetes namespace '${HTPC_NS}' op PostgreSQL."
+echo "URL: https://thuus.bnhmeijer.nl/radarr/"
+echo "API Key behouden: e4ffa6273473460eb57073ff861534ae"
+echo "Bestaande films importeren: Add Movies -> Import Existing Movies -> /datadisk/htpc/Films"
+echo "========================================================================"

migrate_radio_chicken_to_cluster.sh

@@ -0,0 +1,139 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Radio Chicken Migration Script: Host Docker -> Kubernetes Cluster (htpc namespace)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+HTPC_NS="htpc"
+BACKUP_DIR="/storage/backups"
+DATE_STR=$(date +%Y-%m-%d)
+KUBECONFIG_PATH="${KUBECONFIG:-$HOME/.kube/config_vmserver}"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+log_err()  { echo -e "${COLOR_RED}[ERROR]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo " RADIO CHICKEN MIGRATIE NAAR KUBERNETES CLUSTER (NAMESPACE: ${HTPC_NS})"
+echo "========================================================================"
+echo "Bron:       Standalone Docker containers op ${CLUSTER_HOST}"
+echo "            (barttradio, icecast, autoplacer, mv_downloader)"
+echo "Config:     /home/bart/jellyfinradio/{data,webroot,icecast.xml}"
+echo "Videos:     /home/bart/jellyfinradio/music_videos -> /datadisk/htpc/music_video"
+echo "Doel:       K8s Pod 'radio-chicken' in namespace '${HTPC_NS}'"
+echo "Poorten:    5000 (Web UI / API / WS) & 8000 (Icecast Streams)"
+echo "Transcode:  AMD VA-API (/dev/dri/renderD128)"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de Radio Chicken migratie naar Kubernetes wilt starten? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Migratie geannuleerd."
+    exit 0
+fi
+
+# ------------------------------------------------------------------------------
+# STAP 1: PRE-FLIGHT CHECKS
+# ------------------------------------------------------------------------------
+log_step "1. Pre-flight checks uitvoeren..."
+
+log_info "Verbinding testen naar host (${CLUSTER_HOST})..."
+ssh -o BatchMode=yes -o ConnectTimeout=5 "${SSH_USER}@${CLUSTER_HOST}" "true" || {
+    log_err "Kan niet verbinden met host (${CLUSTER_HOST}) via SSH."
+    exit 1
+}
+
+log_info "Controleren van KUBECONFIG verbinding..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl get nodes | grep -q "vmserver" || {
+    log_err "Kan vmserver node niet bereiken via kubectl (KUBECONFIG=${KUBECONFIG_PATH})!"
+    exit 1
+}
+
+# ------------------------------------------------------------------------------
+# STAP 2: RESERVEKOPIE MAKEN VAN BESTAANDE DATA OP DE HOST
+# ------------------------------------------------------------------------------
+log_step "2. Reservekopie maken van /home/bart/jellyfinradio/data op ${CLUSTER_HOST}..."
+ssh "${SSH_USER}@${CLUSTER_HOST}" "
+    mkdir -p '${BACKUP_DIR}'
+    if [ -d '/home/bart/jellyfinradio/data' ]; then
+        echo 'Inpakken van Radio Chicken data naar ${BACKUP_DIR}/radio_chicken_backup_${DATE_STR}.tar.gz...'
+        tar -czf '${BACKUP_DIR}/radio_chicken_backup_${DATE_STR}.tar.gz' \
+            -C /home/bart/jellyfinradio data webroot
+        echo 'Backup gereed:'
+        ls -lh '${BACKUP_DIR}/radio_chicken_backup_${DATE_STR}.tar.gz'
+    else
+        echo 'Geen bestaande data directory gevonden in /home/bart/jellyfinradio/data.'
+    fi
+"
+
+# ------------------------------------------------------------------------------
+# STAP 3: DOWNLOADS SYNCRHONISEREN NAAR /datadisk/htpc/music_video
+# ------------------------------------------------------------------------------
+log_step "3. Pas gedownloade videoclips samenvoegen naar /datadisk/htpc/music_video..."
+ssh "${SSH_USER}@${CLUSTER_HOST}" "
+    if [ -d '/home/bart/jellyfinradio/music_videos' ]; then
+        echo 'Kopiëren van unieke videobestanden en NFOs naar /datadisk/htpc/music_video/...'
+        cp -rn /home/bart/jellyfinradio/music_videos/* /datadisk/htpc/music_video/ 2>/dev/null || true
+        echo 'Synchronisatie voltooid.'
+    fi
+"
+
+# ------------------------------------------------------------------------------
+# STAP 4: STANDALONE DOCKER CONTAINERS STOPPEN OP DE HOST
+# ------------------------------------------------------------------------------
+log_step "4. Standalone Docker containers stoppen op ${CLUSTER_HOST}..."
+ssh "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen van barttradio, radio_chicken_autoplacer, radio_chicken_mv_downloader, icecast...'
+    docker stop barttradio radio_chicken_autoplacer radio_chicken_mv_downloader icecast 2>/dev/null || true
+"
+
+# ------------------------------------------------------------------------------
+# STAP 5: KUBERNETES MANIFESTS TOEPASSEN
+# ------------------------------------------------------------------------------
+log_step "5. Kubernetes manifests toepassen..."
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl apply -k "${SCRIPT_DIR}/k8s/"
+
+log_info "Wachten op succesvolle uitrol van Radio Chicken pod..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl rollout status deployment/radio-chicken -n "${HTPC_NS}" --timeout=300s
+
+# ------------------------------------------------------------------------------
+# STAP 6: VERIFICATIE
+# ------------------------------------------------------------------------------
+log_step "6. Verificatie van endpoints..."
+
+log_info "Controleren van Icecast stream endpoint (poort 8000)..."
+if curl -s -f -o /dev/null "http://${CLUSTER_HOST}:8000/status-json.xsl"; then
+    log_info "✅ Icecast reageert succesvol op http://${CLUSTER_HOST}:8000/status-json.xsl"
+else
+    log_warn "⚠️ Icecast status kon niet worden opgevraagd op poort 8000."
+fi
+
+log_info "Controleren van Radio Chicken web/live endpoint (poort 5000)..."
+if curl -s -f -o /dev/null "http://${CLUSTER_HOST}:5000/live"; then
+    log_info "✅ Radio Chicken web interface reageert succesvol op http://${CLUSTER_HOST}:5000/live"
+else
+    log_warn "⚠️ Radio Chicken web interface reageert nog niet direct op poort 5000."
+fi
+
+log_info "Controleren van Apache reverse proxy (https://thuus.bnhmeijer.nl/radio/live)..."
+HTTP_CODE=$(curl -s -k -o /dev/null -w "%{http_code}" "https://thuus.bnhmeijer.nl/radio/live" || true)
+if [ "$HTTP_CODE" = "200" ]; then
+    log_info "✅ Apache reverse proxy routeert succesvol naar Radio Chicken (/radio/live) [HTTP 200]"
+else
+    log_warn "⚠️ Apache reverse proxy gaf HTTP status: ${HTTP_CODE} voor /radio/live."
+fi
+
+echo ""
+echo "========================================================================"
+log_info "Migratie van Radio Chicken naar Kubernetes is succesvol voltooid!"
+echo "========================================================================"

migrate_slskd_to_cluster.sh

@@ -0,0 +1,112 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# slskd Migration Script: Host Service -> Kubernetes Cluster (htpc namespace)
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+HTPC_NS="htpc"
+BACKUP_DIR="/storage/backups"
+DATE_STR=$(date +%Y-%m-%d)
+KUBECONFIG_PATH="${KUBECONFIG:-$HOME/.kube/config_vmserver}"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+log_err()  { echo -e "${COLOR_RED}[ERROR]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   SLSKD MIGRATIE NAAR KUBERNETES CLUSTER (NAMESPACE: ${HTPC_NS})"
+echo "========================================================================"
+echo "Bron:       slskd.service op ${CLUSTER_HOST}"
+echo "Config:     /var/www/.local/share/slskd"
+echo "Doel:       K8s Pod in namespace '${HTPC_NS}' op ${CLUSTER_HOST}"
+echo "Poorten:    Web (5030/5031), Soulseek Listen (50300)"
+echo "========================================================================"
+echo ""
+
+read -p "Weet je zeker dat je de slskd migratie naar Kubernetes wilt starten? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Migratie geannuleerd."
+    exit 0
+fi
+
+# ------------------------------------------------------------------------------
+# STAP 1: PRE-FLIGHT CHECKS
+# ------------------------------------------------------------------------------
+log_step "1. Pre-flight checks uitvoeren..."
+
+log_info "Verbinding testen naar host (${CLUSTER_HOST})..."
+ssh -o BatchMode=yes -o ConnectTimeout=5 "${SSH_USER}@${CLUSTER_HOST}" "true" || {
+    log_err "Kan niet verbinden met host (${CLUSTER_HOST}) via SSH."
+    exit 1
+}
+
+log_info "Controleren van KUBECONFIG verbinding..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl get nodes | grep -q "vmserver" || {
+    log_err "Kan vmserver node niet bereiken via kubectl (KUBECONFIG=${KUBECONFIG_PATH})!"
+    exit 1
+}
+
+# ------------------------------------------------------------------------------
+# STAP 2: RESERVEKOPIE MAKEN VAN SLSKD DATA & CONFIG
+# ------------------------------------------------------------------------------
+log_step "2. Reservekopie maken van /var/www/.local/share/slskd op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    sudo mkdir -p '${BACKUP_DIR}'
+    if [ -d '/var/www/.local/share/slskd' ]; then
+        echo 'Inpakken van slskd data naar ${BACKUP_DIR}/slskd_backup_${DATE_STR}.tar.gz...'
+        sudo tar -czf '${BACKUP_DIR}/slskd_backup_${DATE_STR}.tar.gz' -C /var/www/.local/share slskd
+        echo 'Backup gereed:'
+        ls -lh '${BACKUP_DIR}/slskd_backup_${DATE_STR}.tar.gz'
+    else
+        echo 'Geen /var/www/.local/share/slskd gevonden, backup overgeslagen.'
+    fi
+"
+
+# ------------------------------------------------------------------------------
+# STAP 3: STANDALONE SLSKD SERVICE STOPPEN OP DE HOST
+# ------------------------------------------------------------------------------
+log_step "3. Standalone slskd.service stoppen op ${CLUSTER_HOST}..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+    echo '--> Stoppen van slskd.service...'
+    sudo systemctl stop slskd
+"
+
+# ------------------------------------------------------------------------------
+# STAP 4: KUBERNETES MANIFESTS TOEPASSEN
+# ------------------------------------------------------------------------------
+log_step "4. Kubernetes manifests toepassen..."
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl apply -k "${SCRIPT_DIR}/k8s/"
+
+log_info "Wachten op succesvolle uitrol van slskd pod..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl rollout status deployment/slskd -n "${HTPC_NS}" --timeout=180s
+
+# ------------------------------------------------------------------------------
+# STAP 5: VERIFICATIE
+# ------------------------------------------------------------------------------
+log_step "5. Verificatie van endpoints..."
+sleep 5
+
+log_info "Health endpoint testen via host (poort 5030)..."
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://127.0.0.1:5030/health" | head -n 1
+
+log_info "Web UI root testen via host..."
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://127.0.0.1:5030/" | head -n 1
+
+echo ""
+echo "========================================================================"
+log_info "SLSKD MIGRATIE SUCCESVOL AFGEROND!"
+echo "slskd draait nu als pod in Kubernetes namespace '${HTPC_NS}'."
+echo "Configuratie en databases zijn bewaard in PersistentVolume slskd-config."
+echo "Web UI bereikbaar op: http://10.2.0.4:5030/"
+echo "Host service uitschakelen / opruimen kan via: ./cleanup_old_slskd.sh"
+echo "========================================================================"

migrate_sonarr_sqlite_to_postgres.py

@@ -0,0 +1,124 @@
+#!/usr/bin/env python3
+import sqlite3
+import csv
+from collections import defaultdict
+
+def escape_pg_string(s):
+    if s is None:
+        return "NULL"
+    if isinstance(s, bytes):
+        s = s.decode('utf-8', errors='replace')
+    s = str(s).replace("'", "''")
+    return f"'{s}'"
+
+def main():
+    sqlite_db_path = "/tmp/sonarr.db"
+    pg_columns_path = "/tmp/pg_sonarr_columns.csv"
+    output_sql_path = "/tmp/migrate_sonarr_data.sql"
+
+    # 1. Lees PG tabellen en kolommen
+    pg_schema = defaultdict(dict)
+    with open(pg_columns_path, mode='r', encoding='utf-8') as f:
+        reader = csv.reader(f)
+        for row in reader:
+            if not row or len(row) < 3:
+                continue
+            table, col, dtype = row[0].strip(), row[1].strip(), row[2].strip()
+            pg_schema[table][col] = dtype
+
+    # 2. Open SQLite
+    conn = sqlite3.connect(f"file:{sqlite_db_path}?mode=ro&immutable=1", uri=True)
+    cur = conn.cursor()
+
+    cur.execute("SELECT name FROM sqlite_master WHERE type='table';")
+    sqlite_tables = set(r[0] for r in cur.fetchall())
+
+    with open(output_sql_path, mode='w', encoding='utf-8') as out:
+        out.write("-- Sonarr SQLite naar PostgreSQL Data Migratie\n")
+        out.write("BEGIN;\n")
+        out.write("SET session_replication_role = 'replica';\n\n")
+
+        # Tabellen die we NIET moeten overschrijven
+        skip_tables = {"VersionInfo"}
+
+        total_rows_imported = 0
+
+        for table, pg_cols in pg_schema.items():
+            if table in skip_tables:
+                continue
+
+            out.write(f"-- Tabel: {table}\n")
+            out.write(f'TRUNCATE TABLE "{table}" CASCADE;\n')
+
+            if table not in sqlite_tables:
+                out.write(f"-- Tabel {table} bestaat niet in SQLite, leeggemaakt en overgeslagen.\n\n")
+                continue
+
+            # Haal SQLite kolommen op
+            cur.execute(f'PRAGMA table_info("{table}");')
+            sqlite_col_names = set(r[1] for r in cur.fetchall())
+
+            # Gemeenschappelijke kolommen
+            common_cols = [c for c in pg_cols.keys() if c in sqlite_col_names]
+            if not common_cols:
+                out.write(f"-- Geen gemeenschappelijke kolommen voor {table}\n\n")
+                continue
+
+            # Query data uit SQLite
+            cols_quoted = [f'"{c}"' for c in common_cols]
+            cur.execute(f'SELECT {", ".join(cols_quoted)} FROM "{table}";')
+            rows = cur.fetchall()
+
+            if not rows:
+                out.write(f"-- Geen rijen in SQLite voor {table}\n\n")
+                continue
+
+            out.write(f'-- {len(rows)} rijen migreren voor {table}\n')
+            total_rows_imported += len(rows)
+
+            chunk_size = 200
+            for i in range(0, len(rows), chunk_size):
+                chunk = rows[i:i + chunk_size]
+                out.write(f'INSERT INTO "{table}" ({", ".join([f"""\"{c}\"""" for c in common_cols])}) VALUES\n')
+                val_lines = []
+                for row_data in chunk:
+                    val_parts = []
+                    for val, col_name in zip(row_data, common_cols):
+                        dtype = pg_cols[col_name].lower()
+                        if val is None:
+                            val_parts.append("NULL")
+                        elif "bool" in dtype:
+                            val_parts.append("TRUE" if str(val) in ("1", "True", "true") else "FALSE")
+                        elif dtype in ("integer", "bigint", "smallint", "numeric", "double precision", "real"):
+                            val_parts.append(str(val))
+                        else:
+                            val_parts.append(escape_pg_string(val))
+                    val_lines.append(f'  ({", ".join(val_parts)})')
+                out.write(",\n".join(val_lines) + ";\n")
+            out.write("\n")
+
+        # Sequences resetten
+        out.write("-- Sequences bijwerken naar MAX(Id)\n")
+        out.write("""DO $$
+DECLARE
+    r RECORD;
+    has_seq text;
+BEGIN
+    FOR r IN SELECT table_name FROM information_schema.tables WHERE table_schema = 'public' AND table_name != 'VersionInfo' LOOP
+        IF EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema = 'public' AND table_name = r.table_name AND column_name = 'Id') THEN
+            has_seq := pg_get_serial_sequence('"' || r.table_name || '"', 'Id');
+            IF has_seq IS NOT NULL THEN
+                EXECUTE format('SELECT setval(%L, coalesce(max("Id"), 1)) FROM %I', has_seq, r.table_name);
+            END IF;
+        END IF;
+    END LOOP;
+END $$;\n\n""")
+
+        out.write("SET session_replication_role = 'origin';\n")
+        out.write("COMMIT;\n")
+
+    print(f"Sonarr SQL dump succesvol gegenereerd: {output_sql_path}")
+    print(f"Totaal aantal rijen klaargezet voor import: {total_rows_imported}")
+
+if __name__ == "__main__":
+    main()

migrate_sqlite_to_postgres.py

@@ -0,0 +1,126 @@
+#!/usr/bin/env python3
+import sqlite3
+import csv
+import sys
+from collections import defaultdict
+
+def escape_pg_string(s):
+    if s is None:
+        return "NULL"
+    if isinstance(s, bytes):
+        s = s.decode('utf-8', errors='replace')
+    s = str(s).replace("'", "''")
+    return f"'{s}'"
+
+def main():
+    sqlite_db_path = "/tmp/radarr.db"
+    pg_columns_path = "/tmp/pg_columns.csv"
+    output_sql_path = "/tmp/migrate_radarr_data.sql"
+
+    # 1. Lees PG tabellen en kolommen
+    pg_schema = defaultdict(dict)
+    with open(pg_columns_path, mode='r', encoding='utf-8') as f:
+        reader = csv.reader(f)
+        for row in reader:
+            if not row or len(row) < 3:
+                continue
+            table, col, dtype = row[0].strip(), row[1].strip(), row[2].strip()
+            pg_schema[table][col] = dtype
+
+    # 2. Open SQLite
+    conn = sqlite3.connect(f"file:{sqlite_db_path}?mode=ro&immutable=1", uri=True)
+    cur = conn.cursor()
+
+    cur.execute("SELECT name FROM sqlite_master WHERE type='table';")
+    sqlite_tables = set(r[0] for r in cur.fetchall())
+
+    with open(output_sql_path, mode='w', encoding='utf-8') as out:
+        out.write("-- Radarr SQLite naar PostgreSQL Data Migratie\n")
+        out.write("BEGIN;\n")
+        out.write("SET session_replication_role = 'replica';\n\n")
+
+        # Tabellen die we NIET moeten overschrijven
+        skip_tables = {"VersionInfo"}
+
+        total_rows_imported = 0
+
+        for table, pg_cols in pg_schema.items():
+            if table in skip_tables:
+                continue
+
+            out.write(f"-- Tabel: {table}\n")
+            out.write(f'TRUNCATE TABLE "{table}" CASCADE;\n')
+
+            if table not in sqlite_tables:
+                out.write(f"-- Tabel {table} bestaat niet in SQLite, leeggemaakt en overgeslagen.\n\n")
+                continue
+
+            # Haal SQLite kolommen op
+            cur.execute(f'PRAGMA table_info("{table}");')
+            sqlite_col_names = set(r[1] for r in cur.fetchall())
+
+            # Gemeenschappelijke kolommen
+            common_cols = [c for c in pg_cols.keys() if c in sqlite_col_names]
+            if not common_cols:
+                out.write(f"-- Geen gemeenschappelijke kolommen voor {table}\n\n")
+                continue
+
+            # Query data uit SQLite
+            cols_quoted = [f'"{c}"' for c in common_cols]
+            cur.execute(f'SELECT {", ".join(cols_quoted)} FROM "{table}";')
+            rows = cur.fetchall()
+
+            if not rows:
+                out.write(f"-- Geen rijen in SQLite voor {table}\n\n")
+                continue
+
+            out.write(f'-- {len(rows)} rijen migreren voor {table}\n')
+            total_rows_imported += len(rows)
+
+            chunk_size = 200
+            for i in range(0, len(rows), chunk_size):
+                chunk = rows[i:i + chunk_size]
+                out.write(f'INSERT INTO "{table}" ({", ".join([f"""\"{c}\"""" for c in common_cols])}) VALUES\n')
+                val_lines = []
+                for row_data in chunk:
+                    val_parts = []
+                    for val, col_name in zip(row_data, common_cols):
+                        dtype = pg_cols[col_name].lower()
+                        if val is None:
+                            val_parts.append("NULL")
+                        elif "bool" in dtype:
+                            val_parts.append("TRUE" if str(val) in ("1", "True", "true") else "FALSE")
+                        elif dtype in ("integer", "bigint", "smallint", "numeric", "double precision", "real"):
+                            val_parts.append(str(val))
+                        else:
+                            val_parts.append(escape_pg_string(val))
+                    val_lines.append(f'  ({", ".join(val_parts)})')
+                out.write(",\n".join(val_lines) + ";\n")
+            out.write("\n")
+
+        # Sequences resetten
+        out.write("-- Sequences bijwerken naar MAX(Id)\n")
+        out.write("""DO $$
+DECLARE
+    r RECORD;
+    has_seq text;
+BEGIN
+    FOR r IN SELECT table_name FROM information_schema.tables WHERE table_schema = 'public' AND table_name != 'VersionInfo' LOOP
+        IF EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema = 'public' AND table_name = r.table_name AND column_name = 'Id') THEN
+            has_seq := pg_get_serial_sequence('"' || r.table_name || '"', 'Id');
+            IF has_seq IS NOT NULL THEN
+                EXECUTE format('SELECT setval(%L, coalesce(max("Id"), 1)) FROM %I', has_seq, r.table_name);
+            END IF;
+        END IF;
+
+    END LOOP;
+END $$;\n\n""")
+
+        out.write("SET session_replication_role = 'origin';\n")
+        out.write("COMMIT;\n")
+
+    print(f"SQL dump succesvol gegenereerd: {output_sql_path}")
+    print(f"Totaal aantal rijen klaargezet voor import: {total_rows_imported}")
+
+if __name__ == "__main__":
+    main()

rollback_jellyfin_migration.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Jellyfin Rollback Script: Kubernetes -> Host Standalone jellyfin.service
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+HTPC_NS="htpc"
+KUBECONFIG_PATH="${KUBECONFIG:-$HOME/.kube/config_vmserver}"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   JELLYFIN ROLLBACK NAAR STANDALONE SERVICE OP $CLUSTER_HOST"
+echo "========================================================================"
+read -p "Weet je zeker dat je wilt terugrollen naar standalone jellyfin? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Rollback geannuleerd."
+    exit 0
+fi
+
+log_step "1. Kubernetes Jellyfin deployment schalen naar 0..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl scale deployment/jellyfin -n "${HTPC_NS}" --replicas=0 || true
+
+log_step "2. Standalone jellyfin.service inschakelen en starten op $CLUSTER_HOST..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "sudo systemctl enable --now jellyfin"
+
+log_step "3. Status controleren..."
+sleep 5
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "systemctl status jellyfin --no-pager" | head -n 12
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://127.0.0.1:8096/jellyfin/health" | head -n 1
+
+echo ""
+log_info "Rollback voltooid. Standalone jellyfin.service is weer actief op de host."

rollback_radarr_migration.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Radarr Rollback Script: Kubernetes -> Host Standalone radarr.service
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+HTPC_NS="htpc"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_BLUE="\033[0;34m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_step() { echo -e "\n${COLOR_BLUE}==>${COLOR_RESET} ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo "   RADARR ROLLBACK NAAR STANDALONE SERVICE OP $CLUSTER_HOST"
+echo "========================================================================"
+read -p "Weet je zeker dat je wilt terugrollen naar standalone radarr? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Rollback geannuleerd."
+    exit 0
+fi
+
+log_step "1. Kubernetes Radarr deployment schalen naar 0..."
+kubectl scale deployment/radarr -n "${HTPC_NS}" --replicas=0 || true
+
+log_step "2. Standalone radarr.service inschakelen en starten op $CLUSTER_HOST..."
+ssh -t "${SSH_USER}@${CLUSTER_HOST}" "sudo systemctl enable --now radarr"
+
+log_step "3. Status controleren..."
+sleep 3
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "systemctl status radarr --no-pager" | head -n 10
+ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://127.0.0.1:7878/radarr/ping" | head -n 1
+
+log_info "Rollback voltooid. Standalone radarr is weer actief."

rollback_radio_chicken_migration.sh

@@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Rollback Script: Radio Chicken Kubernetes -> Standalone Docker on Host
+# ==============================================================================
+set -euo pipefail
+
+CLUSTER_HOST="10.2.0.4"
+SSH_USER="bart"
+HTPC_NS="htpc"
+KUBECONFIG_PATH="${KUBECONFIG:-$HOME/.kube/config_vmserver}"
+
+COLOR_GREEN="\033[0;32m"
+COLOR_YELLOW="\033[1;33m"
+COLOR_RED="\033[0;31m"
+COLOR_RESET="\033[0m"
+
+log_info() { echo -e "${COLOR_GREEN}[INFO]${COLOR_RESET} $1"; }
+log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
+log_err()  { echo -e "${COLOR_RED}[ERROR]${COLOR_RESET} $1"; }
+
+echo "========================================================================"
+echo " TERUGROLLEN RADIO CHICKEN: KUBERNETES -> STANDALONE HOST DOCKER"
+echo "========================================================================"
+read -p "Weet je zeker dat je Radio Chicken wilt terugrollen naar de host Docker containers? (j/N): " -r CONFIRM
+if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
+    log_info "Terugrol geannuleerd."
+    exit 0
+fi
+
+log_info "1. Schalen van Kubernetes deployment/radio-chicken naar 0..."
+KUBECONFIG="${KUBECONFIG_PATH}" kubectl scale deployment/radio-chicken -n "${HTPC_NS}" --replicas=0
+
+log_info "2. Herstarten van Docker containers op ${CLUSTER_HOST}..."
+ssh "${SSH_USER}@${CLUSTER_HOST}" "
+    cd /home/bart/jellyfinradio
+    echo '--> Starten van docker-compose...'
+    docker compose up -d
+"
+
+log_info "3. Verifiëren van status op ${CLUSTER_HOST}..."
+sleep 5
+if curl -s -f -o /dev/null "http://${CLUSTER_HOST}:5000/live"; then
+    log_info "✅ Radio Chicken draait weer op de host via Docker."
+else
+    log_warn "⚠️ Radio Chicken reageert nog niet direct op poort 5000."
+fi
+
+echo "========================================================================"
+log_info "Terugrol voltooid."
+echo "========================================================================"