feat(briefkasten): add briefkasten (#4907)

* feat(briefkasten): add briefkasten

* update icon

* whoops

* whoops

* hmm

* try also this

* image

* update questions

* add image

* update source

* category

* commnd

* versions

* hmm

* poststart exec

* hmm

* again

* whoops

* hmm

* hmmtypo

* get

* hmm

* hmm

* Update charts/incubator/briefkasten/values.yaml

Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>

* fix it

* hmm

* dis probes

* bump

Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>

charts/incubator/briefkasten/.helmignore

@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
+# docs folder
+/docs
+# icon
+icon.png

charts/incubator/briefkasten/Chart.yaml

@@ -0,0 +1,31 @@
+apiVersion: v2
+appVersion: "0.20.2026"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 11.0.9
+  - condition: postgresql.enabled
+    name: postgresql
+    repository: https://charts.truecharts.org/
+    version: 11.0.7
+deprecated: false
+description: Self-hosted bookmarking application.
+home: https://truecharts.org/docs/charts/stable/jackett
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/jackett.png
+keywords:
+  - bookmark
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: briefkasten
+sources:
+  - https://github.com/ndom91/briefkasten
+type: application
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - bookmark
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

charts/incubator/briefkasten/questions.yaml

@@ -0,0 +1,193 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{controller}
+# Include{replicas}
+# Include{replica1}
+# Include{controllerExpertExtraArgs}
+  - variable: briefkasten
+    group: App Configuration
+    label: Briefkasten Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: general
+          label: General Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: nextauth_url
+                label: NextAuth URL
+                description: URL in format http(s)://IPorFQDN:(port)
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+        - variable: github
+          label: Github Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: id
+                label: Github ID
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: secret
+                label: Github Secret
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+        - variable: google
+          label: Google Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: id
+                label: Google ID
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: secret
+                label: Google Secret
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+        - variable: mail
+          label: Mail Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: from
+                label: From
+                schema:
+                  type: string
+                  default: ""
+              - variable: server
+                label: Mail Server
+                schema:
+                  type: string
+                  default: ""
+        - variable: supabase
+          label: Supabase Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: key
+                label: Supabase Key
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: bucket_id
+                label: Supabase Bucket ID
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: url
+                label: Supabase URL
+                schema:
+                  type: string
+                  default: ""
+# Include{containerConfig}
+# Include{serviceRoot}
+        - variable: main
+          label: Main Service
+          description: The Primary service on which the healthcheck runs, often the webUI
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: Main Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 10349
+                              required: true
+# Include{serviceExpertRoot}
+            default: false
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: Main Ingress
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressList}
+# Include{security}
+# Include{securityContextAdvancedRoot}
+              - variable: privileged
+                label: Privileged mode
+                schema:
+                  type: boolean
+                  default: false
+              - variable: readOnlyRootFilesystem
+                label: ReadOnly Root Filesystem
+                schema:
+                  type: boolean
+                  default: false
+              - variable: allowPrivilegeEscalation
+                label: Allow Privilege Escalation
+                schema:
+                  type: boolean
+                  default: false
+              - variable: runAsNonRoot
+                label: runAsNonRoot
+                schema:
+                  type: boolean
+                  default: false
+# Include{podSecurityContextRoot}
+        - variable: runAsUser
+          label: runAsUser
+          description: The UserID of the user running the application
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: runAsGroup
+          description: The groupID this App of the user running the application
+          schema:
+            type: int
+            default: 0
+        - variable: fsGroup
+          label: fsGroup
+          description: The group that should own ALL storage.
+          schema:
+            type: int
+            default: 568
+# Include{podSecurityContextAdvanced}
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{vpn}
+# Include{documentation}

charts/incubator/briefkasten/templates/_config.tpl

@@ -0,0 +1,27 @@
+{{/* Define the configmap */}}
+{{- define "briefkasten.config" -}}
+
+{{- $configName := printf "%s-config" (include "tc.common.names.fullname" .) }}
+
+---
+
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ $configName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+data:
+  {{- with .Values.briefkasten.general.nextauth_url }}
+  NEXTAUTH_URL: {{ . }}
+  {{- end }}
+  {{- with .Values.briefkasten.supabase.url }}
+  SUPABASE_URL: {{ . }}
+  {{- end }}
+  {{- with .Values.briefkasten.mail.server }}
+  SMTP_SERVER: {{ . }}
+  {{- end }}
+  {{- with .Values.briefkasten.mail.from }}
+  SMTP_FROM: {{ . }}
+  {{- end }}
+{{- end -}}

charts/incubator/briefkasten/templates/_createdb.tpl

@@ -0,0 +1,25 @@
+{{- define "briefkasten.createdb" -}}
+image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
+imagePullPolicy: {{ .Values.image.pullPolicy }}
+securityContext:
+  runAsUser: {{ .Values.podSecurityContext.runAsUser }}
+  runAsGroup: {{ .Values.podSecurityContext.runAsGroup }}
+  readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
+  runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
+envFrom:
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-secret'
+  - configMapRef:
+      name: '{{ include "tc.common.names.fullname" . }}-config'
+command: ["/bin/sh", "-c"]
+args:
+  - |-
+    pnpm start &
+    echo "Waiting 5s for app to start..."
+    sleep 5
+    echo "Executing DB Seed..."
+    until pnpm db:push; do echo "DB Seed failed... Retrying in 5s..." sleep 5; done;
+    echo "...Done"
+    echo "Exiting... App will start now..."
+    exit 0
+{{- end -}}

charts/incubator/briefkasten/templates/_secret.tpl

@@ -0,0 +1,40 @@
+{{/* Define the secret */}}
+{{- define "briefkasten.secret" -}}
+
+{{- $secretName := printf "%s-secret" (include "tc.common.names.fullname" .) }}
+
+---
+
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $secretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+data:
+  {{- with (lookup "v1" "Secret" .Release.Namespace $secretName) }}
+  NEXTAUTH_SECRET: {{ index .data "NEXTAUTH_SECRET" }}
+  {{- else }}
+  NEXTAUTH_SECRET: {{ randAlphaNum 32 | b64enc }}
+  {{- end }}
+  DATABASE_URL: {{ get .Values.postgresql.url "complete" | trimAll "\"" | b64enc }}
+  {{- with .Values.briefkasten.github.id }}
+  GITHUB_ID: {{ . | b64enc }}
+  {{- end }}
+  {{- with .Values.briefkasten.github.secret }}
+  GITHUB_SECRET: {{ . | b64enc }}
+  {{- end }}
+  {{- with .Values.briefkasten.google.id }}
+  GOOGLE_ID: {{ . | b64enc }}
+  {{- end }}
+  {{- with .Values.briefkasten.google.secret }}
+  GOOGLE_SECRET: {{ . | b64enc }}
+  {{- end }}
+  {{- with .Values.briefkasten.supabase.key }}
+  SUPABASE_KEY: {{ . | b64enc }}
+  {{- end }}
+  {{- with .Values.briefkasten.supabase.bucket_id }}
+  SUPABASE_BUCKET_ID: {{ . | b64enc }}
+  {{- end }}
+{{- end }}

charts/incubator/briefkasten/templates/common.yaml

@@ -0,0 +1,13 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.common.loader.init" . }}
+
+{{/* Render config */}}
+{{- include "briefkasten.config" . }}
+
+{{/* Render secret */}}
+{{- include "briefkasten.secret" . }}
+
+{{- $_ := set .Values.installContainers "createdb" (include "briefkasten.createdb" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "tc.common.loader.apply" . }}

charts/incubator/briefkasten/values.yaml

@@ -0,0 +1,66 @@
+image:
+  repository: tccr.io/truecharts/briefkasten
+  pullPolicy: IfNotPresent
+  tag: latest@sha256:4bf3e15f5219605c7801ec5d69e64d0d3d80fef41a6a1dcfb36f3ded1f22ae13
+
+securityContext:
+  runAsNonRoot: false
+  readOnlyRootFilesystem: false
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
+briefkasten:
+  general:
+    nextauth_url: http://localhost:3000
+  github:
+    id: ""
+    secret: ""
+  google:
+    id: ""
+    secret: ""
+  supabase:
+    key:
+    url:
+    bucket_id:
+  mail:
+    from:
+    server:
+
+envFrom:
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-secret'
+  - configMapRef:
+      name: '{{ include "tc.common.names.fullname" . }}-config'
+
+service:
+  main:
+    ports:
+      main:
+        port: 10349
+        protocol: HTTP
+        targetPort: 3000
+
+probes:
+  liveness:
+    enabled: false
+    type: HTTP
+    path: /
+  readiness:
+    enabled: false
+    type: HTTP
+    path: /
+  startup:
+    enabled: false
+    type: HTTP
+    path: /
+
+postgresql:
+  enabled: true
+  existingSecret: dbcreds
+  postgresqlUsername: briefkasten
+  postgresqlDatabase: briefkasten
+
+portal:
+  enabled: true

cspell.config.yaml

@@ -24,6 +24,7 @@ words:
   - bazarr
   - Blocklists
   - blocktype
+  - briefkasten
   - bugfixer's
   - bungeecord
   - cacher
@@ -252,6 +253,7 @@ words:
   - sublist
   - subquestion
   - subquestions
+  - supabase
   - svcname
   - syncthing
   - tailscale