refactor: consolidate kubernetes categories

kubernetes/personal/media/photoprism/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: photoprism
+resources:
+  - namespace.yaml
+  - repository.yaml
+  - release.yaml
+secretGenerator:
+  - name: photoprism-values
+    files:
+      - values.yaml=values.yaml
+configurations:
+  - kustomizeconfig.yaml

kubernetes/personal/media/photoprism/kustomizeconfig.yaml

@@ -0,0 +1,6 @@
+nameReference:
+- kind: Secret
+  version: v1
+  fieldSpecs:
+  - path: spec/valuesFrom/name
+    kind: HelmRelease

kubernetes/personal/media/photoprism/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: photoprism

kubernetes/personal/media/photoprism/release.yaml

@@ -0,0 +1,19 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: photoprism
+  namespace: photoprism
+spec:
+  interval: 1m
+  chart:
+    spec:
+      sourceRef:
+        kind: HelmRepository
+        name: photoprism
+        namespace: photoprism
+      chart: photoprism
+      version: '8.11.0'
+      interval: 1m
+  valuesFrom:
+    - kind: Secret
+      name: photoprism-values

kubernetes/personal/media/photoprism/repository.yaml

@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: photoprism
+  namespace: photoprism
+spec:
+  interval: 1m
+  url: https://andrenarchy.github.io/helm-charts/

kubernetes/personal/media/photoprism/values.yaml

@@ -0,0 +1,63 @@
+image:
+    repository: photoprism/photoprism
+    tag: "260305"
+    pullPolicy: IfNotPresent
+ingress:
+    main:
+        enabled: true
+        hosts:
+            - host: photoprism.lan
+              paths:
+                - path: /
+env:
+    PHOTOPRISM_PUBLIC: "false"
+    PHOTOPRISM_DATABASE_DRIVER: mysql
+    PHOTOPRISM_STORAGE_PATH: /photoprism/storage
+    PHOTOPRISM_ORIGINALS_PATH: /photoprism/originals
+    PHOTOPRISM_ORIGINALS_LIMIT: 50000
+    TZ: Europe/Paris
+persistence:
+    config:
+        enabled: true
+        mountPath: /photoprism/storage
+    originals:
+        enabled: true
+        type: nfs
+        server: truenas.lan
+        path: /mnt/main_storage/valentin/Photos
+        mountPath: /photoprism/originals/photos/valentin
+mariadb:
+    enabled: true
+    primary:
+        persistence:
+            enabled: true
+    image:
+        registry: docker.io
+        repository: bitnamilegacy/mariadb
+        tag: 12.0.2-debian-12-r0
+sops:
+    lastmodified: "2026-07-06T19:30:14Z"
+    mac: ENC[AES256_GCM,data:QgOnL1dsq2S78nRD+xe08w3u0+bRfNML/ea9P9v0TBCQq5EmKj6yPKJApvttyeGUDJDGo9Ds17a9XLDFtOl9ORoax6E50VqJSnc1ElE2l5EFogl3JPuMdQxEzXniaCjOSrfMNWNdo7fHN/qcX0Gzs7BL9pw+NyQLv4kFcDYQv78=,iv:buV08iLiLB5BJ5JYfn4blmFb/eu/EtpnWsxT5IfyXfQ=,tag:8egGKWNa7CEql9t6zWHlOQ==,type:str]
+    pgp:
+        - created_at: "2026-07-06T19:30:14Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA7uy4qQr71wiAQ//Qg0OcwKr1mG40IoYmABD8b+/W+X5zTyyht9QCpNtRSVO
+            JzhtMl9YZHLqwkiwBqW+hvfIKXYtYBNl2TsAZ57xcE60lr72bHfqXkO24hf9+jvq
+            jmFwK1Mo/zf0/b3R8gFqEmg5mW97jdmEXHfRrzzyaAXhGk0rWfLGBSbaif71a/dj
+            jVu+Vf48LsEnUYH3oO2ASY3OlVwKAn5njfyIz2MWwY5iohOsiJwJu2WiotI+zCFI
+            VOfftPCYvJyVKGG5bE3GHOjAlbNqHtRCn9Bm/mXQVyLkAU9ik+i1PABGEU9nc09q
+            +IcO3Njo7MRtZU9pctMZLvRSbxvEx2bZOKSXe6nhVK324Qr0cETX+/GuDZn3SeVy
+            pyHR/BtpGXtqyWsaQyCvPUyOcU6IV/QP1P/8ovCK6Fek54xqrptTCYnov7U4VTBN
+            WhVxpTY19ZlxPxY+umhhg4bTf6oiRKGMXPe3MlYTGN4DTF3NE8g+Rld860GypHTt
+            yHYr2sdibLV34JZk8W/E1S5RTeTWjKxMUHZCYaNadQEQRwyRWmFTdHkPiOLHOBru
+            TBYAZJHP4DFegHL58+Z19vjdHtOHWMQWWKYNvKzV9m1lzbgT/MhrHqeGEWSQ9Tu0
+            kcvDK9iTfjgZyISPe8rpDM/6YZMSydSUgQ8TiE6YQFsJ3rkyRSEKSkH6CcqUD1jS
+            XAGv1EpFowmHVUXzMY1TciufOek51nEDfhbzpCX9QeyKIn7MVAZSWhn83vQUBNiH
+            Y1wrvUB2X3egY6jQVv7nalsNvU7CeEvzxi1YrM7YtoSO6yPY7z2A6e/4Ev0h
+            =krxN
+            -----END PGP MESSAGE-----
+          fp: DC6910268E657FF70BA7EC289974494E76938DDC
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    version: 3.10.2