change the stash persistent volume location, and force https (hsts

ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml

@@ -28,3 +28,6 @@ ingress:
   # Warning! The configuration is dependant on your current k8s API version capabilities (networking.k8s.io/v1)
   tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
     - secretName: xai-corp-production-tls
+  annotations:
+    ingress.kubernetes.io/force-hsts: "true"
+    ingress.kubernetes.io/hsts-max-age: "315360000"

ansible-5/roles/prod.k3s/files/stash/pv-claim.yaml

@@ -10,4 +10,4 @@ spec:
     - ReadWriteOnce
   resources:
     requests:
-      storage: 10Gi
+      storage: 300Gi

ansible-5/roles/prod.k3s/files/stash/pv02.yaml

@@ -0,0 +1,17 @@
+---
+# persistent volume
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: plex-pv-local-02
+  labels:
+    type: local
+spec:
+  storageClassName: manual
+  capacity:
+    storage: 300Gi
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: "/opt/data/secure/"
+

ansible-5/roles/prod.k3s/tasks/deployments/stash.yaml

@@ -18,7 +18,7 @@
     state: present
     definition: "{{ lookup('file', item) | from_yaml }}"
   loop:
-    - stash/pv.yaml
+    - stash/pv02.yaml
     - stash/pv-claim.yaml
 #    - stash/pv-media.yaml
 #    - stash/pv-media-claim.yaml